<?xml version='1.0' encoding='UTF-8'?>
<nvd xmlns:vuln="http://scap.nist.gov/schema/vulnerability/0.4" xmlns:cpe-lang="http://cpe.mitre.org/language/2.0" xmlns:cvss="http://scap.nist.gov/schema/cvss-v2/0.2" xmlns="http://scap.nist.gov/schema/feed/vulnerability/2.0" xmlns:patch="http://scap.nist.gov/schema/patch/0.1" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/0.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" nvd_xml_version="2.0" pub_date="2019-10-15T20:00:57" xsi:schemaLocation="http://scap.nist.gov/schema/patch/0.1 https://scap.nist.gov/schema/nvd/patch_0.1.xsd http://scap.nist.gov/schema/feed/vulnerability/2.0 https://scap.nist.gov/schema/nvd/nvd-cve-feed_2.0.xsd http://scap.nist.gov/schema/scap-core/0.1 https://scap.nist.gov/schema/nvd/scap-core_0.1.xsd">
  <entry id="CVE-1999-0734">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:cisco:ciscosecure"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cisco:ciscosecure</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-1999-0734</vuln:cve-id>
    <vuln:published-datetime>1999-08-19T00:00:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:43:07.980-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_USER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/3133" xml:lang="en">ciscosecure-read-write(3133)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-19990819-dbaccess" xml:lang="en">19990819 CiscoSecure Access Control Server for UNIX Remote Administration Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:summary>A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication.</vuln:summary>
  </entry>
  <entry id="CVE-1999-1188">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.21"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.21</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-1999-1188</vuln:cve-id>
    <vuln:published-datetime>1998-12-27T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:38:14.390-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_USER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=91479159617803&amp;w=2" xml:lang="en">19981227 mysql: mysqld creates world readable logs..</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/1568" xml:lang="en">mysql-readable-log-files(1568)</vuln:reference>
    </vuln:references>
    <vuln:summary>mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user database.</vuln:summary>
  </entry>
  <entry id="CVE-2000-0045">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2000-0045</vuln:cve-id>
    <vuln:published-datetime>2000-01-11T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:38:58.470-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.4</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2004-01-01T00:00:00.000-05:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/926" xml:lang="en">926</vuln:reference>
    </vuln:references>
    <vuln:summary>MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.</vuln:summary>
  </entry>
  <entry id="CVE-2000-0148">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2000-0148</vuln:cve-id>
    <vuln:published-datetime>2000-02-08T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:39:03.520-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2004-01-01T00:00:00.000-05:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_USER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/bugtraq/2000-02/0053.html" xml:lang="en">20000208 Remote access vulnerability in all MySQL server versions</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/975" xml:lang="en">975</vuln:reference>
    </vuln:references>
    <vuln:summary>MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.</vuln:summary>
  </entry>
  <entry id="CVE-2000-0981">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.20</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2000-0981</vuln:cve-id>
    <vuln:published-datetime>2000-12-19T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:38:35.970-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/bugtraq/2000-10/0318.html" xml:lang="en">20001023 [CORE SDI ADVISORY] MySQL weak authentication</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mysql.com/documentation/mysql/commented/manual.php?section=Security" xml:lang="en">http://www.mysql.com/documentation/mysql/commented/manual.php?section=Security</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/5409" xml:lang="en">mysql-authentication(5409)</vuln:reference>
    </vuln:references>
    <vuln:summary>MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password.</vuln:summary>
  </entry>
  <entry id="CVE-2001-0407">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2001-0407</vuln:cve-id>
    <vuln:published-datetime>2001-06-27T00:00:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:40:14.697-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/bugtraq/2001-03/0237.html" xml:lang="en">20010318 potential vulnerability of mysqld running with root privileges (can be used as good DoS or r00t expoloit)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/bugtraq/2001-03/0396.html" xml:lang="en">20010327 MySQL 3.23.36 is relased (fwd)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/2522" xml:lang="en">2522</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/6617" xml:lang="en">mysql-dot-directory-traversal(6617)</vuln:reference>
    </vuln:references>
    <vuln:summary>Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with .. (dot dot).</vuln:summary>
  </entry>
  <entry id="CVE-2001-1255">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:winmysqladmin:1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:winmysqladmin:1.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2001-1255</vuln:cve-id>
    <vuln:published-datetime>2001-10-02T00:00:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:38:35.970-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2004-01-01T00:00:00.000-05:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_USER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://online.securityfocus.com/archive/1/217848" xml:lang="en">20011002 WinMySQLadmin 1.1 Store MySQL password in clear text</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://www.iss.net/security_center/static/7206.php" xml:lang="en">winmysqladmin-password-plaintext(7206)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/3381" xml:lang="en">3381</vuln:reference>
    </vuln:references>
    <vuln:summary>WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database.</vuln:summary>
  </entry>
  <entry id="CVE-2001-1274">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2001-1274</vuln:cve-id>
    <vuln:published-datetime>2001-01-23T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:39:56.967-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_USER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONECTIVA</vuln:source>
      <vuln:reference href="http://distro.conectiva.com.br/atualizacoes/?id=a&amp;anuncio=000375" xml:lang="en">CLA-2001:375</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FREEBSD</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=98089552030459&amp;w=2" xml:lang="en">FreeBSD-SA-01:16</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CALDERA</vuln:source>
      <vuln:reference href="http://www.calderasystems.com/support/security/advisories/CSSA-2001-006.0.txt" xml:lang="en">CSSA-2001-006.0</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2001/dsa-013" xml:lang="en">DSA-013</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRAKE</vuln:source>
      <vuln:reference href="http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-014.php3" xml:lang="en">MDKSA-2001:014</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mysql.com/documentation/mysql/bychapter/manual_News.html#News-3.23.3" xml:lang="en">http://www.mysql.com/documentation/mysql/bychapter/manual_News.html#News-3.23.3</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2001-003.html" xml:lang="en">RHSA-2001:003</vuln:reference>
    </vuln:references>
    <vuln:summary>Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.</vuln:summary>
  </entry>
  <entry id="CVE-2001-1275">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2001-1275</vuln:cve-id>
    <vuln:published-datetime>2001-01-19T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:39:56.967-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FREEBSD</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=98089552030459&amp;w=2" xml:lang="en">FreeBSD-SA-01:16</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CALDERA</vuln:source>
      <vuln:reference href="http://www.calderasystems.com/support/security/advisories/CSSA-2001-006.0.txt" xml:lang="en">CSSA-2001-006.0</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRAKE</vuln:source>
      <vuln:reference href="http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-014.php3" xml:lang="en">MDKSA-2001:014</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2001-003.html" xml:lang="en">RHSA-2001:003</vuln:reference>
    </vuln:references>
    <vuln:summary>MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and possibly gain privileges via password cracking.</vuln:summary>
  </entry>
  <entry id="CVE-2001-1453">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.23.32</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2001-1453</vuln:cve-id>
    <vuln:published-datetime>2001-02-09T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:40:02.873-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://dev.mysql.com/doc/mysql/en/news-3-23-33.html" xml:lang="en">http://dev.mysql.com/doc/mysql/en/news-3-23-33.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/123384" xml:lang="en">VU#123384</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/161917" xml:lang="en">20010209 Some more MySql security issues</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/6418" xml:lang="en">mysql-libmysqlclient-bo(6418)</vuln:reference>
    </vuln:references>
    <vuln:summary>Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2001-1454">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.23.32</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2001-1454</vuln:cve-id>
    <vuln:published-datetime>2001-02-09T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:40:01.420-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://dev.mysql.com/doc/mysql/en/news-3-23-33.html" xml:lang="en">http://dev.mysql.com/doc/mysql/en/news-3-23-33.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/367320" xml:lang="en">VU#367320</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/161917" xml:lang="en">20010209 Some more MySql security issues</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/6419" xml:lang="en">mysql-drop-database-bo(6419)</vuln:reference>
    </vuln:references>
    <vuln:summary>Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request.</vuln:summary>
  </entry>
  <entry id="CVE-2002-0969">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2002-0969</vuln:cve-id>
    <vuln:published-datetime>2002-10-11T00:00:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:41:30.553-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_USER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VULNWATCH</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0004.html" xml:lang="en">20021002 wp-02-0003: MySQL Locally Exploitable Buffer Overflow</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=103358628011935&amp;w=2" xml:lang="en">20021002 wp-02-0003: MySQL Locally Exploitable Buffer Overflow</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://www.iss.net/security_center/static/10243.php" xml:lang="en">mysql-myini-datadir-bo(10243)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mysql.com/documentation/mysql/bychapter/manual_News.html#News-3.23.x" xml:lang="en">http://www.mysql.com/documentation/mysql/bychapter/manual_News.html#News-3.23.x</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/5853" xml:lang="en">5853</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.westpoint.ltd.uk/advisories/wp-02-0003.txt" xml:lang="en">http://www.westpoint.ltd.uk/advisories/wp-02-0003.txt</vuln:reference>
    </vuln:references>
    <vuln:summary>Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "datadir" parameter in the my.ini initialization file, whose permissions on Windows allow Full Control to the Everyone group.</vuln:summary>
  </entry>
  <entry id="CVE-2002-1373">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2002-1373</vuln:cve-id>
    <vuln:published-datetime>2002-12-23T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:41:45.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONECTIVA</vuln:source>
      <vuln:reference href="http://distro.conectiva.com.br/atualizacoes/?id=a&amp;anuncio=000555" xml:lang="en">CLSA-2002:555</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=103971644013961&amp;w=2" xml:lang="en">20021212 Advisory 04/2002: Multiple MySQL vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=104004857201968&amp;w=2" xml:lang="en">200212-2</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://security.e-matters.de/advisories/042002.html" xml:lang="en">http://security.e-matters.de/advisories/042002.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2002/dsa-212" xml:lang="en">DSA-212</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRAKE</vuln:source>
      <vuln:reference href="http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087" xml:lang="en">MDKSA-2002:087</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2003_003_mysql.html" xml:lang="en">SUSE-SA:2003:003</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2002-288.html" xml:lang="en">RHSA-2002:288</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2002-289.html" xml:lang="en">RHSA-2002:289</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2003-166.html" xml:lang="en">RHSA-2003:166</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>IMMUNIX</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/advisories/5269" xml:lang="en">IMNX-2003-7+-008-01</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/6368" xml:lang="en">6368</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>TRUSTIX</vuln:source>
      <vuln:reference href="http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt" xml:lang="en">2002-0086</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/10846" xml:lang="en">mysql-comtabledump-dos(10846)</vuln:reference>
    </vuln:references>
    <vuln:summary>Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to cause a denial of service (crash or hang) in mysqld by causing large negative integers to be provided to a memcpy call.</vuln:summary>
  </entry>
  <entry id="CVE-2002-1374">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:3.4"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp1"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp2"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp3"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp1"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp2"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp3"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp1"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp2"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp3"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp1"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp2"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:3.4</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp1</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp2</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp3</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp1</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp2</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp3</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp1</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp2</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp3</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp1</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp2</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2002-1374</vuln:cve-id>
    <vuln:published-datetime>2002-12-23T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:41:45.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_USER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONECTIVA</vuln:source>
      <vuln:reference href="http://distro.conectiva.com.br/atualizacoes/?id=a&amp;anuncio=000555" xml:lang="en">CLSA-2002:555</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=103971644013961&amp;w=2" xml:lang="en">20021212 Advisory 04/2002: Multiple MySQL vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=104004857201968&amp;w=2" xml:lang="en">GLSA-200212-2</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=104005886114500&amp;w=2" xml:lang="en">20021216 [OpenPKG-SA-2002.013] OpenPKG Security Advisory (mysql)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://security.e-matters.de/advisories/042002.html" xml:lang="en">http://security.e-matters.de/advisories/042002.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2002/dsa-212" xml:lang="en">DSA-212</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>ENGARDE</vuln:source>
      <vuln:reference href="http://www.linuxsecurity.com/advisories/engarde_advisory-2660.html" xml:lang="en">ESA-20021213-033</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRAKE</vuln:source>
      <vuln:reference href="http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087" xml:lang="en">MDKSA-2002:087</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2003_003_mysql.html" xml:lang="en">SUSE-SA:2003:003</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2002-288.html" xml:lang="en">RHSA-2002:288</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2002-289.html" xml:lang="en">RHSA-2002:289</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2003-166.html" xml:lang="en">RHSA-2003:166</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>IMMUNIX</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/advisories/5269" xml:lang="en">IMNX-2003-7+-008-01</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/6373" xml:lang="en">6373</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>TRUSTIX</vuln:source>
      <vuln:reference href="http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt" xml:lang="en">2002-0086</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/10847" xml:lang="en">mysql-comchangeuser-password-bypass(10847)</vuln:reference>
    </vuln:references>
    <vuln:summary>The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real password.</vuln:summary>
  </entry>
  <entry id="CVE-2002-1375">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:3.4"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp1"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp2"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp3"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp1"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp2"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp3"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp1"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp2"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp3"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp1"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp2"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:3.4</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp1</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp2</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp3</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp1</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp2</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp3</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp1</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp2</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp3</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp1</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp2</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2002-1375</vuln:cve-id>
    <vuln:published-datetime>2002-12-23T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:41:45.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_USER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONECTIVA</vuln:source>
      <vuln:reference href="http://distro.conectiva.com.br/atualizacoes/?id=a&amp;anuncio=000555" xml:lang="en">CLSA-2002:555</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=103971644013961&amp;w=2" xml:lang="en">20021212 Advisory 04/2002: Multiple MySQL vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=104004857201968&amp;w=2" xml:lang="en">GLSA-200212-2</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=104005886114500&amp;w=2" xml:lang="en">20021216 [OpenPKG-SA-2002.013] OpenPKG Security Advisory (mysql)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://security.e-matters.de/advisories/042002.html" xml:lang="en">http://security.e-matters.de/advisories/042002.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2002/dsa-212" xml:lang="en">DSA-212</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>ENGARDE</vuln:source>
      <vuln:reference href="http://www.linuxsecurity.com/advisories/engarde_advisory-2660.html" xml:lang="en">ESA-20021213-033</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRAKE</vuln:source>
      <vuln:reference href="http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087" xml:lang="en">MDKSA-2002:087</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2003_003_mysql.html" xml:lang="en">SUSE-SA:2003:003</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2002-288.html" xml:lang="en">RHSA-2002:288</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2002-289.html" xml:lang="en">RHSA-2002:289</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2003-166.html" xml:lang="en">RHSA-2003:166</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>IMMUNIX</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/advisories/5269" xml:lang="en">IMNX-2003-7+-008-01</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/6375" xml:lang="en">6375</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>TRUSTIX</vuln:source>
      <vuln:reference href="http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt" xml:lang="en">2002-0086</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/10848" xml:lang="en">mysql-comchangeuser-password-bo(10848)</vuln:reference>
    </vuln:references>
    <vuln:summary>The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.</vuln:summary>
  </entry>
  <entry id="CVE-2002-1376">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:3.4"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp1"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp2"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp3"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp1"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp2"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp3"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp1"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp2"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp3"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp1"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp2"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:3.4</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp1</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp2</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_fp3</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp1</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp2</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_advanced_reporter:4.5_mp3</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp1</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp2</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_fp3</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp1</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp2</vuln:product>
      <vuln:product>cpe:/a:symantec_veritas:netbackup_global_data_manager:4.5_mp3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2002-1376</vuln:cve-id>
    <vuln:published-datetime>2002-12-23T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:41:45.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_USER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONECTIVA</vuln:source>
      <vuln:reference href="http://distro.conectiva.com.br/atualizacoes/?id=a&amp;anuncio=000555" xml:lang="en">CLSA-2002:555</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=103971644013961&amp;w=2" xml:lang="en">20021212 Advisory 04/2002: Multiple MySQL vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=104004857201968&amp;w=2" xml:lang="en">20021215 GLSA: mysql</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=104005886114500&amp;w=2" xml:lang="en">20021216 [OpenPKG-SA-2002.013] OpenPKG Security Advisory (mysql)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=104033188706000&amp;w=2" xml:lang="en">20021219 TSLSA-2002-0086 - mysql</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://security.e-matters.de/advisories/042002.html" xml:lang="en">http://security.e-matters.de/advisories/042002.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2002/dsa-212" xml:lang="en">DSA-212</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>ENGARDE</vuln:source>
      <vuln:reference href="http://www.linuxsecurity.com/advisories/engarde_advisory-2660.html" xml:lang="en">ESA-20021213-033</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRAKE</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2002:087" xml:lang="en">MDKSA-2002:087</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2002-288.html" xml:lang="en">RHSA-2002:288</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/6370" xml:lang="en">6370</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/6374" xml:lang="en">6374</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/10849" xml:lang="en">mysql-libmysqlclient-readrows-bo(10849)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/10850" xml:lang="en">mysql-libmysqlclient-readonerow-bo(10850)</vuln:reference>
    </vuln:references>
    <vuln:summary>libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.</vuln:summary>
  </entry>
  <entry id="CVE-2002-1809">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2002-1809</vuln:cve-id>
    <vuln:published-datetime>2002-12-31T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:40:59.570-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2005-07-08T12:35:00.000-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/bugtraq/2002-08/0185.html" xml:lang="en">20020818 Weak MySQL Default Configuration on Windows</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://www.iss.net/security_center/static/9902.php" xml:lang="en">mysql-default-root-access(9902)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/5503" xml:lang="en">5503</vuln:reference>
    </vuln:references>
    <vuln:summary>The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote attackers to gain unauthorized root access to the MySQL database.</vuln:summary>
  </entry>
  <entry id="CVE-2002-1921">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20.32a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.20.32a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2002-1921</vuln:cve-id>
    <vuln:published-datetime>2002-12-31T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:40:59.570-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2005-08-01T14:00:00.000-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://www.iss.net/security_center/static/9908.php" xml:lang="en">mysql-disabled-binding-loopback(9908)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/5511" xml:lang="en">5511</vuln:reference>
    </vuln:references>
    <vuln:summary>The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote attackers to connect to the database.</vuln:summary>
  </entry>
  <entry id="CVE-2002-1923">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20.32a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.20.32a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2002-1923</vuln:cve-id>
    <vuln:published-datetime>2002-12-31T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:40:59.570-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2005-08-01T14:11:00.000-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_USER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://www.iss.net/security_center/static/9909.php" xml:lang="en">mysql-win-logging-disabled(9909)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/5513" xml:lang="en">5513</vuln:reference>
    </vuln:references>
    <vuln:summary>The default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not have logging enabled, which could allow remote attackers to conduct activities without detection.</vuln:summary>
  </entry>
  <entry id="CVE-2003-0073">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54a"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54a</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2003-0073</vuln:cve-id>
    <vuln:published-datetime>2003-02-19T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:41:09.083-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A436" name="oval:org.mitre.oval:def:436"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONECTIVA</vuln:source>
      <vuln:reference href="http://distro.conectiva.com.br/atualizacoes/?id=a&amp;anuncio=000743" xml:lang="en">CLA-2003:743</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=104385719107879&amp;w=2" xml:lang="en">20030129 [OpenPKG-SA-2003.008] OpenPKG Security Advisory (mysql)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2003/dsa-303" xml:lang="en">DSA-303</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="http://www.iss.net/security_center/static/11199.php" xml:lang="en">mysql-mysqlchangeuser-doublefree-dos(11199)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>ENGARDE</vuln:source>
      <vuln:reference href="http://www.linuxsecurity.com/advisories/engarde_advisory-2873.html" xml:lang="en">ESA-20030220-004</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRAKE</vuln:source>
      <vuln:reference href="http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:013" xml:lang="en">MDKSA-2003:013</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mysql.com/doc/en/News-3.23.55.html" xml:lang="en">http://www.mysql.com/doc/en/News-3.23.55.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2003-093.html" xml:lang="en">RHSA-2003:093</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2003-094.html" xml:lang="en">RHSA-2003:094</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2003-166.html" xml:lang="en">RHSA-2003:166</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/6718" xml:lang="en">6718</vuln:reference>
    </vuln:references>
    <vuln:summary>Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user.</vuln:summary>
  </entry>
  <entry id="CVE-2003-0150">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.55"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.55</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2003-0150</vuln:cve-id>
    <vuln:published-datetime>2003-03-24T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:41:11.647-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A442" name="oval:org.mitre.oval:def:442"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONECTIVA</vuln:source>
      <vuln:reference href="http://distro.conectiva.com.br/atualizacoes/?id=a&amp;anuncio=000743" xml:lang="en">CLA-2003:743</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=104715840202315&amp;w=2" xml:lang="en">20030308 MySQL_user_can_be_changed_to_root?</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=104739810523433&amp;w=2" xml:lang="en">20030310 Re: MySQL user can be changed to root</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=104800948128630&amp;w=2" xml:lang="en">20030318 [OpenPKG-SA-2003.022] OpenPKG Security Advisory (mysql)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=104802285012750&amp;w=2" xml:lang="en">20030318 GLSA:  mysql (200303-14)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2003-094.html" xml:lang="en">RHSA-2003:094</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2003/dsa-303" xml:lang="en">DSA-303</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/203897" xml:lang="en">VU#203897</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>ENGARDE</vuln:source>
      <vuln:reference href="http://www.linuxsecurity.com/advisories/engarde_advisory-3046.html" xml:lang="en">ESA-20030324-012</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRAKE</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2003:057" xml:lang="en">MDKSA-2003:057</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2003-093.html" xml:lang="en">RHSA-2003:093</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/7052" xml:lang="en">7052</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/11510" xml:lang="en">mysql-datadir-root-privileges(11510)</vuln:reference>
    </vuln:references>
    <vuln:summary>MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.</vuln:summary>
  </entry>
  <entry id="CVE-2003-0497">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:intersystems:cache_database:5"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:intersystems:cache_database:5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2003-0497</vuln:cve-id>
    <vuln:published-datetime>2003-08-07T00:00:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T07:17:40.910-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>IDEFENSE</vuln:source>
      <vuln:reference href="http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=7" xml:lang="en">20030701 Caché Insecure Installation File and Directory Permissions</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.intersystems.com/support-learning/support/product-news-alerts/support-alerts-2003/" xml:lang="en">https://www.intersystems.com/support-learning/support/product-news-alerts/support-alerts-2003/</vuln:reference>
    </vuln:references>
    <vuln:summary>Cach? Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing it via cuxs.</vuln:summary>
  </entry>
  <entry id="CVE-2003-0498">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:intersystems:cache_database:5"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:intersystems:cache_database:5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2003-0498</vuln:cve-id>
    <vuln:published-datetime>2003-08-07T00:00:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T07:17:40.973-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>IDEFENSE</vuln:source>
      <vuln:reference href="http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=7" xml:lang="en">20030701 Caché Insecure Installation File and Directory Permissions</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.intersystems.com/support-learning/support/product-news-alerts/support-alerts-2003/" xml:lang="en">https://www.intersystems.com/support-learning/support/product-news-alerts/support-alerts-2003/</vuln:reference>
    </vuln:references>
    <vuln:summary>Cach? Database 5.x installs the /cachesys/csp directory with insecure permissions, which allows local users to execute arbitrary code by adding server-side scripts that are executed with root privileges.</vuln:summary>
  </entry>
  <entry id="CVE-2003-0780">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/o:conectiva:linux:7.0"/>
        <cpe-lang:fact-ref name="cpe:/o:conectiva:linux:8.0"/>
        <cpe-lang:fact-ref name="cpe:/o:conectiva:linux:9.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.33</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.55</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.56</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/o:conectiva:linux:7.0</vuln:product>
      <vuln:product>cpe:/o:conectiva:linux:8.0</vuln:product>
      <vuln:product>cpe:/o:conectiva:linux:9.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2003-0780</vuln:cve-id>
    <vuln:published-datetime>2003-09-22T00:00:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:21.527-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONECTIVA</vuln:source>
      <vuln:reference href="http://distro.conectiva.com.br/atualizacoes/?id=a&amp;anuncio=000743" xml:lang="en">CLA-2003:743</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009819.html" xml:lang="en">20030910 Buffer overflow in MySQL</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=106364207129993&amp;w=2" xml:lang="en">20030913 exploit for mysql -- [get_salt_from_password] problem</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>TRUSTIX</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=106381424420775&amp;w=2" xml:lang="en">2003-0034</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2003/dsa-381" xml:lang="en">DSA-381</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/516492" xml:lang="en">VU#516492</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRAKE</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2003:094" xml:lang="en">MDKSA-2003:094</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2003-281.html" xml:lang="en">RHSA-2003:281</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2003-282.html" xml:lang="en">RHSA-2003:282</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/337012" xml:lang="en">20030910 Buffer overflow in MySQL</vuln:reference>
    </vuln:references>
    <vuln:summary>Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.</vuln:summary>
  </entry>
  <entry id="CVE-2003-1331">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2003-1331</vuln:cve-id>
    <vuln:published-datetime>2003-12-31T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:03.510-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>HIGH</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/fulldisclosure/2003-q2/1303.html" xml:lang="en">20030612 libmysqlclient 4.x and below mysql_real_connect() buffer overflow.</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://bugs.mysql.com/bug.php?id=564" xml:lang="en">http://bugs.mysql.com/bug.php?id=564</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/7887" xml:lang="en">7887</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/12337" xml:lang="en">mysql-mysqlrealconnect-bo(12337)</vuln:reference>
    </vuln:references>
    <vuln:summary>Stack-based buffer overflow in the mysql_real_connect function in the MySql client library (libmysqlclient) 4.0.13 and earlier allows local users to execute arbitrary code via a long socket name, a different vulnerability than CVE-2001-1453.</vuln:summary>
  </entry>
  <entry id="CVE-2003-1480">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20.32a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.35"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20.32a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.33</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.35</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.55</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.56</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2003-1480</vuln:cve-id>
    <vuln:published-datetime>2003-12-31T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:10.637-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2007-12-11T19:28:00.000-05:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.securiteam.com/tools/5WP031FA0U.html" xml:lang="en">http://www.securiteam.com/tools/5WP031FA0U.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/7500" xml:lang="en">7500</vuln:reference>
    </vuln:references>
    <vuln:summary>MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods.</vuln:summary>
  </entry>
  <entry id="CVE-2004-0381">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20.32a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20.32a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.33</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.55</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.56</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.58</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2004-0381</vuln:cve-id>
    <vuln:published-datetime>2004-05-04T00:00:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:32.200-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11557" name="oval:org.mitre.oval:def:11557"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=108023246916294&amp;w=2" xml:lang="en">20040324 mysqlbug tmpfile/symlink vulnerability.</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=108206802810402&amp;w=2" xml:lang="en">20040414 [OpenPKG-SA-2004.014] OpenPKG Security Advisory (mysql)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200405-20.xml" xml:lang="en">GLSA-200405-20</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CIAC</vuln:source>
      <vuln:reference href="http://www.ciac.org/ciac/bulletins/p-018.shtml" xml:lang="en">P-018</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2004/dsa-483" xml:lang="en">DSA-483</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRAKE</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2004:034" xml:lang="en">MDKSA-2004:034</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2004-569.html" xml:lang="en">RHSA-2004:569</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2004-597.html" xml:lang="en">RHSA-2004:597</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/9976" xml:lang="en">9976</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/15617" xml:lang="en">mysql-mysqlbug-symlink(15617)</vuln:reference>
    </vuln:references>
    <vuln:summary>mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.</vuln:summary>
  </entry>
  <entry id="CVE-2004-0835">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20.32a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.20:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.35"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20.32a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.0:alpha</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.20:beta</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.33</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.35</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.55</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.56</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.57</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.58</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2004-0835</vuln:cve-id>
    <vuln:published-datetime>2004-11-03T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:37.467-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2018-09-25T13:47:58.297-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://bugs.mysql.com/bug.php?id=3270" xml:lang="en">http://bugs.mysql.com/bug.php?id=3270</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONECTIVA</vuln:source>
      <vuln:reference href="http://distro.conectiva.com.br/atualizacoes/?id=a&amp;anuncio=000892" xml:lang="en">CLA-2004:892</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://lists.mysql.com/internals/13073" xml:lang="en">http://lists.mysql.com/internals/13073</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1011606" xml:lang="en">1011606</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1" xml:lang="en">101864</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CIAC</vuln:source>
      <vuln:reference href="http://www.ciac.org/ciac/bulletins/p-018.shtml" xml:lang="en">P-018</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2004/dsa-562" xml:lang="en">DSA-562</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml" xml:lang="en">GLSA-200410-22</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mysql.org/doc/refman/4.1/en/news-4-0-19.html" xml:lang="en">http://www.mysql.org/doc/refman/4.1/en/news-4-0-19.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mysql.org/doc/refman/4.1/en/news-4-1-2.html" xml:lang="en">http://www.mysql.org/doc/refman/4.1/en/news-4-1-2.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2004-597.html" xml:lang="en">RHSA-2004:597</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2004-611.html" xml:lang="en">RHSA-2004:611</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/11357" xml:lang="en">11357</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>TRUSTIX</vuln:source>
      <vuln:reference href="http://www.trustix.org/errata/2004/0054/" xml:lang="en">2004-0054</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/17666" xml:lang="en">mysql-alter-restriction-bypass(17666)</vuln:reference>
    </vuln:references>
    <vuln:summary>MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.</vuln:summary>
  </entry>
  <entry id="CVE-2004-0836">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20.32a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.20:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.35"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20.32a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.0:alpha</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.20:beta</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.33</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.35</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2004-0836</vuln:cve-id>
    <vuln:published-datetime>2004-11-03T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:40:51.493-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2018-09-25T13:54:36.487-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://bugs.mysql.com/bug.php?id=4017" xml:lang="en">http://bugs.mysql.com/bug.php?id=4017</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONECTIVA</vuln:source>
      <vuln:reference href="http://distro.conectiva.com.br/atualizacoes/?id=a&amp;anuncio=000892" xml:lang="en">CLA-2004:892</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://lists.mysql.com/internals/14726" xml:lang="en">http://lists.mysql.com/internals/14726</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=110140517515735&amp;w=2" xml:lang="en">20041125 [USN-32-1] mysql vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CIAC</vuln:source>
      <vuln:reference href="http://www.ciac.org/ciac/bulletins/p-018.shtml" xml:lang="en">P-018</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2004/dsa-562" xml:lang="en">DSA-562</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml" xml:lang="en">GLSA-200410-22</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2004-597.html" xml:lang="en">RHSA-2004:597</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2004-611.html" xml:lang="en">RHSA-2004:611</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/10981" xml:lang="en">10981</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>TRUSTIX</vuln:source>
      <vuln:reference href="http://www.trustix.org/errata/2004/0054/" xml:lang="en">2004-0054</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/17047" xml:lang="en">mysql-realconnect-bo(17047)</vuln:reference>
    </vuln:references>
    <vuln:summary>Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length (h_length).</vuln:summary>
  </entry>
  <entry id="CVE-2004-0837">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20.32a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.20:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.35"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20.32a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.0:alpha</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.20:beta</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.33</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.35</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2004-0837</vuln:cve-id>
    <vuln:published-datetime>2004-11-03T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:40:51.493-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.6</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>HIGH</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2018-09-25T13:57:59.923-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://bugs.mysql.com/2408" xml:lang="en">http://bugs.mysql.com/2408</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONECTIVA</vuln:source>
      <vuln:reference href="http://distro.conectiva.com.br/atualizacoes/?id=a&amp;anuncio=000892" xml:lang="en">CLA-2004:892</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://lists.mysql.com/internals/16168" xml:lang="en">http://lists.mysql.com/internals/16168</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://lists.mysql.com/internals/16173" xml:lang="en">http://lists.mysql.com/internals/16173</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://lists.mysql.com/internals/16174" xml:lang="en">http://lists.mysql.com/internals/16174</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=110140517515735&amp;w=2" xml:lang="en">20041125 [USN-32-1] mysql vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://mysql.bkbits.net:8080/mysql-3.23/diffs/myisammrg/myrg_open.c@1.15" xml:lang="en">http://mysql.bkbits.net:8080/mysql-3.23/diffs/myisammrg/myrg_open.c@1.15</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1011606" xml:lang="en">1011606</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1" xml:lang="en">101864</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CIAC</vuln:source>
      <vuln:reference href="http://www.ciac.org/ciac/bulletins/p-018.shtml" xml:lang="en">P-018</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2004/dsa-562" xml:lang="en">DSA-562</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml" xml:lang="en">GLSA-200410-22</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2004-597.html" xml:lang="en">RHSA-2004:597</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2004-611.html" xml:lang="en">RHSA-2004:611</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/11357" xml:lang="en">11357</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>TRUSTIX</vuln:source>
      <vuln:reference href="http://www.trustix.org/errata/2004/0054/" xml:lang="en">2004-0054</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/17667" xml:lang="en">mysql-union-dos(17667)</vuln:reference>
    </vuln:references>
    <vuln:summary>MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs.</vuln:summary>
  </entry>
  <entry id="CVE-2004-0956">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux:8.0"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux:8.1"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux:8.2"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux:9.0"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux:9.0::x86_64"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux:9.1"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux:9.2"/>
        <cpe-lang:fact-ref name="cpe:/o:ubuntu:ubuntu_linux:4.1::ia64"/>
        <cpe-lang:fact-ref name="cpe:/o:ubuntu:ubuntu_linux:4.1::ppc"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux:8.0</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux:8.1</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux:8.2</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux:9.0</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux:9.0::x86_64</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux:9.1</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux:9.2</vuln:product>
      <vuln:product>cpe:/o:ubuntu:ubuntu_linux:4.1::ia64</vuln:product>
      <vuln:product>cpe:/o:ubuntu:ubuntu_linux:4.1::ppc</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2004-0956</vuln:cve-id>
    <vuln:published-datetime>2005-01-10T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:32.200-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://bugs.mysql.com/bug.php?id=3870" xml:lang="en">http://bugs.mysql.com/bug.php?id=3870</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://lists.mysql.com/packagers/202" xml:lang="en">http://lists.mysql.com/packagers/202</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml" xml:lang="en">GLSA-200410-22</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2004_01_sr.html" xml:lang="en">SUSE-SR:2004:001</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>TRUSTIX</vuln:source>
      <vuln:reference href="http://www.trustix.net/errata/2004/0054/" xml:lang="en">2004-0054</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/17768" xml:lang="en">mysql-match-against-dos(17768)</vuln:reference>
    </vuln:references>
    <vuln:summary>MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.</vuln:summary>
  </entry>
  <entry id="CVE-2004-0957">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:openpkg:openpkg:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openpkg:openpkg:2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openpkg:openpkg:current"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20.32a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux:3.0::advanced_server"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux:3.0::enterprise_server"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux:3.0::workstation_server"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_desktop:3.0"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux:8.0"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux:8.1"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux:8.2"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux:9.0"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux:9.0::x86_64"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux:9.1"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux:9.2"/>
        <cpe-lang:fact-ref name="cpe:/o:trustix:secure_linux:1.5"/>
        <cpe-lang:fact-ref name="cpe:/o:trustix:secure_linux:2.0"/>
        <cpe-lang:fact-ref name="cpe:/o:trustix:secure_linux:2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:ubuntu:ubuntu_linux:4.1::ia64"/>
        <cpe-lang:fact-ref name="cpe:/o:ubuntu:ubuntu_linux:4.1::ppc"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:openpkg:openpkg:2.1</vuln:product>
      <vuln:product>cpe:/a:openpkg:openpkg:2.2</vuln:product>
      <vuln:product>cpe:/a:openpkg:openpkg:current</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20.32a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.33</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.55</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.56</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.58</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.59</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux:3.0::advanced_server</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux:3.0::enterprise_server</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux:3.0::workstation_server</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_desktop:3.0</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux:8.0</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux:8.1</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux:8.2</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux:9.0</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux:9.0::x86_64</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux:9.1</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux:9.2</vuln:product>
      <vuln:product>cpe:/o:trustix:secure_linux:1.5</vuln:product>
      <vuln:product>cpe:/o:trustix:secure_linux:2.0</vuln:product>
      <vuln:product>cpe:/o:trustix:secure_linux:2.1</vuln:product>
      <vuln:product>cpe:/o:ubuntu:ubuntu_linux:4.1::ia64</vuln:product>
      <vuln:product>cpe:/o:ubuntu:ubuntu_linux:4.1::ppc</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2004-0957</vuln:cve-id>
    <vuln:published-datetime>2005-02-09T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:32.200-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONECTIVA</vuln:source>
      <vuln:reference href="http://distro.conectiva.com.br/atualizacoes/?id=a&amp;anuncio=000947" xml:lang="en">CLA-2005:947</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CIAC</vuln:source>
      <vuln:reference href="http://www.ciac.org/ciac/bulletins/p-018.shtml" xml:lang="en">P-018</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2005/dsa-707" xml:lang="en">DSA-707</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRAKE</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2005:070" xml:lang="en">MDKSA-2005:070</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2004-597.html" xml:lang="en">RHSA-2004:597</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2004-611.html" xml:lang="en">RHSA-2004:611</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/17783" xml:lang="en">mysql-underscore-gain-priv(17783)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="https://www.ubuntu.com/usn/usn-32-1/" xml:lang="en">USN-32-1</vuln:reference>
    </vuln:references>
    <vuln:summary>Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.</vuln:summary>
  </entry>
  <entry id="CVE-2005-0004">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.0::alpha"/>
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.0::arm"/>
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.0::hppa"/>
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.0::ia-32"/>
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.0::ia-64"/>
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.0::m68k"/>
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.0::mips"/>
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.0::mipsel"/>
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.0::ppc"/>
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.0::s-390"/>
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.0::sparc"/>
        <cpe-lang:fact-ref name="cpe:/o:gentoo:linux"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:fedora_core:core_1.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:linux:7.3::i386"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:linux:9.0::i386"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.0::alpha</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.0::arm</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.0::hppa</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.0::ia-32</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.0::ia-64</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.0::m68k</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.0::mips</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.0::mipsel</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.0::ppc</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.0::s-390</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.0::sparc</vuln:product>
      <vuln:product>cpe:/o:gentoo:linux</vuln:product>
      <vuln:product>cpe:/o:redhat:fedora_core:core_1.0</vuln:product>
      <vuln:product>cpe:/o:redhat:linux:7.3::i386</vuln:product>
      <vuln:product>cpe:/o:redhat:linux:9.0::i386</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2005-0004</vuln:cve-id>
    <vuln:published-datetime>2005-04-14T00:00:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:32.200-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_USER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONECTIVA</vuln:source>
      <vuln:reference href="http://distro.conectiva.com.br/atualizacoes/?id=a&amp;anuncio=000947" xml:lang="en">CLA-2005:947</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://lists.mysql.com/internals/20600" xml:lang="en">http://lists.mysql.com/internals/20600</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=110608297217224&amp;w=2" xml:lang="en">20050118 [USN-63-1] MySQL client vulnerability</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html" xml:lang="en">http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1" xml:lang="en">101864</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2005/dsa-647" xml:lang="en">DSA-647</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRAKE</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2005:036" xml:lang="en">MDKSA-2005:036</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/12277" xml:lang="en">12277</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/18922" xml:lang="en">mysql-mysqlaccess-symlink(18922)</vuln:reference>
    </vuln:references>
    <vuln:summary>The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.</vuln:summary>
  </entry>
  <entry id="CVE-2005-0709">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2005-0709</vuln:cve-id>
    <vuln:published-datetime>2005-05-02T00:00:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:32.200-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10479" name="oval:org.mitre.oval:def:10479"/>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VULNWATCH</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0084.html" xml:lang="en">20050310 Mysql CREATE FUNCTION libc arbitrary code execution.</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html" xml:lang="en">APPLE-SA-2005-08-17</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html" xml:lang="en">APPLE-SA-2005-08-15</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=111066115808506&amp;w=2" xml:lang="en">20050310 Mysql CREATE FUNCTION libc arbitrary code execution.</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1" xml:lang="en">101864</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2005/dsa-707" xml:lang="en">DSA-707</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml" xml:lang="en">GLSA-200503-19</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRAKE</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2005:060" xml:lang="en">MDKSA-2005:060</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2005_19_mysql.html" xml:lang="en">SUSE-SA:2005:019</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2005-334.html" xml:lang="en">RHSA-2005:334</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2005-348.html" xml:lang="en">RHSA-2005:348</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/12781" xml:lang="en">12781</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>TRUSTIX</vuln:source>
      <vuln:reference href="http://www.trustix.org/errata/2005/0009/" xml:lang="en">2005-0009</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="https://usn.ubuntu.com/96-1/" xml:lang="en">USN-96-1</vuln:reference>
    </vuln:references>
    <vuln:summary>MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.</vuln:summary>
  </entry>
  <entry id="CVE-2005-0710">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2005-0710</vuln:cve-id>
    <vuln:published-datetime>2005-05-02T00:00:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:32.200-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10180" name="oval:org.mitre.oval:def:10180"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VULNWATCH</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0083.html" xml:lang="en">20050310 Mysql CREATE FUNCTION mysql.func table arbitrary library injection</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html" xml:lang="en">APPLE-SA-2005-08-17</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html" xml:lang="en">APPLE-SA-2005-08-15</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=111065974004648&amp;w=2" xml:lang="en">20050310 Mysql CREATE FUNCTION mysql.func table arbitrary library injection</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1" xml:lang="en">101864</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2005/dsa-707" xml:lang="en">DSA-707</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml" xml:lang="en">GLSA-200503-19</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRAKE</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2005:060" xml:lang="en">MDKSA-2005:060</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2005_19_mysql.html" xml:lang="en">SUSE-SA:2005:019</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2005-334.html" xml:lang="en">RHSA-2005:334</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2005-348.html" xml:lang="en">RHSA-2005:348</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/12781" xml:lang="en">12781</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>TRUSTIX</vuln:source>
      <vuln:reference href="http://www.trustix.org/errata/2005/0009/" xml:lang="en">2005-0009</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/19658" xml:lang="en">mysql-udfinit-gain-access(19658)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="https://usn.ubuntu.com/96-1/" xml:lang="en">USN-96-1</vuln:reference>
    </vuln:references>
    <vuln:summary>MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_init function.</vuln:summary>
  </entry>
  <entry id="CVE-2005-0711">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2005-0711</vuln:cve-id>
    <vuln:published-datetime>2005-05-02T00:00:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:32.200-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9591" name="oval:org.mitre.oval:def:9591"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VULNWATCH</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0082.html" xml:lang="en">20050310 Mysql insecure temporary file creation with CREATE TEMPORARY TABLE privilege escalation</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html" xml:lang="en">APPLE-SA-2005-08-17</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html" xml:lang="en">APPLE-SA-2005-08-15</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1" xml:lang="en">101864</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2005/dsa-707" xml:lang="en">DSA-707</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml" xml:lang="en">GLSA-200503-19</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRAKE</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2005:060" xml:lang="en">MDKSA-2005:060</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2005_19_mysql.html" xml:lang="en">SUSE-SA:2005:019</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2005-334.html" xml:lang="en">RHSA-2005:334</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2005-348.html" xml:lang="en">RHSA-2005:348</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/12781" xml:lang="en">12781</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>TRUSTIX</vuln:source>
      <vuln:reference href="http://www.trustix.org/errata/2005/0009/" xml:lang="en">2005-0009</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="https://usn.ubuntu.com/96-1/" xml:lang="en">USN-96-1</vuln:reference>
    </vuln:references>
    <vuln:summary>MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.</vuln:summary>
  </entry>
  <entry id="CVE-2005-1636">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2005-1636</vuln:cve-id>
    <vuln:published-datetime>2005-05-17T00:00:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:13.683-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9504" name="oval:org.mitre.oval:def:9504"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://marc.info/?l=full-disclosure&amp;m=111632686805498&amp;w=2" xml:lang="en">20050517 MySQL &lt; 4.0.12 &amp;&amp; MySQL &lt;= 5.0.4 : Insecure tmp</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2006:045" xml:lang="en">MDKSA-2006:045</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2005-685.html" xml:lang="en">RHSA-2005:685</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/13660" xml:lang="en">13660</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.zataz.net/adviso/mysql-05172005.txt" xml:lang="en">http://www.zataz.net/adviso/mysql-05172005.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=158688" xml:lang="en">https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=158688</vuln:reference>
    </vuln:references>
    <vuln:summary>mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a predictable filename and insecure permissions, which allows local users to execute arbitrary SQL commands by modifying the file's contents.</vuln:summary>
  </entry>
  <entry id="CVE-2005-2035">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:cool_cafe_chat:cool_cafe_chat:1.2.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cool_cafe_chat:cool_cafe_chat:1.2.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2005-2035</vuln:cve-id>
    <vuln:published-datetime>2005-06-16T00:00:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T07:19:50.697-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://exploitlabs.com/files/advisories/EXPL-A-2005-009-coolcafe.txt" xml:lang="en">http://exploitlabs.com/files/advisories/EXPL-A-2005-009-coolcafe.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/lists/fulldisclosure/2005/Jun/0205.html" xml:lang="en">20050616 CoolCafe Chat SQL injection</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1014221" xml:lang="en">1014221</vuln:reference>
    </vuln:references>
    <vuln:summary>SQL injection vulnerability in login.asp for Cool Cafe (Cool Caf?) Chat 1.2.1 allows remote attackers to execute arbitrary SQL commands via the password.</vuln:summary>
  </entry>
  <entry id="CVE-2005-2036">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:cool_cafe_chat:cool_cafe_chat:1.2.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cool_cafe_chat:cool_cafe_chat:1.2.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2005-2036</vuln:cve-id>
    <vuln:published-datetime>2005-06-16T00:00:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T07:19:50.777-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://exploitlabs.com/files/advisories/EXPL-A-2005-009-coolcafe.txt" xml:lang="en">http://exploitlabs.com/files/advisories/EXPL-A-2005-009-coolcafe.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/lists/fulldisclosure/2005/Jun/0205.html" xml:lang="en">20050616 CoolCafe Chat SQL injection</vuln:reference>
    </vuln:references>
    <vuln:summary>modifyUser.asp in Cool Cafe (Cool Caf?) Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modified nickname value.</vuln:summary>
  </entry>
  <entry id="CVE-2005-2558">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2005-2558</vuln:cve-id>
    <vuln:published-datetime>2005-08-16T00:00:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:32.200-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_USER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SCO</vuln:source>
      <vuln:reference href="ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.18.1/SCOSA-2006.18.1.txt" xml:lang="en">SCOSA-2006.18</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035845.html" xml:lang="en">20050808 [AppSecInc Advisory MYSQL05-V0002] Buffer Overflow in MySQL User Defined Functions</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=112354450412427&amp;w=2" xml:lang="en">20050808 [AppSecInc Advisory MYSQL05-V0002] Buffer Overflow in MySQL User Defined Functions</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1" xml:lang="en">236703</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.appsecinc.com/resources/alerts/mysql/2005-002.html" xml:lang="en">http://www.appsecinc.com/resources/alerts/mysql/2005-002.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2005/dsa-829" xml:lang="en">DSA-829</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2005/dsa-831" xml:lang="en">DSA-831</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2005/dsa-833" xml:lang="en">DSA-833</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2005:163" xml:lang="en">MDKSA-2005:163</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2005_21_sr.html" xml:lang="en">SUSE-SR:2005:021</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00005.html" xml:lang="en">FLSA-2006:167803</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/14509" xml:lang="en">14509</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/1326/references" xml:lang="en">ADV-2008-1326</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/21737" xml:lang="en">mysql-user-defined-function-bo(21737)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="https://www.ubuntu.com/usn/usn-180-1/" xml:lang="en">USN-180-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="https://www.ubuntu.com/usn/usn-180-2/" xml:lang="en">USN-180-2</vuln:reference>
    </vuln:references>
    <vuln:summary>Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field.</vuln:summary>
  </entry>
  <entry id="CVE-2005-2573">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2005-2573</vuln:cve-id>
    <vuln:published-datetime>2005-08-16T00:00:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:32.200-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035847.html" xml:lang="en">20050808 [AppSecInc Advisory MYSQL05-V0001] Improper Filtering of Directory Traversal Characters in MySQL User Defined Functions</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=112360618320729&amp;w=2" xml:lang="en">20050808 [AppSecInc Advisory MYSQL05-V0001] Improper Filtering of Directory Traversal Characters in MySQL User Defined Functions</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://mysql.bkbits.net:8080/mysql-4.0/cset@428b981bg2iwh3CbGANDaF-W6DbttA" xml:lang="en">http://mysql.bkbits.net:8080/mysql-4.0/cset@428b981bg2iwh3CbGANDaF-W6DbttA</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://mysql.bkbits.net:8080/mysql-4.0/gnupatch@428b981bg2iwh3CbGANDaF-W6DbttA" xml:lang="en">http://mysql.bkbits.net:8080/mysql-4.0/gnupatch@428b981bg2iwh3CbGANDaF-W6DbttA</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.appsecinc.com/resources/alerts/mysql/2005-001.html" xml:lang="en">http://www.appsecinc.com/resources/alerts/mysql/2005-001.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/21738" xml:lang="en">mysql-udf-directory-traversal(21738)</vuln:reference>
    </vuln:references>
    <vuln:summary>The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an incomplete blacklist in a directory traversal check, which allows attackers to include arbitrary files via the backslash (\) character.</vuln:summary>
  </entry>
  <entry id="CVE-2005-2926">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:sco:openserver:5.0.7"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:sco:openserver:5.0.7</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2005-2926</vuln:cve-id>
    <vuln:published-datetime>2005-10-25T12:02:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:48:07.243-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_USER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SCO</vuln:source>
      <vuln:reference href="ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.40/SCOSA-2005.40.txt" xml:lang="en">SCOSA-2005.40</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1015099" xml:lang="en">1015099</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>IDEFENSE</vuln:source>
      <vuln:reference href="http://www.idefense.com/application/poi/display?type=vulnerabilities" xml:lang="en">20051024 SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/15160" xml:lang="en">15160</vuln:reference>
    </vuln:references>
    <vuln:summary>Stack-based buffer overflow in (1) backupsh and (2) authsh in SCO Openserver 5.0.7 allows local users to execute arbitrary code via a long HOME environment variable.</vuln:summary>
  </entry>
  <entry id="CVE-2005-4827">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6::microsoft_windows_server_2003_sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6::windows_2000"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6::windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6::windows_xp_professional_64bit"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6:sp1:windows_98"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6:sp1:windows_98_se"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6:sp1:windows_millennium"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6:sp1:windows_xpsp1"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6:windows_2000_sp4"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6:windows_server_2003_sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6:windows_server_2003_sp1_itanium"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6:windows_server_2003_sp1_itanium_systems"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6:windows_xp_sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6.0::windows_server"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6.0::windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6.0::windowsxp"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6.0:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6.0:sp1:windows_2000"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6.0:sp1:windows_xp"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6.0:sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6.0:sp2:windows_xp"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6.0:windows_xp_sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6.0.2600"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6.0.2800"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6.0.2800.1106"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie:6.0.2900.2180"/>
        <cpe-lang:fact-ref name="cpe:/h:canon:network_camera_server_vb101"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:microsoft:ie:6::microsoft_windows_server_2003_sp1</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6::windows_2000</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6::windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6::windows_xp_professional_64bit</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6:sp1</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6:sp1:windows_98</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6:sp1:windows_98_se</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6:sp1:windows_millennium</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6:sp1:windows_xpsp1</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6:windows_2000_sp4</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6:windows_server_2003_sp1</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6:windows_server_2003_sp1_itanium</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6:windows_server_2003_sp1_itanium_systems</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6:windows_xp_sp2</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6.0</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6.0::windows_server</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6.0::windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6.0::windowsxp</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6.0:sp1</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6.0:sp1:windows_2000</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6.0:sp1:windows_xp</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6.0:sp2</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6.0:sp2:windows_xp</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6.0:windows_xp_sp2</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6.0.2600</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6.0.2800</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6.0.2800.1106</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie:6.0.2900.2180</vuln:product>
      <vuln:product>cpe:/h:canon:network_camera_server_vb101</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2005-4827</vuln:cve-id>
    <vuln:published-datetime>2005-12-31T00:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:48:51.247-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2007/Feb/0081.html" xml:lang="en">20070203 Web 2.0 backdoors made easy with MSIE &amp; XMLHttpRequest</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/411585" xml:lang="en">20050924 "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/459172/100/0/threaded" xml:lang="en">20070204 Re: Web 2.0 backdoors made easy with MSIE &amp; XMLHttpRequest</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/14969" xml:lang="en">14969</vuln:reference>
    </vuln:references>
    <vuln:summary>Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) and using tab, newline, and carriage return characters within the first argument (method name), which is supported by some proxy servers that convert tabs to spaces.  NOTE: this issue can be leveraged to conduct referer spoofing, HTTP Request Smuggling, and other attacks.</vuln:summary>
  </entry>
  <entry id="CVE-2006-0706">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:gastebuch:gastebuch:1.3.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:gastebuch:gastebuch:1.3.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2006-0706</vuln:cve-id>
    <vuln:published-datetime>2006-02-15T06:06:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T07:21:10.390-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=113986789801121&amp;w=2" xml:lang="en">20060213 XSS vulnerability in guestbook-php-script</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.php4scripte.de/index.php" xml:lang="en">http://www.php4scripte.de/index.php</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/16615" xml:lang="en">16615</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2006/0566" xml:lang="en">ADV-2006-0566</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/24670" xml:lang="en">gastebuch-homepage-xss(24670)</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting vulnerability in eintrag.php in G?stebuch (Gastebuch) before 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the URL, which is used in the homepage parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2006-0903">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.20:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.35"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.19"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.25</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.26</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.0:alpha</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.20:beta</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.33</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.35</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.55</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.56</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.57</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.58</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.59</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.19</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2006-0903</vuln:cve-id>
    <vuln:published-datetime>2006-02-27T18:02:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:35.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9915" name="oval:org.mitre.oval:def:9915"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0653.html" xml:lang="en">20060225 mysql &lt;= 5.0.18</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://bugs.mysql.com/bug.php?id=17667" xml:lang="en">http://bugs.mysql.com/bug.php?id=17667</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://rst.void.ru/papers/advisory39.txt" xml:lang="en">http://rst.void.ru/papers/advisory39.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1015693" xml:lang="en">1015693</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2006/dsa-1071" xml:lang="en">DSA-1071</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2006/dsa-1073" xml:lang="en">DSA-1073</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2006/dsa-1079" xml:lang="en">DSA-1079</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2006:064" xml:lang="en">MDKSA-2006:064</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2006-0544.html" xml:lang="en">RHSA-2006:0544</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0083.html" xml:lang="en">RHSA-2007:0083</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2008-0364.html" xml:lang="en">RHSA-2008:0364</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/16850" xml:lang="en">16850</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-274-2" xml:lang="en">USN-274-2</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2006/0752" xml:lang="en">ADV-2006-0752</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/24966" xml:lang="en">mysql-query-log-bypass-security(24966)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="https://usn.ubuntu.com/274-1/" xml:lang="en">USN-274-1</vuln:reference>
    </vuln:references>
    <vuln:summary>MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function.  NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query.</vuln:summary>
  </entry>
  <entry id="CVE-2006-1516">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.19"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.25</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.26</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.19</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2006-1516</vuln:cve-id>
    <vuln:published-datetime>2006-05-05T08:46:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:35.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9918" name="oval:org.mitre.oval:def:9918"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://bugs.debian.org/365938" xml:lang="en">http://bugs.debian.org/365938</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html" xml:lang="en">http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://docs.info.apple.com/article.html?artnum=305214" xml:lang="en">http://docs.info.apple.com/article.html?artnum=305214</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html" xml:lang="en">APPLE-SA-2007-03-13</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html" xml:lang="en">SUSE-SA:2006:036</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SREASON</vuln:source>
      <vuln:reference href="http://securityreason.com/securityalert/840" xml:lang="en">840</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1016017" xml:lang="en">1016017</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2006&amp;m=slackware-security.599377" xml:lang="en">SSA:2006-155-01</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1" xml:lang="en">236703</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2006/dsa-1071" xml:lang="en">DSA-1071</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2006/dsa-1073" xml:lang="en">DSA-1073</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2006/dsa-1079" xml:lang="en">DSA-1079</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200605-13.xml" xml:lang="en">GLSA-200605-13</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2006:084" xml:lang="en">MDKSA-2006:084</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2006-06-02.html" xml:lang="en">SUSE-SR:2006:012</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2006-0544.html" xml:lang="en">RHSA-2006:0544</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/432733/100/0/threaded" xml:lang="en">20060502 MySQL Anonymous Login Handshake - Information Leakage.</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/434164/100/0/threaded" xml:lang="en">20060516 UPDATE: [ GLSA 200605-13 ] MySQL: Information leakage</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/17780" xml:lang="en">17780</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>TRUSTIX</vuln:source>
      <vuln:reference href="http://www.trustix.org/errata/2006/0028" xml:lang="en">2006-0028</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA07-072A.html" xml:lang="en">TA07-072A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2006/1633" xml:lang="en">ADV-2006-1633</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/0930" xml:lang="en">ADV-2007-0930</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/1326/references" xml:lang="en">ADV-2008-1326</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.wisec.it/vulns.php?page=7" xml:lang="en">http://www.wisec.it/vulns.php?page=7</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/26236" xml:lang="en">mysql-login-packet-info-disclosure(26236)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="https://usn.ubuntu.com/283-1/" xml:lang="en">USN-283-1</vuln:reference>
    </vuln:references>
    <vuln:summary>The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a username without a trailing null byte, which causes a buffer over-read.</vuln:summary>
  </entry>
  <entry id="CVE-2006-1517">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.19"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.25</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.26</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.19</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2006-1517</vuln:cve-id>
    <vuln:published-datetime>2006-05-05T08:46:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:35.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11036" name="oval:org.mitre.oval:def:11036"/>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365939" xml:lang="en">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365939</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html" xml:lang="en">http://dev.mysql.com/doc/refman/5.0/en/news-5-0-21.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://docs.info.apple.com/article.html?artnum=305214" xml:lang="en">http://docs.info.apple.com/article.html?artnum=305214</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html" xml:lang="en">APPLE-SA-2007-03-13</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.suse.com/archive/suse-security-announce/2006-Jun/0011.html" xml:lang="en">SUSE-SA:2006:036</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SREASON</vuln:source>
      <vuln:reference href="http://securityreason.com/securityalert/839" xml:lang="en">839</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1016016" xml:lang="en">1016016</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2006&amp;m=slackware-security.599377" xml:lang="en">SSA:2006-155-01</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-236703-1" xml:lang="en">236703</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2006/dsa-1071" xml:lang="en">DSA-1071</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2006/dsa-1073" xml:lang="en">DSA-1073</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2006/dsa-1079" xml:lang="en">DSA-1079</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200605-13.xml" xml:lang="en">GLSA-200605-13</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2006:084" xml:lang="en">MDKSA-2006:084</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2006-06-02.html" xml:lang="en">SUSE-SR:2006:012</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2006-0544.html" xml:lang="en">RHSA-2006:0544</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/432734/100/0/threaded" xml:lang="en">20060502 MySQL COM_TABLE_DUMP Information Leakage and Arbitrary commandexecution.</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/434164/100/0/threaded" xml:lang="en">20060516 UPDATE: [ GLSA 200605-13 ] MySQL: Information leakage</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/17780" xml:lang="en">17780</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>TRUSTIX</vuln:source>
      <vuln:reference href="http://www.trustix.org/errata/2006/0028" xml:lang="en">2006-0028</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA07-072A.html" xml:lang="en">TA07-072A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2006/1633" xml:lang="en">ADV-2006-1633</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/0930" xml:lang="en">ADV-2007-0930</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/1326/references" xml:lang="en">ADV-2008-1326</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.wisec.it/vulns.php?page=8" xml:lang="en">http://www.wisec.it/vulns.php?page=8</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/26228" xml:lang="en">mysql-sqlparcecc-information-disclosure(26228)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="https://usn.ubuntu.com/283-1/" xml:lang="en">USN-283-1</vuln:reference>
    </vuln:references>
    <vuln:summary>sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COM_TABLE_DUMP request with an incorrect packet length, which includes portions of memory in an error message.</vuln:summary>
  </entry>
  <entry id="CVE-2006-2108">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/h:oce_north_america:3121_printer:-"/>
        <cpe-lang:fact-ref name="cpe:/h:oce_north_america:3122_printer:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:oce_north_america:3121_printer:-</vuln:product>
      <vuln:product>cpe:/h:oce_north_america:3122_printer:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2006-2108</vuln:cve-id>
    <vuln:published-datetime>2006-04-29T06:02:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T07:21:43.593-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/17715" xml:lang="en">17715</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/26123" xml:lang="en">oce-printer-url-dos(26123)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/1718" xml:lang="en">1718</vuln:reference>
    </vuln:references>
    <vuln:summary>parser.exe in Oc? (OCE) 3121/3122 Printer allows remote attackers to cause a denial of service (crash or reboot) via a long request, possibly triggering a buffer overflow.</vuln:summary>
  </entry>
  <entry id="CVE-2006-3081">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2006-3081</vuln:cve-id>
    <vuln:published-datetime>2006-06-19T14:02:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:32.200-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9516" name="oval:org.mitre.oval:def:9516"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=373913" xml:lang="en">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=373913</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://bugs.mysql.com/bug.php?id=15828" xml:lang="en">http://bugs.mysql.com/bug.php?id=15828</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://docs.info.apple.com/article.html?artnum=305214" xml:lang="en">http://docs.info.apple.com/article.html?artnum=305214</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html" xml:lang="en">APPLE-SA-2007-03-13</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/lists/fulldisclosure/2006/Jun/0434.html" xml:lang="en">20060615 MySQL DoS</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2006/dsa-1112" xml:lang="en">DSA-1112</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2006:111" xml:lang="en">MDKSA-2006:111</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0083.html" xml:lang="en">RHSA-2007:0083</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/437145" xml:lang="en">20060614 MySQL DoS</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/437277" xml:lang="en">20060615 Re: MySQL DoS</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/437571/100/0/threaded" xml:lang="en">20060615 Re: MySQL DoS</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/18439" xml:lang="en">18439</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA06-208A.html" xml:lang="en">TA06-208A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA07-072A.html" xml:lang="en">TA07-072A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/0930" xml:lang="en">ADV-2007-0930</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/27212" xml:lang="en">mysql-select-dos(27212)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="https://usn.ubuntu.com/306-1/" xml:lang="en">USN-306-1</vuln:reference>
    </vuln:references>
    <vuln:summary>mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.</vuln:summary>
  </entry>
  <entry id="CVE-2006-3231">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:3.0.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:3.0.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:3.0.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:3.0.2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.2.9"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.2.10"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.2.11"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.2.12"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.2.13"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.2.14"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.2.15"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.0.2.16"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.1.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.1.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.1.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.1.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.1.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.1.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.1.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.1.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.1.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:5.1.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:websphere_application_server:6.0.2.9"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ibm:websphere_application_server:2.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:3.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:3.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:3.0.2.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:3.0.2.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:3.0.2.3</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:3.0.2.4</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:3.5</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:3.5.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:3.5.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:3.5.3</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:4.0.3</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:4.0.4</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.2.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.2.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.2.3</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.2.4</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.2.5</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.2.6</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.2.7</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.2.8</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.2.9</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.2.10</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.2.11</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.2.12</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.2.13</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.2.14</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.2.15</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.0.2.16</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.1.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.1.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.1.0.4</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.1.0.5</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.1.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.1.1.1</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.1.1.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.1.1.3</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.1.1.4</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.1.1.5</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.1.1.6</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.1.1.7</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.1.1.8</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.1.1.9</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:5.1.1.10</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:6.0</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:6.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:websphere_application_server:6.0.2.9</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2006-3231</vuln:cve-id>
    <vuln:published-datetime>2006-06-27T06:05:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:50:10.877-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/18578" xml:lang="en">18578</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/22991" xml:lang="en">22991</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2006/2482" xml:lang="en">ADV-2006-2482</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/0970" xml:lang="en">ADV-2007-0970</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>AIXAPAR</vuln:source>
      <vuln:reference href="http://www-1.ibm.com/support/docview.wss?rs=180&amp;uid=swg27006876" xml:lang="en">PK22928</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-1.ibm.com/support/docview.wss?uid=swg21243541" xml:lang="en">http://www-1.ibm.com/support/docview.wss?uid=swg21243541</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters."</vuln:summary>
  </entry>
  <entry id="CVE-2006-4031">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.5.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.22.1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.20:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.35"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.19"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.25</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.26</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.5.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.20a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.22.1.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.0:alpha</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.20:beta</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.33</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.35</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.55</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.56</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.57</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.58</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.59</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.19</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2006-4031</vuln:cve-id>
    <vuln:published-datetime>2006-08-09T18:04:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:35.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10468" name="oval:org.mitre.oval:def:10468"/>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://bugs.mysql.com/bug.php?id=15195" xml:lang="en">http://bugs.mysql.com/bug.php?id=15195</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html" xml:lang="en">http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://dev.mysql.com/doc/refman/5.0/en/news-5-0-24.html" xml:lang="en">http://dev.mysql.com/doc/refman/5.0/en/news-5-0-24.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://docs.info.apple.com/article.html?artnum=305214" xml:lang="en">http://docs.info.apple.com/article.html?artnum=305214</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html" xml:lang="en">APPLE-SA-2007-03-13</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1016617" xml:lang="en">1016617</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2006:149" xml:lang="en">MDKSA-2006:149</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2006_23_sr.html" xml:lang="en">SUSE-SR:2006:023</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0083.html" xml:lang="en">RHSA-2007:0083</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2008-0364.html" xml:lang="en">RHSA-2008:0364</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2008-0768.html" xml:lang="en">RHSA-2008:0768</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/19279" xml:lang="en">19279</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-338-1" xml:lang="en">USN-338-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA07-072A.html" xml:lang="en">TA07-072A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2006/3079" xml:lang="en">ADV-2006-3079</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/0930" xml:lang="en">ADV-2007-0930</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.rpath.com/browse/RPL-568" xml:lang="en">https://issues.rpath.com/browse/RPL-568</vuln:reference>
    </vuln:references>
    <vuln:summary>MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.</vuln:summary>
  </entry>
  <entry id="CVE-2006-4226">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.5.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.22.1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.19"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.25</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.26</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.5.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.20a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.22.1.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.19</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2006-4226</vuln:cve-id>
    <vuln:published-datetime>2006-08-18T16:04:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:35.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.6</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>HIGH</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10729" name="oval:org.mitre.oval:def:10729"/>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://bugs.mysql.com/bug.php?id=17647" xml:lang="en">http://bugs.mysql.com/bug.php?id=17647</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html" xml:lang="en">http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://docs.info.apple.com/article.html?artnum=305214" xml:lang="en">http://docs.info.apple.com/article.html?artnum=305214</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html" xml:lang="en">APPLE-SA-2007-03-13</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://lists.mysql.com/commits/5927" xml:lang="en">[commits] 20060504 bk commit into 4.1 tree (bar:1.2474)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1016710" xml:lang="en">1016710</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2006/dsa-1169" xml:lang="en">DSA-1169</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2006:149" xml:lang="en">MDKSA-2006:149</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2006_23_sr.html" xml:lang="en">SUSE-SR:2006:023</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0083.html" xml:lang="en">RHSA-2007:0083</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0152.html" xml:lang="en">RHSA-2007:0152</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/19559" xml:lang="en">19559</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA07-072A.html" xml:lang="en">TA07-072A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2006/3306" xml:lang="en">ADV-2006-3306</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/0930" xml:lang="en">ADV-2007-0930</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/28448" xml:lang="en">mysql-case-privilege-escalation(28448)</vuln:reference>
    </vuln:references>
    <vuln:summary>MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions.</vuln:summary>
  </entry>
  <entry id="CVE-2006-4595">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:muforum:muforum:0.4c"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:muforum:muforum:0.4c</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2006-4595</vuln:cve-id>
    <vuln:published-datetime>2006-09-06T20:04:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T07:22:45.080-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://acid-root.new.fr/poc/08060901.txt" xml:lang="en">http://acid-root.new.fr/poc/08060901.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SREASON</vuln:source>
      <vuln:reference href="http://securityreason.com/securityalert/1514" xml:lang="en">1514</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/445001/100/0/threaded" xml:lang="en">20060901 &amp;micro;forum v0.4c (members.dat) MD5 Passwd Hash Disclosure Poc</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2006/3445" xml:lang="en">ADV-2006-3445</vuln:reference>
    </vuln:references>
    <vuln:summary>muforum (?forum) 0.4c stores membres/members.dat under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and password hashes.</vuln:summary>
  </entry>
  <entry id="CVE-2006-6499">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.1:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.1:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:4.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:5.10"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0:beta</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.1:alpha1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.1:alpha2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.8</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:5.10</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.10</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.1</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:4.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2006-6499</vuln:cve-id>
    <vuln:published-datetime>2006-12-19T20:28:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:51:33.537-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742" xml:lang="en">SSRT061181</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200701-02.xml" xml:lang="en">GLSA-200701-02</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1017398" xml:lang="en">1017398</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1017405" xml:lang="en">1017405</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1017406" xml:lang="en">1017406</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-102846-1" xml:lang="en">102846</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2007/dsa-1253" xml:lang="en">DSA-1253</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2007/dsa-1258" xml:lang="en">DSA-1258</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2007/dsa-1265" xml:lang="en">DSA-1265</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml" xml:lang="en">GLSA-200701-04</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/427972" xml:lang="en">VU#427972</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2006/mfsa2006-68.html" xml:lang="en">http://www.mozilla.org/security/announce/2006/mfsa2006-68.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2006_80_mozilla.html" xml:lang="en">SUSE-SA:2006:080</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2007_06_mozilla.html" xml:lang="en">SUSE-SA:2007:006</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/21668" xml:lang="en">21668</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-398-1" xml:lang="en">USN-398-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-398-2" xml:lang="en">USN-398-2</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-400-1" xml:lang="en">USN-400-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA06-354A.html" xml:lang="en">TA06-354A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2006/5068" xml:lang="en">ADV-2006-5068</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/1124" xml:lang="en">ADV-2007-1124</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/0083" xml:lang="en">ADV-2008-0083</vuln:reference>
    </vuln:references>
    <vuln:summary>The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.</vuln:summary>
  </entry>
  <entry id="CVE-2006-6500">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.1:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.1:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:4.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:5.10"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0:beta</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.1:alpha1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.1:alpha2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.8</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:5.10</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.10</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.1</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:4.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2006-6500</vuln:cve-id>
    <vuln:published-datetime>2006-12-19T20:28:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:51:33.833-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742" xml:lang="en">SSRT061181</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200701-02.xml" xml:lang="en">GLSA-200701-02</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1017399" xml:lang="en">1017399</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1017400" xml:lang="en">1017400</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1017401" xml:lang="en">1017401</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200701-03.xml" xml:lang="en">GLSA-200701-03</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200701-04.xml" xml:lang="en">GLSA-200701-04</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/722244" xml:lang="en">VU#722244</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2007:010" xml:lang="en">MDKSA-2007:010</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2007:011" xml:lang="en">MDKSA-2007:011</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2006/mfsa2006-69.html" xml:lang="en">http://www.mozilla.org/security/announce/2006/mfsa2006-69.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2006_80_mozilla.html" xml:lang="en">SUSE-SA:2006:080</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2007_06_mozilla.html" xml:lang="en">SUSE-SA:2007:006</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/21668" xml:lang="en">21668</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA06-354A.html" xml:lang="en">TA06-354A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2006/5068" xml:lang="en">ADV-2006-5068</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/0083" xml:lang="en">ADV-2008-0083</vuln:reference>
    </vuln:references>
    <vuln:summary>Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by setting the CSS cursor to certain images that cause an incorrect size calculation when converting to a Windows bitmap.</vuln:summary>
  </entry>
  <entry id="CVE-2006-6731">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update7"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_04"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_05"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_06"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_07"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_08"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_09"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_18"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2:-"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_7"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_8"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_9"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update7"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_01"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_01a"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_02"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_04"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_05"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_06"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_07"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_08"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_09"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_18"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_7"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_8"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_9"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_12"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:-</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update1</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update2</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update3</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update4</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update5</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update6</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update7</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1:-</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_03</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_04</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_05</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_06</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_07</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_08</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_09</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_11</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_12</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_13</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_14</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_15</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_16</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_17</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_18</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2:-</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_3</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_4</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_5</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_6</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_7</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_8</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_9</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_11</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_12</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:-</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update3</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update4</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update5</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update6</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update7</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_01</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_01a</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_02</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_03</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_04</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_05</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_06</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_07</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_08</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_09</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_10</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_11</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_12</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_13</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_14</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_15</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_16</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_17</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_18</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_1</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_2</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_3</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_4</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_5</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_6</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_7</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_8</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_9</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_10</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_11</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_12</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2006-6731</vuln:cve-id>
    <vuln:published-datetime>2006-12-26T18:28:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:51:39.300-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10134" name="oval:org.mitre.oval:def:10134"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BEA</vuln:source>
      <vuln:reference href="http://dev2dev.bea.com/pub/advisory/243" xml:lang="en">BEA07-174.00</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://docs.info.apple.com/article.html?artnum=307177" xml:lang="en">http://docs.info.apple.com/article.html?artnum=307177</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&amp;cc=us&amp;objectID=c00876579" xml:lang="en">HPSBUX02196</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html" xml:lang="en">APPLE-SA-2007-12-14</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.suse.com/archive/suse-security-announce/2007-Jan/0003.html" xml:lang="en">SUSE-SA:2007:003</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://scary.beasts.org/security/CESA-2005-008.txt" xml:lang="en">http://scary.beasts.org/security/CESA-2005-008.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200701-15.xml" xml:lang="en">GLSA-200701-15</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200702-08.xml" xml:lang="en">GLSA-200702-08</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1017425" xml:lang="en">1017425</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-102729-1" xml:lang="en">102729</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200705-20.xml" xml:lang="en">GLSA-200705-20</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/149457" xml:lang="en">VU#149457</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/939609" xml:lang="en">VU#939609</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html" xml:lang="en">SUSE-SA:2007:010</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0062.html" xml:lang="en">RHSA-2007:0062</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0072.html" xml:lang="en">RHSA-2007:0072</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0073.html" xml:lang="en">RHSA-2007:0073</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/21675" xml:lang="en">21675</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA07-022A.html" xml:lang="en">TA07-022A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2006/5073" xml:lang="en">ADV-2006-5073</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/0936" xml:lang="en">ADV-2007-0936</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/1814" xml:lang="en">ADV-2007-1814</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/4224" xml:lang="en">ADV-2007-4224</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allow attackers to develop Java applets that read, write, or execute local files, possibly related to (1) integer overflows in the Java_sun_awt_image_ImagingLib_convolveBI, awt_parseRaster, and awt_parseColorModel functions; (2) a stack overflow in the Java_sun_awt_image_ImagingLib_lookupByteRaster function; and (3) improper handling of certain negative values in the Java_sun_font_SunLayoutEngine_nativeLayout function.  NOTE: some of these details are obtained from third party information.</vuln:summary>
  </entry>
  <entry id="CVE-2007-0009">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.4.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.7.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.7.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.9.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.9.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.10.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.11.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.11.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.11.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.11.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.1:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.1:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.9"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:4.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:5.10"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.2.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.3.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.3.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.4.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.4.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.4.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.6.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.7.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.7.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.9.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.9.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.9.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.9.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.10.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.11.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.11.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.11.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.11.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0:beta</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.1:alpha1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.1:alpha2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.9</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:5.10</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.10</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.1</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:4.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2007-0009</vuln:cve-id>
    <vuln:published-datetime>2007-02-26T15:28:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:51:51.787-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10174" name="oval:org.mitre.oval:def:10174"/>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SGI</vuln:source>
      <vuln:reference href="ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc" xml:lang="en">20070202-01-P</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SGI</vuln:source>
      <vuln:reference href="ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc" xml:lang="en">20070301-01-P</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://fedoranews.org/cms/node/2709" xml:lang="en">FEDORA-2007-278</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://fedoranews.org/cms/node/2711" xml:lang="en">FEDORA-2007-279</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://fedoranews.org/cms/node/2747" xml:lang="en">FEDORA-2007-308</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://fedoranews.org/cms/node/2749" xml:lang="en">FEDORA-2007-309</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742" xml:lang="en">HPSBUX02153</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>IDEFENSE</vuln:source>
      <vuln:reference href="http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=483" xml:lang="en">20070223 Mozilla Network Security Services SSLv2 Server Stack Overflow Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html" xml:lang="en">SUSE-SA:2007:019</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2007-0077.html" xml:lang="en">RHSA-2007:0077</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200703-18.xml" xml:lang="en">GLSA-200703-18</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2007&amp;m=slackware-security.338131" xml:lang="en">SSA:2007-066-05</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2007&amp;m=slackware-security.363947" xml:lang="en">SSA:2007-066-04</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2007&amp;m=slackware-security.374851" xml:lang="en">SSA:2007-066-03</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-102856-1" xml:lang="en">102856</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-102945-1" xml:lang="en">102945</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2007/dsa-1336" xml:lang="en">DSA-1336</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200703-22.xml" xml:lang="en">GLSA-200703-22</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/592796" xml:lang="en">VU#592796</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2007:050" xml:lang="en">MDKSA-2007:050</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2007:052" xml:lang="en">MDKSA-2007:052</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2007/mfsa2007-06.html" xml:lang="en">http://www.mozilla.org/security/announce/2007/mfsa2007-06.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2007_22_mozilla.html" xml:lang="en">SUSE-SA:2007:022</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0078.html" xml:lang="en">RHSA-2007:0078</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0079.html" xml:lang="en">RHSA-2007:0079</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0097.html" xml:lang="en">RHSA-2007:0097</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0108.html" xml:lang="en">RHSA-2007:0108</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/461336/100/0/threaded" xml:lang="en">20070226 rPSA-2007-0040-1 firefox</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/461809/100/0/threaded" xml:lang="en">20070303 rPSA-2007-0040-3 firefox thunderbird</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/64758" xml:lang="en">64758</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1017696" xml:lang="en">1017696</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-428-1" xml:lang="en">USN-428-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-431-1" xml:lang="en">USN-431-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/0718" xml:lang="en">ADV-2007-0718</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/0719" xml:lang="en">ADV-2007-0719</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/1165" xml:lang="en">ADV-2007-1165</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/2141" xml:lang="en">ADV-2007-2141</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=364323" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=364323</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/32663" xml:lang="en">nss-clientmasterkey-bo(32663)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.rpath.com/browse/RPL-1081" xml:lang="en">https://issues.rpath.com/browse/RPL-1081</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.rpath.com/browse/RPL-1103" xml:lang="en">https://issues.rpath.com/browse/RPL-1103</vuln:reference>
    </vuln:references>
    <vuln:summary>Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.</vuln:summary>
  </entry>
  <entry id="CVE-2007-0777">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.1:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.1:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:1.5.0.9"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:5.10"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0:beta</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.7.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0:rc</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.1:alpha1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.1:alpha2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:rc1</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:1.5.0.9</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:5.10</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.10</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2007-0777</vuln:cve-id>
    <vuln:published-datetime>2007-02-26T14:28:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:52:10.710-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11331" name="oval:org.mitre.oval:def:11331"/>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SGI</vuln:source>
      <vuln:reference href="ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc" xml:lang="en">20070202-01-P</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SGI</vuln:source>
      <vuln:reference href="ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc" xml:lang="en">20070301-01-P</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://fedoranews.org/cms/node/2713" xml:lang="en">FEDORA-2007-281</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://fedoranews.org/cms/node/2728" xml:lang="en">FEDORA-2007-293</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://fedoranews.org/cms/node/2747" xml:lang="en">FEDORA-2007-308</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://fedoranews.org/cms/node/2749" xml:lang="en">FEDORA-2007-309</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742" xml:lang="en">HPSBUX02153</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html" xml:lang="en">SUSE-SA:2007:019</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2007-0077.html" xml:lang="en">RHSA-2007:0077</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200703-04.xml" xml:lang="en">GLSA-200703-04</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200703-18.xml" xml:lang="en">GLSA-200703-18</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2007&amp;m=slackware-security.338131" xml:lang="en">SSA:2007-066-05</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2007&amp;m=slackware-security.363947" xml:lang="en">SSA:2007-066-04</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2007&amp;m=slackware-security.374851" xml:lang="en">SSA:2007-066-03</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml" xml:lang="en">GLSA-200703-08</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/269484" xml:lang="en">VU#269484</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2007:050" xml:lang="en">MDKSA-2007:050</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2007:052" xml:lang="en">MDKSA-2007:052</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2007/mfsa2007-01.html" xml:lang="en">http://www.mozilla.org/security/announce/2007/mfsa2007-01.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2007_22_mozilla.html" xml:lang="en">SUSE-SA:2007:022</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0078.html" xml:lang="en">RHSA-2007:0078</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0079.html" xml:lang="en">RHSA-2007:0079</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0097.html" xml:lang="en">RHSA-2007:0097</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0108.html" xml:lang="en">RHSA-2007:0108</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/461336/100/0/threaded" xml:lang="en">20070226 rPSA-2007-0040-1 firefox</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/461809/100/0/threaded" xml:lang="en">20070303 rPSA-2007-0040-3 firefox thunderbird</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/22694" xml:lang="en">22694</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1017698" xml:lang="en">1017698</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-428-1" xml:lang="en">USN-428-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-431-1" xml:lang="en">USN-431-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/0718" xml:lang="en">ADV-2007-0718</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/0719" xml:lang="en">ADV-2007-0719</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/0083" xml:lang="en">ADV-2008-0083</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/32699" xml:lang="en">mozilla-multiple-javascript-code-execution(32699)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.rpath.com/browse/RPL-1081" xml:lang="en">https://issues.rpath.com/browse/RPL-1081</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.rpath.com/browse/RPL-1103" xml:lang="en">https://issues.rpath.com/browse/RPL-1103</vuln:reference>
    </vuln:references>
    <vuln:summary>The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption.</vuln:summary>
  </entry>
  <entry id="CVE-2007-0778">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.7"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:5.10"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0:beta</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.7</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:5.10</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.10</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2007-0778</vuln:cve-id>
    <vuln:published-datetime>2007-02-26T15:28:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:52:10.927-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.4</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>HIGH</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9151" name="oval:org.mitre.oval:def:9151"/>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SGI</vuln:source>
      <vuln:reference href="ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc" xml:lang="en">20070202-01-P</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SGI</vuln:source>
      <vuln:reference href="ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc" xml:lang="en">20070301-01-P</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://fedoranews.org/cms/node/2713" xml:lang="en">FEDORA-2007-281</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://fedoranews.org/cms/node/2728" xml:lang="en">FEDORA-2007-293</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742" xml:lang="en">HPSBUX02153</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html" xml:lang="en">SUSE-SA:2007:019</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2007-0077.html" xml:lang="en">RHSA-2007:0077</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200703-04.xml" xml:lang="en">GLSA-200703-04</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1017699" xml:lang="en">1017699</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2007&amp;m=slackware-security.338131" xml:lang="en">SSA:2007-066-05</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2007&amp;m=slackware-security.374851" xml:lang="en">SSA:2007-066-03</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2007/dsa-1336" xml:lang="en">DSA-1336</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml" xml:lang="en">GLSA-200703-08</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2007:050" xml:lang="en">MDKSA-2007:050</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2007/mfsa2007-03.html" xml:lang="en">http://www.mozilla.org/security/announce/2007/mfsa2007-03.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2007_22_mozilla.html" xml:lang="en">SUSE-SA:2007:022</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0078.html" xml:lang="en">RHSA-2007:0078</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0079.html" xml:lang="en">RHSA-2007:0079</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0097.html" xml:lang="en">RHSA-2007:0097</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0108.html" xml:lang="en">RHSA-2007:0108</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/461336/100/0/threaded" xml:lang="en">20070226 rPSA-2007-0040-1 firefox</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/461809/100/0/threaded" xml:lang="en">20070303 rPSA-2007-0040-3 firefox thunderbird</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/22694" xml:lang="en">22694</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-428-1" xml:lang="en">USN-428-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/0718" xml:lang="en">ADV-2007-0718</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/0083" xml:lang="en">ADV-2008-0083</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=347852" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=347852</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/32671" xml:lang="en">mozilla-diskcache-information-disclosure(32671)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.rpath.com/browse/RPL-1081" xml:lang="en">https://issues.rpath.com/browse/RPL-1081</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.rpath.com/browse/RPL-1103" xml:lang="en">https://issues.rpath.com/browse/RPL-1103</vuln:reference>
    </vuln:references>
    <vuln:summary>The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors when the target page is reloaded from the cache.</vuln:summary>
  </entry>
  <entry id="CVE-2007-0780">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:-"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.7"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:5.10"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:-</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0:beta</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.7</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:5.10</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.10</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2007-0780</vuln:cve-id>
    <vuln:published-datetime>2007-02-26T15:28:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:52:11.163-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9884" name="oval:org.mitre.oval:def:9884"/>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SGI</vuln:source>
      <vuln:reference href="ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc" xml:lang="en">20070202-01-P</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SGI</vuln:source>
      <vuln:reference href="ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc" xml:lang="en">20070301-01-P</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://fedoranews.org/cms/node/2713" xml:lang="en">FEDORA-2007-281</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://fedoranews.org/cms/node/2728" xml:lang="en">FEDORA-2007-293</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742" xml:lang="en">HPSBUX02153</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html" xml:lang="en">SUSE-SA:2007:019</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2007-0077.html" xml:lang="en">RHSA-2007:0077</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200703-04.xml" xml:lang="en">GLSA-200703-04</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2007&amp;m=slackware-security.338131" xml:lang="en">SSA:2007-066-05</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2007&amp;m=slackware-security.374851" xml:lang="en">SSA:2007-066-03</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml" xml:lang="en">GLSA-200703-08</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2007:050" xml:lang="en">MDKSA-2007:050</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2007/mfsa2007-05.html" xml:lang="en">http://www.mozilla.org/security/announce/2007/mfsa2007-05.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2007_22_mozilla.html" xml:lang="en">SUSE-SA:2007:022</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0078.html" xml:lang="en">RHSA-2007:0078</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0079.html" xml:lang="en">RHSA-2007:0079</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0097.html" xml:lang="en">RHSA-2007:0097</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0108.html" xml:lang="en">RHSA-2007:0108</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/461336/100/0/threaded" xml:lang="en">20070226 rPSA-2007-0040-1 firefox</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/461809/100/0/threaded" xml:lang="en">20070303 rPSA-2007-0040-3 firefox thunderbird</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/22694" xml:lang="en">22694</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1017702" xml:lang="en">1017702</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-428-1" xml:lang="en">USN-428-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/0718" xml:lang="en">ADV-2007-0718</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=354973" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=354973</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/32667" xml:lang="en">mozilla-dataurl-xss(32667)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.rpath.com/browse/RPL-1081" xml:lang="en">https://issues.rpath.com/browse/RPL-1081</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.rpath.com/browse/RPL-1103" xml:lang="en">https://issues.rpath.com/browse/RPL-1103</vuln:reference>
    </vuln:references>
    <vuln:summary>browser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 uses the requesting URI to identify child windows, which allows remote attackers to conduct cross-site scripting (XSS) attacks by opening a blocked popup originating from a javascript: URI in combination with multiple frames having the same data: URI.</vuln:summary>
  </entry>
  <entry id="CVE-2007-0988">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0:beta_4_patch1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.1:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc7"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc8"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.7:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.7:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.7:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.7:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.3:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:dev"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:pre1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:pre2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.4:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.4:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.6:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.6:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.6:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.6:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.7"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.7:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.7:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.8"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.9"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.9:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.9:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.9:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.10"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.10:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.10:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.10:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.11"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.11:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.11:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.11:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.2:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.3:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.4:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.2:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.3:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.4:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc2-pre"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.2:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc6"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:5.10"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:php:php:4.0</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0:beta1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0:beta2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0:beta3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0:beta4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0:beta_4_patch1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.0</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.1:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.1:rc</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.1:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc5</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc6</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc5</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc6</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc7</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc8</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.7</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.7:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.7:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.7:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.7:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:rc5</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.1:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.1:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.1:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.3:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:alpha3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:dev</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:pre1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:pre2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.4:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.4:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.4:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.4:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.6</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.6:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.6:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.6:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.6:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.7</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.7:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.7:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.8</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.9</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.9:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.9:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.9:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.10</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.10:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.10:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.10:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.11</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.11:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.11:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.11:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.0</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.1:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.1:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.2:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.2:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.3:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.4:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.4:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:beta1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:beta2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:beta3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:beta4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.1:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.1:beta1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.1:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.1:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.2:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.3:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.4:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.4:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.4:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.5:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.5:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.5:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:beta1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:beta2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:beta3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc2-pre</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc6</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.2:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.2:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.3:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.5:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.5:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.6</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc6</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:5.10</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.10</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2007-0988</vuln:cve-id>
    <vuln:published-datetime>2007-02-20T12:28:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:52:17.180-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11092" name="oval:org.mitre.oval:def:11092"/>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SGI</vuln:source>
      <vuln:reference href="ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc" xml:lang="en">20070201-01-P</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=228858" xml:lang="en">http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=228858</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&amp;cc=us&amp;objectID=c01056506" xml:lang="en">SSRT071423</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&amp;cc=us&amp;objectID=c01086137" xml:lang="en">HPSBTU02232</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2007-0089.html" xml:lang="en">RHSA-2007:0089</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200703-21.xml" xml:lang="en">GLSA-200703-21</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SREASON</vuln:source>
      <vuln:reference href="http://securityreason.com/securityalert/2315" xml:lang="en">2315</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm" xml:lang="en">http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm" xml:lang="en">http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2007:048" xml:lang="en">MDKSA-2007:048</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2007_32_php.html" xml:lang="en">SUSE-SA:2007:032</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>OPENPKG</vuln:source>
      <vuln:reference href="http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html" xml:lang="en">OpenPKG-SA-2007.010</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.php.net/releases/5_2_1.php" xml:lang="en">http://www.php.net/releases/5_2_1.php</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.php-security.org/MOPB/MOPB-05-2007.html" xml:lang="en">http://www.php-security.org/MOPB/MOPB-05-2007.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0076.html" xml:lang="en">RHSA-2007:0076</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0081.html" xml:lang="en">RHSA-2007:0081</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0082.html" xml:lang="en">RHSA-2007:0082</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0088.html" xml:lang="en">RHSA-2007:0088</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/461462/100/0/threaded" xml:lang="en">20070227 rPSA-2007-0043-1 php php-mysql php-pgsql</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1017671" xml:lang="en">1017671</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>TRUSTIX</vuln:source>
      <vuln:reference href="http://www.trustix.org/errata/2007/0009/" xml:lang="en">2007-0009</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-424-1" xml:lang="en">USN-424-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-424-2" xml:lang="en">USN-424-2</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.us.debian.org/security/2007/dsa-1264" xml:lang="en">DSA-1264</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/1991" xml:lang="en">ADV-2007-1991</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/2374" xml:lang="en">ADV-2007-2374</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/32709" xml:lang="en">php-zendhashinit-dos(32709)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.rpath.com/browse/RPL-1088" xml:lang="en">https://issues.rpath.com/browse/RPL-1088</vuln:reference>
    </vuln:references>
    <vuln:summary>The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument.</vuln:summary>
  </entry>
  <entry id="CVE-2007-0994">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.1::alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.1::beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.1:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.1:beta"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0:beta</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.1::alpha</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.1::beta</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.1:alpha</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.1:beta</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2007-0994</vuln:cve-id>
    <vuln:published-datetime>2007-03-05T19:19:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:52:17.553-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_USER_ACCESS</vuln:security-protection>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9749" name="oval:org.mitre.oval:def:9749"/>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SGI</vuln:source>
      <vuln:reference href="ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc" xml:lang="en">20070202-01-P</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SGI</vuln:source>
      <vuln:reference href="ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc" xml:lang="en">20070301-01-P</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230733" xml:lang="en">http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230733</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742" xml:lang="en">SSRT061181</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html" xml:lang="en">SUSE-SA:2007:019</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1017726" xml:lang="en">1017726</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2007&amp;m=slackware-security.338131" xml:lang="en">SSA:2007-066-05</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2007&amp;m=slackware-security.374851" xml:lang="en">SSA:2007-066-03</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2007/dsa-1336" xml:lang="en">DSA-1336</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2007/mfsa2007-09.html" xml:lang="en">http://www.mozilla.org/security/announce/2007/mfsa2007-09.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2007_22_mozilla.html" xml:lang="en">SUSE-SA:2007:022</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0097.html" xml:lang="en">RHSA-2007:0097</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/22826" xml:lang="en">22826</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/0823" xml:lang="en">ADV-2007-0823</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.rpath.com/browse/RPL-1103" xml:lang="en">https://issues.rpath.com/browse/RPL-1103</vuln:reference>
    </vuln:references>
    <vuln:summary>A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an (1) img, (2) link, or (3) style tag, which bypasses the access checks and executes code with chrome privileges.</vuln:summary>
  </entry>
  <entry id="CVE-2007-1562">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:5.10"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5:beta2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.2</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:5.10</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.10</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2007-1562</vuln:cve-id>
    <vuln:published-datetime>2007-03-21T15:19:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:52:31.460-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11431" name="oval:org.mitre.oval:def:11431"/>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://bindshell.net/papers/ftppasv/ftp-client-pasv-manipulation.pdf" xml:lang="en">http://bindshell.net/papers/ftppasv/ftp-client-pasv-manipulation.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742" xml:lang="en">HPSBUX02153</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2007/mfsa2007-11.html" xml:lang="en">http://www.mozilla.org/security/announce/2007/mfsa2007-11.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2007_36_mozilla.html" xml:lang="en">SUSE-SA:2007:036</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0400.html" xml:lang="en">RHSA-2007:0400</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2007-0402.html" xml:lang="en">RHSA-2007:0402</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/463501/100/0/threaded" xml:lang="en">20070322 FLEA-2007-0001-1: firefox</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/470172/100/200/threaded" xml:lang="en">20070531 FLEA-2007-0023-1: firefox</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/23082" xml:lang="en">23082</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1017800" xml:lang="en">1017800</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-443-1" xml:lang="en">USN-443-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/1034" xml:lang="en">ADV-2007-1034</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=370559" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=370559</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/33119" xml:lang="en">firefox-nsftpstate-information-disclosure(33119)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.rpath.com/browse/RPL-1157" xml:lang="en">https://issues.rpath.com/browse/RPL-1157</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.rpath.com/browse/RPL-1424" xml:lang="en">https://issues.rpath.com/browse/RPL-1424</vuln:reference>
    </vuln:references>
    <vuln:summary>The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.</vuln:summary>
  </entry>
  <entry id="CVE-2007-1701">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.1:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc7"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc8"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.7:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.7:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.7:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.7:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.3:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:dev"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:pre1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:pre2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.4:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.4:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.6:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.6:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.6:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.6:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.7"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.7:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.7:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.8"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.9"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.9:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.9:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.9:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.10"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.10:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.10:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.10:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.11"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.11:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.11:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.11:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.2:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.3:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.4:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.2:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.3:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.4:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc2-pre"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.2:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc6"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:php:php:4.0.0</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.1:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.1:rc</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.1:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc5</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc6</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc5</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc6</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc7</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc8</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.7</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.7:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.7:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.7:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.7:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:rc5</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.1:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.1:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.1:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.3:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:alpha3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:dev</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:pre1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:pre2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.4:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.4:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.4:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.4:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.6</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.6:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.6:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.6:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.6:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.7</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.7:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.7:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.8</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.9</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.9:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.9:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.9:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.10</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.10:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.10:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.10:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.11</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.11:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.11:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.11:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.0</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.1:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.1:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.2:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.2:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.3:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.4:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.4:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:beta1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:beta2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:beta3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:beta4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.1:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.1:beta1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.1:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.1:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.2:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.3:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.4:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.4:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.4:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.5:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.5:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.5:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:beta1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:beta2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:beta3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc2-pre</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc6</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.2:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.2:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.3:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.5:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.5:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.6</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc6</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2007-1701</vuln:cve-id>
    <vuln:published-datetime>2007-03-26T21:19:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:52:34.790-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11034" name="oval:org.mitre.oval:def:11034"/>
    <vuln:cwe id="CWE-502"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&amp;cc=us&amp;objectID=c01056506" xml:lang="en">SSRT071423</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&amp;cc=us&amp;objectID=c01086137" xml:lang="en">HPSBTU02232</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200705-19.xml" xml:lang="en">GLSA-200705-19</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.php-security.org/MOPB/MOPB-31-2007.html" xml:lang="en">http://www.php-security.org/MOPB/MOPB-31-2007.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/23120" xml:lang="en">23120</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/1991" xml:lang="en">ADV-2007-1991</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/2374" xml:lang="en">ADV-2007-2374</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/33658" xml:lang="en">php-sessiondecode-code-execution(33658)</vuln:reference>
    </vuln:references>
    <vuln:summary>PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with "_SESSION|s:39:".</vuln:summary>
  </entry>
  <entry id="CVE-2007-2246">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:hp-ux:11.00"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:hp-ux:11.11"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:hp-ux:11.23"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:sendmail:sendmail:8.9.3"/>
          <cpe-lang:fact-ref name="cpe:/a:sendmail:sendmail:8.11.1"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sendmail:sendmail:8.9.3</vuln:product>
      <vuln:product>cpe:/a:sendmail:sendmail:8.11.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2007-2246</vuln:cve-id>
    <vuln:published-datetime>2007-04-25T12:19:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:52:49.243-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-399"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&amp;cc=us&amp;objectID=c00841370" xml:lang="en">SSRT061243</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/349305" xml:lang="en">VU#349305</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/23606" xml:lang="en">23606</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1017966" xml:lang="en">1017966</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/1504" xml:lang="en">ADV-2007-1504</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP-UX B.11.00 and B.11.11, when running sendmail 8.9.3 or 8.11.1; and HP-UX B.11.23 when running sendmail 8.11.1; allows remote attackers to cause a denial of service via unknown attack vectors.  NOTE: due to the lack of details from HP, it is not known whether this issue is a duplicate of another CVE such as CVE-2006-1173 or CVE-2006-4434.</vuln:summary>
  </entry>
  <entry id="CVE-2007-3285">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.9.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:0.10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.0.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.9"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.10"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.0.11"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.4"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.5"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.6"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.7"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:1.5.8"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0:beta1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0:rc2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0:rc3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.4"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.9.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:0.10.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.9</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.10</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.0.11</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.4</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.6</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.7</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:1.5.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0:beta1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0:rc3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.1</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.2</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.3</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.4</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2007-3285</vuln:cve-id>
    <vuln:published-datetime>2007-06-20T15:30:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:53:14.527-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt" xml:lang="en">ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742" xml:lang="en">HPSBUX02153</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1" xml:lang="en">103177</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1" xml:lang="en">201516</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html" xml:lang="en">http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.0x000000.com/?i=333" xml:lang="en">http://www.0x000000.com/?i=333</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDKSA-2007:152" xml:lang="en">MDKSA-2007:152</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2007/mfsa2007-22.html" xml:lang="en">http://www.mozilla.org/security/announce/2007/mfsa2007-22.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://www.novell.com/linux/security/advisories/2007_49_mozilla.html" xml:lang="en">SUSE-SA:2007:049</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/24447" xml:lang="en">24447</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1018413" xml:lang="en">1018413</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-490-1" xml:lang="en">USN-490-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/4256" xml:lang="en">ADV-2007-4256</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=383478" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=383478</vuln:reference>
    </vuln:references>
    <vuln:summary>Mozilla Firefox before 2.0.0.5, when run on Windows, allows remote attackers to bypass file type checks and possibly execute programs via a (1) file:/// or (2) resource: URI with a dangerous extension, followed by a NULL byte (%00) and a safer extension, which causes Firefox to treat the requested file differently than Windows would.</vuln:summary>
  </entry>
  <entry id="CVE-2007-3378">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.1:rc"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.4:rc6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc7"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.5:rc8"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.6:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.7:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.7:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.7:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.0.7:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.3:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:dev"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:pre1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:pre2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.2:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.3:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.4:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.4:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.5:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.6:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.6:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.6:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.6:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.7"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.7:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.7:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.8"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.9"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.9:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.9:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.9:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.10"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.10:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.10:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.10:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.11"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.11:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.11:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.3.11:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.2:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.3:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.4:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.6:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.6:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.7"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.7:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.7:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.2:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.3:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.4:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.0.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc2-pre"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.0:rc6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.2:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.0:rc6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.1:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.1:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.2:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.3:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.3:rc1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:php:php:4.0.0</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.1:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.1:rc</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.1:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc5</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.4:rc6</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc5</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc6</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc7</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.5:rc8</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.6:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.7</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.7:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.7:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.7:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.0.7:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.0:rc5</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.1.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.0:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.1:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.1:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.1:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.3:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.2.4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:alpha3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:dev</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:pre1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:pre2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.0:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.2:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.3:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.4:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.4:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.4:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.4:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.5:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.6</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.6:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.6:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.6:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.6:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.7</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.7:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.7:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.8</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.9</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.9:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.9:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.9:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.10</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.10:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.10:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.10:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.11</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.11:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.11:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.3.11:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.0</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.1:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.1:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.2:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.2:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.3</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.3:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.4</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.4:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.4:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.5</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.5:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.5:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.5:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.6</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.6:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.6:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.7</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.7:-</vuln:product>
      <vuln:product>cpe:/a:php:php:4.4.7:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:beta1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:beta2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:beta3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:beta4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.1:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.1:beta1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.1:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.1:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.2:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.3:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.4:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.4:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.4:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.5:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.5:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.0.5:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:beta1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:beta2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:beta3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc2-pre</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.0:rc6</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.2:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.2:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.3:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.3:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.5:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.5:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.1.6</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.0:rc6</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.1:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.1:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.1:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.1:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.1:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.2:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.2:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.3:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.3:rc1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2007-3378</vuln:cve-id>
    <vuln:published-datetime>2007-06-29T14:30:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:53:17.277-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6056" name="oval:org.mitre.oval:def:6056"/>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://docs.info.apple.com/article.html?artnum=307562" xml:lang="en">http://docs.info.apple.com/article.html?artnum=307562</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501" xml:lang="en">SSRT080010</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html" xml:lang="en">APPLE-SA-2008-03-18</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://securityreason.com/achievement_exploitalert/9" xml:lang="en">http://securityreason.com/achievement_exploitalert/9</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SREASONRES</vuln:source>
      <vuln:reference href="http://securityreason.com/achievement_securityalert/45" xml:lang="en">20070627 PHP 5.2.3 PHP 4.4.7, htaccess safemode and open_basedir Bypass</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SREASON</vuln:source>
      <vuln:reference href="http://securityreason.com/securityalert/2831" xml:lang="en">2831</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SREASON</vuln:source>
      <vuln:reference href="http://securityreason.com/securityalert/3389" xml:lang="en">3389</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2008&amp;m=slackware-security.335136" xml:lang="en">SSA:2008-045-03</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml" xml:lang="en">GLSA-200710-02</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.php.net/ChangeLog-4.php" xml:lang="en">http://www.php.net/ChangeLog-4.php</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.php.net/ChangeLog-5.php#5.2.4" xml:lang="en">http://www.php.net/ChangeLog-5.php#5.2.4</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.php.net/ChangeLog-5.php#5.2.5" xml:lang="en">http://www.php.net/ChangeLog-5.php#5.2.5</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.php.net/releases/4_4_8.php" xml:lang="en">http://www.php.net/releases/4_4_8.php</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.php.net/releases/5_2_4.php" xml:lang="en">http://www.php.net/releases/5_2_4.php</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.php.net/releases/5_2_5.php" xml:lang="en">http://www.php.net/releases/5_2_5.php</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/472343/100/0/threaded" xml:lang="en">20070627 PHP 4/5 htaccess safemode and open_basedir Bypass</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/491693/100/0/threaded" xml:lang="en">SSRT080056</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/24661" xml:lang="en">24661</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/25498" xml:lang="en">25498</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>TRUSTIX</vuln:source>
      <vuln:reference href="http://www.trustix.org/errata/2007/0026/" xml:lang="en">2007-0026</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/3023" xml:lang="en">ADV-2007-3023</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/0059" xml:lang="en">ADV-2008-0059</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/0398" xml:lang="en">ADV-2008-0398</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/0924/references" xml:lang="en">ADV-2008-0924</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/35102" xml:lang="en">php-htaccess-security-bypass(35102)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/39403" xml:lang="en">php-sessionsavepath-errorlog-security-bypass(39403)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.rpath.com/browse/RPL-1693" xml:lang="en">https://issues.rpath.com/browse/RPL-1693</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.rpath.com/browse/RPL-1702" xml:lang="en">https://issues.rpath.com/browse/RPL-1702</vuln:reference>
    </vuln:references>
    <vuln:summary>The (1) session_save_path, (2) ini_set, and (3) error_log functions in PHP 4.4.7 and earlier, and PHP 5 5.2.3 and earlier, when invoked from a .htaccess file, allow remote attackers to bypass safe_mode and open_basedir restrictions and possibly execute arbitrary commands, as demonstrated using (a) php_value, (b) php_flag, and (c) directives in .htaccess.</vuln:summary>
  </entry>
  <entry id="CVE-2007-3897">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:microsoft:outlook_express:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:outlook_express:6.0:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:windows_mail:-::~~~vista~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:microsoft:outlook_express:6.0</vuln:product>
      <vuln:product>cpe:/a:microsoft:outlook_express:6.0:sp1</vuln:product>
      <vuln:product>cpe:/a:microsoft:windows_mail:-::~~~vista~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2007-3897</vuln:cve-id>
    <vuln:published-datetime>2007-10-09T18:17:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:53:31.213-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1706" name="oval:org.mitre.oval:def:1706"/>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>IDEFENSE</vuln:source>
      <vuln:reference href="http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=607" xml:lang="en">20071009 Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1018785" xml:lang="en">1018785</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1018786" xml:lang="en">1018786</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/481983/100/100/threaded" xml:lang="en">20071010 Re: iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/482366/100/0/threaded" xml:lang="en">HPSBST02280</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/25908" xml:lang="en">25908</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA07-282A.html" xml:lang="en">TA07-282A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/3436" xml:lang="en">ADV-2007-3436</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MS</vuln:source>
      <vuln:reference href="https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-056" xml:lang="en">MS07-056</vuln:reference>
    </vuln:references>
    <vuln:summary>Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption.</vuln:summary>
  </entry>
  <entry id="CVE-2007-4772">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.3"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.4"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.5"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.6"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.7"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.8"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.9"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.10"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.11"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.12"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.13"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.14"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.15"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.16"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.17"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:7.4.18"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.2"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:postgresql:postgresql:8.2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:4.0:p1"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:6.1:p1"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:6.5"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:6.6"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:6.7"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:7.4"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:7.5"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:7.5:p1"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:7.6"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:7.6:p2"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.0:p2"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.3.4"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4:alpha4"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4.3"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4.4"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4.5"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4.6"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4.7"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4.8"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4.9"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4.10"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4.11"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4.12"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4.13"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4.14"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4.15"/>
        <cpe-lang:fact-ref name="cpe:/a:tcl:tcl%2ftk:8.4.16"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:3.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.10"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:7.04"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:7.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.1</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.2</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.3</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.4</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.5</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.6</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.7</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.8</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.9</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.10</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.11</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.12</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.13</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.14</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.15</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.16</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.17</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:7.4.18</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.0</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.0.1</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.0.2</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.0.3</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.0.4</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.0.5</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.0.6</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.0.7</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.0.8</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.0.9</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.0.10</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.0.11</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.0.12</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.0.13</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.0.14</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.1</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.1.0</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.1.1</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.1.2</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.1.3</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.1.4</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.1.5</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.1.6</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.1.7</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.1.8</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.1.9</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.1.10</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.2</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.2.0</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.2.1</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.2.2</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.2.3</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.2.4</vuln:product>
      <vuln:product>cpe:/a:postgresql:postgresql:8.2.5</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:2.1</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:3.3</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:4.0:p1</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:6.1</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:6.1:p1</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:6.2</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:6.4</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:6.5</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:6.6</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:6.7</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:7.0</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:7.1</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:7.3</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:7.4</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:7.5</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:7.5:p1</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:7.6</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:7.6:p2</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.0</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.0:p2</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.0.3</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.0.4</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.0.5</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.1</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.1.1</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.2.0</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.2.1</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.2.2</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.2.3</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.3.0</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.3.1</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.3.2</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.3.3</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.3.4</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.3.5</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4:alpha2</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4:alpha3</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4:alpha4</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4:beta1</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4:beta2</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4.0</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4.1</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4.2</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4.3</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4.4</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4.5</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4.6</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4.7</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4.8</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4.9</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4.10</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4.11</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4.12</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4.13</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4.14</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4.15</vuln:product>
      <vuln:product>cpe:/a:tcl:tcl%2ftk:8.4.16</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.10</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:7.04</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:7.10</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:3.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2007-4772</vuln:cve-id>
    <vuln:published-datetime>2008-01-09T16:46:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:53:51.637-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11569" name="oval:org.mitre.oval:def:11569"/>
    <vuln:cwe id="CWE-399"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154" xml:lang="en">SSRT080006</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10705" xml:lang="en">http://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10705</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html" xml:lang="en">SUSE-SA:2008:005</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html" xml:lang="en">openSUSE-SU-2016:0531</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html" xml:lang="en">SUSE-SU-2016:0539</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html" xml:lang="en">SUSE-SU-2016:0555</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.html" xml:lang="en">openSUSE-SU-2016:0578</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html" xml:lang="en">SUSE-SU-2016:0677</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2013-0122.html" xml:lang="en">RHSA-2013:0122</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200801-15.xml" xml:lang="en">GLSA-200801-15</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1019157" xml:lang="en">1019157</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://sourceforge.net/project/shownotes.php?release_id=565440&amp;group_id=10894" xml:lang="en">http://sourceforge.net/project/shownotes.php?release_id=565440&amp;group_id=10894</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://sourceforge.net/tracker/index.php?func=detail&amp;aid=1810264&amp;group_id=10894&amp;atid=110894" xml:lang="en">http://sourceforge.net/tracker/index.php?func=detail&amp;aid=1810264&amp;group_id=10894&amp;atid=110894</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1" xml:lang="en">103197</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1" xml:lang="en">200559</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2008/dsa-1460" xml:lang="en">DSA-1460</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2008/dsa-1463" xml:lang="en">DSA-1463</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2008:004" xml:lang="en">MDVSA-2008:004</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2008:059" xml:lang="en">MDVSA-2008:059</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.postgresql.org/about/news.905" xml:lang="en">http://www.postgresql.org/about/news.905</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2008-0038.html" xml:lang="en">RHSA-2008:0038</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2008-0040.html" xml:lang="en">RHSA-2008:0040</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2008-0134.html" xml:lang="en">RHSA-2008:0134</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/485864/100/0/threaded" xml:lang="en">20080107 PostgreSQL 2007-01-07 Cumulative Security Release</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/486407/100/0/threaded" xml:lang="en">20080115 rPSA-2008-0016-1 postgresql postgresql-server</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/493080/100/0/threaded" xml:lang="en">20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/27163" xml:lang="en">27163</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.vmware.com/security/advisories/VMSA-2008-0009.html" xml:lang="en">http://www.vmware.com/security/advisories/VMSA-2008-0009.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/0061" xml:lang="en">ADV-2008-0061</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/0109" xml:lang="en">ADV-2008-0109</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/1071/references" xml:lang="en">ADV-2008-1071</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/1744" xml:lang="en">ADV-2008-1744</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/39497" xml:lang="en">postgresql-regular-expression-dos(39497)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.rpath.com/browse/RPL-1768" xml:lang="en">https://issues.rpath.com/browse/RPL-1768</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="https://usn.ubuntu.com/568-1/" xml:lang="en">USN-568-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html" xml:lang="en">FEDORA-2008-0478</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html" xml:lang="en">FEDORA-2008-0552</vuln:reference>
    </vuln:references>
    <vuln:summary>The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.</vuln:summary>
  </entry>
  <entry id="CVE-2007-4841">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:2.0.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:1.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:2.0.0.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:firefox:2.0.0.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:1.1.5</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:2.0.0.8</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2007-4841</vuln:cve-id>
    <vuln:published-datetime>2007-09-12T16:17:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:53:53.543-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742" xml:lang="en">SSRT061181</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579" xml:lang="en">HPSBUX02156</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2007&amp;m=slackware-security.471007" xml:lang="en">SSA:2007-324-01</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202" xml:lang="en">MDKSA-2007:202</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2007/mfsa2007-36.html" xml:lang="en">http://www.mozilla.org/security/announce/2007/mfsa2007-36.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/25543" xml:lang="en">25543</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/3544" xml:lang="en">ADV-2007-3544</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/0082" xml:lang="en">ADV-2008-0082</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/0083" xml:lang="en">ADV-2008-0083</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://xs-sniper.com/blog/2007/09/01/firefox-file-handling-woes/" xml:lang="en">http://xs-sniper.com/blog/2007/09/01/firefox-file-handling-woes/</vuln:reference>
    </vuln:references>
    <vuln:summary>Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to execute arbitrary commands via a (1) mailto, (2) nntp, (3) news, or (4) snews URI with invalid "%" encoding, related to improper file type handling on Windows XP with Internet Explorer 7 installed, a variant of CVE-2007-3845.</vuln:summary>
  </entry>
  <entry id="CVE-2007-5531">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:application_server:-"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:database_server:10.2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:enterprise_manager:10.1.0.6"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:application_server:-</vuln:product>
      <vuln:product>cpe:/a:oracle:database_server:10.2.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:enterprise_manager:10.1.0.6</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2007-5531</vuln:cve-id>
    <vuln:published-datetime>2007-10-17T19:17:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:54:11.467-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=119332677525918&amp;w=2" xml:lang="en">SSRT061201</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1018823" xml:lang="en">1018823</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA07-290A.html" xml:lang="en">TA07-290A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/3524" xml:lang="en">ADV-2007-3524</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/3626" xml:lang="en">ADV-2007-3626</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Oracle Help for Web, as used in Oracle Application Server, Oracle Database 10.2.0.3, and Enterprise Manager 10.1.0.6, has unknown impact and remote attack vectors, aka EM02.</vuln:summary>
  </entry>
  <entry id="CVE-2007-5532">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.22.11:ga"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.22.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.22.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.22.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.22.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.47:ga"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.47.04"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.47.09"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.47.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.47.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.47.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.47.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.48:ga"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.48.03"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.48.06"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.48.08"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.48.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.48.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.49.02"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.49.05"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.22</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.22.11:ga</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.22.13</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.22.14</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.22.15</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.22.17</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.47</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.47:ga</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.47.04</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.47.09</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.47.11</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.47.12</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.47.13</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.47.14</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.48</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.48:ga</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.48.03</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.48.06</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.48.08</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.48.10</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.48.13</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.49</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.49.02</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.49.05</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2007-5532</vuln:cve-id>
    <vuln:published-datetime>2007-10-17T19:17:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:54:11.637-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=119332677525918&amp;w=2" xml:lang="en">SSRT061201</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1018823" xml:lang="en">1018823</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA07-290A.html" xml:lang="en">TA07-290A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/3524" xml:lang="en">ADV-2007-3524</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/3626" xml:lang="en">ADV-2007-3626</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.17, 8.47.14, 8.48.13, 8.49.05 has unknown impact and remote attack vectors, aka PSE01.</vuln:summary>
  </entry>
  <entry id="CVE-2007-5533">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.47:ga"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.47.04"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.47.09"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.47.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.47.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.47.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.47.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.48:ga"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.48.03"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.48.06"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.48.08"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.48.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.48.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.49.02"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:peoplesoft_enterprise:8.49.05"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.47</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.47:ga</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.47.04</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.47.09</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.47.11</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.47.12</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.47.13</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.47.14</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.48</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.48:ga</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.48.03</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.48.06</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.48.08</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.48.10</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.48.13</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.49</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.49.02</vuln:product>
      <vuln:product>cpe:/a:oracle:peoplesoft_enterprise:8.49.05</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2007-5533</vuln:cve-id>
    <vuln:published-datetime>2007-10-17T19:17:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:54:11.763-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=119332677525918&amp;w=2" xml:lang="en">SSRT061201</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1018823" xml:lang="en">1018823</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA07-290A.html" xml:lang="en">TA07-290A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/3524" xml:lang="en">ADV-2007-3524</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2007/3626" xml:lang="en">ADV-2007-3626</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.14, 8.48.13, 8.49.05 has unknown impact and remote attack vectors, aka PSE02.</vuln:summary>
  </entry>
  <entry id="CVE-2008-0213">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:virtual_rooms:6"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:virtual_rooms:6</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-0213</vuln:cve-id>
    <vuln:published-datetime>2008-02-07T17:00:00.000-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:54:47.700-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=120231595903371&amp;w=2" xml:lang="en">SSRT080007</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1019311" xml:lang="en">1019311</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms (HPVR) 6 and earlier allows remote attackers to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2008-1447">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu:6.06::lts"/>
          <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu:7.04"/>
          <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu:7.10"/>
          <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu:8.04::lts"/>
          <cpe-lang:fact-ref name="cpe:/o:cisco:ios:12.0"/>
          <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:4.0"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:2003_server::x64"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:2003_server:sp1"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:2003_server:sp1_itanium"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:2003_server:sp2"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:2003_server:sp2_itanium"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:2003_server:sp2_x64"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:xp:sp3"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:xp_professional::x64"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:xp_professional:sp2_x64"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_2000::sp4"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_xp::sp2"/>
          <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux:2.1::as"/>
          <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux:2.1::es"/>
          <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux:2.1::ws"/>
          <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux:5::client"/>
          <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux:5::client_workstation"/>
          <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux:5.0"/>
          <cpe-lang:fact-ref name="cpe:/o:redhat:linux_advanced_workstation:2.1::itanium"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:isc:bind:4"/>
          <cpe-lang:fact-ref name="cpe:/a:isc:bind:8"/>
          <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.9"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:isc:bind:4</vuln:product>
      <vuln:product>cpe:/a:isc:bind:8</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.9</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-1447</vuln:cve-id>
    <vuln:published-datetime>2008-07-08T19:41:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:55:18.140-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12117" name="oval:org.mitre.oval:def:12117"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5725" name="oval:org.mitre.oval:def:5725"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5761" name="oval:org.mitre.oval:def:5761"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5917" name="oval:org.mitre.oval:def:5917"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9627" name="oval:org.mitre.oval:def:9627"/>
    <vuln:cwe id="CWE-331"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>NETBSD</vuln:source>
      <vuln:reference href="ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-009.txt.asc" xml:lang="en">NetBSD-SA2008-009</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://blog.invisibledenizen.org/2008/07/kaminskys-dns-issue-accidentally-leaked.html" xml:lang="en">http://blog.invisibledenizen.org/2008/07/kaminskys-dns-issue-accidentally-leaked.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401" xml:lang="en">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01523520" xml:lang="en">HPSBOV02357</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01662368" xml:lang="en">HPSBNS02405</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html" xml:lang="en">APPLE-SA-2008-07-31</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html" xml:lang="en">APPLE-SA-2008-09-09</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html" xml:lang="en">APPLE-SA-2008-09-12</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html" xml:lang="en">APPLE-SA-2008-09-15</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html" xml:lang="en">20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00003.html" xml:lang="en">SUSE-SA:2008:033</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html" xml:lang="en">SUSE-SR:2008:017</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=121630706004256&amp;w=2" xml:lang="en">SSRT080058</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=121866517322103&amp;w=2" xml:lang="en">HPSBTU02358</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=123324863916385&amp;w=2" xml:lang="en">HPSBMP02404</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141879471518471&amp;w=2" xml:lang="en">HPSBOV03226</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2008-0533.html" xml:lang="en">RHSA-2008:0533</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FREEBSD</vuln:source>
      <vuln:reference href="http://security.freebsd.org/advisories/FreeBSD-SA-08:06.bind.asc" xml:lang="en">FreeBSD-SA-08:06</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200807-08.xml" xml:lang="en">GLSA-200807-08</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200812-17.xml" xml:lang="en">GLSA-200812-17</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201209-25.xml" xml:lang="en">GLSA-201209-25</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2008&amp;m=slackware-security.452680" xml:lang="en">SSA:2008-205-01</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2008&amp;m=slackware-security.539239" xml:lang="en">SSA:2008-191</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-239392-1" xml:lang="en">239392</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-240048-1" xml:lang="en">240048</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT3026" xml:lang="en">http://support.apple.com/kb/HT3026</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT3129" xml:lang="en">http://support.apple.com/kb/HT3129</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.citrix.com/article/CTX117991" xml:lang="en">http://support.citrix.com/article/CTX117991</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.citrix.com/article/CTX118183" xml:lang="en">http://support.citrix.com/article/CTX118183</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&amp;id=762152" xml:lang="en">http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&amp;id=762152</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://up2date.astaro.com/2008/08/up2date_7202_released.html" xml:lang="en">http://up2date.astaro.com/2008/08/up2date_7202_released.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0231" xml:lang="en">http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0231</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018" xml:lang="en">http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.bluecoat.com/support/security-advisories/dns_cache_poisoning" xml:lang="en">http://www.bluecoat.com/support/security-advisories/dns_cache_poisoning</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.caughq.org/exploits/CAU-EX-2008-0002.txt" xml:lang="en">http://www.caughq.org/exploits/CAU-EX-2008-0002.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.caughq.org/exploits/CAU-EX-2008-0003.txt" xml:lang="en">http://www.caughq.org/exploits/CAU-EX-2008-0003.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://www.cisco.com/en/US/products/products_security_advisory09186a00809c2168.shtml" xml:lang="en">20080708 Multiple Cisco Products Vulnerable to DNS Cache Poisoning Attacks</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2008/dsa-1603" xml:lang="en">DSA-1603</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2008/dsa-1604" xml:lang="en">DSA-1604</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2008/dsa-1605" xml:lang="en">DSA-1605</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2008/dsa-1619" xml:lang="en">DSA-1619</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2008/dsa-1623" xml:lang="en">DSA-1623</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.doxpara.com/?p=1176" xml:lang="en">http://www.doxpara.com/?p=1176</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.doxpara.com/DMK_BO2K8.ppt" xml:lang="en">http://www.doxpara.com/DMK_BO2K8.ppt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>AIXAPAR</vuln:source>
      <vuln:reference href="http://www.ibm.com/support/docview.wss?uid=isg1IZ26667" xml:lang="en">IZ26667</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>AIXAPAR</vuln:source>
      <vuln:reference href="http://www.ibm.com/support/docview.wss?uid=isg1IZ26668" xml:lang="en">IZ26668</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>AIXAPAR</vuln:source>
      <vuln:reference href="http://www.ibm.com/support/docview.wss?uid=isg1IZ26669" xml:lang="en">IZ26669</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>AIXAPAR</vuln:source>
      <vuln:reference href="http://www.ibm.com/support/docview.wss?uid=isg1IZ26670" xml:lang="en">IZ26670</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>AIXAPAR</vuln:source>
      <vuln:reference href="http://www.ibm.com/support/docview.wss?uid=isg1IZ26671" xml:lang="en">IZ26671</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>AIXAPAR</vuln:source>
      <vuln:reference href="http://www.ibm.com/support/docview.wss?uid=isg1IZ26672" xml:lang="en">IZ26672</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.ipcop.org/index.php?name=News&amp;file=article&amp;sid=40" xml:lang="en">http://www.ipcop.org/index.php?name=News&amp;file=article&amp;sid=40</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.isc.org/index.pl?/sw/bind/bind-security.php" xml:lang="en">http://www.isc.org/index.pl?/sw/bind/bind-security.php</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/800113" xml:lang="en">VU#800113</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/MIMG-7DWR4J" xml:lang="en">http://www.kb.cert.org/vuls/id/MIMG-7DWR4J</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/MIMG-7ECL8Q" xml:lang="en">http://www.kb.cert.org/vuls/id/MIMG-7ECL8Q</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2008:139" xml:lang="en">MDVSA-2008:139</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.nominum.com/asset_upload_file741_2661.pdf" xml:lang="en">http://www.nominum.com/asset_upload_file741_2661.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.novell.com/support/viewContent.do?externalId=7000912" xml:lang="en">http://www.novell.com/support/viewContent.do?externalId=7000912</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>OPENBSD</vuln:source>
      <vuln:reference href="http://www.openbsd.org/errata42.html#013_bind" xml:lang="en">[4.2] 013: SECURITY FIX: July 23, 2008</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>OPENBSD</vuln:source>
      <vuln:reference href="http://www.openbsd.org/errata43.html#004_bind" xml:lang="en">[4.3] 004: SECURITY FIX: July 23, 2008</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.phys.uu.nl/~rombouts/pdnsd.html" xml:lang="en">http://www.phys.uu.nl/~rombouts/pdnsd.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.phys.uu.nl/~rombouts/pdnsd/ChangeLog" xml:lang="en">http://www.phys.uu.nl/~rombouts/pdnsd/ChangeLog</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2008-0789.html" xml:lang="en">RHSA-2008:0789</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU800113.html" xml:lang="en">http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU800113.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/" xml:lang="en">http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/495289/100/0/threaded" xml:lang="en">20080808 New paper: An Illustrated Guide to the Kaminsky DNS Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/495869/100/0/threaded" xml:lang="en">20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/30131" xml:lang="en">30131</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020437" xml:lang="en">1020437</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020438" xml:lang="en">1020438</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020440" xml:lang="en">1020440</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020448" xml:lang="en">1020448</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020449" xml:lang="en">1020449</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020548" xml:lang="en">1020548</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020558" xml:lang="en">1020558</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020560" xml:lang="en">1020560</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020561" xml:lang="en">1020561</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020575" xml:lang="en">1020575</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020576" xml:lang="en">1020576</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020577" xml:lang="en">1020577</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020578" xml:lang="en">1020578</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020579" xml:lang="en">1020579</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020651" xml:lang="en">1020651</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020653" xml:lang="en">1020653</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020702" xml:lang="en">1020702</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020802" xml:lang="en">1020802</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020804" xml:lang="en">1020804</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-622-1" xml:lang="en">USN-622-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-627-1" xml:lang="en">USN-627-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.unixwiz.net/techtips/iguide-kaminsky-dns-vuln.html" xml:lang="en">http://www.unixwiz.net/techtips/iguide-kaminsky-dns-vuln.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA08-190A.html" xml:lang="en">TA08-190A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA08-190B.html" xml:lang="en">TA08-190B</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA08-260A.html" xml:lang="en">TA08-260A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.vmware.com/security/advisories/VMSA-2008-0014.html" xml:lang="en">http://www.vmware.com/security/advisories/VMSA-2008-0014.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2019/references" xml:lang="en">ADV-2008-2019</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2023/references" xml:lang="en">ADV-2008-2023</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2025/references" xml:lang="en">ADV-2008-2025</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2029/references" xml:lang="en">ADV-2008-2029</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2030/references" xml:lang="en">ADV-2008-2030</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2050/references" xml:lang="en">ADV-2008-2050</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2051/references" xml:lang="en">ADV-2008-2051</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2052/references" xml:lang="en">ADV-2008-2052</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2055/references" xml:lang="en">ADV-2008-2055</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2092/references" xml:lang="en">ADV-2008-2092</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2113/references" xml:lang="en">ADV-2008-2113</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2114/references" xml:lang="en">ADV-2008-2114</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2123/references" xml:lang="en">ADV-2008-2123</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2139/references" xml:lang="en">ADV-2008-2139</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2166/references" xml:lang="en">ADV-2008-2166</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2195/references" xml:lang="en">ADV-2008-2195</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2196/references" xml:lang="en">ADV-2008-2196</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2197/references" xml:lang="en">ADV-2008-2197</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2268" xml:lang="en">ADV-2008-2268</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2291" xml:lang="en">ADV-2008-2291</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2334" xml:lang="en">ADV-2008-2334</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2342" xml:lang="en">ADV-2008-2342</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2377" xml:lang="en">ADV-2008-2377</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2383" xml:lang="en">ADV-2008-2383</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2384" xml:lang="en">ADV-2008-2384</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2466" xml:lang="en">ADV-2008-2466</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2467" xml:lang="en">ADV-2008-2467</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2482" xml:lang="en">ADV-2008-2482</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2525" xml:lang="en">ADV-2008-2525</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2549" xml:lang="en">ADV-2008-2549</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2558" xml:lang="en">ADV-2008-2558</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2582" xml:lang="en">ADV-2008-2582</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2584" xml:lang="en">ADV-2008-2584</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/0297" xml:lang="en">ADV-2009-0297</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/0311" xml:lang="en">ADV-2009-0311</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/0622" xml:lang="en">ADV-2010-0622</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MS</vuln:source>
      <vuln:reference href="https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-037" xml:lang="en">MS08-037</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/43334" xml:lang="en">win-dns-client-server-spoofing(43334)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/43637" xml:lang="en">cisco-multiple-dns-cache-poisoning(43637)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/6122" xml:lang="en">6122</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/6123" xml:lang="en">6123</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/6130" xml:lang="en">6130</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00402.html" xml:lang="en">FEDORA-2008-6256</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00458.html" xml:lang="en">FEDORA-2008-6281</vuln:reference>
    </vuln:references>
    <vuln:summary>The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka "DNS Insufficient Socket Entropy Vulnerability" or "the Kaminsky bug."</vuln:summary>
  </entry>
  <entry id="CVE-2008-1508">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:efestech:e-kontor:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:efestech:e-kontor:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-1508</vuln:cve-id>
    <vuln:published-datetime>2008-03-25T19:44:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T07:27:13.263-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SREASON</vuln:source>
      <vuln:reference href="http://securityreason.com/securityalert/3776" xml:lang="en">3776</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/489989/100/0/threaded" xml:lang="en">20080323 EfesTech E-Kont&amp;ouml;r (id) Remote SQL INJECTION</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/28412" xml:lang="en">28412</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/41419" xml:lang="en">ekontor-id-sql-injection(41419)</vuln:reference>
    </vuln:references>
    <vuln:summary>SQL injection vulnerability in EfesTech E-Kont?r and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2008-2252">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_2000:-:sp4"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2003:-:sp1"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2003:-:sp1:~~~~itanium~"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2003:-:sp1:~~~~x64~"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2003:-:sp2"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2008:-"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2008:-::itanium"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_vista:-"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_vista:-::~~~~x64~"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_vista:-:sp1"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_vista:-:sp1:~~~~x64~"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_xp:-::~~~~x64~"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_xp:-:sp2"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_xp:-:sp2:~~~~x64~"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_xp:-:sp3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:microsoft:windows_2000:-:sp4</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_server_2003:-:sp1</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_server_2003:-:sp1:~~~~itanium~</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_server_2003:-:sp1:~~~~x64~</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_server_2003:-:sp2</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_server_2008:-</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_server_2008:-::itanium</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_vista:-</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_vista:-::~~~~x64~</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_vista:-:sp1</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_vista:-:sp1:~~~~x64~</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_xp:-::~~~~x64~</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_xp:-:sp2</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_xp:-:sp2:~~~~x64~</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_xp:-:sp3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-2252</vuln:cve-id>
    <vuln:published-datetime>2008-10-14T20:12:15.693-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:55:38.673-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6045" name="oval:org.mitre.oval:def:6045"/>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=122479227205998&amp;w=2" xml:lang="en">SSRT080143</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/31652" xml:lang="en">31652</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1021046" xml:lang="en">1021046</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA08-288A.html" xml:lang="en">TA08-288A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MS</vuln:source>
      <vuln:reference href="https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-061" xml:lang="en">MS08-061</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/45543" xml:lang="en">win-kernel-input-privilege-escalation(45543)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/45544" xml:lang="en">win-ms08kb954211-update(45544)</vuln:reference>
    </vuln:references>
    <vuln:summary>The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate parameters sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Corruption Vulnerability."</vuln:summary>
  </entry>
  <entry id="CVE-2008-2291">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:symantec:altiris_deployment_solution:6.8:-"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec:altiris_deployment_solution:6.8:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:symantec:altiris_deployment_solution:6.8:sp2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:symantec:altiris_deployment_solution:6.8:-</vuln:product>
      <vuln:product>cpe:/a:symantec:altiris_deployment_solution:6.8:sp1</vuln:product>
      <vuln:product>cpe:/a:symantec:altiris_deployment_solution:6.8:sp2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-2291</vuln:cve-id>
    <vuln:published-datetime>2008-05-18T10:20:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:55:40.203-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-255"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=122167472229965&amp;w=2" xml:lang="en">SSRT080115</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.insomniasec.com/advisories/ISVA-080516.2.htm" xml:lang="en">http://www.insomniasec.com/advisories/ISVA-080516.2.htm</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/492128/100/0/threaded" xml:lang="en">20080515 ZDI-08-025: Symantec Altiris Deployment Solution Domain Credential Disclosure Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/492228/100/0/threaded" xml:lang="en">20080518 Insomnia : ISVA-080516.2 - Altiris Deployment Solution - Domain Account Disclosure</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/29199" xml:lang="en">29199</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020024" xml:lang="en">1020024</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.symantec.com/avcenter/security/Content/2008.05.14a.html" xml:lang="en">http://www.symantec.com/avcenter/security/Content/2008.05.14a.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/1542/references" xml:lang="en">ADV-2008-1542</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.zerodayinitiative.com/advisories/ZDI-08-025/" xml:lang="en">http://www.zerodayinitiative.com/advisories/ZDI-08-025/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/42437" xml:lang="en">symantec-altiris-axengine-info-disclosure(42437)</vuln:reference>
    </vuln:references>
    <vuln:summary>axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials.</vuln:summary>
  </entry>
  <entry id="CVE-2008-2314">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.4.1"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.4.2"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.4.3"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.4.4"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.4.5"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.4.6"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.4.7"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.4.8"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.4.9"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.4.10"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.4.11"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.5"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.5.1"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.5.2"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.5.3"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x_server:10.4.1"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x_server:10.4.2"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x_server:10.4.3"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x_server:10.4.4"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x_server:10.4.5"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x_server:10.4.6"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x_server:10.4.7"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x_server:10.4.8"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x_server:10.4.9"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x_server:10.4.10"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x_server:10.4.11"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x_server:10.5"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x_server:10.5.1"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x_server:10.5.2"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x_server:10.5.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:apple:mac_os_x:10.4.1</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.4.2</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.4.3</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.4.4</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.4.5</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.4.6</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.4.7</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.4.8</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.4.9</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.4.10</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.4.11</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.5</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.5.1</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.5.2</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.5.3</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x_server:10.4.1</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x_server:10.4.2</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x_server:10.4.3</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x_server:10.4.4</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x_server:10.4.5</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x_server:10.4.6</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x_server:10.4.7</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x_server:10.4.8</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x_server:10.4.9</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x_server:10.4.10</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x_server:10.4.11</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x_server:10.5</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x_server:10.5.1</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x_server:10.5.2</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x_server:10.5.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-2314</vuln:cve-id>
    <vuln:published-datetime>2008-07-01T14:41:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T07:27:32.920-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.4</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html" xml:lang="en">APPLE-SA-2008-06-30</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1020395" xml:lang="en">1020395</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT2163" xml:lang="en">http://support.apple.com/kb/HT2163</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/30018" xml:lang="en">30018</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/1981/references" xml:lang="en">ADV-2008-1981</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/43497" xml:lang="en">macos-dock-security-bypass(43497)</vuln:reference>
    </vuln:references>
    <vuln:summary>Dock in Apple Mac OS X 10.5 before 10.5.4, when Expos? hot corners is enabled, allows physically proximate attackers to gain access to a locked session in (1) sleep mode or (2) screen saver mode via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2008-2593">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:application_server_10g:10.1.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:application_server_10g:10.1.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:oracle_portal_component:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:application_server_10g:10.1.2.3</vuln:product>
      <vuln:product>cpe:/a:oracle:application_server_10g:10.1.4.2</vuln:product>
      <vuln:product>cpe:/a:oracle:oracle_portal_component:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-2593</vuln:cve-id>
    <vuln:published-datetime>2008-07-15T19:41:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:55:48.610-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020494" xml:lang="en">1020494</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2594.</vuln:summary>
  </entry>
  <entry id="CVE-2008-2594">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:oracle_application_server:10.1.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:oracle_application_server:10.1.4.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:oracle_application_server:10.1.2.3</vuln:product>
      <vuln:product>cpe:/a:oracle:oracle_application_server:10.1.4.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-2594</vuln:cve-id>
    <vuln:published-datetime>2008-07-15T19:41:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:55:48.830-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.4</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020494" xml:lang="en">1020494</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2593.</vuln:summary>
  </entry>
  <entry id="CVE-2008-2829">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:php:php:4.4.9"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.2.6"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:7.04"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:7.10"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:8.04::~~lts~~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:php:php:4.4.9</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.2.6</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:7.04</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:7.10</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:8.04::~~lts~~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-2829</vuln:cve-id>
    <vuln:published-datetime>2008-06-23T16:41:00.000-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:55:55.220-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://bugs.php.net/bug.php?id=42862" xml:lang="en">http://bugs.php.net/bug.php?id=42862</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2009/May/msg00002.html" xml:lang="en">APPLE-SA-2009-05-12</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html" xml:lang="en">SUSE-SR:2008:027</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=124654546101607&amp;w=2" xml:lang="en">SSRT090085</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=125631037611762&amp;w=2" xml:lang="en">HPSBUX02465</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200811-05.xml" xml:lang="en">GLSA-200811-05</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT3549" xml:lang="en">http://support.apple.com/kb/HT3549</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://wiki.rpath.com/Advisories:rPSA-2009-0035" xml:lang="en">http://wiki.rpath.com/Advisories:rPSA-2009-0035</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2008:126" xml:lang="en">MDVSA-2008:126</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2008:127" xml:lang="en">MDVSA-2008:127</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2008:128" xml:lang="en">MDVSA-2008:128</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2008/06/19/6" xml:lang="en">[oss-security] 20080619 CVE request: php 5.2.6 ext/imap buffer overflows</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2008/06/24/2" xml:lang="en">[oss-security] 20080624 Re: CVE request: php 5.2.6 ext/imap buffer overflows</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/501376/100/0/threaded" xml:lang="en">20090302 rPSA-2009-0035-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/29829" xml:lang="en">29829</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/usn-628-1" xml:lang="en">USN-628-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA09-133A.html" xml:lang="en">TA09-133A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/1297" xml:lang="en">ADV-2009-1297</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugs.gentoo.org/show_bug.cgi?id=221969" xml:lang="en">https://bugs.gentoo.org/show_bug.cgi?id=221969</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/43357" xml:lang="en">php-phpimap-dos(43357)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html" xml:lang="en">FEDORA-2009-3768</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html" xml:lang="en">FEDORA-2009-3848</vuln:reference>
    </vuln:references>
    <vuln:summary>php_imap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete API calls that allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long IMAP request, which triggers an "rfc822.c legacy routine buffer overflow" error message, related to the rfc822_write_address function.</vuln:summary>
  </entry>
  <entry id="CVE-2008-3473">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:microsoft:internet_explorer:5.01:sp4"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_2000:-:sp4"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:microsoft:internet_explorer:6"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2003:-:sp1"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2003:-:sp1:~~~~itanium~"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2003:-:sp1:~~~~x64~"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2003:-:sp2"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_xp:-:gold:~~professional~~x64~"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_xp:-:sp2"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_xp:-:sp2:~~professional~~x64~"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_xp:-:sp3"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:microsoft:internet_explorer:6:sp1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_2000:-:sp4"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:microsoft:internet_explorer:7"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2003:-:sp1"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2003:-:sp1:~~~~itanium~"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2003:-:sp1:~~~~x64~"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2003:-:sp2"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2008:-::~~~~itanium~"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2008:-::x64"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2008:-::x86"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_vista:-:gold"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_vista:-:gold:~~~~x64~"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_vista:-:sp1"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_vista:-:sp1:~~~~x64~"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_xp:-:gold:~~professional~~x64~"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_xp:-:sp2"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_xp:-:sp2:~~professional~~x64~"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_xp:-:sp3"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:microsoft:internet_explorer:5.01:sp4</vuln:product>
      <vuln:product>cpe:/a:microsoft:internet_explorer:6</vuln:product>
      <vuln:product>cpe:/a:microsoft:internet_explorer:6:sp1</vuln:product>
      <vuln:product>cpe:/a:microsoft:internet_explorer:7</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-3473</vuln:cve-id>
    <vuln:published-datetime>2008-10-14T20:12:15.803-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:56:10.957-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13255" name="oval:org.mitre.oval:def:13255"/>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=122479227205998&amp;w=2" xml:lang="en">SSRT080143</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/31616" xml:lang="en">31616</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1021047" xml:lang="en">1021047</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA08-288A.html" xml:lang="en">TA08-288A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2809" xml:lang="en">ADV-2008-2809</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MS</vuln:source>
      <vuln:reference href="https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058" xml:lang="en">MS08-058</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/45562" xml:lang="en">ie-event-security-bypass(45562)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/45565" xml:lang="en">win-ms08kb956390-update(45565)</vuln:reference>
    </vuln:references>
    <vuln:summary>Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy, and execute arbitrary code or obtain sensitive information, via a crafted HTML document, aka "Event Handling Cross-Domain Vulnerability."</vuln:summary>
  </entry>
  <entry id="CVE-2008-3542">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.0.0_a:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.0.0_a:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.2.1_a:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.2.1_a:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.3.0-15:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.3.0-15:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.3.0.878:online_windows_2000"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.3.0.878:online_windows_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.3.0.878:unknown:online_windows_2000"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.3.1-1:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.3.1-1:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.3.1.887:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.3.1.887:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.4.1_a:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.4.1_a:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.5.0_a:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.5.0_a:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.0.0-30:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.0.0-30:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.0.0.1198:online_windows_2000"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.0.0.1198:online_windows_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.0.0.1198:unknown:online_windows_2000"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.0.1-8:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.0.1-8:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.0.1.1219:online_windows_2000"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.0.1.1219:online_windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.0.1.1219:unknown:online_windows_2000"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.0.1.1219:unknown:online_windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.0.2_a:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.0.2_a:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.3.0:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.3.0:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.4.0-11:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.4.0-11:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.4.0.1570:online_windows_2000"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.4.0.1570:online_windows_2003_x64"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.4.0.1570:online_windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.4.0.1570:unknown:online_windows_2000"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.4.0.1570:unknown:online_windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.4.1:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.4.1:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.0-14:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.0-14:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.0.1679:online_windows_2000"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.0.1679:online_windows_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.0.1679:online_windows_2003_x64"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.0.1679:unknown:online_windows_2000"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.2:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.2:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.4:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.4:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.5-1:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.5-1:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.5.1681:online_windows_2000"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.5.1681:online_windows_2003_x64"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.5.1681:online_windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.5.1681:unknown:online_windows_2000"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.5.1681:unknown:online_windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.6.0:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.6.0:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.6.0-23:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.6.0-23:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.6.0.1984:online_windows_2000"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.6.0.1984:online_windows_2003_x64"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.6.0.1984:online_windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.6.0.1984:unknown:online_windows_2000"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.6.0.1984:unknown:online_windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.6.1:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.6.1:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.6.2_rev_a:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.6.2_rev_a:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.7.0:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.7.0:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.7.0-142:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.7.0-142:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.7.0.2112:online_windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.7.0.2112:online_windows_server_2003_x64"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.7.0.2112:unknown:online_windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.7.0.2112:unknown:online_windows_server_2003_x64"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.7.0_rev_b:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.7.0_rev_b:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.7.101_2097:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.7.101_2097:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.8.0-159:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.8.0.2257:online_windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.8.0.2257:online_windows_server_2003_x64"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.8.0.2257:unknown:online_windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.8.0.2257:unknown:online_windows_server_2003_x64"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.9.0:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.9.0:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.9.0-105:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.9.0.2359:online_windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.9.0.2359:online_windows_server_2003_x64"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.9.0.2359:unknown:online_windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.9.0.2359:unknown:online_windows_server_2003_x64"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.9.0_rev_a:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.9.0_rev_a:unknown:offline"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.9.1-15:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.9.1.2401:online_windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.9.1.2401:online_windows_server_2003_x64"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.9.1.2401:unknown:online_windows_server_2003"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.9.1.2401:unknown:online_windows_server_2003_x64"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.0.0_a:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.0.0_a:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.2.1_a:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.2.1_a:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.3.0-15:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.3.0-15:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.3.0.878:online_windows_2000</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.3.0.878:online_windows_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.3.0.878:unknown:online_windows_2000</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.3.1-1:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.3.1-1:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.3.1.887:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.3.1.887:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.4.1_a:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.4.1_a:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.5.0_a:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.5.0_a:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.0.0-30:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.0.0-30:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.0.0.1198:online_windows_2000</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.0.0.1198:online_windows_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.0.0.1198:unknown:online_windows_2000</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.0.1-8:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.0.1-8:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.0.1.1219:online_windows_2000</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.0.1.1219:online_windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.0.1.1219:unknown:online_windows_2000</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.0.1.1219:unknown:online_windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.0.2_a:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.0.2_a:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.3.0:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.3.0:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.4.0</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.4.0-11:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.4.0-11:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.4.0.1570:online_windows_2000</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.4.0.1570:online_windows_2003_x64</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.4.0.1570:online_windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.4.0.1570:unknown:online_windows_2000</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.4.0.1570:unknown:online_windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.4.1:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.4.1:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.0-14:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.0-14:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.0.1679:online_windows_2000</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.0.1679:online_windows_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.0.1679:online_windows_2003_x64</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.0.1679:unknown:online_windows_2000</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.2:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.2:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.4:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.4:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.5-1:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.5-1:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.5.1681:online_windows_2000</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.5.1681:online_windows_2003_x64</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.5.1681:online_windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.5.1681:unknown:online_windows_2000</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.5.1681:unknown:online_windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.6.0:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.6.0:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.6.0-23:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.6.0-23:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.6.0.1984:online_windows_2000</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.6.0.1984:online_windows_2003_x64</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.6.0.1984:online_windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.6.0.1984:unknown:online_windows_2000</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.6.0.1984:unknown:online_windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.6.1:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.6.1:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.6.2_rev_a:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.6.2_rev_a:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.7.0:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.7.0:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.7.0-142:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.7.0-142:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.7.0.2112:online_windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.7.0.2112:online_windows_server_2003_x64</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.7.0.2112:unknown:online_windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.7.0.2112:unknown:online_windows_server_2003_x64</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.7.0_rev_b:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.7.0_rev_b:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.7.101_2097:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.7.101_2097:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.8.0-159:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.8.0.2257:online_windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.8.0.2257:online_windows_server_2003_x64</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.8.0.2257:unknown:online_windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.8.0.2257:unknown:online_windows_server_2003_x64</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.9.0</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.9.0:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.9.0:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.9.0-105:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.9.0.2359:online_windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.9.0.2359:online_windows_server_2003_x64</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.9.0.2359:unknown:online_windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.9.0.2359:unknown:online_windows_server_2003_x64</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.9.0_rev_a:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.9.0_rev_a:unknown:offline</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.9.1-15:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.9.1.2401:online_windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.9.1.2401:online_windows_server_2003_x64</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.9.1.2401:unknown:online_windows_server_2003</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.9.1.2401:unknown:online_windows_server_2003_x64</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-3542</vuln:cve-id>
    <vuln:published-datetime>2008-10-02T14:18:05.820-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:56:13.317-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=122271894520640&amp;w=2" xml:lang="en">SSRT071467</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SREASON</vuln:source>
      <vuln:reference href="http://securityreason.com/securityalert/4346" xml:lang="en">4346</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/31479" xml:lang="en">31479</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1020953" xml:lang="en">1020953</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/2695" xml:lang="en">ADV-2008-2695</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/45506" xml:lang="en">hp-insight-unspecified-info-disclosure(45506)</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Insight Diagnostics before 7.9.1.2402 allows remote attackers to read arbitrary files via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2008-4420">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:openview_performance_agent:c.04.60"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:openview_performance_agent:c.04.70"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:openview_performance_agent:c.04.72"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:innermedia:dynazip_max:5.0.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:innermedia:dynazip_max_secure:6.0.0.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:filestream:turbozip:6.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:filestream:turbozip:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:openview_performance_agent:c.04.60</vuln:product>
      <vuln:product>cpe:/a:hp:openview_performance_agent:c.04.70</vuln:product>
      <vuln:product>cpe:/a:hp:openview_performance_agent:c.04.72</vuln:product>
      <vuln:product>cpe:/a:innermedia:dynazip_max:5.0.0.7</vuln:product>
      <vuln:product>cpe:/a:innermedia:dynazip_max_secure:6.0.0.4</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-4420</vuln:cve-id>
    <vuln:published-datetime>2009-04-13T12:30:00.203-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:56:34.440-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01622011" xml:lang="en">HPSBMA02396</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://vuln.sg/dynazip5007-en.html" xml:lang="en">http://vuln.sg/dynazip5007-en.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://vuln.sg/turbozip6-en.html" xml:lang="en">http://vuln.sg/turbozip6-en.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/441083" xml:lang="en">20060725 [vuln.sg] DynaZip DZIP32.DLL/DZIPS32.DLL Buffer Overflow Vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/441084" xml:lang="en">20060725 [vuln.sg] TurboZIP ZIP Repair Buffer Overflow Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/19143" xml:lang="en">19143</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1022021" xml:lang="en">1022021</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2006/2957" xml:lang="en">ADV-2006-2957</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/0980" xml:lang="en">ADV-2009-0980</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple stack-based buffer overflows in DZIP32.DLL before 5.0.0.8 in DynaZip Max and DZIPS32.DLL before 6.0.0.5 in DynaZip Max Secure; as used in HP OpenView Performance Agent C.04.60, HP Performance Agent C.04.70 and C.04.72, TurboZIP 6.0, and other products; allow user-assisted attackers to execute arbitrary code via a long filename in a ZIP archive during a (1) Fix (aka Repair), (2) Add, (3) Update, or (4) Freshen action, a related issue to CVE-2006-3985.</vuln:summary>
  </entry>
  <entry id="CVE-2008-4559">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.0.1::hp_ux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.0.1::linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.0.1::solaris"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.0.1::windows"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51:-:hp-ux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51:-:linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51:-:solaris"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51:-:windows"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53:-:hp-ux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53:-:linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53:-:solaris"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53:-:windows"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.0.1::hp_ux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.0.1::linux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.0.1::solaris</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.0.1::windows</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51:-:hp-ux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51:-:linux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51:-:solaris</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51:-:windows</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53:-:hp-ux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53:-:linux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53:-:solaris</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53:-:windows</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-4559</vuln:cve-id>
    <vuln:published-datetime>2009-02-08T16:30:00.250-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:56:37.707-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>IDEFENSE</vuln:source>
      <vuln:reference href="http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=770" xml:lang="en">20090206 HP Network Node Manager Multiple Command Injection Vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:summary>HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in argument fields to the (1) webappmon.exe or (2) OpenView5.exe CGI program.  NOTE: this issue may be partially covered by CVE-2009-0205.</vuln:summary>
  </entry>
  <entry id="CVE-2008-4560">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.0.1::hp_ux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.0.1::linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.0.1::solaris"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.0.1::windows"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51:-:hp-ux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51:-:linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51:-:solaris"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51:-:windows"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53:-:hp-ux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53:-:linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53:-:solaris"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53:-:windows"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.0.1::hp_ux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.0.1::linux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.0.1::solaris</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.0.1::windows</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51:-:hp-ux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51:-:linux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51:-:solaris</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51:-:windows</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53:-:hp-ux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53:-:linux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53:-:solaris</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53:-:windows</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-4560</vuln:cve-id>
    <vuln:published-datetime>2009-02-08T16:30:04.733-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:56:37.973-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>IDEFENSE</vuln:source>
      <vuln:reference href="http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=771" xml:lang="en">20090206 HP Network Node Manager Multiple Information Disclosure Vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:summary>HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to obtain sensitive information via (1) a crafted request to the nnmRptConfig.exe CGI program, which reveals the pathname of log directories; or (2) a crafted parameter in a request to the ovlaunch.exe CGI program, which reveals configuration details. NOTE: this issue may be partially covered by CVE-2009-0205.</vuln:summary>
  </entry>
  <entry id="CVE-2008-4562">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.0.1::hp_ux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.0.1::linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.0.1::solaris"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.0.1::windows"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51:-:hp-ux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51:-:linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51:-:solaris"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51:-:windows"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53:-:hp-ux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53:-:linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53:-:solaris"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53:-:windows"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.0.1::hp_ux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.0.1::linux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.0.1::solaris</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.0.1::windows</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51:-:hp-ux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51:-:linux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51:-:solaris</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51:-:windows</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53:-:hp-ux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53:-:linux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53:-:solaris</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53:-:windows</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-4562</vuln:cve-id>
    <vuln:published-datetime>2009-02-08T16:30:09.750-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:56:38.097-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610" xml:lang="en">SSRT080100</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>IDEFENSE</vuln:source>
      <vuln:reference href="http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=772" xml:lang="en">20090206 HP Network Node Manager ovlaunch CGI BSS Overflow Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:summary>Buffer overflow in the ovlaunch CGI program in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 on Windows allows remote attackers to execute arbitrary code via a crafted Host parameter. NOTE: this issue may be partially covered by CVE-2009-0205.</vuln:summary>
  </entry>
  <entry id="CVE-2008-5110">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:balabit:syslog-ng"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:balabit:syslog-ng</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-5110</vuln:cve-id>
    <vuln:published-datetime>2008-11-17T17:21:27.063-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:56:51.317-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505791" xml:lang="en">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505791</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083" xml:lang="en">SSRT100018</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200907-10.xml" xml:lang="en">GLSA-200907-10</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2008/11/17/3" xml:lang="en">[oss-security] 20081117 CVE Request (syslog-ng)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/1796" xml:lang="en">ADV-2010-1796</vuln:reference>
    </vuln:references>
    <vuln:summary>syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the intended jail.  NOTE: this is only a vulnerability when a separate vulnerability is present.</vuln:summary>
  </entry>
  <entry id="CVE-2008-5345">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_04"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_05"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_06"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_07"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_08"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_09"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_18"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_19"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_20"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_21"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_22"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_23"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_7"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_8"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_9"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_18"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update7"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update8"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update9"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_7"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_9"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update11_b03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update7"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update7_b03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update8"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update9"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_7"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_01"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_01a"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_02"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_04"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_05"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_06"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_07"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_08"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_09"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_18"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_19"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_20"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_21"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_22"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_23"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_7"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_8"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_09"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_18"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:-</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update1</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update10</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update11</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update11_b03</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update12</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update13</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update14</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update15</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update16</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update2</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update3</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update4</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update5</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update6</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update7</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update7_b03</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update8</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update9</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:-</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_10</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_3</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_4</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_5</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_6</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_7</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_03</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_04</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_05</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_06</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_07</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_08</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_09</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_11</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_12</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_13</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_14</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_15</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_16</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_17</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_18</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_19</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_20</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_21</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_22</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_23</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_3</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_4</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_5</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_6</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_7</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_8</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_9</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_11</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_12</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_13</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_14</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_15</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_16</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_17</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_18</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:-</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update11</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update12</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update13</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update14</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update15</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update16</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update3</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update4</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update5</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update6</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update7</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update8</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update9</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:-</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_3</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_4</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_5</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_6</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_7</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_9</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_01</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_01a</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_02</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_03</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_04</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_05</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_06</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_07</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_08</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_09</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_10</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_11</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_12</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_13</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_14</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_15</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_16</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_17</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_18</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_19</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_20</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_21</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_22</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_23</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_1</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_2</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_03</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_4</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_5</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_6</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_7</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_8</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_09</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_10</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_11</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_12</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_13</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_14</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_15</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_16</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_17</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_18</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-5345</vuln:cve-id>
    <vuln:published-datetime>2008-12-05T06:30:00.393-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:56:57.240-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6059" name="oval:org.mitre.oval:def:6059"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html" xml:lang="en">SUSE-SA:2009:007</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html" xml:lang="en">SUSE-SA:2009:018</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" xml:lang="en">SUSE-SR:2009:010</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=123678756409861&amp;w=2" xml:lang="en">SSRT080111</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=126583436323697&amp;w=2" xml:lang="en">SSRT090049</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2008-1018.html" xml:lang="en">RHSA-2008:1018</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2008-1025.html" xml:lang="en">RHSA-2008:1025</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200911-02.xml" xml:lang="en">GLSA-200911-02</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-246387-1" xml:lang="en">246387</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm" xml:lang="en">http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&amp;DocumentOID=829914&amp;poid=" xml:lang="en">http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&amp;DocumentOID=829914&amp;poid=</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2009-0015.html" xml:lang="en">RHSA-2009:0015</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2009-0016.html" xml:lang="en">RHSA-2009:0016</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2009-0445.html" xml:lang="en">RHSA-2009:0445</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1021305" xml:lang="en">1021305</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA08-340A.html" xml:lang="en">TA08-340A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/3339" xml:lang="en">ADV-2008-3339</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/0672" xml:lang="en">ADV-2009-0672</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf" xml:lang="en">http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="https://rhn.redhat.com/errata/RHSA-2009-0466.html" xml:lang="en">RHSA-2009:0466</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read arbitrary files and make unauthorized connections to localhost via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2008-5357">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_04"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_05"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_06"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_07"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_08"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_09"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_18"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_19"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_20"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_21"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_22"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_23"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_7"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_8"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_9"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_18"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_6"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update7"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update7_b03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update8"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update9"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_7"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_01"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_01a"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_02"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_04"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_05"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_06"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_07"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_08"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_09"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_18"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_19"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_20"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_21"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_22"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_23"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_7"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_8"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_09"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_18"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:-</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update1</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update10</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update2</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update3</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update4</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update5</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update6</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update7</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update7_b03</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update8</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update9</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:-</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_10</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_3</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_4</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_5</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_6</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_7</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_03</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_04</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_05</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_06</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_07</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_08</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_09</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_11</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_12</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_13</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_14</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_15</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_16</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_17</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_18</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_19</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_20</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_21</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_22</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_23</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_3</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_4</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_5</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_6</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_7</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_8</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_9</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_11</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_12</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_13</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_14</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_15</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_16</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_17</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_18</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:-</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update11</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update12</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update13</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update14</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update15</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update16</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:-</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_3</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_4</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_5</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_6</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_01</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_01a</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_02</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_03</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_04</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_05</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_06</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_07</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_08</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_09</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_10</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_11</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_12</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_13</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_14</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_15</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_16</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_17</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_18</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_19</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_20</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_21</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_22</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_23</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_1</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_2</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_03</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_4</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_5</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_6</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_7</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_8</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_09</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_10</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_11</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_12</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_13</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_14</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_15</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_16</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_17</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_18</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-5357</vuln:cve-id>
    <vuln:published-datetime>2008-12-05T06:30:00.597-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:56:58.677-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6505" name="oval:org.mitre.oval:def:6505"/>
    <vuln:cwe id="CWE-189"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>IDEFENSE</vuln:source>
      <vuln:reference href="http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=760" xml:lang="en">20081204 Sun Java JRE TrueType Font Parsing Integer Overflow Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html" xml:lang="en">SUSE-SA:2009:007</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html" xml:lang="en">SUSE-SR:2009:006</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html" xml:lang="en">SUSE-SA:2009:018</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" xml:lang="en">SUSE-SR:2009:010</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=123678756409861&amp;w=2" xml:lang="en">SSRT080111</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=126583436323697&amp;w=2" xml:lang="en">SSRT090049</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2008-1018.html" xml:lang="en">RHSA-2008:1018</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2008-1025.html" xml:lang="en">RHSA-2008:1025</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200911-02.xml" xml:lang="en">GLSA-200911-02</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1" xml:lang="en">244987</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm" xml:lang="en">http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm" xml:lang="en">http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&amp;DocumentOID=829914&amp;poid=" xml:lang="en">http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&amp;DocumentOID=829914&amp;poid=</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2009-0016.html" xml:lang="en">RHSA-2009:0016</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2009-0369.html" xml:lang="en">RHSA-2009:0369</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/32608" xml:lang="en">32608</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA08-340A.html" xml:lang="en">TA08-340A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/3339" xml:lang="en">ADV-2008-3339</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/0672" xml:lang="en">ADV-2009-0672</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf" xml:lang="en">http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/47050" xml:lang="en">jre-font-privilege-escalation(47050)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="https://rhn.redhat.com/errata/RHSA-2009-0466.html" xml:lang="en">RHSA-2009:0466</vuln:reference>
    </vuln:references>
    <vuln:summary>Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file, which triggers a heap-based buffer overflow.</vuln:summary>
  </entry>
  <entry id="CVE-2008-5359">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_04"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_05"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_06"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_07"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_08"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_09"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_18"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_19"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_20"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_21"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_22"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_23"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_7"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_8"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_9"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_18"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_6"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update7"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update7_b03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update8"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update9"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_7"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_01"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_01a"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_02"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_04"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_05"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_06"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_07"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_08"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_09"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_18"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_19"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_20"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_21"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_22"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_23"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_7"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_8"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_09"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_18"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sun:jdk:1.5.0</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update1</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update10</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update2</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update3</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update4</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update5</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update6</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update7</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update7_b03</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update8</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update9</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_10</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_3</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_4</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_5</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_6</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_7</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_03</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_04</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_05</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_06</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_07</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_08</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_09</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_11</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_12</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_13</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_14</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_15</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_16</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_17</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_18</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_19</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_20</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_21</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_22</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_23</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_3</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_4</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_5</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_6</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_7</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_8</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_9</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_11</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_12</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_13</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_14</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_15</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_16</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_17</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_18</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update11</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update12</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update13</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update14</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update15</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update16</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_3</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_4</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_5</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_6</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_01</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_01a</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_02</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_03</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_04</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_05</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_06</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_07</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_08</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_09</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_10</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_11</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_12</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_13</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_14</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_15</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_16</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_17</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_18</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_19</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_20</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_21</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_22</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_23</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_1</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_2</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_03</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_4</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_5</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_6</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_7</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_8</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_09</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_10</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_11</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_12</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_13</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_14</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_15</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_16</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_17</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_18</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-5359</vuln:cve-id>
    <vuln:published-datetime>2008-12-05T06:30:00.643-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:56:59.037-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5841" name="oval:org.mitre.oval:def:5841"/>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html" xml:lang="en">SUSE-SA:2009:007</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html" xml:lang="en">SUSE-SR:2009:006</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html" xml:lang="en">SUSE-SA:2009:018</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" xml:lang="en">SUSE-SR:2009:010</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=123678756409861&amp;w=2" xml:lang="en">SSRT080111</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=126583436323697&amp;w=2" xml:lang="en">SSRT090049</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2008-1018.html" xml:lang="en">RHSA-2008:1018</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2008-1025.html" xml:lang="en">RHSA-2008:1025</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200911-02.xml" xml:lang="en">GLSA-200911-02</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1" xml:lang="en">244987</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm" xml:lang="en">http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm" xml:lang="en">http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&amp;DocumentOID=829914&amp;poid=" xml:lang="en">http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&amp;DocumentOID=829914&amp;poid=</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2009-0015.html" xml:lang="en">RHSA-2009:0015</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2009-0016.html" xml:lang="en">RHSA-2009:0016</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2009-0445.html" xml:lang="en">RHSA-2009:0445</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/32608" xml:lang="en">32608</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA08-340A.html" xml:lang="en">TA08-340A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/3339" xml:lang="en">ADV-2008-3339</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/0672" xml:lang="en">ADV-2009-0672</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.zerodayinitiative.com/advisories/ZDI-08-080/" xml:lang="en">http://www.zerodayinitiative.com/advisories/ZDI-08-080/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf" xml:lang="en">http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/47048" xml:lang="en">jre-image-processing-privilege-escalation(47048)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="https://rhn.redhat.com/errata/RHSA-2009-0466.html" xml:lang="en">RHSA-2009:0466</vuln:reference>
    </vuln:references>
    <vuln:summary>Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the Java AWT library.</vuln:summary>
  </entry>
  <entry id="CVE-2008-5360">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update11_b03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.5.0:update2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jdk:1.6.0:update_7"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_04"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_05"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_06"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_07"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_08"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_09"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_18"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_19"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_20"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_21"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_22"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.3.1_23"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_7"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_8"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_9"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.4.2_18"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.5.0:update2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_3"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:jre:1.6.0:update_6"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_01"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_01a"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_02"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_04"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_05"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_06"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_07"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_08"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_09"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_18"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_19"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_20"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_21"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_22"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.3.1_23"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_1"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_2"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_03"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_4"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_5"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_6"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_7"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_8"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_09"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_10"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_11"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_12"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_13"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_14"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_15"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_16"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_17"/>
        <cpe-lang:fact-ref name="cpe:/a:sun:sdk:1.4.2_18"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:-</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update1</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update10</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update11</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update11_b03</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update12</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update13</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update14</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update15</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update16</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.5.0:update2</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:-</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_10</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_3</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_4</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_5</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_6</vuln:product>
      <vuln:product>cpe:/a:sun:jdk:1.6.0:update_7</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_03</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_04</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_05</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_06</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_07</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_08</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_09</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_11</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_12</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_13</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_14</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_15</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_16</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_17</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_18</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_19</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_20</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_21</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_22</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.3.1_23</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_3</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_4</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_5</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_6</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_7</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_8</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_9</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_11</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_12</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_13</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_14</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_15</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_16</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_17</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.4.2_18</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update11</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update12</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update13</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update14</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update15</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update16</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.5.0:update2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_1</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_10</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_2</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_3</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_4</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_5</vuln:product>
      <vuln:product>cpe:/a:sun:jre:1.6.0:update_6</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_01</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_01a</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_02</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_03</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_04</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_05</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_06</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_07</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_08</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_09</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_10</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_11</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_12</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_13</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_14</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_15</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_16</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_17</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_18</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_19</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_20</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_21</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_22</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.3.1_23</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_1</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_2</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_03</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_4</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_5</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_6</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_7</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_8</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_09</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_10</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_11</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_12</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_13</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_14</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_15</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_16</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_17</vuln:product>
      <vuln:product>cpe:/a:sun:sdk:1.4.2_18</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-5360</vuln:cve-id>
    <vuln:published-datetime>2008-12-05T06:30:00.657-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:56:59.347-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.4</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6596" name="oval:org.mitre.oval:def:6596"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html" xml:lang="en">SUSE-SA:2009:007</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html" xml:lang="en">SUSE-SR:2009:006</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html" xml:lang="en">SUSE-SA:2009:018</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html" xml:lang="en">SUSE-SR:2009:010</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=123678756409861&amp;w=2" xml:lang="en">SSRT080111</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=126583436323697&amp;w=2" xml:lang="en">SSRT090049</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2008-1018.html" xml:lang="en">RHSA-2008:1018</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2008-1025.html" xml:lang="en">RHSA-2008:1025</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-200911-02.xml" xml:lang="en">GLSA-200911-02</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-244986-1" xml:lang="en">244986</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.avaya.com/elmodocs2/security/ASA-2008-484.htm" xml:lang="en">http://support.avaya.com/elmodocs2/security/ASA-2008-484.htm</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm" xml:lang="en">http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&amp;DocumentOID=829914&amp;poid=" xml:lang="en">http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&amp;DocumentOID=829914&amp;poid=</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2009-0015.html" xml:lang="en">RHSA-2009:0015</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2009-0016.html" xml:lang="en">RHSA-2009:0016</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2009-0445.html" xml:lang="en">RHSA-2009:0445</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/32608" xml:lang="en">32608</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1021316" xml:lang="en">1021316</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA08-340A.html" xml:lang="en">TA08-340A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2008/3339" xml:lang="en">ADV-2008-3339</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/0672" xml:lang="en">ADV-2009-0672</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf" xml:lang="en">http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/47045" xml:lang="en">jre-guessable-file-unauth-access(47045)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="https://rhn.redhat.com/errata/RHSA-2009-0466.html" xml:lang="en">RHSA-2009:0466</vuln:reference>
    </vuln:references>
    <vuln:summary>Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2008-6586">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:utorrent:utorrent_webui:0.315"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:utorrent:utorrent_webui:0.315</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2008-6586</vuln:cve-id>
    <vuln:published-datetime>2009-04-03T14:30:00.250-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T07:29:12.940-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/491066/100/0/threaded" xml:lang="en">20080418 BitTorrent Clients and CSRF</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/28847" xml:lang="en">28847</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/41926" xml:lang="en">torrentflux-admin-csrf(41926)</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site request forgery (CSRF) vulnerability in gui/index.php in ?Torrent (uTorrent) WebUI 0.315 allows remote attackers to (1) hijack the authentication of users for requests that force the download of arbitrary torrent files via the add-url action and (2) hijack the authentication of administrators for requests that modify the administrator account via the setsetting action.</vuln:summary>
  </entry>
  <entry id="CVE-2009-0208">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:virtual_rooms:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:virtual_rooms:7.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:virtual_rooms:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:virtual_rooms:7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2009-0208</vuln:cve-id>
    <vuln:published-datetime>2009-02-26T18:30:00.420-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:57:49.787-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=123567121722181&amp;w=2" xml:lang="en">SSRT080135</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Virtual Rooms Client before 7.0.1, when running on Windows, allows remote attackers to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2009-0714">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
          <cpe-lang:fact-ref name="cpe:/o:novell:netware"/>
          <cpe-lang:fact-ref name="cpe:/o:redhat:linux"/>
          <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:3.5:sp1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:3.5:sp2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:3.5:sp2:~~sse~~~"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:4.0:sp1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:4.0:sp1:~~sse~~~"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:data_protector_express:3.5:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:3.5:sp2</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:3.5:sp2:~~sse~~~</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:4.0:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:4.0:sp1:~~sse~~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2009-0714</vuln:cve-id>
    <vuln:published-datetime>2009-05-14T13:30:00.547-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:58:01.570-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01697543" xml:lang="en">HPSBMA02417</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://ivizsecurity.com/security-advisory-iviz-sr-09002.html" xml:lang="en">http://ivizsecurity.com/security-advisory-iviz-sr-09002.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/34955" xml:lang="en">34955</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1022220" xml:lang="en">1022220</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/1309" xml:lang="en">ADV-2009-1309</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/9006" xml:lang="en">9006</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/9007" xml:lang="en">9007</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application crash) or read portions of memory via one or more crafted packets.</vuln:summary>
  </entry>
  <entry id="CVE-2009-0721">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:remote_graphics_software:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:remote_graphics_software:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:remote_graphics_software:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:remote_graphics_software:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:remote_graphics_software:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:remote_graphics_software:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:remote_graphics_software:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:remote_graphics_software:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:remote_graphics_software:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:remote_graphics_software:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:remote_graphics_software:4.2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:remote_graphics_software:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:remote_graphics_software:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:remote_graphics_software:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:remote_graphics_software:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:remote_graphics_software:5.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:remote_graphics_software:5.2.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:remote_graphics_software:4.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:remote_graphics_software:4.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:remote_graphics_software:4.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:remote_graphics_software:4.0.3</vuln:product>
      <vuln:product>cpe:/a:hp:remote_graphics_software:4.1.3</vuln:product>
      <vuln:product>cpe:/a:hp:remote_graphics_software:4.1.4</vuln:product>
      <vuln:product>cpe:/a:hp:remote_graphics_software:4.2.0</vuln:product>
      <vuln:product>cpe:/a:hp:remote_graphics_software:4.2.1</vuln:product>
      <vuln:product>cpe:/a:hp:remote_graphics_software:4.2.2</vuln:product>
      <vuln:product>cpe:/a:hp:remote_graphics_software:4.2.3</vuln:product>
      <vuln:product>cpe:/a:hp:remote_graphics_software:4.2.4</vuln:product>
      <vuln:product>cpe:/a:hp:remote_graphics_software:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:remote_graphics_software:5.1.1</vuln:product>
      <vuln:product>cpe:/a:hp:remote_graphics_software:5.1.3</vuln:product>
      <vuln:product>cpe:/a:hp:remote_graphics_software:5.1.5</vuln:product>
      <vuln:product>cpe:/a:hp:remote_graphics_software:5.2.0</vuln:product>
      <vuln:product>cpe:/a:hp:remote_graphics_software:5.2.4</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2009-0721</vuln:cve-id>
    <vuln:published-datetime>2009-05-18T14:30:00.843-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:58:02.180-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1022221" xml:lang="en">1022221</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01731970" xml:lang="en">SSRT090069</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/34980" xml:lang="en">34980</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/1323" xml:lang="en">ADV-2009-1323</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Easy Login in the Sender module in HP Remote Graphics Software (RGS) 4.0.0 through 5.2.4 allows remote attackers to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2009-0783">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:4.1.9:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:4.1.24"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:4.1.28"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:4.1.29"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:4.1.31"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:4.1.36"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.20"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.21"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.22"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.23"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.24"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.25"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.26"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:5.5.27"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.1:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.2:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.4:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.6:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.7:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.7:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.8:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.9:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:tomcat:6.0.18"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:apache:tomcat:4.1.0</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:4.1.1</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:4.1.2</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:4.1.3</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:4.1.9:beta</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:4.1.10</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:4.1.12</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:4.1.15</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:4.1.24</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:4.1.28</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:4.1.29</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:4.1.31</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:4.1.36</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.0</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.1</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.2</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.3</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.4</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.5</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.6</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.7</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.8</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.9</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.10</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.11</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.12</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.13</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.14</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.15</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.16</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.17</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.18</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.19</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.20</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.21</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.22</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.23</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.24</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.25</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.26</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:5.5.27</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.0</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.0:alpha</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.1</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.1:alpha</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.2</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.2:alpha</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.2:beta</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.3</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.4</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.4:alpha</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.5</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.6</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.6:alpha</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.7</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.7:alpha</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.7:beta</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.8</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.8:alpha</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.9</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.9:beta</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.10</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.11</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.12</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.13</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.14</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.15</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.16</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.17</vuln:product>
      <vuln:product>cpe:/a:apache:tomcat:6.0.18</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2009-0783</vuln:cve-id>
    <vuln:published-datetime>2009-06-05T12:00:00.267-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:58:03.930-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10716" name="oval:org.mitre.oval:def:10716"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18913" name="oval:org.mitre.oval:def:18913"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6450" name="oval:org.mitre.oval:def:6450"/>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html" xml:lang="en">APPLE-SA-2010-03-29-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html" xml:lang="en">SUSE-SR:2009:012</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=127420533226623&amp;w=2" xml:lang="en">HPSBMA02535</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=129070310906557&amp;w=2" xml:lang="en">HPSBUX02579</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136485229118404&amp;w=2" xml:lang="en">HPSBUX02860</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUNALERT</vuln:source>
      <vuln:reference href="http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1" xml:lang="en">263529</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT4077" xml:lang="en">http://support.apple.com/kb/HT4077</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://svn.apache.org/viewvc?rev=652592&amp;view=rev" xml:lang="en">http://svn.apache.org/viewvc?rev=652592&amp;view=rev</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://svn.apache.org/viewvc?rev=681156&amp;view=rev" xml:lang="en">http://svn.apache.org/viewvc?rev=681156&amp;view=rev</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://svn.apache.org/viewvc?rev=739522&amp;view=rev" xml:lang="en">http://svn.apache.org/viewvc?rev=739522&amp;view=rev</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://svn.apache.org/viewvc?rev=781542&amp;view=rev" xml:lang="en">http://svn.apache.org/viewvc?rev=781542&amp;view=rev</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://svn.apache.org/viewvc?rev=781708&amp;view=rev" xml:lang="en">http://svn.apache.org/viewvc?rev=781708&amp;view=rev</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://tomcat.apache.org/security-4.html" xml:lang="en">http://tomcat.apache.org/security-4.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://tomcat.apache.org/security-5.html" xml:lang="en">http://tomcat.apache.org/security-5.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://tomcat.apache.org/security-6.html" xml:lang="en">http://tomcat.apache.org/security-6.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2011/dsa-2207" xml:lang="en">DSA-2207</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2009:136" xml:lang="en">MDVSA-2009:136</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2009:138" xml:lang="en">MDVSA-2009:138</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2010:176" xml:lang="en">MDVSA-2010:176</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/504090/100/0/threaded" xml:lang="en">20090604 [SECURITY] CVE-2009-0783 Apache Tomcat Information disclosure</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/507985/100/0/threaded" xml:lang="en">20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/35416" xml:lang="en">35416</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1022336" xml:lang="en">1022336</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.vmware.com/security/advisories/VMSA-2009-0016.html" xml:lang="en">http://www.vmware.com/security/advisories/VMSA-2009-0016.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/1856" xml:lang="en">ADV-2009-1856</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/3316" xml:lang="en">ADV-2009-3316</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/3056" xml:lang="en">ADV-2010-3056</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/51195" xml:lang="en">tomcat-xml-information-disclosure(51195)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.apache.org/bugzilla/show_bug.cgi?id=29936" xml:lang="en">https://issues.apache.org/bugzilla/show_bug.cgi?id=29936</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.apache.org/bugzilla/show_bug.cgi?id=45933" xml:lang="en">https://issues.apache.org/bugzilla/show_bug.cgi?id=45933</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E" xml:lang="en">[tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E" xml:lang="en">[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E" xml:lang="en">[tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E" xml:lang="en">[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html" xml:lang="en">FEDORA-2009-11374</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html" xml:lang="en">FEDORA-2009-11352</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html" xml:lang="en">FEDORA-2009-11356</vuln:reference>
    </vuln:references>
    <vuln:summary>Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.</vuln:summary>
  </entry>
  <entry id="CVE-2009-1419">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:discovery%26dependency_mapping_inventory:2.0.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:discovery%26dependency_mapping_inventory:2.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:discovery%26dependency_mapping_inventory:2.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:discovery%26dependency_mapping_inventory:2.0.3"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:discovery%26dependency_mapping_inventory:2.0.4"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:discovery%26dependency_mapping_inventory:2.1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:discovery%26dependency_mapping_inventory:2.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:discovery%26dependency_mapping_inventory:2.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:discovery%26dependency_mapping_inventory:2.1.3"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:discovery%26dependency_mapping_inventory:2.20"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:discovery%26dependency_mapping_inventory:2.21"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:discovery%26dependency_mapping_inventory:2.22"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:discovery%26dependency_mapping_inventory:2.50"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:discovery%26dependency_mapping_inventory:2.51"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:discovery%26dependency_mapping_inventory:2.52"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:discovery%26dependency_mapping_inventory:7.50"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:discovery%26dependency_mapping_inventory:7.51"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:discovery%26dependency_mapping_inventory:2.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:discovery%26dependency_mapping_inventory:2.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:discovery%26dependency_mapping_inventory:2.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:discovery%26dependency_mapping_inventory:2.0.3</vuln:product>
      <vuln:product>cpe:/a:hp:discovery%26dependency_mapping_inventory:2.0.4</vuln:product>
      <vuln:product>cpe:/a:hp:discovery%26dependency_mapping_inventory:2.1.0</vuln:product>
      <vuln:product>cpe:/a:hp:discovery%26dependency_mapping_inventory:2.1.1</vuln:product>
      <vuln:product>cpe:/a:hp:discovery%26dependency_mapping_inventory:2.1.2</vuln:product>
      <vuln:product>cpe:/a:hp:discovery%26dependency_mapping_inventory:2.1.3</vuln:product>
      <vuln:product>cpe:/a:hp:discovery%26dependency_mapping_inventory:2.20</vuln:product>
      <vuln:product>cpe:/a:hp:discovery%26dependency_mapping_inventory:2.21</vuln:product>
      <vuln:product>cpe:/a:hp:discovery%26dependency_mapping_inventory:2.22</vuln:product>
      <vuln:product>cpe:/a:hp:discovery%26dependency_mapping_inventory:2.50</vuln:product>
      <vuln:product>cpe:/a:hp:discovery%26dependency_mapping_inventory:2.51</vuln:product>
      <vuln:product>cpe:/a:hp:discovery%26dependency_mapping_inventory:2.52</vuln:product>
      <vuln:product>cpe:/a:hp:discovery%26dependency_mapping_inventory:7.50</vuln:product>
      <vuln:product>cpe:/a:hp:discovery%26dependency_mapping_inventory:7.51</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2009-1419</vuln:cve-id>
    <vuln:published-datetime>2009-06-07T21:00:00.610-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:58:20.117-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>HIGH</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=124423677616704&amp;w=2" xml:lang="en">HPSBMA02433</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/35250" xml:lang="en">35250</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1022339" xml:lang="en">1022339</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/1514" xml:lang="en">ADV-2009-1514</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Discovery &amp; Dependency Mapping Inventory (DDMI) 2.0.0 through 2.52, 7.50, and 7.51 on Windows allows remote attackers to access DDMI agents via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2009-1421">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:hp-ux:b.11.31"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:oncplus:b.11.31_06"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:oncplus:b.11.31_07"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:oncplus:b.11.31_06</vuln:product>
      <vuln:product>cpe:/a:hp:oncplus:b.11.31_07</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2009-1421</vuln:cve-id>
    <vuln:published-datetime>2009-07-02T06:30:00.327-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:58:20.447-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.9</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=124654506100944&amp;w=2" xml:lang="en">SSRT090106</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1022493" xml:lang="en">1022493</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/35547" xml:lang="en">35547</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/1755" xml:lang="en">ADV-2009-1755</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in NFS / ONCplus B.11.31_06 and B.11.31_07 on HP HP-UX B.11.31 allows local users to cause a denial of service via unknown attack vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2009-1422">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_threat_management_services_zl_module:st.1.0.090213"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_5400zl:k.13.40"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_8200zl:k.13.40"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:procurve_threat_management_services_zl_module:st.1.0.090213</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2009-1422</vuln:cve-id>
    <vuln:published-datetime>2009-07-14T16:30:00.280-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:58:20.603-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=124751363528317&amp;w=2" xml:lang="en">SSRT090111</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1022536" xml:lang="en">1022536</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/1869" xml:lang="en">ADV-2009-1869</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to gain privileges via unknown vectors, aka PR_41209.</vuln:summary>
  </entry>
  <entry id="CVE-2009-1424">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_threat_management_services_zl_module:st.1.0.090213"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_5400zl:k.13.40"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_8200zl:k.13.40"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:procurve_threat_management_services_zl_module:st.1.0.090213</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2009-1424</vuln:cve-id>
    <vuln:published-datetime>2009-07-14T16:30:00.327-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:58:20.820-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=124751363528317&amp;w=2" xml:lang="en">SSRT090111</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1022536" xml:lang="en">1022536</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/1869" xml:lang="en">ADV-2009-1869</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service via unknown vectors, aka PR_39412, a different vulnerability than CVE-2009-1423 and CVE-2009-1425.</vuln:summary>
  </entry>
  <entry id="CVE-2009-1784">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:avg:avg_anti-virus:6.0.710"/>
        <cpe-lang:fact-ref name="cpe:/a:avg:avg_anti-virus:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:avg:avg_anti-virus:7.0.251"/>
        <cpe-lang:fact-ref name="cpe:/a:avg:avg_anti-virus:7.0.323"/>
        <cpe-lang:fact-ref name="cpe:/a:avg:avg_anti-virus:7.1.308"/>
        <cpe-lang:fact-ref name="cpe:/a:avg:avg_anti-virus:7.1.407"/>
        <cpe-lang:fact-ref name="cpe:/a:avg:avg_anti-virus:7.5.51"/>
        <cpe-lang:fact-ref name="cpe:/a:avg:avg_anti-virus:7.5.448"/>
        <cpe-lang:fact-ref name="cpe:/a:avg:avg_anti-virus:7.5.476"/>
        <cpe-lang:fact-ref name="cpe:/a:avg:avg_anti-virus:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:avg:avg_anti-virus:8.0.156"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:avg:avg_anti-virus:6.0.710</vuln:product>
      <vuln:product>cpe:/a:avg:avg_anti-virus:7.0</vuln:product>
      <vuln:product>cpe:/a:avg:avg_anti-virus:7.0.251</vuln:product>
      <vuln:product>cpe:/a:avg:avg_anti-virus:7.0.323</vuln:product>
      <vuln:product>cpe:/a:avg:avg_anti-virus:7.1.308</vuln:product>
      <vuln:product>cpe:/a:avg:avg_anti-virus:7.1.407</vuln:product>
      <vuln:product>cpe:/a:avg:avg_anti-virus:7.5.51</vuln:product>
      <vuln:product>cpe:/a:avg:avg_anti-virus:7.5.448</vuln:product>
      <vuln:product>cpe:/a:avg:avg_anti-virus:7.5.476</vuln:product>
      <vuln:product>cpe:/a:avg:avg_anti-virus:8.0</vuln:product>
      <vuln:product>cpe:/a:avg:avg_anti-virus:8.0.156</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2009-1784</vuln:cve-id>
    <vuln:published-datetime>2009-05-22T16:30:00.920-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T07:30:13.473-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://blog.zoller.lu/2009/04/avg-zip-evasion-bypass.html" xml:lang="en">http://blog.zoller.lu/2009/04/avg-zip-evasion-bypass.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/503392/100/0/threaded" xml:lang="en">20090509 [TZO-20-2009] AVG ZIP evasion / bypass</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/34895" xml:lang="en">34895</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/50426" xml:lang="en">avg-zip-security-bypass(50426)</vuln:reference>
    </vuln:references>
    <vuln:summary>The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerk Edition, Server Edition f?r Linux/FreeBSD, Anti-Virus SBS Edition, and others allows remote attackers to bypass malware detection via a crafted (1) RAR and (2) ZIP archive.</vuln:summary>
  </entry>
  <entry id="CVE-2009-2446">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.5.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.22.1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.24a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.30"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.30:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.32"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.33"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.36"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.37"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.38"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.41"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.42"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.44"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.45"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.50"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.51"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.51a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.51b"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.52"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.54"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.56"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.60"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.66"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.75"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.77"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.81"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.82"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.83"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.19"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.25</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.26</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.5.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.20a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.22.1.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.24a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.25</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.26</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.30</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.30:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.32</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.33</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.36</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.37</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.38</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.41</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.42</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.44</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.45</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.50</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.51</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.51a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.51b</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.52</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.54</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.56</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.60</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.66</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.75</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.77</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.81</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.82</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.83</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.19</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2009-2446</vuln:cve-id>
    <vuln:published-datetime>2009-07-13T13:30:00.217-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:35.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>8.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11857" name="oval:org.mitre.oval:def:11857"/>
    <vuln:cwe id="CWE-134"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0058.html" xml:lang="en">20090708 MySQL &lt;= 5.0.45 post auth format string vulnerability</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html" xml:lang="en">APPLE-SA-2010-03-29-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1022533" xml:lang="en">1022533</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT4077" xml:lang="en">http://support.apple.com/kb/HT4077</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://ubuntu.com/usn/usn-897-1" xml:lang="en">USN-897-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2009:179" xml:lang="en">MDVSA-2009:179</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2009-1289.html" xml:lang="en">RHSA-2009:1289</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0110.html" xml:lang="en">RHSA-2010:0110</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/504799/100/0/threaded" xml:lang="en">20090708 MySQL &lt;= 5.0.45 post auth format string vulnerability</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/35609" xml:lang="en">35609</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-1397-1" xml:lang="en">USN-1397-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/1857" xml:lang="en">ADV-2009-1857</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/51614" xml:lang="en">mysql-dispatchcommand-format-string(51614)</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request.  NOTE: some of these details are obtained from third party information.</vuln:summary>
  </entry>
  <entry id="CVE-2009-2681">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:procurve_identity_driven_manager:a.02.03"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:procurve_identity_driven_manager:a.03.00"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2003"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2008"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:procurve_identity_driven_manager:a.02.03</vuln:product>
      <vuln:product>cpe:/a:hp:procurve_identity_driven_manager:a.03.00</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2009-2681</vuln:cve-id>
    <vuln:published-datetime>2009-09-29T14:00:00.267-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:58:50.853-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01798159" xml:lang="en">SSRT090082</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1022915" xml:lang="en">1022915</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/36462" xml:lang="en">36462</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/2707" xml:lang="en">ADV-2009-2707</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP ProCurve Identity Driven Manager (IDM) A.02.x through A.02.03 and A.03.x through A.03.00, on Windows Server 2003 with IAS and Windows Server 2008 with NPS, allows local users to gain privileges via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2009-2686">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.04.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.04.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.04.02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.07.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.08.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.12.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.13.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.14.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.15.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.15.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.15.02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.16.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.16.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.17.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.17.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.18.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.18.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.27"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.28"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.29"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:g06.30"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:j06.05.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:j06.05.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:j06.06.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:j06.06.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:j06.06.02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server:j06.07.00"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:nonstop_server:g06.29"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.04.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.04.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.04.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.07.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.08.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.12.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.13.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.14.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.15.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.15.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.15.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.16.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.16.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.17.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.17.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.18.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.18.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.27</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.28</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.29</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:g06.30</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:j06.05.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:j06.05.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:j06.06.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:j06.06.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:j06.06.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server:j06.07.00</vuln:product>
      <vuln:product>cpe:/h:hp:nonstop_server:g06.29</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2009-2686</vuln:cve-id>
    <vuln:published-datetime>2009-12-02T11:30:00.407-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:58:51.323-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2009/3373" xml:lang="en">ADV-2009-3373</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01923646" xml:lang="en">SSRT090068</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP NonStop G06.12.00 through G06.32.00, H06.08.00 through H06.18.01, and J06.04.00 through J06.07.01 allows local users to gain privileges, cause a denial of service, or obtain "access to data" via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2009-4000">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:power_manager:4.2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:power_manager:4.2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:power_manager:4.2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:power_manager:4.2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:power_manager:4.2.9"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:power_manager:4.2.5</vuln:product>
      <vuln:product>cpe:/a:hp:power_manager:4.2.6</vuln:product>
      <vuln:product>cpe:/a:hp:power_manager:4.2.7</vuln:product>
      <vuln:product>cpe:/a:hp:power_manager:4.2.8</vuln:product>
      <vuln:product>cpe:/a:hp:power_manager:4.2.9</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2009-4000</vuln:cve-id>
    <vuln:published-datetime>2010-01-20T17:30:00.413-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:59:24.307-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=126393370331959&amp;w=2" xml:lang="en">HPSBMA02485</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1023470" xml:lang="en">1023470</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/37873" xml:lang="en">37873</vuln:reference>
    </vuln:references>
    <vuln:summary>Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2009-4182">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:web_jetadmin:10.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:web_jetadmin:10.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2009-4182</vuln:cve-id>
    <vuln:published-datetime>2010-01-14T13:30:00.420-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:59:29.293-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=126341293311108&amp;w=2" xml:lang="en">SSRT090263</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/37787" xml:lang="en">37787</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple unspecified vulnerabilities in HP Web Jetadmin 10.2, when a remote SQL server is used, allow remote attackers to obtain access to data or cause a denial of service, possibly by leveraging authentication and encryption weaknesses on the SQL server.</vuln:summary>
  </entry>
  <entry id="CVE-2009-4183">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_storage_data_protector:6.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_storage_data_protector:6.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:openview_storage_data_protector:6.00</vuln:product>
      <vuln:product>cpe:/a:hp:openview_storage_data_protector:6.10</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2009-4183</vuln:cve-id>
    <vuln:published-datetime>2010-01-28T15:30:01.387-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:59:29.433-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=126461112019142&amp;w=2" xml:lang="en">SSRT090171</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/37964" xml:lang="en">37964</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP OpenView Storage Data Protector 6.00 and 6.10 allows local users to obtain unspecified "access" via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2009-5093">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:php4scripte:gastebuch:1.6"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:php4scripte:gastebuch:1.6</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2009-5093</vuln:cve-id>
    <vuln:published-datetime>2011-09-12T08:40:39.737-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T07:31:30.117-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="http://www.exploit-db.com/exploits/8027" xml:lang="en">8027</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/33707" xml:lang="en">33707</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/48644" xml:lang="en">gastbuch-gastbuch-file-include(48644)</vuln:reference>
    </vuln:references>
    <vuln:summary>Directory traversal vulnerability in gastbuch.php in G?stebuch (Gastebuch) 1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the start parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2010-0104">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:broadcom:broadcom:integrated_nic_management_firmware:1.24.0.9"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:compaq_6005_pro_microtower_pc"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:compaq_6005_small_form_factor_pc"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:broadcom:broadcom:integrated_nic_management_firmware:8.0.4"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:compaq_dc5700_pro_microtower_pc"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:compaq_dc5700_small_form_factor_pc"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:compaq_dc5750_microtower_pc"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:compaq_dc5750_small_form_factor_pc"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:compaq_dc5850_microtower_pc"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:compaq_dc5850_small_form_factor_pc"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:compaq_dc7600_convertible_minitower_pc"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:compaq_dc7600_desktop_pc"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:compaq_dc7600_small_form_factor_pc"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:compaq_dc7600_ultra-slim_desktop_pc"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:compaq_dx7200_microtower_pc"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:compaq_rp3000_point_of_sale_system"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:compaq_rp5700_point_of_sale_system"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:broadcom:broadcom:integrated_nic_management_firmware:1.24.0.9</vuln:product>
      <vuln:product>cpe:/h:broadcom:broadcom:integrated_nic_management_firmware:8.0.4</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-0104</vuln:cve-id>
    <vuln:published-datetime>2010-03-18T13:30:00.383-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T18:59:54.793-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02048471" xml:lang="en">HPSBGN02511</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1023710" xml:lang="en">1023710</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/512705" xml:lang="en">VU#512705</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/38759" xml:lang="en">38759</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/0631" xml:lang="en">ADV-2010-0631</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the Broadcom Integrated NIC Management Firmware 1.x before 1.40.0.0 and 8.x before 8.08 on the HP Small Form Factor and Microtower platforms allows remote attackers to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-0445">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager:8.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager:8.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager:8.12"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager:8.13"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:network_node_manager:8.10</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager:8.11</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager:8.12</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager:8.13</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-0445</vuln:cve-id>
    <vuln:published-datetime>2010-02-11T12:30:00.847-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:03.090-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=126582291202560&amp;w=2" xml:lang="en">SSRT090076</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Network Node Manager (NNM) 8.10, 8.11, 8.12, and 8.13 allows remote attackers to execute arbitrary commands via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-0448">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:soa_registry_foundation:6.63"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:soa_registry_foundation:6.64"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:soa_registry_foundation:6.63</vuln:product>
      <vuln:product>cpe:/a:hp:soa_registry_foundation:6.64</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-0448</vuln:cve-id>
    <vuln:published-datetime>2010-03-31T14:00:00.377-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:03.403-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=126996774125378&amp;w=2" xml:lang="en">SSRT090222</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/39059" xml:lang="en">39059</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1023765" xml:lang="en">1023765</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to obtain "unauthorized access to data" via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-0449">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:soa_registry_foundation:6.63"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:soa_registry_foundation:6.64"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:soa_registry_foundation:6.63</vuln:product>
      <vuln:product>cpe:/a:hp:soa_registry_foundation:6.64</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-0449</vuln:cve-id>
    <vuln:published-datetime>2010-03-31T14:00:00.420-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:03.607-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=126996774125378&amp;w=2" xml:lang="en">HPSBMA02490</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/39060" xml:lang="en">39060</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1023765" xml:lang="en">1023765</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-0450">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:soa_registry_foundation:6.63"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:soa_registry_foundation:6.64"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:soa_registry_foundation:6.63</vuln:product>
      <vuln:product>cpe:/a:hp:soa_registry_foundation:6.64</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-0450</vuln:cve-id>
    <vuln:published-datetime>2010-03-31T14:00:00.453-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:03.717-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>8.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=126996774125378&amp;w=2" xml:lang="en">HPSBMA02490</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/39061" xml:lang="en">39061</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1023765" xml:lang="en">1023765</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote authenticated users to gain privileges via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-0452">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:project_and_portfolio_management_center:7.1:sp10"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:project_and_portfolio_management_center:7.5:sp3"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:hp-ux:b.11.23"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:project_and_portfolio_management_center:7.1:sp10</vuln:product>
      <vuln:product>cpe:/a:hp:project_and_portfolio_management_center:7.5:sp3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-0452</vuln:cve-id>
    <vuln:published-datetime>2010-03-29T14:30:00.610-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:03.887-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=126953216625011&amp;w=2" xml:lang="en">SSRT080064</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1023749" xml:lang="en">1023749</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/38961" xml:lang="en">38961</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple cross-site scripting (XSS) vulnerabilities in HP Project and Portfolio Management Center (PPMC, formerly Mercury IT Governance) 7.1 through SP10 and 7.5 through SP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-1031">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_control_suite_for_linux:2.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_control_suite_for_linux:2.00.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_control_suite_for_linux:2.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_control_suite_for_linux:2.10.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_control_suite_for_linux:2.11"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:insight_control_suite_for_linux:2.00</vuln:product>
      <vuln:product>cpe:/a:hp:insight_control_suite_for_linux:2.00.01</vuln:product>
      <vuln:product>cpe:/a:hp:insight_control_suite_for_linux:2.10</vuln:product>
      <vuln:product>cpe:/a:hp:insight_control_suite_for_linux:2.10.01</vuln:product>
      <vuln:product>cpe:/a:hp:insight_control_suite_for_linux:2.11</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-1031</vuln:cve-id>
    <vuln:published-datetime>2010-04-01T15:30:00.577-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:20.577-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.9</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_ADMIN_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=126996888626964&amp;w=2" xml:lang="en">SSRT090110</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1023771" xml:lang="en">1023771</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/39052" xml:lang="en">39052</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/0750" xml:lang="en">ADV-2010-0750</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Insight Control for Linux (aka IC-Linux or ICE-LX) 2.11 and earlier allows local users to gain privileges via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-1034">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-1034</vuln:cve-id>
    <vuln:published-datetime>2010-04-23T10:30:01.137-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:20.920-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>HIGH</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1023909" xml:lang="en">1023909</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP System Management Homepage (SMH) 6.0 before 6.0.0-95 on Linux, and 6.0 before 6.0.0.96 on Windows, allows remote authenticated users to obtain sensitive information, modify data, and cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-1036">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager::sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:2.5.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.0:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.1:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2:sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0:sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0:sp3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0:sp4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0:sp5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.2:update_1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:systems_insight_manager::sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:2.5</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:2.5.2.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.0:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.1:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2:sp2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0:sp2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0:sp3</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0:sp4</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0:sp5</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.2:update_1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-1036</vuln:cve-id>
    <vuln:published-datetime>2010-04-28T18:30:00.557-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:21.123-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=127239985506823&amp;w=2" xml:lang="en">SSRT100083</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1023927" xml:lang="en">1023927</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/39735" xml:lang="en">39735</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-1037">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager::sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:2.5.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.0:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.1:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2:sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0:sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0:sp3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0:sp4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0:sp5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.2:update_1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:systems_insight_manager::sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:2.5</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:2.5.2.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.0:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.1:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2:sp2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0:sp2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0:sp3</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0:sp4</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0:sp5</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.2:update_1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-1037</vuln:cve-id>
    <vuln:published-datetime>2010-04-28T18:30:00.713-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:21.373-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=127239985506823&amp;w=2" xml:lang="en">SSRT100083</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1023927" xml:lang="en">1023927</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/39736" xml:lang="en">39736</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site request forgery (CSRF) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-1038">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager::sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:2.5.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.0:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.1:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2:sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0:sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0:sp3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0:sp4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0:sp5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.2:update_1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:systems_insight_manager::sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:2.5</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:2.5.2.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.0:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.1:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2:sp2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0:sp2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0:sp3</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0:sp4</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0:sp5</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.2:update_1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-1038</vuln:cve-id>
    <vuln:published-datetime>2010-04-28T18:30:00.760-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:21.467-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:security-protection>ALLOWS_OTHER_ACCESS</vuln:security-protection>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=127239985506823&amp;w=2" xml:lang="en">SSRT100083</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1023927" xml:lang="en">1023927</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/39734" xml:lang="en">39734</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP System Insight Manager before 6.0 allows remote authenticated users to gain privileges via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-1963">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:servicecenter"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:servicecenter</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-1963</vuln:cve-id>
    <vuln:published-datetime>2010-06-07T13:12:48.217-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:42.717-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP ServiceCenter allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-1965">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:insight_orchestration:6.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:insight_orchestration:6.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-1965</vuln:cve-id>
    <vuln:published-datetime>2010-07-15T08:57:20.800-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:42.953-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02280158" xml:lang="en">SSRT100126</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1024183" xml:lang="en">1024183</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/1794" xml:lang="en">ADV-2010-1794</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Insight Orchestration for Windows before 6.1 allows remote attackers to read or modify data via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-1966">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:insight_control:3.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:insight_control:3.10"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:insight_control:6.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:insight_control:3.00</vuln:product>
      <vuln:product>cpe:/a:hp:insight_control:3.10</vuln:product>
      <vuln:product>cpe:/a:hp:insight_control:6.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-1966</vuln:cve-id>
    <vuln:published-datetime>2010-07-15T08:57:21.517-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:43.140-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282361" xml:lang="en">SSRT090158</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1024184" xml:lang="en">1024184</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/1795" xml:lang="en">ADV-2010-1795</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Insight Control power management for Windows before 6.1 allows local users to read or modify data, or cause a denial of service, via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-1967">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:insight_software_installer:3.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:insight_software_installer:3.10"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:insight_software_installer:6.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:insight_software_installer:3.00</vuln:product>
      <vuln:product>cpe:/a:hp:insight_software_installer:3.10</vuln:product>
      <vuln:product>cpe:/a:hp:insight_software_installer:6.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-1967</vuln:cve-id>
    <vuln:published-datetime>2010-07-15T08:57:21.910-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:43.280-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282377" xml:lang="en">SSRT100170</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1024185" xml:lang="en">1024185</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/1792" xml:lang="en">ADV-2010-1792</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Insight Software Installer for Windows before 6.1 allows local users to read or modify data via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-1968">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:insight_software_installer:3.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:insight_software_installer:3.10"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:insight_software_installer:6.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:insight_software_installer:3.00</vuln:product>
      <vuln:product>cpe:/a:hp:insight_software_installer:3.10</vuln:product>
      <vuln:product>cpe:/a:hp:insight_software_installer:6.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-1968</vuln:cve-id>
    <vuln:published-datetime>2010-07-15T08:57:21.940-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:43.390-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282377" xml:lang="en">SSRT100170</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1024185" xml:lang="en">1024185</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/1792" xml:lang="en">ADV-2010-1792</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1971.</vuln:summary>
  </entry>
  <entry id="CVE-2010-1969">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:virtual_connect_enterprise_manager:6.10"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:virtual_connect_enterprise_manager:6.10</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-1969</vuln:cve-id>
    <vuln:published-datetime>2010-07-22T01:43:05.920-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:43.500-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1024181" xml:lang="en">1024181</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/1797" xml:lang="en">ADV-2010-1797</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02283465&amp;admit=109447626+1279054975923+28353475" xml:lang="en">SSRT100165</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP Virtual Connect Enterprise Manager for Windows before 6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-1970">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:insight_software_installer:3.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:insight_software_installer:3.10"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:insight_software_installer:6.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:insight_software_installer:3.00</vuln:product>
      <vuln:product>cpe:/a:hp:insight_software_installer:3.10</vuln:product>
      <vuln:product>cpe:/a:hp:insight_software_installer:6.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-1970</vuln:cve-id>
    <vuln:published-datetime>2010-07-15T08:57:21.987-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:43.607-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388" xml:lang="en">SSRT100184</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1024186" xml:lang="en">1024186</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/1792" xml:lang="en">ADV-2010-1792</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Insight Software Installer for Windows before 6.1 allows local users to read or modify data, and consequently gain privileges, via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-1971">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:insight_software_installer:3.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:insight_software_installer:3.10"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:insight_software_installer:6.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:insight_software_installer:3.00</vuln:product>
      <vuln:product>cpe:/a:hp:insight_software_installer:3.10</vuln:product>
      <vuln:product>cpe:/a:hp:insight_software_installer:6.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-1971</vuln:cve-id>
    <vuln:published-datetime>2010-07-15T08:57:22.020-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:43.717-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388" xml:lang="en">SSRT100184</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1024186" xml:lang="en">1024186</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/1792" xml:lang="en">ADV-2010-1792</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1968.</vuln:summary>
  </entry>
  <entry id="CVE-2010-1972">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:client_automation_enterprise_infrastructure"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:client_automation_enterprise_infrastructure</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-1972</vuln:cve-id>
    <vuln:published-datetime>2010-07-22T01:43:06.110-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:43.857-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-16"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=127905601332098&amp;w=2" xml:lang="en">SSRT100064</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1024191" xml:lang="en">1024191</vuln:reference>
    </vuln:references>
    <vuln:summary>The default configuration of HP Client Automation (HPCA) Enterprise Infrastructure (aka Radia) allows remote attackers to read log files, and consequently cause a denial of service or have unspecified other impact, via web requests.</vuln:summary>
  </entry>
  <entry id="CVE-2010-1973">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:openvms:6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openvms:7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openvms:7.2-1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openvms:7.2-1h1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openvms:7.2-2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openvms:7.2-6c2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openvms:7.3-1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openvms:8.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openvms:8.3"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:openvms:7.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:openvms:8.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openvms:8.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openvms:8.3-1h1"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:openvms:7.3-2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:openvms:6.2</vuln:product>
      <vuln:product>cpe:/a:hp:openvms:7.2</vuln:product>
      <vuln:product>cpe:/a:hp:openvms:7.2-1</vuln:product>
      <vuln:product>cpe:/a:hp:openvms:7.2-1h1</vuln:product>
      <vuln:product>cpe:/a:hp:openvms:7.2-2</vuln:product>
      <vuln:product>cpe:/a:hp:openvms:7.2-6c2</vuln:product>
      <vuln:product>cpe:/a:hp:openvms:7.3-1</vuln:product>
      <vuln:product>cpe:/a:hp:openvms:8.2</vuln:product>
      <vuln:product>cpe:/a:hp:openvms:8.3</vuln:product>
      <vuln:product>cpe:/a:hp:openvms:8.3-1h1</vuln:product>
      <vuln:product>cpe:/o:hp:openvms:7.3</vuln:product>
      <vuln:product>cpe:/o:hp:openvms:7.3-2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-1973</vuln:cve-id>
    <vuln:published-datetime>2010-07-22T01:43:06.140-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:00:43.967-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=127905660900687&amp;w=2" xml:lang="en">SSRT090267</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1024190" xml:lang="en">1024190</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the Auditing subsystem in HP OpenVMS 8.3, 8.2, 7.3-2, and earlier on the ALPHA platform, and 8.3-1H1, 8.3, 8.2-1, and earlier on the Itanium platform, allows local users to gain privileges or obtain sensitive information via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-2705">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.01"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.02"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.03"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.04"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.05"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.06"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.07"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.08"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.09"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.03.00"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.03.01"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.03.02"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_1800-24g"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.01"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.02"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.03"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.04"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.05"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.06"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.07"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.08"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.09"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.03.00"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.03.01"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.03.02"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_1800-8g"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:procurve_switch_1800-24g</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch_1800-8g</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.01</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.02</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.03</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.04</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.05</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.06</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.07</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.08</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.09</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.03.00</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.03.01</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.03.02</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.01</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.02</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.03</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.04</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.05</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.06</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.07</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.08</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.09</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.03.00</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.03.01</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.03.02</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-2705</vuln:cve-id>
    <vuln:published-datetime>2010-08-09T07:58:16.457-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:02.173-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.1</cvss:score>
        <cvss:access-vector>ADJACENT_NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436028" xml:lang="en">HPSBGN02501</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability on the HP ProCurve 1800-24G switch with software PB.03.02 and earlier, and the ProCurve 1800-8G switch with software PA.03.02 and earlier, when SNMP is enabled, allows remote attackers to obtain sensitive information via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-2706">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.04"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.05"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.06"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.07"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.08"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.09"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.10"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.11"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.12"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.13"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.14"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.15"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.16"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.17"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.18"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.19"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.20"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.21"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.22"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.23"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.24"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.25"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.26"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.27"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.28"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.29"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_2610"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_2610-24"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_2610-24-pwr"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_2610-24%2f12pwr"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_2610-48"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_2610-48-pwr"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:procurve_switch_2610</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch_2610-24</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch_2610-24-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch_2610-24%2f12pwr</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch_2610-48</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch_2610-48-pwr</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.04</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.05</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.06</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.07</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.08</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.09</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.10</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.11</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.12</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.13</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.14</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.15</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.16</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.17</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.18</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.19</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.20</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.21</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.22</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.23</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.24</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.25</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.26</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.27</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.28</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.29</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-2706</vuln:cve-id>
    <vuln:published-datetime>2010-08-09T07:58:16.487-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:02.500-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.1</cvss:score>
        <cvss:access-vector>ADJACENT_NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436043" xml:lang="en">SSRT100192</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the In-band Agent on the HP ProCurve 2610 switch before R.11.30 allows remote attackers to cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-2707">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.02"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.03"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.31"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.32"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.41"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.45"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.46"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.50"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.53"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.54"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.55"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.56"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.53"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.55"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.56"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.57"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.58"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.59"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.60"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.61"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.62"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.64"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.65"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.67"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.69"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.70"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.71"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.72"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.73"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.74"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.75"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.76"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.77"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.78"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.79"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.80"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.81"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.82"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.83"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.84"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.85"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.86"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.87"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.88"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.89"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.90"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.91"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.92"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.93"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.94"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.95"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.96"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.97"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.98"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.99"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.100"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.101"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.102"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.103"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.104"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.105"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.106"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.107"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.108"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.109"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.20"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.21"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.22"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.23"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.24"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.25"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.26"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.27"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.28"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.29"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.30"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.31"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.32"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.33"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.35"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.36"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.37"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.38"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.39"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.40"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.41"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.42"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.43"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.44"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.45"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.46"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.47"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.48"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.49"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.50"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.51"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.52"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.53"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.54"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.55"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.56"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.57"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.58"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.59"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.60"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.61"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.62"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.63"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.64"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.65"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.66"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.67"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.68"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.69"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.70"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.71"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.72"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.73"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.74"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_2626"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_2626-pwr"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_2650"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_2650-pwr"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:procurve_switch_2626</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch_2626-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch_2650</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch_2650-pwr</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.02</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.03</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.31</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.32</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.41</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.45</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.46</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.50</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.53</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.54</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.55</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.56</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.53</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.55</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.56</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.57</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.58</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.59</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.60</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.61</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.62</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.64</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.65</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.67</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.69</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.70</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.71</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.72</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.73</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.74</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.75</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.76</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.77</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.78</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.79</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.80</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.81</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.82</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.83</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.84</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.85</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.86</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.87</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.88</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.89</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.90</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.91</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.92</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.93</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.94</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.95</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.96</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.97</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.98</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.99</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.100</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.101</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.102</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.103</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.104</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.105</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.106</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.107</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.108</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.109</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.20</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.21</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.22</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.23</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.24</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.25</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.26</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.27</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.28</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.29</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.30</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.31</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.32</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.33</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.35</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.36</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.37</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.38</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.39</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.40</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.41</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.42</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.43</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.44</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.45</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.46</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.47</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.48</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.49</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.50</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.51</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.52</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.53</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.54</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.55</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.56</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.57</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.58</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.59</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.60</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.61</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.62</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.63</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.64</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.65</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.66</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.67</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.68</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.69</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.70</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.71</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.72</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.73</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.74</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-2707</vuln:cve-id>
    <vuln:published-datetime>2010-08-09T07:58:16.520-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:02.827-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>8.3</cvss:score>
        <cvss:access-vector>ADJACENT_NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436047" xml:lang="en">HPSBGN02560</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability on the HP ProCurve 2626 and 2650 switches before H.10.80 allows remote attackers to obtain sensitive information, modify data, and cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-2708">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.04"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.05"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.06"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.07"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.08"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.09"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.10"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.11"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.12"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.13"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.14"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.15"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.16"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.17"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.18"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.19"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.20"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.21"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_2610"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_2610-24"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_2610-24-pwr"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_2610-24%2f12pwr"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_2610-48"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_2610-48-pwr"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:procurve_switch_2610</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch_2610-24</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch_2610-24-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch_2610-24%2f12pwr</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch_2610-48</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch_2610-48-pwr</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.04</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.05</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.06</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.07</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.08</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.09</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.10</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.11</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.12</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.13</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.14</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.15</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.16</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.17</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.18</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.19</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.20</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.21</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-2708</vuln:cve-id>
    <vuln:published-datetime>2010-08-09T07:58:16.533-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:03.657-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.1</cvss:score>
        <cvss:access-vector>ADJACENT_NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436045" xml:lang="en">SSRT100194</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability on the HP ProCurve 2610 switch before R.11.22, when DHCP is enabled, allows remote attackers to cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-2710">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-2710</vuln:cve-id>
    <vuln:published-datetime>2010-08-20T18:00:01.437-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:03.843-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:summary>Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3003">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.3.0-15:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:6.3.1-1:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.0.0-30:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.0.1-8:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.4.0-11:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.0-14:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.5.5-1:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.6.0-23:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.7.0-142:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.8.0-159:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.9.0-105:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:7.9.1-15:unknown:online_linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_diagnostics:8.4:unknown:online_linux"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.3.0-15:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:6.3.1-1:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.0.0-30:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.0.1-8:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.4.0-11:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.0-14:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.5.5-1:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.6.0-23:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.7.0-142:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.8.0-159:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.9.0-105:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:7.9.1-15:unknown:online_linux</vuln:product>
      <vuln:product>cpe:/a:hp:insight_diagnostics:8.4:unknown:online_linux</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3003</vuln:cve-id>
    <vuln:published-datetime>2010-09-10T14:00:02.300-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:10.547-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02492472" xml:lang="en">HPSBMA02571</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-05" xml:lang="en">http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-05</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2245" xml:lang="en">ADV-2010-2245</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.0-11 on Linux allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3004">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:7.36"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.60"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:operations_agent:7.36</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.60</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3004</vuln:cve-id>
    <vuln:published-datetime>2010-09-08T16:00:04.277-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:11.127-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02497800" xml:lang="en">SSRT100082</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows remote attackers to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3005">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:7.36"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.60"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:operations_agent:7.36</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.60</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3005</vuln:cve-id>
    <vuln:published-datetime>2010-09-08T16:00:04.323-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:11.250-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02497800" xml:lang="en">SSRT100082</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows local users to gain privileges via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3006">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:proliant_g6_lights-out_100_remote_management:4.04"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:proliant_dl120_g6"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:proliant_dl160_g6"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:proliant_dl160se_g6"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:proliant_dl170h_g6"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:proliant_dl180_g6"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:proliant_dl2x170h_g6"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:proliant_dl4x170h_g6"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:proliant_ml110_g6"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:proliant_ml150_g6"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:proliant_sl160z_g6"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:proliant_sl170z_g6"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:proliant_sl2x170z_g6"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:proliant_g6_lights-out_100_remote_management:4.04</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3006</vuln:cve-id>
    <vuln:published-datetime>2010-09-10T15:00:02.940-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:11.343-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02498412" xml:lang="en">SSRT100038</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1024398" xml:lang="en">1024398</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability on the HP ProLiant G6 Lights-Out 100 Remote Management card with firmware before 4.06 allows remote attackers to cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3007">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:3.5:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:3.5:sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:4.0:sp1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:3.1::single_server"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:3.5:sp1:single_server"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:3.5:sp2:single_server"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:4.0::single_server"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:4.0:sp1:single_server"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:data_protector_express:3.1</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:3.1::single_server</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:3.5:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:3.5:sp1:single_server</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:3.5:sp2</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:3.5:sp2:single_server</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:4.0</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:4.0::single_server</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:4.0:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:4.0:sp1:single_server</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3007</vuln:cve-id>
    <vuln:published-datetime>2010-09-09T18:00:02.437-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:11.517-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02498535" xml:lang="en">HPSBMA02576</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4.x before build 56906 allows local users to gain privileges or cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3008">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:3.5:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:3.5:sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:4.0:sp1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:3.1::single_server"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:3.5:sp1:single_server"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:3.5:sp2:single_server"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:4.0::single_server"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:4.0:sp1:single_server"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:data_protector_express:3.1</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:3.1::single_server</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:3.5:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:3.5:sp1:single_server</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:3.5:sp2</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:3.5:sp2:single_server</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:4.0</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:4.0::single_server</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:4.0:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:4.0:sp1:single_server</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3008</vuln:cve-id>
    <vuln:published-datetime>2010-09-13T17:00:28.993-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:11.703-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=128404562909349&amp;w=2" xml:lang="en">SSRT090232</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4.x before build 56906 on Windows allows local users to gain privileges or cause a denial of service via unknown vectors, a different vulnerability than CVE-2010-3007.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3009">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3009</vuln:cve-id>
    <vuln:published-datetime>2010-09-15T14:00:44.213-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:12.377-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=128447666623011&amp;w=2" xml:lang="en">HPSBMA02566</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/43208" xml:lang="en">43208</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1024433" xml:lang="en">1024433</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02475053" xml:lang="en">http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02475053</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP System Management Homepage (SMH) for Linux 6.0 and 6.1 allows remote authenticated users to obtain sensitive information and gain root privileges via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3011">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1.104"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2.106"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-109"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-118"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0.121"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2-127"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2.127"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3.132"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4-143"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4.143"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5-146"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6-156"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6.156"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7-168"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7.168"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8-177"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8.179"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9-178"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10-186"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:c"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11-197"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11.197:a"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-118"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-200"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12.201"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14.20"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15-210"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15.210"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0-68"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0.64"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1-73"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1.73"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2-77"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0-95"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0.96"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0-103"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0.102"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1.104</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2.106</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-109</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0.121</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2-127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2.127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3.132</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4-143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4.143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5-146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6-156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6.156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7-168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7.168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8-177</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8.179</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9-178</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10-186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:c</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11-197</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11.197:a</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-200</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12.201</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14.20</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15-210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15.210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0-68</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0.64</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1-73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1.73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2-77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0-95</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0.96</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0.102</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3011</vuln:cve-id>
    <vuln:published-datetime>2010-09-17T14:00:02.367-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:12.577-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995" xml:lang="en">HPSBMA02568</vuln:reference>
    </vuln:references>
    <vuln:summary>CRLF injection vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3012">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1.104"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2.106"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-109"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-118"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0.121"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2-127"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2.127"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3.132"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4-143"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4.143"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5-146"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6-156"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6.156"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7-168"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7.168"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8-177"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8.179"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9-178"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10-186"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:c"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11-197"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11.197:a"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-118"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-200"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12.201"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14.20"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15-210"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15.210"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0-68"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0.64"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1-73"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1.73"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2-77"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0-95"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0.96"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0-103"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0.102"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1.104</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2.106</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-109</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0.121</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2-127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2.127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3.132</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4-143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4.143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5-146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6-156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6.156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7-168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7.168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8-177</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8.179</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9-178</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10-186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:c</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11-197</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11.197:a</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-200</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12.201</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14.20</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15-210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15.210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0-68</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0.64</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1-73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1.73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2-77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0-95</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0.96</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0.102</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3012</vuln:cve-id>
    <vuln:published-datetime>2010-09-17T16:00:01.777-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:13.360-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995" xml:lang="en">HPSBMA02568</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: this issue was originally assigned CVE-2010-3010 due to a CNA error.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3283">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1.104"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2.106"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-109"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-118"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0.121"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2-127"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2.127"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3.132"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4-143"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4.143"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5-146"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6-156"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6.156"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7-168"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7.168"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8-177"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8.179"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9-178"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10-186"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:c"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11-197"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11.197:a"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-118"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-200"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12.201"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14.20"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14.204"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15-210"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15.210"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0-68"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0.64"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1-73"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1.73"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2-77"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0-95"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0.96"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0-103"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0.102"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1.104</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2.106</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-109</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0.121</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2-127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2.127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3.132</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4-143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4.143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5-146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6-156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6.156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7-168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7.168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8-177</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8.179</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9-178</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10-186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:c</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11-197</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11.197:a</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-200</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12.201</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14.20</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14.204</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15-210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15.210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0-68</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0.64</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1-73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1.73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2-77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0-95</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0.96</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0.102</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3283</vuln:cve-id>
    <vuln:published-datetime>2010-09-24T15:00:04.823-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:18.563-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=128525419119241&amp;w=2" xml:lang="en">HPSBMA02584</vuln:reference>
    </vuln:references>
    <vuln:summary>Open redirect vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3284">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1.104"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2.106"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-109"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-118"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0.121"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2-127"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2.127"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3.132"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4-143"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4.143"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5-146"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6-156"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6.156"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7-168"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7.168"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8-177"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8.179"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9-178"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10-186"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:c"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11-197"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11.197:a"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-118"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-200"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12.201"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14.20"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14.204"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15-210"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15.210"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0-68"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0.64"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1-73"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1.73"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2-77"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0-95"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0.96"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0-103"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0.102"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1.104</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2.106</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-109</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0.121</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2-127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2.127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3.132</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4-143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4.143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5-146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6-156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6.156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7-168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7.168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8-177</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8.179</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9-178</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10-186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:c</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11-197</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11.197:a</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-200</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12.201</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14.20</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14.204</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15-210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15.210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0-68</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0.64</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1-73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1.73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2-77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0-95</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0.96</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0.102</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3284</vuln:cve-id>
    <vuln:published-datetime>2010-09-24T15:00:04.857-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:19.470-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=128525531721328&amp;w=2" xml:lang="en">SSRT100069</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to obtain sensitive information via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3285">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51:-:hp-ux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51:-:linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51:-:solaris"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.51:-:windows"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53:-:hp-ux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53:-:linux"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53:-:solaris"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_network_node_manager:7.53:-:windows"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51:-:hp-ux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51:-:linux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51:-:solaris</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.51:-:windows</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53:-:hp-ux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53:-:linux</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53:-:solaris</vuln:product>
      <vuln:product>cpe:/a:hp:openview_network_node_manager:7.53:-:windows</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3285</vuln:cve-id>
    <vuln:published-datetime>2010-09-24T15:00:04.887-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:19.657-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=128525454219838&amp;w=2" xml:lang="en">SSRT100256</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3287">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.1.0"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.1.2"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.1.3"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.1.4"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.1.6"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.1.7"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.1.8"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.1.9"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.2.0"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.2.1"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.2.2"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.2.4"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.2.5"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.2.6"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.2.7"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.3.0"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.3.1"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.3.2"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.3.3"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.3.4"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.3.5"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_access_point_software:5.4.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_m110_access_point"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_miltope_dual_radio_access_point"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_msm310-r_access_point"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_msm310_access_point"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_msm320-r_access_point"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_msm320_access_point"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_msm325_access_point"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_msm335_access_point"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_msm410_access_point"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_msm422_access_point"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_msm710_access_controller"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_msm710_mobility_controller"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_msm730_access_controller"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_msm730_mobility_controller"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_msm750_access_controller"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_msm750_mobility_controller"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_multi_service_access_point_miltope_nmap"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:procurve_m110_access_point</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_miltope_dual_radio_access_point</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_msm310-r_access_point</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_msm310_access_point</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_msm320-r_access_point</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_msm320_access_point</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_msm325_access_point</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_msm335_access_point</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_msm410_access_point</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_msm422_access_point</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_msm710_access_controller</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_msm710_mobility_controller</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_msm730_access_controller</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_msm730_mobility_controller</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_msm750_access_controller</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_msm750_mobility_controller</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_multi_service_access_point_miltope_nmap</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.1.0</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.1.2</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.1.3</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.1.4</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.1.6</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.1.7</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.1.8</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.1.9</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.2.0</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.2.1</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.2.2</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.2.4</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.2.5</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.2.6</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.2.7</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.3.0</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.3.1</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.3.2</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.3.3</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.3.4</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.3.5</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_access_point_software:5.4.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3287</vuln:cve-id>
    <vuln:published-datetime>2010-10-18T13:00:04.003-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:19.860-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>8.3</cvss:score>
        <cvss:access-vector>ADJACENT_NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=128708618023203&amp;w=2" xml:lang="en">SSRT100296</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability on HP ProCurve Access Points, Access Controllers, and Mobility Controllers with software 5.1.x through 5.1.9, 5.2.x through 5.2.7, 5.3.x through 5.3.5, and 5.4.x through 5.4.0 allows remote attackers to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3636">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.18d60"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.45.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.47.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.48.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.112.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.114.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.115.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.124.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.125.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.151.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.152.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.155.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.159.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.246.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.260.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.262.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.277.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.283.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.0.584"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.2.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.36"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.15.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.22.87"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.32.18"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.42.34"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.45.2"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.15"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.53.64"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.82.76"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.85.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.8"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.2"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:-"/>
          <cpe-lang:fact-ref name="cpe:/o:linux:linux:-"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:-"/>
          <cpe-lang:fact-ref name="cpe:/o:sun:solaris:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:google:android:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.8.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.18d60</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.45.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.47.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.48.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.112.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.114.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.115.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.124.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.125.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.151.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.152.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.155.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.159.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.246.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.260.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.262.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.277.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.283.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.0.584</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.2.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.36</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.15.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.22.87</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.32.18</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.42.34</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.45.2</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.15</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.53.64</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.82.76</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.85.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.8</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3636</vuln:cve-id>
    <vuln:published-datetime>2010-11-07T17:00:01.863-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:30.533-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12142" name="oval:org.mitre.oval:def:12142"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15913" name="oval:org.mitre.oval:def:15913"/>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1" xml:lang="en">http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>JVN</vuln:source>
      <vuln:reference href="http://jvn.jp/en/jp/JVN48425028/index.html" xml:lang="en">JVN#48425028</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>JVNDB</vuln:source>
      <vuln:reference href="http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000054.html" xml:lang="en">JVNDB-2010-000054</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html" xml:lang="en">APPLE-SA-2010-11-10-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html" xml:lang="en">SUSE-SA:2010:055</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=130331642631603&amp;w=2" xml:lang="en">SSRT100428</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201101-09.xml" xml:lang="en">GLSA-201101-09</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT4435" xml:lang="en">http://support.apple.com/kb/HT4435</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.adobe.com/support/security/bulletins/apsb10-26.html" xml:lang="en">http://www.adobe.com/support/security/bulletins/apsb10-26.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0829.html" xml:lang="en">RHSA-2010:0829</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0834.html" xml:lang="en">RHSA-2010:0834</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0867.html" xml:lang="en">RHSA-2010:0867</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/44691" xml:lang="en">44691</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2903" xml:lang="en">ADV-2010-2903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2906" xml:lang="en">ADV-2010-2906</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2918" xml:lang="en">ADV-2010-2918</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0173" xml:lang="en">ADV-2011-0173</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0192" xml:lang="en">ADV-2011-0192</vuln:reference>
    </vuln:references>
    <vuln:summary>Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictions via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3637">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.18d60"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.45.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.47.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.48.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.112.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.114.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.115.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.124.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.125.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.151.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.152.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.155.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.159.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.246.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.260.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.262.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.277.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.283.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.0.584"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.2.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.36"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.15.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.22.87"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.32.18"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.42.34"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.45.2"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.15"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.53.64"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.82.76"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.85.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.8"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.2"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.8.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.18d60</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.45.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.47.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.48.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.112.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.114.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.115.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.124.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.125.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.151.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.152.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.155.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.159.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.246.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.260.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.262.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.277.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.283.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.0.584</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.2.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.36</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.15.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.22.87</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.32.18</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.42.34</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.45.2</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.15</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.53.64</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.82.76</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.85.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.8</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3637</vuln:cve-id>
    <vuln:published-datetime>2010-11-07T17:00:01.910-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:30.767-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12259" name="oval:org.mitre.oval:def:12259"/>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1" xml:lang="en">http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html" xml:lang="en">SUSE-SA:2010:055</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=130331642631603&amp;w=2" xml:lang="en">SSRT100428</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.adobe.com/support/security/bulletins/apsb10-26.html" xml:lang="en">http://www.adobe.com/support/security/bulletins/apsb10-26.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/514652/100/0/threaded" xml:lang="en">20101105 [FG-VD-10-020]Adobe Flash Player Remote Memory corruption Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/44690" xml:lang="en">44690</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2903" xml:lang="en">ADV-2010-2903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0173" xml:lang="en">ADV-2011-0173</vuln:reference>
    </vuln:references>
    <vuln:summary>An unspecified ActiveX control in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 (Flash10h.ocx) on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FLV video.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3639">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.18d60"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.45.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.47.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.48.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.112.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.114.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.115.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.124.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.125.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.151.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.152.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.155.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.159.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.246.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.260.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.262.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.277.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.283.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.0.584"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.2.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.36"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.15.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.22.87"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.32.18"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.42.34"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.45.2"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.15"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.53.64"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.82.76"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.85.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.8"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.2"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:-"/>
          <cpe-lang:fact-ref name="cpe:/o:linux:linux:-"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:-"/>
          <cpe-lang:fact-ref name="cpe:/o:sun:solaris:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:google:android:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.8.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.18d60</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.45.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.47.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.48.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.112.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.114.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.115.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.124.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.125.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.151.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.152.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.155.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.159.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.246.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.260.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.262.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.277.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.283.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.0.584</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.2.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.36</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.15.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.22.87</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.32.18</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.42.34</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.45.2</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.15</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.53.64</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.82.76</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.85.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.8</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3639</vuln:cve-id>
    <vuln:published-datetime>2010-11-07T17:00:01.987-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:30.940-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11310" name="oval:org.mitre.oval:def:11310"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12625" name="oval:org.mitre.oval:def:12625"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1" xml:lang="en">http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html" xml:lang="en">APPLE-SA-2010-11-10-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html" xml:lang="en">SUSE-SA:2010:055</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=130331642631603&amp;w=2" xml:lang="en">SSRT100428</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201101-09.xml" xml:lang="en">GLSA-201101-09</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT4435" xml:lang="en">http://support.apple.com/kb/HT4435</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.adobe.com/support/security/bulletins/apsb10-26.html" xml:lang="en">http://www.adobe.com/support/security/bulletins/apsb10-26.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0829.html" xml:lang="en">RHSA-2010:0829</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0834.html" xml:lang="en">RHSA-2010:0834</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0867.html" xml:lang="en">RHSA-2010:0867</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/44692" xml:lang="en">44692</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2903" xml:lang="en">ADV-2010-2903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2906" xml:lang="en">ADV-2010-2906</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2918" xml:lang="en">ADV-2010-2918</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0173" xml:lang="en">ADV-2011-0173</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0192" xml:lang="en">ADV-2011-0192</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3640">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.18d60"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.45.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.47.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.48.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.112.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.114.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.115.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.124.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.125.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.151.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.152.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.155.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.159.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.246.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.260.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.262.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.277.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.283.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.0.584"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.2.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.36"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.15.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.22.87"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.32.18"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.42.34"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.45.2"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.15"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.53.64"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.82.76"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.85.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.8"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.2"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:-"/>
          <cpe-lang:fact-ref name="cpe:/o:linux:linux:-"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:-"/>
          <cpe-lang:fact-ref name="cpe:/o:sun:solaris:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:google:android:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.8.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.18d60</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.45.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.47.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.48.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.112.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.114.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.115.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.124.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.125.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.151.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.152.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.155.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.159.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.246.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.260.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.262.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.277.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.283.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.0.584</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.2.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.36</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.15.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.22.87</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.32.18</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.42.34</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.45.2</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.15</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.53.64</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.82.76</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.85.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.8</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3640</vuln:cve-id>
    <vuln:published-datetime>2010-11-07T17:00:02.037-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:31.080-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12179" name="oval:org.mitre.oval:def:12179"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16281" name="oval:org.mitre.oval:def:16281"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1" xml:lang="en">http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html" xml:lang="en">APPLE-SA-2010-11-10-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html" xml:lang="en">SUSE-SA:2010:055</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=130331642631603&amp;w=2" xml:lang="en">SSRT100428</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201101-09.xml" xml:lang="en">GLSA-201101-09</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT4435" xml:lang="en">http://support.apple.com/kb/HT4435</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.adobe.com/support/security/bulletins/apsb10-26.html" xml:lang="en">http://www.adobe.com/support/security/bulletins/apsb10-26.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0829.html" xml:lang="en">RHSA-2010:0829</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0834.html" xml:lang="en">RHSA-2010:0834</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0867.html" xml:lang="en">RHSA-2010:0867</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/44675" xml:lang="en">44675</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2903" xml:lang="en">ADV-2010-2903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2906" xml:lang="en">ADV-2010-2906</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2918" xml:lang="en">ADV-2010-2918</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0173" xml:lang="en">ADV-2011-0173</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0192" xml:lang="en">ADV-2011-0192</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3641">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.18d60"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.45.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.47.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.48.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.112.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.114.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.115.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.124.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.125.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.151.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.152.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.155.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.159.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.246.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.260.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.262.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.277.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.283.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.0.584"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.2.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.36"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.15.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.22.87"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.32.18"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.42.34"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.45.2"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.15"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.53.64"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.82.76"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.85.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.8"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.2"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:-"/>
          <cpe-lang:fact-ref name="cpe:/o:linux:linux:-"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:-"/>
          <cpe-lang:fact-ref name="cpe:/o:sun:solaris:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:google:android:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.8.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.18d60</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.45.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.47.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.48.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.112.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.114.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.115.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.124.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.125.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.151.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.152.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.155.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.159.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.246.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.260.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.262.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.277.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.283.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.0.584</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.2.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.36</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.15.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.22.87</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.32.18</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.42.34</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.45.2</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.15</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.53.64</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.82.76</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.85.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.8</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3641</vuln:cve-id>
    <vuln:published-datetime>2010-11-07T17:00:02.080-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:31.220-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12154" name="oval:org.mitre.oval:def:12154"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16161" name="oval:org.mitre.oval:def:16161"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1" xml:lang="en">http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html" xml:lang="en">APPLE-SA-2010-11-10-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html" xml:lang="en">SUSE-SA:2010:055</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=130331642631603&amp;w=2" xml:lang="en">SSRT100428</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201101-09.xml" xml:lang="en">GLSA-201101-09</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT4435" xml:lang="en">http://support.apple.com/kb/HT4435</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.adobe.com/support/security/bulletins/apsb10-26.html" xml:lang="en">http://www.adobe.com/support/security/bulletins/apsb10-26.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0829.html" xml:lang="en">RHSA-2010:0829</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0834.html" xml:lang="en">RHSA-2010:0834</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0867.html" xml:lang="en">RHSA-2010:0867</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/44677" xml:lang="en">44677</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2903" xml:lang="en">ADV-2010-2903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2906" xml:lang="en">ADV-2010-2906</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2918" xml:lang="en">ADV-2010-2918</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0173" xml:lang="en">ADV-2011-0173</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0192" xml:lang="en">ADV-2011-0192</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3642">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.18d60"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.45.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.47.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.48.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.112.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.114.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.115.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.124.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.125.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.151.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.152.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.155.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.159.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.246.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.260.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.262.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.277.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.283.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.36"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.15.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.22.87"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.32.18"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.42.34"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.45.2"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.15"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.53.64"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.82.76"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.85.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.8"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.2"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:-"/>
          <cpe-lang:fact-ref name="cpe:/o:linux:linux:-"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:-"/>
          <cpe-lang:fact-ref name="cpe:/o:sun:solaris:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:google:android:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.8.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.18d60</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.45.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.47.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.48.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.112.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.114.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.115.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.124.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.125.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.151.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.152.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.155.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.159.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.246.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.260.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.262.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.277.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.283.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.36</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.15.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.22.87</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.32.18</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.42.34</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.45.2</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.15</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.53.64</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.82.76</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.85.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.8</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3642</vuln:cve-id>
    <vuln:published-datetime>2010-11-07T17:00:02.127-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:31.347-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12065" name="oval:org.mitre.oval:def:12065"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16254" name="oval:org.mitre.oval:def:16254"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1" xml:lang="en">http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html" xml:lang="en">APPLE-SA-2010-11-10-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html" xml:lang="en">SUSE-SA:2010:055</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=130331642631603&amp;w=2" xml:lang="en">SSRT100428</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201101-09.xml" xml:lang="en">GLSA-201101-09</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT4435" xml:lang="en">http://support.apple.com/kb/HT4435</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.adobe.com/support/security/bulletins/apsb10-26.html" xml:lang="en">http://www.adobe.com/support/security/bulletins/apsb10-26.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0829.html" xml:lang="en">RHSA-2010:0829</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0834.html" xml:lang="en">RHSA-2010:0834</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0867.html" xml:lang="en">RHSA-2010:0867</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/44678" xml:lang="en">44678</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2903" xml:lang="en">ADV-2010-2903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2906" xml:lang="en">ADV-2010-2906</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2918" xml:lang="en">ADV-2010-2918</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0173" xml:lang="en">ADV-2011-0173</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0192" xml:lang="en">ADV-2011-0192</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3643">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.18d60"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.45.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.47.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.48.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.112.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.114.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.115.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.124.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.125.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.151.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.152.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.155.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.159.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.246.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.260.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.262.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.277.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.283.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.0.584"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.2.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.36"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.15.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.22.87"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.32.18"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.42.34"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.45.2"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.15"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.53.64"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.82.76"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.85.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.8"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.2"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:-"/>
          <cpe-lang:fact-ref name="cpe:/o:linux:linux:-"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:-"/>
          <cpe-lang:fact-ref name="cpe:/o:sun:solaris:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:google:android:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.8.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.18d60</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.45.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.47.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.48.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.112.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.114.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.115.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.124.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.125.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.151.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.152.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.155.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.159.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.246.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.260.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.262.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.277.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.283.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.0.584</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.2.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.36</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.15.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.22.87</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.32.18</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.42.34</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.45.2</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.15</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.53.64</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.82.76</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.85.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.8</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3643</vuln:cve-id>
    <vuln:published-datetime>2010-11-07T17:00:02.177-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:31.453-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12151" name="oval:org.mitre.oval:def:12151"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16242" name="oval:org.mitre.oval:def:16242"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1" xml:lang="en">http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html" xml:lang="en">APPLE-SA-2010-11-10-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html" xml:lang="en">SUSE-SA:2010:055</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=130331642631603&amp;w=2" xml:lang="en">SSRT100428</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201101-09.xml" xml:lang="en">GLSA-201101-09</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT4435" xml:lang="en">http://support.apple.com/kb/HT4435</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.adobe.com/support/security/bulletins/apsb10-26.html" xml:lang="en">http://www.adobe.com/support/security/bulletins/apsb10-26.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0829.html" xml:lang="en">RHSA-2010:0829</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0834.html" xml:lang="en">RHSA-2010:0834</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0867.html" xml:lang="en">RHSA-2010:0867</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/44679" xml:lang="en">44679</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2903" xml:lang="en">ADV-2010-2903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2906" xml:lang="en">ADV-2010-2906</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2918" xml:lang="en">ADV-2010-2918</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0173" xml:lang="en">ADV-2011-0173</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0192" xml:lang="en">ADV-2011-0192</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3644">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.18d60"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.45.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.47.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.48.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.112.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.114.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.115.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.124.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.125.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.151.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.152.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.155.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.159.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.246.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.260.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.262.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.277.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.283.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.0.584"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.2.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.36"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.15.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.22.87"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.32.18"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.42.34"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.45.2"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.15"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.53.64"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.82.76"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.85.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.8"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.2"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:-"/>
          <cpe-lang:fact-ref name="cpe:/o:linux:linux:-"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:-"/>
          <cpe-lang:fact-ref name="cpe:/o:sun:solaris:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:google:android:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.8.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.18d60</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.45.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.47.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.48.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.112.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.114.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.115.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.124.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.125.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.151.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.152.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.155.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.159.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.246.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.260.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.262.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.277.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.283.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.0.584</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.2.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.36</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.15.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.22.87</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.32.18</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.42.34</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.45.2</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.15</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.53.64</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.82.76</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.85.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.8</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3644</vuln:cve-id>
    <vuln:published-datetime>2010-11-07T17:00:02.223-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:31.580-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11660" name="oval:org.mitre.oval:def:11660"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16220" name="oval:org.mitre.oval:def:16220"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1" xml:lang="en">http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html" xml:lang="en">APPLE-SA-2010-11-10-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html" xml:lang="en">SUSE-SA:2010:055</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=130331642631603&amp;w=2" xml:lang="en">SSRT100428</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201101-09.xml" xml:lang="en">GLSA-201101-09</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT4435" xml:lang="en">http://support.apple.com/kb/HT4435</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.adobe.com/support/security/bulletins/apsb10-26.html" xml:lang="en">http://www.adobe.com/support/security/bulletins/apsb10-26.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0829.html" xml:lang="en">RHSA-2010:0829</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0834.html" xml:lang="en">RHSA-2010:0834</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0867.html" xml:lang="en">RHSA-2010:0867</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/44680" xml:lang="en">44680</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2903" xml:lang="en">ADV-2010-2903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2906" xml:lang="en">ADV-2010-2906</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2918" xml:lang="en">ADV-2010-2918</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0173" xml:lang="en">ADV-2011-0173</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0192" xml:lang="en">ADV-2011-0192</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3645">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.18d60"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.45.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.47.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.48.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.112.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.114.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.115.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.124.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.125.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.151.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.152.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.155.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.159.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.246.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.260.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.262.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.277.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.283.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.0.584"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.2.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.36"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.15.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.22.87"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.32.18"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.42.34"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.45.2"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.15"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.53.64"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.82.76"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.85.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.8"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.2"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:-"/>
          <cpe-lang:fact-ref name="cpe:/o:linux:linux:-"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:-"/>
          <cpe-lang:fact-ref name="cpe:/o:sun:solaris:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:google:android:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.8.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.18d60</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.45.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.47.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.48.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.112.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.114.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.115.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.124.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.125.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.151.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.152.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.155.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.159.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.246.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.260.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.262.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.277.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.283.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.0.584</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.2.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.36</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.15.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.22.87</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.32.18</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.42.34</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.45.2</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.15</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.53.64</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.82.76</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.85.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.8</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3645</vuln:cve-id>
    <vuln:published-datetime>2010-11-07T17:00:02.253-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:31.703-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11905" name="oval:org.mitre.oval:def:11905"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15961" name="oval:org.mitre.oval:def:15961"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1" xml:lang="en">http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html" xml:lang="en">APPLE-SA-2010-11-10-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html" xml:lang="en">SUSE-SA:2010:055</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=130331642631603&amp;w=2" xml:lang="en">SSRT100428</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201101-09.xml" xml:lang="en">GLSA-201101-09</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT4435" xml:lang="en">http://support.apple.com/kb/HT4435</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.adobe.com/support/security/bulletins/apsb10-26.html" xml:lang="en">http://www.adobe.com/support/security/bulletins/apsb10-26.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0829.html" xml:lang="en">RHSA-2010:0829</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0834.html" xml:lang="en">RHSA-2010:0834</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0867.html" xml:lang="en">RHSA-2010:0867</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/44681" xml:lang="en">44681</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2903" xml:lang="en">ADV-2010-2903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2906" xml:lang="en">ADV-2010-2906</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2918" xml:lang="en">ADV-2010-2918</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0173" xml:lang="en">ADV-2011-0173</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0192" xml:lang="en">ADV-2011-0192</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3646">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.18d60"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.45.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.47.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.48.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.112.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.114.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.115.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.124.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.125.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.151.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.152.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.155.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.159.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.246.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.260.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.262.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.277.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.283.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.0.584"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.2.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.36"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.15.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.22.87"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.32.18"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.42.34"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.45.2"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.15"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.53.64"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.82.76"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.85.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.8"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.2"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:-"/>
          <cpe-lang:fact-ref name="cpe:/o:linux:linux:-"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:-"/>
          <cpe-lang:fact-ref name="cpe:/o:sun:solaris:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:google:android:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.8.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.18d60</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.45.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.47.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.48.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.112.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.114.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.115.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.124.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.125.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.151.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.152.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.155.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.159.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.246.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.260.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.262.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.277.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.283.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.0.584</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.2.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.36</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.15.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.22.87</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.32.18</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.42.34</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.45.2</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.15</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.53.64</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.82.76</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.85.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.8</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3646</vuln:cve-id>
    <vuln:published-datetime>2010-11-07T17:00:02.287-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:31.830-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11922" name="oval:org.mitre.oval:def:11922"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16183" name="oval:org.mitre.oval:def:16183"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1" xml:lang="en">http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html" xml:lang="en">APPLE-SA-2010-11-10-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html" xml:lang="en">SUSE-SA:2010:055</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=130331642631603&amp;w=2" xml:lang="en">SSRT100428</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201101-09.xml" xml:lang="en">GLSA-201101-09</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT4435" xml:lang="en">http://support.apple.com/kb/HT4435</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.adobe.com/support/security/bulletins/apsb10-26.html" xml:lang="en">http://www.adobe.com/support/security/bulletins/apsb10-26.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0829.html" xml:lang="en">RHSA-2010:0829</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0834.html" xml:lang="en">RHSA-2010:0834</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0867.html" xml:lang="en">RHSA-2010:0867</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/44682" xml:lang="en">44682</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2903" xml:lang="en">ADV-2010-2903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2906" xml:lang="en">ADV-2010-2906</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2918" xml:lang="en">ADV-2010-2918</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0173" xml:lang="en">ADV-2011-0173</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0192" xml:lang="en">ADV-2011-0192</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3647">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.18d60"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.45.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.47.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.48.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.112.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.114.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.115.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.124.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.125.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.151.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.152.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.155.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.159.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.246.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.260.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.262.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.277.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.283.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.0.584"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.2.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.36"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.15.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.22.87"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.32.18"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.42.34"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.45.2"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.15"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.53.64"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.82.76"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.85.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.8"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.2"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:-"/>
          <cpe-lang:fact-ref name="cpe:/o:linux:linux:-"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:-"/>
          <cpe-lang:fact-ref name="cpe:/o:sun:solaris:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:google:android:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.8.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.18d60</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.45.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.47.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.48.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.112.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.114.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.115.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.124.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.125.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.151.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.152.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.155.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.159.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.246.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.260.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.262.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.277.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.283.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.0.584</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.2.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.36</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.15.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.22.87</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.32.18</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.42.34</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.45.2</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.15</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.53.64</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.82.76</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.85.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.8</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3647</vuln:cve-id>
    <vuln:published-datetime>2010-11-07T17:00:02.330-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:31.940-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12095" name="oval:org.mitre.oval:def:12095"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16160" name="oval:org.mitre.oval:def:16160"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1" xml:lang="en">http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html" xml:lang="en">APPLE-SA-2010-11-10-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html" xml:lang="en">SUSE-SA:2010:055</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=130331642631603&amp;w=2" xml:lang="en">SSRT100428</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201101-09.xml" xml:lang="en">GLSA-201101-09</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT4435" xml:lang="en">http://support.apple.com/kb/HT4435</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.adobe.com/support/security/bulletins/apsb10-26.html" xml:lang="en">http://www.adobe.com/support/security/bulletins/apsb10-26.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0829.html" xml:lang="en">RHSA-2010:0829</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0834.html" xml:lang="en">RHSA-2010:0834</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0867.html" xml:lang="en">RHSA-2010:0867</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/44683" xml:lang="en">44683</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2903" xml:lang="en">ADV-2010-2903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2906" xml:lang="en">ADV-2010-2906</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2918" xml:lang="en">ADV-2010-2918</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0173" xml:lang="en">ADV-2011-0173</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0192" xml:lang="en">ADV-2011-0192</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3648">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.18d60"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.45.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.47.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.48.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.112.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.114.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.115.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.124.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.125.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.151.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.152.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.155.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.159.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.246.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.260.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.262.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.277.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.283.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.0.584"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.2.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.36"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.15.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.22.87"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.32.18"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.42.34"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.45.2"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.15"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.53.64"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.82.76"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.85.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.8"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.2"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:-"/>
          <cpe-lang:fact-ref name="cpe:/o:linux:linux:-"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:-"/>
          <cpe-lang:fact-ref name="cpe:/o:sun:solaris:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:google:android:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.8.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.18d60</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.45.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.47.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.48.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.112.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.114.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.115.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.124.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.125.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.151.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.152.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.155.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.159.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.246.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.260.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.262.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.277.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.283.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.0.584</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.2.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.36</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.15.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.22.87</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.32.18</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.42.34</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.45.2</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.15</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.53.64</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.82.76</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.85.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.8</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3648</vuln:cve-id>
    <vuln:published-datetime>2010-11-07T17:00:02.363-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:32.047-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11842" name="oval:org.mitre.oval:def:11842"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15980" name="oval:org.mitre.oval:def:15980"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1" xml:lang="en">http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html" xml:lang="en">APPLE-SA-2010-11-10-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html" xml:lang="en">SUSE-SA:2010:055</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=130331642631603&amp;w=2" xml:lang="en">SSRT100428</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201101-09.xml" xml:lang="en">GLSA-201101-09</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT4435" xml:lang="en">http://support.apple.com/kb/HT4435</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.adobe.com/support/security/bulletins/apsb10-26.html" xml:lang="en">http://www.adobe.com/support/security/bulletins/apsb10-26.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0829.html" xml:lang="en">RHSA-2010:0829</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0834.html" xml:lang="en">RHSA-2010:0834</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0867.html" xml:lang="en">RHSA-2010:0867</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/44684" xml:lang="en">44684</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2903" xml:lang="en">ADV-2010-2903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2906" xml:lang="en">ADV-2010-2906</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2918" xml:lang="en">ADV-2010-2918</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0173" xml:lang="en">ADV-2011-0173</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0192" xml:lang="en">ADV-2011-0192</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3649">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.18d60"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.45.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.47.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.48.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.112.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.114.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.115.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.124.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.125.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.151.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.152.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.155.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.159.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.246.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.260.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.262.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.277.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.283.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.0.584"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.2.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.36"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.15.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.22.87"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.32.18"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.42.34"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.45.2"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.15"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.53.64"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.82.76"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.85.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.8"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.2"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:-"/>
          <cpe-lang:fact-ref name="cpe:/o:linux:linux:-"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:-"/>
          <cpe-lang:fact-ref name="cpe:/o:sun:solaris:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:google:android:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.8.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.18d60</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.45.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.47.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.48.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.112.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.114.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.115.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.124.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.125.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.151.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.152.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.155.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.159.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.246.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.260.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.262.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.277.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.283.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.0.584</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.2.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.36</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.15.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.22.87</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.32.18</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.42.34</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.45.2</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.15</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.53.64</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.82.76</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.85.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.8</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3649</vuln:cve-id>
    <vuln:published-datetime>2010-11-07T17:00:02.440-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:32.173-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11872" name="oval:org.mitre.oval:def:11872"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15750" name="oval:org.mitre.oval:def:15750"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1" xml:lang="en">http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html" xml:lang="en">APPLE-SA-2010-11-10-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html" xml:lang="en">SUSE-SA:2010:055</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=130331642631603&amp;w=2" xml:lang="en">SSRT100428</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201101-09.xml" xml:lang="en">GLSA-201101-09</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT4435" xml:lang="en">http://support.apple.com/kb/HT4435</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.adobe.com/support/security/bulletins/apsb10-26.html" xml:lang="en">http://www.adobe.com/support/security/bulletins/apsb10-26.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0829.html" xml:lang="en">RHSA-2010:0829</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0834.html" xml:lang="en">RHSA-2010:0834</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0867.html" xml:lang="en">RHSA-2010:0867</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/44685" xml:lang="en">44685</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2903" xml:lang="en">ADV-2010-2903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2906" xml:lang="en">ADV-2010-2906</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2918" xml:lang="en">ADV-2010-2918</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0173" xml:lang="en">ADV-2011-0173</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0192" xml:lang="en">ADV-2011-0192</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3650, and CVE-2010-3652.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3650">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.18d60"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.45.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.47.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.48.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.112.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.114.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.115.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.124.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.125.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.151.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.152.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.155.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.159.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.246.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.260.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.262.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.277.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.283.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.0.584"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.2.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.36"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.15.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.22.87"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.32.18"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.42.34"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.45.2"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.15"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.53.64"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.82.76"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.85.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.8"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.2"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:-"/>
          <cpe-lang:fact-ref name="cpe:/o:linux:linux:-"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:-"/>
          <cpe-lang:fact-ref name="cpe:/o:sun:solaris:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:google:android:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.8.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.18d60</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.45.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.47.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.48.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.112.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.114.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.115.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.124.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.125.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.151.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.152.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.155.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.159.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.246.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.260.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.262.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.277.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.283.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.0.584</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.2.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.36</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.15.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.22.87</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.32.18</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.42.34</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.45.2</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.15</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.53.64</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.82.76</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.85.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.8</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3650</vuln:cve-id>
    <vuln:published-datetime>2010-11-07T17:00:02.473-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:32.517-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11636" name="oval:org.mitre.oval:def:11636"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15971" name="oval:org.mitre.oval:def:15971"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1" xml:lang="en">http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html" xml:lang="en">APPLE-SA-2010-11-10-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html" xml:lang="en">SUSE-SA:2010:055</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=130331642631603&amp;w=2" xml:lang="en">SSRT100428</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201101-09.xml" xml:lang="en">GLSA-201101-09</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT4435" xml:lang="en">http://support.apple.com/kb/HT4435</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.adobe.com/support/security/bulletins/apsb10-26.html" xml:lang="en">http://www.adobe.com/support/security/bulletins/apsb10-26.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0829.html" xml:lang="en">RHSA-2010:0829</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0834.html" xml:lang="en">RHSA-2010:0834</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0867.html" xml:lang="en">RHSA-2010:0867</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/44686" xml:lang="en">44686</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2903" xml:lang="en">ADV-2010-2903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2906" xml:lang="en">ADV-2010-2906</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2918" xml:lang="en">ADV-2010-2918</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0173" xml:lang="en">ADV-2011-0173</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0192" xml:lang="en">ADV-2011-0192</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, and CVE-2010-3652.</vuln:summary>
  </entry>
  <entry id="CVE-2010-3652">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.16.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.18d60"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.20.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.28.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.31.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.45.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.47.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.48.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.112.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.114.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.115.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.124.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.125.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.151.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.152.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.155.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.159.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.246.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.260.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.262.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.277.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:9.0.283.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.0.584"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.2.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.12.36"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.15.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.22.87"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.32.18"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.42.34"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.0.45.2"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.14.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.52.15"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.53.64"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.82.76"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.85.3"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.8"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.92.10"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.2"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:-"/>
          <cpe-lang:fact-ref name="cpe:/o:linux:linux:-"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:-"/>
          <cpe-lang:fact-ref name="cpe:/o:sun:solaris:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:10.1.95.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:google:android:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.8.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.9.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.16.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.18d60</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.20.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.28.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.31.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.45.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.47.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.48.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.112.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.114.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.115.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.124.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.125.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.151.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.152.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.155.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.159.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.246.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.260.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.262.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.277.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:9.0.283.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.0.584</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.2.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.12.36</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.15.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.22.87</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.32.18</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.42.34</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.0.45.2</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.14.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.52.15</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.53.64</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.82.76</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.85.3</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.8</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.92.10</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:10.1.95.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-3652</vuln:cve-id>
    <vuln:published-datetime>2010-11-07T17:00:02.503-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:32.657-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11965" name="oval:org.mitre.oval:def:11965"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15284" name="oval:org.mitre.oval:def:15284"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1" xml:lang="en">http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html" xml:lang="en">APPLE-SA-2010-11-10-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html" xml:lang="en">SUSE-SA:2010:055</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=130331642631603&amp;w=2" xml:lang="en">SSRT100428</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201101-09.xml" xml:lang="en">GLSA-201101-09</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT4435" xml:lang="en">http://support.apple.com/kb/HT4435</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.adobe.com/support/security/bulletins/apsb10-26.html" xml:lang="en">http://www.adobe.com/support/security/bulletins/apsb10-26.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0829.html" xml:lang="en">RHSA-2010:0829</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0834.html" xml:lang="en">RHSA-2010:0834</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2010-0867.html" xml:lang="en">RHSA-2010:0867</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/44687" xml:lang="en">44687</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2903" xml:lang="en">ADV-2010-2903</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2906" xml:lang="en">ADV-2010-2906</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2918" xml:lang="en">ADV-2010-2918</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0173" xml:lang="en">ADV-2011-0173</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0192" xml:lang="en">ADV-2011-0192</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, and CVE-2010-3650.</vuln:summary>
  </entry>
  <entry id="CVE-2010-4104">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_orchestration:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_orchestration:6.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:insight_orchestration:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:insight_orchestration:6.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-4104</vuln:cve-id>
    <vuln:published-datetime>2010-11-01T22:26:30.960-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:43.987-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02573285" xml:lang="en">SSRT100321</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/44534" xml:lang="en">44534</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2829" xml:lang="en">ADV-2010-2829</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to read arbitrary files via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-4105">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_orchestration:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_orchestration:6.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:insight_orchestration:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:insight_orchestration:6.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-4105</vuln:cve-id>
    <vuln:published-datetime>2010-11-01T22:26:30.990-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:44.220-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.4</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02573285" xml:lang="en">SSRT100321</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/44534" xml:lang="en">44534</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2010/2829" xml:lang="en">ADV-2010-2829</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to bypass intended access restrictions, and obtain sensitive information or modify data, via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2010-4113">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:power_manager:4.2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:power_manager:4.2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:power_manager:4.2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:power_manager:4.2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:power_manager:4.2.9"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:power_manager:4.2.5</vuln:product>
      <vuln:product>cpe:/a:hp:power_manager:4.2.6</vuln:product>
      <vuln:product>cpe:/a:hp:power_manager:4.2.7</vuln:product>
      <vuln:product>cpe:/a:hp:power_manager:4.2.8</vuln:product>
      <vuln:product>cpe:/a:hp:power_manager:4.2.9</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-4113</vuln:cve-id>
    <vuln:published-datetime>2010-12-22T16:00:18.303-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:01:44.783-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=129251322532373&amp;w=2" xml:lang="en">SSRT100139</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1024902" xml:lang="en">1024902</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.zerodayinitiative.com/advisories/ZDI-10-292/" xml:lang="en">http://www.zerodayinitiative.com/advisories/ZDI-10-292/</vuln:reference>
    </vuln:references>
    <vuln:summary>Stack-based buffer overflow in HP Power Manager (HPPM) before 4.3.2 allows remote attackers to execute arbitrary code via a long Login variable to the management web server.</vuln:summary>
  </entry>
  <entry id="CVE-2010-5305">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslogix"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:rockwellautomation:plc5_1785-lx_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:rockwellautomation:plc5_1785-lx:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:rockwellautomation:slc5%2f01_1747-l5x_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:rockwellautomation:slc5%2f01_1747-l5x:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:rockwellautomation:rslogix</vuln:product>
      <vuln:product>cpe:/o:rockwellautomation:plc5_1785-lx_firmware:-</vuln:product>
      <vuln:product>cpe:/o:rockwellautomation:slc5%2f01_1747-l5x_firmware:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-5305</vuln:cve-id>
    <vuln:published-datetime>2019-03-26T14:29:00.263-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T07:33:48.593-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-284"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-10-070-02" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-10-070-02</vuln:reference>
    </vuln:references>
    <vuln:summary>The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0x/RSLogix 1785-Lx and 1747-L5x controllers. The potential exists for an unauthorized programming and configuration client to gain access to the product and allow changes to the product?s configuration or program. When applicable, upgrade product firmware to a version that includes enhanced security functionality compatible with Rockwell Automation's FactoryTalk Security services.</vuln:summary>
  </entry>
  <entry id="CVE-2010-5331">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:-"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:1.2.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:1.3.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.81"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.82"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.83"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.84"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.85"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.86"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.87"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.88"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.89"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.90"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.91"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.92"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.93"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.94"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.95"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.96"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.97"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.98"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.100"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.101"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.102"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.103"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.104"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.105"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.106"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.107"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.108"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.109"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.110"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.111"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.112"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.113"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.114"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.115"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.116"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.117"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.118"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.119"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.120"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.121"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.122"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.123"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.124"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.125"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.126"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.127"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.128"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.129"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.130"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.131"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.132"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.13:pre15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.15:pre16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.16:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.16:pre6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.17:pre14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.22:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.22:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.22:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.23:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.23:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.27:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.27:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.27:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.27:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.3:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.11:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.21:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.21:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.21:pre7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.22:pre10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.23:pre9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.29:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.29:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.30:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.30:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.31:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.32:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.32:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.34:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.34.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.34.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.35.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.1:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.2:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.4:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.5:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.6:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.6:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.6:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.7:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.7:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.7:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:final"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.10:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.10:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.10:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.20"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:linux:linux_kernel:-</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:1.2.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:1.3.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.69</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.70</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.71</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.72</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.73</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.74</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.75</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.76</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.77</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.78</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.79</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.80</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.81</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.82</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.83</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.84</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.85</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.86</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.87</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.88</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.89</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.90</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.91</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.92</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.93</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.94</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.95</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.96</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.97</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.98</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.99</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.100</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.101</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.102</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.103</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.104</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.105</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.106</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.107</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.108</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.109</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.110</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.111</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.112</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.113</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.114</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.115</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.116</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.117</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.118</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.119</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.120</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.121</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.122</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.123</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.124</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.125</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.126</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.127</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.128</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.129</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.130</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.131</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.132</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.4:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.13:pre15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.15:pre16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.16:pre5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.16:pre6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.17:pre14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.22:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.22:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.22:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.23:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.23:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.24:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.24:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.24:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.24:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.27:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.27:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.27:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.27:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.3:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.11:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.21:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.21:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.21:pre7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.22:pre10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.23:pre9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27:pre5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.29:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.29:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.30:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.30:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.31:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.32:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.32:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.34:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.34.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.34.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.35.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.69</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.75</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.1:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.1:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.1:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.2:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.2:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.2:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.3:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.3:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.3:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.3:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.4:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.4:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.4:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.5:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.5:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.5:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.6:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.6:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.6:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.7:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.7:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.7:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9:final</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.10:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.10:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.10:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.20</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2010-5331</vuln:cve-id>
    <vuln:published-datetime>2019-07-27T18:15:11.090-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T21:15:10.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0031c41be5c529f8329e327b63cde92ba1284842" xml:lang="en">https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0031c41be5c529f8329e327b63cde92ba1284842</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/torvalds/linux/commit/0031c41be5c529f8329e327b63cde92ba1284842" xml:lang="en">https://github.com/torvalds/linux/commit/0031c41be5c529f8329e327b63cde92ba1284842</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://mirrors.edge.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34" xml:lang="en">https://mirrors.edge.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.f5.com/csp/article/K33183814?utm_source=f5support&amp;amp;utm_medium=RSS" xml:lang="en">https://support.f5.com/csp/article/K33183814?utm_source=f5support&amp;amp;utm_medium=RSS</vuln:reference>
    </vuln:references>
    <vuln:summary>In the Linux kernel before 2.6.34, a range check issue in drivers/gpu/drm/radeon/atombios.c could cause an off by one (buffer overflow) problem.</vuln:summary>
  </entry>
  <entry id="CVE-2010-5334">
    <vuln:cve-id>CVE-2010-5334</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T07:15:08.997-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T08:02:33.893-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://vuldb.com/?id.142994" xml:lang="en">https://vuldb.com/?id.142994</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.gosecurity.ch/fachartikel/168-gosecurity-advisory-2010120601" xml:lang="en">https://www.gosecurity.ch/fachartikel/168-gosecurity-advisory-2010120601</vuln:reference>
    </vuln:references>
    <vuln:summary>IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (_c to basic/index.html) is not properly sanitised and can therefore be exploited to browse the partition where IceWarp is installed (or the whole system) and read arbitrary files.</vuln:summary>
  </entry>
  <entry id="CVE-2010-5335">
    <vuln:cve-id>CVE-2010-5335</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T07:15:09.577-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T08:02:33.893-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://vuldb.com/?id.142994" xml:lang="en">https://vuldb.com/?id.142994</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.gosecurity.ch/fachartikel/168-gosecurity-advisory-2010120601" xml:lang="en">https://www.gosecurity.ch/fachartikel/168-gosecurity-advisory-2010120601</vuln:reference>
    </vuln:references>
    <vuln:summary>IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (script to basic/minimizer/index.php) is not properly sanitised and can therefore be exploited to browse the partition where IceWarp is installed (or the whole system) and read arbitrary files.</vuln:summary>
  </entry>
  <entry id="CVE-2010-5336">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2010-5336</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T07:15:09.667-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T15:13:54.547-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-15T14:40:51.363-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://vuldb.com/?id.142993" xml:lang="en">https://vuldb.com/?id.142993</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory-2010120602" xml:lang="en">https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory-2010120602</vuln:reference>
    </vuln:references>
    <vuln:summary>IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: admin/login.html with the parameter username is persistent in 10.2.0.</vuln:summary>
  </entry>
  <entry id="CVE-2010-5337">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2010-5337</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T07:15:09.763-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T15:20:22.580-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-15T15:19:14.547-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://vuldb.com/?id.142993" xml:lang="en">https://vuldb.com/?id.142993</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory-2010120602" xml:lang="en">https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory-2010120602</vuln:reference>
    </vuln:references>
    <vuln:summary>IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][controller] is non-persistent in 10.1.3 and 10.2.0.</vuln:summary>
  </entry>
  <entry id="CVE-2010-5338">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2010-5338</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T07:15:09.827-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T15:20:47.707-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-15T15:19:18.013-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://vuldb.com/?id.142993" xml:lang="en">https://vuldb.com/?id.142993</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory-2010120602" xml:lang="en">https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory-2010120602</vuln:reference>
    </vuln:references>
    <vuln:summary>IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][action] is non-persistent in 10.1.3 and 10.2.0.</vuln:summary>
  </entry>
  <entry id="CVE-2010-5339">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2010-5339</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T07:15:09.917-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T15:21:04.800-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-15T15:19:20.107-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://vuldb.com/?id.142993" xml:lang="en">https://vuldb.com/?id.142993</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory-2010120602" xml:lang="en">https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory-2010120602</vuln:reference>
    </vuln:references>
    <vuln:summary>IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][uid] is non-persistent in 10.1.3 and 10.2.0.</vuln:summary>
  </entry>
  <entry id="CVE-2010-5340">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2010-5340</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T07:15:09.980-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T15:19:08.983-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-15T14:40:36.830-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://vuldb.com/?id.142993" xml:lang="en">https://vuldb.com/?id.142993</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory-2010120602" xml:lang="en">https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory-2010120602</vuln:reference>
    </vuln:references>
    <vuln:summary>IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/ with the parameter password is non-persistent in 10.2.0.</vuln:summary>
  </entry>
  <entry id="CVE-2011-0467">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2011-0467</vuln:cve-id>
    <vuln:published-datetime>2018-06-07T17:29:00.260-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:02:21.097-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.suse.com/show_bug.cgi?id=675039" xml:lang="en">https://bugzilla.suse.com/show_bug.cgi?id=675039</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.suse.com/security/cve/CVE-2011-0467/" xml:lang="en">https://www.suse.com/security/cve/CVE-2011-0467/</vuln:reference>
    </vuln:references>
    <vuln:summary>A vulnerability in the listing of available software of SUSE SUSE Studio Onsite, SUSE Studio Onsite 1.1 Appliance allows authenticated users to execute arbitrary SQL statements via SQL injection. Affected releases are SUSE SUSE Studio Onsite: versions prior to 1.0.3-0.18.1, SUSE Studio Onsite 1.1 Appliance: versions prior to 1.1.2-0.25.1.</vuln:summary>
  </entry>
  <entry id="CVE-2011-0895">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:8.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:8.11.002"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:8.12.004"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:8.13.005"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:8.13.006"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.03"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:network_node_manager_i:8.10</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:8.11.002</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:8.12.004</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:8.13.005</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:8.13.006</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.0</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.01</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.02</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.03</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-0895</vuln:cve-id>
    <vuln:published-datetime>2011-04-06T13:55:00.833-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:02:30.723-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=130201751130787&amp;w=2" xml:lang="en">SSRT100432</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SREASON</vuln:source>
      <vuln:reference href="http://securityreason.com/securityalert/8186" xml:lang="en">8186</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/47162" xml:lang="en">47162</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1025288" xml:lang="en">1025288</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>VUPEN</vuln:source>
      <vuln:reference href="http://www.vupen.com/english/advisories/2011/0871" xml:lang="en">ADV-2011-0871</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x and 8.1x allows remote authenticated users to obtain sensitive information via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2011-1483">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:redhat:jboss_communications_platform:1.2.11"/>
        <cpe-lang:fact-ref name="cpe:/a:redhat:jboss_communications_platform:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:redhat:jboss_enterprise_application_platform:4.2.0:cp09"/>
        <cpe-lang:fact-ref name="cpe:/a:redhat:jboss_enterprise_application_platform:4.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:redhat:jboss_enterprise_application_platform:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:redhat:jboss_enterprise_brms_platform:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:redhat:jboss_enterprise_portal_platform:4.3.0:cp06"/>
        <cpe-lang:fact-ref name="cpe:/a:redhat:jboss_enterprise_portal_platform:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:redhat:jboss_enterprise_soa_platform:4.2.0:cp05"/>
        <cpe-lang:fact-ref name="cpe:/a:redhat:jboss_enterprise_soa_platform:4.3.0:cp05"/>
        <cpe-lang:fact-ref name="cpe:/a:redhat:jboss_enterprise_soa_platform:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:redhat:jboss_enterprise_web_platform:5.1.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.0</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.01</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.02</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.03</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.10</vuln:product>
      <vuln:product>cpe:/a:redhat:jboss_communications_platform:1.2.11</vuln:product>
      <vuln:product>cpe:/a:redhat:jboss_communications_platform:5.1.1</vuln:product>
      <vuln:product>cpe:/a:redhat:jboss_enterprise_application_platform:4.2.0:cp09</vuln:product>
      <vuln:product>cpe:/a:redhat:jboss_enterprise_application_platform:4.3.0</vuln:product>
      <vuln:product>cpe:/a:redhat:jboss_enterprise_application_platform:5.1.1</vuln:product>
      <vuln:product>cpe:/a:redhat:jboss_enterprise_brms_platform:5.1.0</vuln:product>
      <vuln:product>cpe:/a:redhat:jboss_enterprise_portal_platform:4.3.0:cp06</vuln:product>
      <vuln:product>cpe:/a:redhat:jboss_enterprise_portal_platform:5.1.1</vuln:product>
      <vuln:product>cpe:/a:redhat:jboss_enterprise_soa_platform:4.2.0:cp05</vuln:product>
      <vuln:product>cpe:/a:redhat:jboss_enterprise_soa_platform:4.3.0:cp05</vuln:product>
      <vuln:product>cpe:/a:redhat:jboss_enterprise_soa_platform:5.1.0</vuln:product>
      <vuln:product>cpe:/a:redhat:jboss_enterprise_web_platform:5.1.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-1483</vuln:cve-id>
    <vuln:published-datetime>2013-07-29T09:59:54.843-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:02:42.833-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://source.jboss.org/changelog/JBossWS/?cs=13996" xml:lang="en">http://source.jboss.org/changelog/JBossWS/?cs=13996</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=692584" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=692584</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03824583" xml:lang="en">SSRT101110</vuln:reference>
    </vuln:references>
    <vuln:summary>wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterprise BRMS Platform 5.1.0; and JBoss Enterprise Web Platform 5.1.1 does not properly handle recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested entity references, a similar issue to CVE-2003-1564.</vuln:summary>
  </entry>
  <entry id="CVE-2011-1514">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_storage_data_protector:6.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_storage_data_protector:6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_storage_data_protector:6.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_storage_data_protector:6.20"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:openview_storage_data_protector:6.00</vuln:product>
      <vuln:product>cpe:/a:hp:openview_storage_data_protector:6.10</vuln:product>
      <vuln:product>cpe:/a:hp:openview_storage_data_protector:6.11</vuln:product>
      <vuln:product>cpe:/a:hp:openview_storage_data_protector:6.20</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-1514</vuln:cve-id>
    <vuln:published-datetime>2011-07-01T06:55:01.910-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:02:43.723-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02872182" xml:lang="en">HPSBMU02686</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.coresecurity.com/content/HP-Data-Protector-multiple-vulnerabilities" xml:lang="en">http://www.coresecurity.com/content/HP-Data-Protector-multiple-vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:summary>The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request containing crafted parameters.</vuln:summary>
  </entry>
  <entry id="CVE-2011-1515">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_storage_data_protector:6.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_storage_data_protector:6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_storage_data_protector:6.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_storage_data_protector:6.20"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:openview_storage_data_protector:6.00</vuln:product>
      <vuln:product>cpe:/a:hp:openview_storage_data_protector:6.10</vuln:product>
      <vuln:product>cpe:/a:hp:openview_storage_data_protector:6.11</vuln:product>
      <vuln:product>cpe:/a:hp:openview_storage_data_protector:6.20</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-1515</vuln:cve-id>
    <vuln:published-datetime>2011-07-01T06:55:01.957-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:02:43.880-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-399"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02872182" xml:lang="en">SSRT100541</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.coresecurity.com/content/HP-Data-Protector-multiple-vulnerabilities" xml:lang="en">http://www.coresecurity.com/content/HP-Data-Protector-multiple-vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:summary>The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service (daemon exit) via a request containing crafted parameters.</vuln:summary>
  </entry>
  <entry id="CVE-2011-1830">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:ekiga:ekiga:3.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ekiga:ekiga:3.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ekiga:ekiga:3.2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:ekiga:ekiga:3.2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:ekiga:ekiga:3.2.6"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ekiga:ekiga:3.2.2</vuln:product>
      <vuln:product>cpe:/a:ekiga:ekiga:3.2.3</vuln:product>
      <vuln:product>cpe:/a:ekiga:ekiga:3.2.4</vuln:product>
      <vuln:product>cpe:/a:ekiga:ekiga:3.2.5</vuln:product>
      <vuln:product>cpe:/a:ekiga:ekiga:3.2.6</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-1830</vuln:cve-id>
    <vuln:published-datetime>2019-04-22T12:29:00.223-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:02:50.787-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://gitlab.gnome.org/GNOME/ekiga/commit/02654fc949722a78d41fcffac8687d73d8574647" xml:lang="en">https://gitlab.gnome.org/GNOME/ekiga/commit/02654fc949722a78d41fcffac8687d73d8574647</vuln:reference>
    </vuln:references>
    <vuln:summary>Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekiga_test.so.</vuln:summary>
  </entry>
  <entry id="CVE-2011-1849">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-1849</vuln:cve-id>
    <vuln:published-datetime>2011-05-13T13:05:44.907-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:02:51.460-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02822750" xml:lang="en">SSRT100361</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1025519" xml:lang="en">1025519</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/47789" xml:lang="en">47789</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.zerodayinitiative.com/advisories/ZDI-11-161/" xml:lang="en">http://www.zerodayinitiative.com/advisories/ZDI-11-161/</vuln:reference>
    </vuln:references>
    <vuln:summary>tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to create or overwrite files, and subsequently execute arbitrary code, via a crafted WRQ request.</vuln:summary>
  </entry>
  <entry id="CVE-2011-1850">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-1850</vuln:cve-id>
    <vuln:published-datetime>2011-05-13T13:05:44.957-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:02:51.663-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02822750" xml:lang="en">SSRT100361</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1025519" xml:lang="en">1025519</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/47789" xml:lang="en">47789</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.zerodayinitiative.com/advisories/ZDI-11-162/" xml:lang="en">http://www.zerodayinitiative.com/advisories/ZDI-11-162/</vuln:reference>
    </vuln:references>
    <vuln:summary>Stack-based buffer overflow in the logging functionality in dbman.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via vectors related to a received action.</vuln:summary>
  </entry>
  <entry id="CVE-2011-1851">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-1851</vuln:cve-id>
    <vuln:published-datetime>2011-05-13T13:05:44.987-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:02:51.787-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02822750" xml:lang="en">SSRT100361</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1025519" xml:lang="en">1025519</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/47789" xml:lang="en">47789</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.zerodayinitiative.com/advisories/ZDI-11-163/" xml:lang="en">http://www.zerodayinitiative.com/advisories/ZDI-11-163/</vuln:reference>
    </vuln:references>
    <vuln:summary>Stack-based buffer overflow in tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long mode field.</vuln:summary>
  </entry>
  <entry id="CVE-2011-1853">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-1853</vuln:cve-id>
    <vuln:published-datetime>2011-05-13T13:05:45.063-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:02:52.020-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02822750" xml:lang="en">HPSBGN02680</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1025519" xml:lang="en">1025519</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/47789" xml:lang="en">47789</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.zerodayinitiative.com/advisories/ZDI-11-165/" xml:lang="en">http://www.zerodayinitiative.com/advisories/ZDI-11-165/</vuln:reference>
    </vuln:references>
    <vuln:summary>tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a (1) large or (2) invalid opcode field, related to a function pointer table.</vuln:summary>
  </entry>
  <entry id="CVE-2011-1854">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-1854</vuln:cve-id>
    <vuln:published-datetime>2011-05-13T13:05:45.097-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:02:52.100-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-399"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02822750" xml:lang="en">HPSBGN02680</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1025519" xml:lang="en">1025519</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/47789" xml:lang="en">47789</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.zerodayinitiative.com/advisories/ZDI-11-166/" xml:lang="en">http://www.zerodayinitiative.com/advisories/ZDI-11-166/</vuln:reference>
    </vuln:references>
    <vuln:summary>Use-after-free vulnerability in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long syslog packet, related to an exception handler.</vuln:summary>
  </entry>
  <entry id="CVE-2011-1910">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.0.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.0.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.0.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.0.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.0.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.0.0:rc6"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.0.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.0.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.1.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.1.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.1.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.1.1:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.1.1:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.1.1:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.1.1:rc6"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.1.1:rc7"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.1.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.1.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.1.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.1.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.0:a1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.0:a2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.0:a3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.0:b1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.0:b2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.0:rc10"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.0:rc6"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.0:rc7"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.0:rc8"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.0:rc9"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.2:p2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.2:p3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.3:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.4:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.4:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.4:rc5"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.4:rc6"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.4:rc7"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.4:rc8"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.5:b2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.6:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.7:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.7:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.7:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.9"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.2.9:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.0:b2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.0:b3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.0:b4"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.1:b2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.4"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.5:p2_w1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.3.6:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4::~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4:b1:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4:r1:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4:r2:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4:r3:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4:r4:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4:r4-p1:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4:r5:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4:r5-b1:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4:r5-p1:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4:r5-rc1:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.0:a1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.0:a2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.0:a3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.0:a4"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.0:a5"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.0:a6"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.0:b1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.0:b2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.0:b3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.0:b4"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.2:p2_w1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.3:b1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.3:b2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.3:b3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.3:p1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.3:p2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.3:p3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.3:p4"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.3:p5"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.4.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.0:a1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.0:a2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.0:a3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.0:a4"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.0:a5"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.0:a6"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.0:a7"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.0:b1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.0:b2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.0:b3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.0:p1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.0:p2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.0:p2_w1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.0:p2_w2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.1:b1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.1:b2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.1:b3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.2:b1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.2:p1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.2:p2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.2:p3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.2:p4"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.3:b1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.5.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6::~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6:r1:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6:r2:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6:r3:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6:r4:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6:r4_p1:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6:r5:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6:r5_b1:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6:r5_p1:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6:r6:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6:r6_b1:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6:r6_rc1:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6:r6_rc2:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6:r7:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6:r7_p1:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6:r7_p2:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6:r9:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6:r9_p1:~~esv~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.0:a1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.0:b1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.0:p1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.1:b1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.1:p1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.1:p2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.1:p3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.2:b1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.2:p1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.2:p2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.2:p3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.3:b1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.6.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.0:a1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.0:a2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.0:a3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.0:b1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.0:b2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.0:b3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.0:p1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.0:p2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.1:b1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.1:p1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.1:p2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.2:p1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.2:p2"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.2:p3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.7.3:b1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.8.0:a1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.8.0:b1"/>
        <cpe-lang:fact-ref name="cpe:/a:isc:bind:9.8.0:p1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:isc:bind:9.0</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.0.0:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.0.0:rc2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.0.0:rc3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.0.0:rc4</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.0.0:rc5</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.0.0:rc6</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.0.1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.0.1:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.0.1:rc2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.1.0:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.1.1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.1.1:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.1.1:rc2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.1.1:rc3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.1.1:rc4</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.1.1:rc5</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.1.1:rc6</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.1.1:rc7</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.1.2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.1.2:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.1.3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.1.3:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.1.3:rc2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.1.3:rc3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.0</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.0:a1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.0:a2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.0:a3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.0:b1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.0:b2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.0:rc10</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.0:rc3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.0:rc4</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.0:rc5</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.0:rc6</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.0:rc7</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.0:rc8</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.0:rc9</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.1:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.1:rc2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.2:p2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.2:p3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.2:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.3:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.3:rc2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.3:rc3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.3:rc4</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.4</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.4:rc2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.4:rc3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.4:rc4</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.4:rc5</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.4:rc6</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.4:rc7</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.4:rc8</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.5</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.5:b2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.5:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.6</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.6:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.7</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.7:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.7:rc2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.7:rc3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.8</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.9</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.2.9:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.0</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.0:b2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.0:b3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.0:b4</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.0:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.0:rc2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.0:rc3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.0:rc4</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.1:b2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.1:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.2:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.3:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.3:rc2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.3:rc3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.4</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.5</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.5:p2_w1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.5:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.5:rc2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.6</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.3.6:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4::~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4:b1:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4:r1:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4:r2:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4:r3:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4:r4:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4:r4-p1:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4:r5:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4:r5-b1:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4:r5-p1:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4:r5-rc1:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.0</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.0:a1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.0:a2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.0:a3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.0:a4</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.0:a5</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.0:a6</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.0:b1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.0:b2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.0:b3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.0:b4</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.0:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.0:rc2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.2:p2_w1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.2:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.2:rc2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.3:b1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.3:b2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.3:b3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.3:p1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.3:p2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.3:p3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.3:p4</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.3:p5</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.4.3:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.0</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.0:a1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.0:a2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.0:a3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.0:a4</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.0:a5</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.0:a6</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.0:a7</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.0:b1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.0:b2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.0:b3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.0:p1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.0:p2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.0:p2_w1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.0:p2_w2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.0:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.1:b1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.1:b2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.1:b3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.1:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.1:rc2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.2:b1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.2:p1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.2:p2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.2:p3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.2:p4</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.2:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.3:b1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.5.3:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6::~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6:r1:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6:r2:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6:r3:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6:r4:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6:r4_p1:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6:r5:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6:r5_b1:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6:r5_p1:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6:r6:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6:r6_b1:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6:r6_rc1:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6:r6_rc2:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6:r7:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6:r7_p1:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6:r7_p2:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6:r9:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6:r9_p1:~~esv~~~</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.0</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.0:a1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.0:b1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.0:p1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.0:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.0:rc2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.1:b1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.1:p1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.1:p2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.1:p3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.1:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.2:b1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.2:p1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.2:p2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.2:p3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.2:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.3:b1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.6.3:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.0</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.0:a1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.0:a2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.0:a3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.0:b1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.0:b2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.0:b3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.0:p1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.0:p2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.0:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.0:rc2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.1:b1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.1:p1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.1:p2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.1:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.2:p1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.2:p2</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.2:p3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.2:rc1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.3</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.7.3:b1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.8.0</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.8.0:a1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.8.0:b1</vuln:product>
      <vuln:product>cpe:/a:isc:bind:9.8.0:p1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-1910</vuln:cve-id>
    <vuln:published-datetime>2011-05-31T16:55:02.953-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:02:53.770-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-189"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html" xml:lang="en">APPLE-SA-2011-10-12-3</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061082.html" xml:lang="en">FEDORA-2011-7617</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061401.html" xml:lang="en">FEDORA-2011-7602</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061405.html" xml:lang="en">FEDORA-2011-7621</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142180687100892&amp;w=2" xml:lang="en">SSRT101750</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>FREEBSD</vuln:source>
      <vuln:reference href="http://security.freebsd.org/advisories/FreeBSD-SA-11:02.bind.asc" xml:lang="en">FreeBSD-SA-11:02</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SLACKWARE</vuln:source>
      <vuln:reference href="http://slackware.com/security/viewer.php?l=slackware-security&amp;y=2011&amp;m=slackware-security.685026" xml:lang="en">SSA:2011-147-01</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT5002" xml:lang="en">http://support.apple.com/kb/HT5002</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2011/dsa-2244" xml:lang="en">DSA-2244</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/795694" xml:lang="en">VU#795694</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2011:104" xml:lang="en">MDVSA-2011:104</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://www.redhat.com/support/errata/RHSA-2011-0845.html" xml:lang="en">RHSA-2011:0845</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/48007" xml:lang="en">48007</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1025572" xml:lang="en">1025572</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=708301" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=708301</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="https://hermes.opensuse.org/messages/8699912" xml:lang="en">openSUSE-SU-2011:0603</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.isc.org/software/bind/advisories/cve-2011-1910" xml:lang="en">https://www.isc.org/software/bind/advisories/cve-2011-1910</vuln:reference>
    </vuln:references>
    <vuln:summary>Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.</vuln:summary>
  </entry>
  <entry id="CVE-2011-2405">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:proliant_sl_advanced_power_manager"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:proliant_sl_advanced_power_manager_firmware:1.10"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:proliant_sl_advanced_power_manager_firmware:1.11"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:proliant_sl_advanced_power_manager_firmware:1.10</vuln:product>
      <vuln:product>cpe:/a:hp:proliant_sl_advanced_power_manager_firmware:1.11</vuln:product>
      <vuln:product>cpe:/h:hp:proliant_sl_advanced_power_manager</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-2405</vuln:cve-id>
    <vuln:published-datetime>2011-08-11T18:55:01.350-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:06.130-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02950841" xml:lang="en">SSRT100592</vuln:reference>
    </vuln:references>
    <vuln:summary>The HP ProLiant SL Advanced Power Manager (SL-APM) with firmware before 1.20 does not properly validate users, which allows remote attackers to cause a denial of service via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2011-2407">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_performance_insight:5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_performance_insight:5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_performance_insight:5.31"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_performance_insight:5.41"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_performance_insight:5.41.001"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_performance_insight:5.41.002"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:openview_performance_insight:5.3</vuln:product>
      <vuln:product>cpe:/a:hp:openview_performance_insight:5.4</vuln:product>
      <vuln:product>cpe:/a:hp:openview_performance_insight:5.31</vuln:product>
      <vuln:product>cpe:/a:hp:openview_performance_insight:5.41</vuln:product>
      <vuln:product>cpe:/a:hp:openview_performance_insight:5.41.001</vuln:product>
      <vuln:product>cpe:/a:hp:openview_performance_insight:5.41.002</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-2407</vuln:cve-id>
    <vuln:published-datetime>2011-08-11T18:55:01.427-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:06.350-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.4</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=131292748121409&amp;w=2" xml:lang="en">SSRT100480</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SREASON</vuln:source>
      <vuln:reference href="http://securityreason.com/securityalert/8333" xml:lang="en">8333</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/49096" xml:lang="en">49096</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to obtain access via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2011-2408">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:hp:palm_webos:3.0.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:hp:palm_webos:3.0.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-2408</vuln:cve-id>
    <vuln:published-datetime>2011-08-11T18:55:01.457-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:06.460-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02937744" xml:lang="en">SSRT100586</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in the Contacts application in HP Palm webOS 3.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2011-2409">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:hp:palm_webos:3.0.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:hp:palm_webos:3.0.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-2409</vuln:cve-id>
    <vuln:published-datetime>2011-08-11T18:55:01.490-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:06.567-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02945437" xml:lang="en">HPSBGN02696</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in the Calendar application in HP Palm webOS 3.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2011-2410">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_performance_insight:5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_performance_insight:5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_performance_insight:5.31"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_performance_insight:5.41"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_performance_insight:5.41.001"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:openview_performance_insight:5.41.002"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:openview_performance_insight:5.3</vuln:product>
      <vuln:product>cpe:/a:hp:openview_performance_insight:5.4</vuln:product>
      <vuln:product>cpe:/a:hp:openview_performance_insight:5.31</vuln:product>
      <vuln:product>cpe:/a:hp:openview_performance_insight:5.41</vuln:product>
      <vuln:product>cpe:/a:hp:openview_performance_insight:5.41.001</vuln:product>
      <vuln:product>cpe:/a:hp:openview_performance_insight:5.41.002</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-2410</vuln:cve-id>
    <vuln:published-datetime>2011-08-19T13:55:00.847-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:06.663-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02942411" xml:lang="en">SSRT100480</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2011-2411">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:samba:samba"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:nonstop_server"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.15.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.15.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.15.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.16.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.16.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.16.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.17.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.17.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.17.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.17.03"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.18.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.18.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.18.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.19.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.19.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.19.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.19.03"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.20.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.20.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.20.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.20.03"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.21.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.21.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.21.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.22.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.22.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.23.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.04.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.04.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.04.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.05.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.05.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.05.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.06.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.06.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.06.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.06.03"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.07.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.07.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.07.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.08.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.08.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.08.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.08.03"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.09.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.09.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.09.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.09.03"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.10.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.10.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.10.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.11.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.11.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.12.00"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.15.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.15.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.15.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.16.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.16.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.16.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.17.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.17.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.17.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.17.03</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.18.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.18.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.18.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.19.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.19.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.19.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.19.03</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.20.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.20.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.20.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.20.03</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.21.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.21.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.21.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.22.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.22.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.23.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.04.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.04.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.04.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.05.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.05.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.05.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.06.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.06.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.06.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.06.03</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.07.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.07.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.07.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.08.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.08.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.08.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.08.03</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.09.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.09.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.09.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.09.03</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.10.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.10.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.10.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.11.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.11.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.12.00</vuln:product>
      <vuln:product>cpe:/a:samba:samba</vuln:product>
      <vuln:product>cpe:/h:hp:nonstop_server</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-2411</vuln:cve-id>
    <vuln:published-datetime>2011-10-02T16:55:00.867-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:06.773-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c03008543" xml:lang="en">HPSBNS02701</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability on HP NonStop Servers with software H06.x through H06.23.00 and J06.x through J06.12.00, when Samba is used, allows remote authenticated users to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2011-3145">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mount.ecrpytfs_private_project:mount.ecrpytfs_private:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mount.ecrpytfs_private_project:mount.ecrpytfs_private:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-3145</vuln:cve-id>
    <vuln:published-datetime>2019-04-22T12:29:00.287-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:23.897-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-254"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/558" xml:lang="en">http://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/558</vuln:reference>
    </vuln:references>
    <vuln:summary>When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfs_private.</vuln:summary>
  </entry>
  <entry id="CVE-2011-3147">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:0.9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:12.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:12.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:12.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:12.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:12.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:12.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:12.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:13.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:13.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:13.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:13.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:13.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:13.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:14.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:14.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:14.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:14.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:14.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:14.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:14.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:14.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:14.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:14.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:14.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:14.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:15.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:15.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:15.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:15.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:15.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:15.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:15.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:15.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:15.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:15.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:15.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:15.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:15.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:15.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:15.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:16.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:16.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:16.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:16.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:16.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:16.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:16.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:16.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:16.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:16.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:16.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:16.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:16.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:17.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:17.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:17.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:17.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:17.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:17.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:17.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:17.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:17.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:17.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:17.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:17.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:17.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:18.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:18.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:18.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:18.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:18.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:18.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:18.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:19.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:19.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:19.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:2010.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:2011.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:2011.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:2011.3"/>
        <cpe-lang:fact-ref name="cpe:/a:openstack:nova:2011.3.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:openstack:nova:0.9.0</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:12.0.0</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:12.0.1</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:12.0.2</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:12.0.3</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:12.0.4</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:12.0.5</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:12.0.6</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:13.0.0</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:13.1.0</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:13.1.1</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:13.1.2</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:13.1.3</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:13.1.4</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:14.0.0</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:14.0.1</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:14.0.2</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:14.0.3</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:14.0.4</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:14.0.5</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:14.0.6</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:14.0.7</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:14.0.8</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:14.0.9</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:14.0.10</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:14.1.0</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:15.0.0</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:15.0.1</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:15.0.2</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:15.0.3</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:15.0.4</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:15.0.5</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:15.0.6</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:15.0.7</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:15.0.8</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:15.1.0</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:15.1.1</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:15.1.2</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:15.1.3</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:15.1.4</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:15.1.5</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:16.0.0</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:16.0.1</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:16.0.2</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:16.0.3</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:16.0.4</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:16.1.0</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:16.1.1</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:16.1.2</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:16.1.3</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:16.1.4</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:16.1.5</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:16.1.6</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:16.1.7</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:17.0.0</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:17.0.1</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:17.0.2</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:17.0.3</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:17.0.4</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:17.0.5</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:17.0.6</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:17.0.7</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:17.0.8</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:17.0.9</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:17.0.10</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:17.0.11</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:17.0.12</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:18.0.0</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:18.0.1</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:18.0.2</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:18.0.3</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:18.2.0</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:18.2.1</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:18.2.2</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:19.0.0</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:19.0.1</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:19.0.2</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:2010.1</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:2011.1</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:2011.2</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:2011.3</vuln:product>
      <vuln:product>cpe:/a:openstack:nova:2011.3.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-3147</vuln:cve-id>
    <vuln:published-datetime>2019-04-22T12:29:00.350-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:24.117-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://bazaar.launchpad.net/~hudson-openstack/nova/trunk/revision/1604" xml:lang="en">http://bazaar.launchpad.net/~hudson-openstack/nova/trunk/revision/1604</vuln:reference>
    </vuln:references>
    <vuln:summary>Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed qcow filesystem.</vuln:summary>
  </entry>
  <entry id="CVE-2011-3151">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2011-3151</vuln:cve-id>
    <vuln:published-datetime>2019-04-22T12:29:00.397-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:24.350-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-693"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://launchpadlibrarian.net/88098106/selinux_0.10~10.04.1.debdiff" xml:lang="en">https://launchpadlibrarian.net/88098106/selinux_0.10~10.04.1.debdiff</vuln:reference>
    </vuln:references>
    <vuln:summary>The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem.</vuln:summary>
  </entry>
  <entry id="CVE-2011-3172">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:10:sp1"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:10:sp2"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:10:sp3"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:10:sp4"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:11"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:11:sp1"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:11:sp1:~~~sap_aio~~"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:11:sp1:~~ltss~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:11:sp2"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:11:sp3"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:11:sp4"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:11.0:sp3"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:11.0:sp3:~~~vmware~~"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:12"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:12:sp1"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:12:sp2"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:12:sp3"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:12:sp4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:10:sp1</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:10:sp2</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:10:sp3</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:10:sp4</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:11</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:11:sp1</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:11:sp1:~~~sap_aio~~</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:11:sp1:~~ltss~~~</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:11:sp2</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:11:sp3</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:11:sp4</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:11.0:sp3</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:11.0:sp3:~~~vmware~~</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:12</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:12:sp1</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:12:sp2</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:12:sp3</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:12:sp4</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-3172</vuln:cve-id>
    <vuln:published-datetime>2018-06-08T09:29:00.237-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:25.180-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.suse.com/show_bug.cgi?id=707645" xml:lang="en">https://bugzilla.suse.com/show_bug.cgi?id=707645</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://build.opensuse.org/request/show/80346" xml:lang="en">https://build.opensuse.org/request/show/80346</vuln:reference>
    </vuln:references>
    <vuln:summary>A vulnerability in pam_modules of SUSE SUSE Linux Enterprise allows attackers to log into accounts that should have been disabled. Affected releases are SUSE SUSE Linux Enterprise: versions prior to 12.</vuln:summary>
  </entry>
  <entry id="CVE-2011-3178">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2011-3178</vuln:cve-id>
    <vuln:published-datetime>2018-03-20T14:29:00.257-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:25.507-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.suse.com/show_bug.cgi?id=723788" xml:lang="en">https://bugzilla.suse.com/show_bug.cgi?id=723788</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/openSUSE/open-build-service/commit/cbfe2ed36dd77c0843702935dea7f914bb599201" xml:lang="en">https://github.com/openSUSE/open-build-service/commit/cbfe2ed36dd77c0843702935dea7f914bb599201</vuln:reference>
    </vuln:references>
    <vuln:summary>In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute shellcode.</vuln:summary>
  </entry>
  <entry id="CVE-2011-4166">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:managed_printing_administration:2.6.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:managed_printing_administration:2.6.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-4166</vuln:cve-id>
    <vuln:published-datetime>2011-12-26T23:01:39.670-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:46.070-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469" xml:lang="en">HPSBPI02732</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.zerodayinitiative.com/advisories/ZDI-11-352/" xml:lang="en">http://www.zerodayinitiative.com/advisories/ZDI-11-352/</vuln:reference>
    </vuln:references>
    <vuln:summary>Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data.</vuln:summary>
  </entry>
  <entry id="CVE-2011-4167">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:managed_printing_administration:2.6.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:managed_printing_administration:2.6.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-4167</vuln:cve-id>
    <vuln:published-datetime>2011-12-26T23:01:39.733-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:46.303-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469" xml:lang="en">SSRT100435</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.zerodayinitiative.com/advisories/ZDI-11-353/" xml:lang="en">http://www.zerodayinitiative.com/advisories/ZDI-11-353/</vuln:reference>
    </vuln:references>
    <vuln:summary>Stack-based buffer overflow in MPAUploader.dll in HP Managed Printing Administration before 2.6.4 allows remote attackers to execute arbitrary code via a long filename parameter in an uploadfile action to Default.asp.</vuln:summary>
  </entry>
  <entry id="CVE-2011-4168">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:managed_printing_administration:2.6.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:managed_printing_administration:2.6.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-4168</vuln:cve-id>
    <vuln:published-datetime>2011-12-26T23:01:39.780-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:46.413-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469" xml:lang="en">SSRT100435</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.zerodayinitiative.com/advisories/ZDI-11-354/" xml:lang="en">http://www.zerodayinitiative.com/advisories/ZDI-11-354/</vuln:reference>
    </vuln:references>
    <vuln:summary>Directory traversal vulnerability in hpmpa/jobDelivery/Default.asp in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data.</vuln:summary>
  </entry>
  <entry id="CVE-2011-4169">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:managed_printing_administration:2.6.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:managed_printing_administration:2.6.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-4169</vuln:cve-id>
    <vuln:published-datetime>2011-12-26T23:01:39.810-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:46.507-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469" xml:lang="en">HPSBPI02732</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Managed Printing Administration before 2.6.4 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2011-4181">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.15"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.2</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.3</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.4</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.5</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.5.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.6</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.7</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.8</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.8.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.9</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.10</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.11</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.12</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.13</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.14</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.15</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-4181</vuln:cve-id>
    <vuln:published-datetime>2018-06-11T11:29:00.217-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:46.710-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.suse.com/show_bug.cgi?id=734003" xml:lang="en">https://bugzilla.suse.com/show_bug.cgi?id=734003</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/openSUSE/open-build-service/commit/5281e4bff9df31f1f91e22a0d1e9086b93b23d7e" xml:lang="en">https://github.com/openSUSE/open-build-service/commit/5281e4bff9df31f1f91e22a0d1e9086b93b23d7e</vuln:reference>
    </vuln:references>
    <vuln:summary>A vulnerability in open build service allows remote attackers to gain access to source files even though source access is disabled. Affected releases are SUSE open build service up to and including version 2.1.15 (for 2.1) and before version 2.3.</vuln:summary>
  </entry>
  <entry id="CVE-2011-4182">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:opensuse:sysconfig:0.83.7"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:opensuse:sysconfig:0.83.7</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-4182</vuln:cve-id>
    <vuln:published-datetime>2018-06-12T11:29:00.210-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:46.883-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.suse.com/show_bug.cgi?id=735394" xml:lang="en">https://bugzilla.suse.com/show_bug.cgi?id=735394</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.suse.com/security/cve/CVE-2017-15710/" xml:lang="en">https://www.suse.com/security/cve/CVE-2017-15710/</vuln:reference>
    </vuln:references>
    <vuln:summary>Missing escaping of ESSID values in sysconfig of SUSE Linux Enterprise allows attackers controlling an access point to cause execute arbitrary code. Affected releases are sysconfig prior to 0.83.7-2.1.</vuln:summary>
  </entry>
  <entry id="CVE-2011-4183">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.9.4"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.9.5"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.7.4"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.7.5"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.7.6"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.7.7"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.9.90"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.9.91"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.9.92"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.103"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.104"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.106"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.15"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.2.3</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.4.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.4.2</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.5.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.5.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.5.2</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.5.3</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.6.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.7.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.8.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.9.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.9.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.9.2</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.9.3</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.9.4</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.9.5</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.7.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.7.2</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.7.3</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.7.4</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.7.5</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.7.6</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.7.7</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.9.90</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.9.91</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.9.92</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.2</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.3</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.4</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.5</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.6</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.7</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.8</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.16</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.103</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.104</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.106</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.2</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.3</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.4</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.5</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.5.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.6</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.7</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.8</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.8.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.9</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.10</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.11</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.12</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.13</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.14</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.15</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-4183</vuln:cve-id>
    <vuln:published-datetime>2018-06-13T09:29:00.280-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:47.070-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-434"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.suse.com/show_bug.cgi?id=736243" xml:lang="en">https://bugzilla.suse.com/show_bug.cgi?id=736243</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/openSUSE/open-build-service/commit/5281e4bff9df31f1f91e22a0d1e9086b93b23d7e" xml:lang="en">https://github.com/openSUSE/open-build-service/commit/5281e4bff9df31f1f91e22a0d1e9086b93b23d7e</vuln:reference>
    </vuln:references>
    <vuln:summary>A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16.</vuln:summary>
  </entry>
  <entry id="CVE-2011-4190">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_desktop:11:sp1"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:11:sp1"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:11:sp1:~~~sap_aio~~"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:11.0:sp1:~~ltss~~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_desktop:11:sp1</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:11:sp1</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:11:sp1:~~~sap_aio~~</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:11.0:sp1:~~ltss~~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-4190</vuln:cve-id>
    <vuln:published-datetime>2018-06-08T13:29:00.223-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:47.320-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.suse.com/show_bug.cgi?id=722440" xml:lang="en">https://bugzilla.suse.com/show_bug.cgi?id=722440</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.suse.com/security/cve/CVE-2011-4190/" xml:lang="en">https://www.suse.com/security/cve/CVE-2011-4190/</vuln:reference>
    </vuln:references>
    <vuln:summary>The kdump implementation is missing the host key verification in the kdump and mkdumprd OpenSSH integration of kdump prior to version 2012-01-20. This is similar to CVE-2011-3588, but different in that the kdump implementation is specific to SUSE. A remote malicious kdump server could use this flaw to impersonate the correct kdump server to obtain security sensitive information (kdump core files).</vuln:summary>
  </entry>
  <entry id="CVE-2011-4786">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:easy_printer_care_software:2.5"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:easy_printer_care_software:2.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-4786</vuln:cve-id>
    <vuln:published-datetime>2012-01-12T14:55:00.810-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:58.087-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/bugtraq/2012-01/0078.html" xml:lang="en">SSRT100404</vuln:reference>
    </vuln:references>
    <vuln:summary>A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4787.</vuln:summary>
  </entry>
  <entry id="CVE-2011-4787">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:easy_printer_care_software:2.5"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:easy_printer_care_software:2.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-4787</vuln:cve-id>
    <vuln:published-datetime>2012-01-12T14:55:03.417-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:58.633-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/bugtraq/2012-01/0078.html" xml:lang="en">HPSBPI02698</vuln:reference>
    </vuln:references>
    <vuln:summary>A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4786.</vuln:summary>
  </entry>
  <entry id="CVE-2011-4790">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:network_automation:7.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_automation:7.6"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_automation:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_automation:9.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:network_automation:7.5</vuln:product>
      <vuln:product>cpe:/a:hp:network_automation:7.6</vuln:product>
      <vuln:product>cpe:/a:hp:network_automation:9.0</vuln:product>
      <vuln:product>cpe:/a:hp:network_automation:9.10</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-4790</vuln:cve-id>
    <vuln:published-datetime>2012-02-01T19:55:01.190-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:58.853-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03171149" xml:lang="en">SSRT100748</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://securitytracker.com/id?1026601" xml:lang="en">1026601</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Network Automation 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2011-4791">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_media_operations:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_media_operations:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_media_operations:5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_media_operations:6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_media_operations:6.11"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:data_protector_media_operations:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_media_operations:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_media_operations:5.5</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_media_operations:6.10</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_media_operations:6.11</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2011-4791</vuln:cve-id>
    <vuln:published-datetime>2012-02-02T23:05:51.270-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:03:58.977-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/521472" xml:lang="en">SSRT100280</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://zerodayinitiative.com/advisories/ZDI-11-112/" xml:lang="en">http://zerodayinitiative.com/advisories/ZDI-11-112/</vuln:reference>
    </vuln:references>
    <vuln:summary>DBServer.exe in HP Data Protector Media Operations 6.11 and earlier allows remote attackers to execute arbitrary code via a crafted request containing a large value in a length field.</vuln:summary>
  </entry>
  <entry id="CVE-2012-0121">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:6.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:data_protector_express:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:6.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-0121</vuln:cve-id>
    <vuln:published-datetime>2012-03-13T23:28:49.577-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:11.603-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/521944" xml:lang="en">SSRT100781</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1392.</vuln:summary>
  </entry>
  <entry id="CVE-2012-0122">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:6.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:data_protector_express:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:6.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-0122</vuln:cve-id>
    <vuln:published-datetime>2012-03-13T23:28:49.607-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:11.820-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/521944" xml:lang="en">SSRT100781</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1393.</vuln:summary>
  </entry>
  <entry id="CVE-2012-0124">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:data_protector_express:6.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:data_protector_express:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:data_protector_express:6.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-0124</vuln:cve-id>
    <vuln:published-datetime>2012-03-13T23:28:49.687-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:11.977-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/521944" xml:lang="en">SSRT100781</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-0433">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:crowbar_project:crowbar:1.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:crowbar_project:crowbar:1.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-0433</vuln:cve-id>
    <vuln:published-datetime>2018-06-08T13:29:00.270-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:17.837-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.suse.com/show_bug.cgi?id=783195" xml:lang="en">https://bugzilla.suse.com/show_bug.cgi?id=783195</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.suse.com/security/cve/CVE-2012-0433/" xml:lang="en">https://www.suse.com/security/cve/CVE-2012-0433/</vuln:reference>
    </vuln:references>
    <vuln:summary>The install-chef-suse.sh script shipped with crowbar before 2012-10-02 is creating files containing confidential data with insecure permissions, allowing local users to read confidential data.</vuln:summary>
  </entry>
  <entry id="CVE-2012-0508">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:javafx:1.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:javafx:1.3.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:oracle:javafx:1.2.2</vuln:product>
      <vuln:product>cpe:/a:oracle:javafx:1.3.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-0508</vuln:cve-id>
    <vuln:published-datetime>2012-02-15T17:55:01.550-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:19.900-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=134254866602253&amp;w=2" xml:lang="en">HPSBMU02799</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=134254957702612&amp;w=2" xml:lang="en">SSRT100867</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=134496371727681&amp;w=2" xml:lang="en">SSRT100919</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX, 1.3.0 and earlier, and 1.2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-1696">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.33"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.37"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.41"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23:a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23_bk"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.29"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.30"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.31"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.31:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.32"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.32-bzr"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.33"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.34"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.34:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.35"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.36"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.37"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.37:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.38"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.39"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.40"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.40:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.41"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.42"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.43"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.43:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.44"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.45"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.46"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.46:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.47"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.48"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.49"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.49:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.50"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_community_server:5.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql_server:5.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20.32a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.20:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.35"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.52:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.60"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.61"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql_connector%2fj:5.1.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.25</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.26</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.20a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.33</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.37</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.41</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.5a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23:a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23_bk</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.25</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.26</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.28</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.29</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.30</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.31</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.31:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.32</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.32-bzr</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.33</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.34</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.34:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.35</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.36</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.37</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.37:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.38</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.39</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.40</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.40:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.41</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.42</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.43</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.43:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.44</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.45</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.46</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.46:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.47</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.48</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.49</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.49:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.50</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_community_server:5.1.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql_server:5.1.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20.32a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.0:alpha</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.20:beta</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.33</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.35</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.55</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.56</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.57</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.58</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.59</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.52:sp1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.55</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.56</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.57</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.58</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.59</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.60</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.61</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.20</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql_connector%2fj:5.1.8</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-1696</vuln:cve-id>
    <vuln:published-datetime>2012-05-03T18:55:02.637-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:35.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201308-06.xml" xml:lang="en">GLSA-201308-06</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2013:150" xml:lang="en">MDVSA-2013:150</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/53071" xml:lang="en">53071</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1026934" xml:lang="en">1026934</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.</vuln:summary>
  </entry>
  <entry id="CVE-2012-1697">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.33"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.37"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.41"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23:a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23_bk"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.29"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.30"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.31"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.31:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.32"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.32-bzr"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.33"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.34"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.34:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.35"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.36"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.37"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.37:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.38"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.39"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.40"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.40:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.41"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.42"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.43"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.43:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.44"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.45"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.46"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.46:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.47"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.48"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.49"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.49:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.50"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20.32a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.20:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.35"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.52:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.60"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.61"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.21"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.25</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.26</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.20a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.33</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.37</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.41</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.5a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23:a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23_bk</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.25</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.26</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.28</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.29</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.30</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.31</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.31:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.32</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.32-bzr</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.33</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.34</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.34:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.35</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.36</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.37</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.37:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.38</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.39</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.40</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.40:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.41</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.42</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.43</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.43:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.44</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.45</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.46</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.46:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.47</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.48</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.49</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.49:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.50</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20.32a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.0:alpha</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.20:beta</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.33</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.35</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.55</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.56</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.57</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.58</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.59</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.52:sp1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.55</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.56</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.57</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.58</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.59</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.60</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.61</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.20</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.21</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-1697</vuln:cve-id>
    <vuln:published-datetime>2012-05-03T18:55:02.670-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:35.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201308-06.xml" xml:lang="en">GLSA-201308-06</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2013:150" xml:lang="en">MDVSA-2013:150</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/53064" xml:lang="en">53064</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id?1026934" xml:lang="en">1026934</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.21 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.</vuln:summary>
  </entry>
  <entry id="CVE-2012-1995">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.1:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2:sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.1:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2:sp2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-1995</vuln:cve-id>
    <vuln:published-datetime>2013-03-11T17:55:01.713-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:49.357-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03298151" xml:lang="en">SSRT100846</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows local users to obtain sensitive information or modify data via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-1996">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.1:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2:sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.1:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2:sp2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-1996</vuln:cve-id>
    <vuln:published-datetime>2013-03-11T17:55:01.820-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:49.620-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03298151" xml:lang="en">HPSBMU02769</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to modify data via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-1997">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.1:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2:sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.1:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2:sp2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-1997</vuln:cve-id>
    <vuln:published-datetime>2013-03-11T17:55:01.843-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:49.760-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03298151" xml:lang="en">SSRT100846</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1998.</vuln:summary>
  </entry>
  <entry id="CVE-2012-1998">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.1:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2:sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.1:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2:sp2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-1998</vuln:cve-id>
    <vuln:published-datetime>2013-03-11T17:55:01.863-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:49.870-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03298151" xml:lang="en">SSRT100846</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1997.</vuln:summary>
  </entry>
  <entry id="CVE-2012-1999">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.1:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:4.2:sp2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:6.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.1:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:4.2:sp2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:6.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-1999</vuln:cve-id>
    <vuln:published-datetime>2013-03-11T17:55:01.887-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:49.963-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>8.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03298151" xml:lang="en">HPSBMU02769</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-2012">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1.104"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2.106"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-109"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-118"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0.121"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2-127"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2.127"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3.132"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4-143"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4.143"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5-146"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146:b"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6-156"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6.156"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7-168"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7.168"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8-177"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8.179"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9-178"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10-186"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:b"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:c"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11-197"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11.197:a"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-118"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-200"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12.201"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14.20"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15-210"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15.210"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.6"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.8"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0-68"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0.64"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1-73"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1.73"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2-77"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77:b"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0-95"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0.96"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0-103"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0.102"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.2.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.2.2.7"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.3.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.3.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1.0-16"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1.104</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2.106</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-109</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0.121</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2-127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2.127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3.132</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4-143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4.143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5-146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6-156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6.156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7-168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7.168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8-177</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8.179</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9-178</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10-186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:c</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11-197</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11.197:a</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-200</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12.201</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14.20</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15-210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15.210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0-68</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0.64</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1-73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1.73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2-77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0-95</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0.96</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0.102</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.2.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.2.2.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.3.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.3.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1.0-16</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-2012</vuln:cve-id>
    <vuln:published-datetime>2012-06-29T18:55:01.017-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:50.747-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" xml:lang="en">HPSBMU02786</vuln:reference>
    </vuln:references>
    <vuln:summary>HP System Management Homepage (SMH) before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.</vuln:summary>
  </entry>
  <entry id="CVE-2012-2013">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1.104"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2.106"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-109"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-118"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0.121"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2-127"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2.127"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3.132"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4-143"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4.143"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5-146"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146:b"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6-156"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6.156"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7-168"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7.168"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8-177"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8.179"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9-178"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10-186"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:b"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:c"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11-197"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11.197:a"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-118"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-200"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12.201"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14.20"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15-210"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15.210"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.6"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.8"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0-68"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0.64"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1-73"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1.73"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2-77"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77:b"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0-95"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0.96"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0-103"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0.102"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.2.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.2.2.7"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.3.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.3.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1.0-16"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1.104</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2.106</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-109</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0.121</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2-127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2.127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3.132</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4-143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4.143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5-146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6-156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6.156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7-168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7.168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8-177</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8.179</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9-178</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10-186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:c</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11-197</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11.197:a</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-200</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12.201</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14.20</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15-210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15.210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0-68</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0.64</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1-73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1.73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2-77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0-95</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0.96</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0.102</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.2.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.2.2.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.3.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.3.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1.0-16</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-2013</vuln:cve-id>
    <vuln:published-datetime>2012-06-29T18:55:01.063-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:51.043-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" xml:lang="en">HPSBMU02786</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote attackers to cause a denial of service, or possibly obtain sensitive information or modify data, via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-2014">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1.104"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2.106"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-109"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-118"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0.121"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2-127"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2.127"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3.132"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4-143"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4.143"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5-146"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146:b"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6-156"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6.156"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7-168"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7.168"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8-177"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8.179"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9-178"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10-186"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:b"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:c"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11-197"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11.197:a"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-118"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-200"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12.201"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14.20"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15-210"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15.210"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.6"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.8"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0-68"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0.64"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1-73"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1.73"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2-77"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77:b"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0-95"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0.96"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0-103"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0.102"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.2.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.2.2.7"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.3.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.3.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1.0-16"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1.104</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2.106</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-109</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0.121</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2-127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2.127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3.132</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4-143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4.143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5-146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6-156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6.156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7-168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7.168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8-177</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8.179</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9-178</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10-186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:c</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11-197</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11.197:a</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-200</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12.201</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14.20</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15-210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15.210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0-68</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0.64</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1-73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1.73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2-77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0-95</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0.96</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0.102</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.2.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.2.2.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.3.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.3.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1.0-16</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-2014</vuln:cve-id>
    <vuln:published-datetime>2012-06-29T18:55:01.110-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:51.197-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" xml:lang="en">HPSBMU02786</vuln:reference>
    </vuln:references>
    <vuln:summary>HP System Management Homepage (SMH) before 7.1.1 does not properly validate input, which allows remote authenticated users to have an unspecified impact via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-2015">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1.104"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2.106"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-109"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-118"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0.121"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2-127"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2.127"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3.132"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4-143"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4.143"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5-146"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146:b"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6-156"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6.156"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7-168"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7.168"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8-177"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8.179"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9-178"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10-186"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:b"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:c"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11-197"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11.197:a"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-118"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-200"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12.201"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14.20"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15-210"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15.210"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.6"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.8"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0-68"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0.64"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1-73"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1.73"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2-77"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77:b"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0-95"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0.96"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0-103"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0.102"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.2.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.2.2.7"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.3.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.3.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1.0-16"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1.104</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2.106</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-109</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0.121</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2-127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2.127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3.132</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4-143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4.143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5-146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6-156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6.156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7-168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7.168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8-177</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8.179</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9-178</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10-186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:c</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11-197</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11.197:a</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-200</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12.201</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14.20</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15-210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15.210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0-68</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0.64</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1-73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1.73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2-77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0-95</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0.96</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0.102</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.2.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.2.2.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.3.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.3.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1.0-16</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-2015</vuln:cve-id>
    <vuln:published-datetime>2012-06-29T18:55:01.157-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:51.387-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" xml:lang="en">SSRT100877</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote authenticated users to gain privileges and obtain sensitive information via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-2016">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1.104"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2.106"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-109"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-118"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0.121"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2-127"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2.127"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3.132"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4-143"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4.143"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5-146"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146:b"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6-156"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6.156"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7-168"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7.168"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8-177"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8.179"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9-178"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10-186"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:b"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:c"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11-197"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11.197:a"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-118"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-200"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12.201"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14.20"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15-210"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15.210"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.6"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.8"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0-68"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0.64"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1-73"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1.73"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2-77"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77:b"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0-95"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0.96"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0-103"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0.102"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.2.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.2.2.7"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.3.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.3.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1.0-16"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1.104</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2.106</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-109</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0.121</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2-127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2.127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3.132</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4-143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4.143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5-146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6-156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6.156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7-168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7.168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8-177</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8.179</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9-178</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10-186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:c</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11-197</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11.197:a</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-200</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12.201</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14.20</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15-210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15.210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0-68</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0.64</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1-73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1.73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2-77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0-95</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0.96</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0.102</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.2.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.2.2.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.3.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.3.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1.0-16</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-2016</vuln:cve-id>
    <vuln:published-datetime>2012-06-29T18:55:01.187-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:51.543-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.9</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041" xml:lang="en">SSRT100877</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows local users to obtain sensitive information via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-2019">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:7.36"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.51"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.51.102"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.52"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.53"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.60"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.60.005"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.60.006"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.60.7"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.60.008"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.60.501"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:11.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:operations_agent:7.36</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.51</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.51.102</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.52</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.53</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.60</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.60.005</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.60.006</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.60.7</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.60.008</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.60.501</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:11.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-2019</vuln:cve-id>
    <vuln:published-datetime>2012-07-11T00:54:29.490-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:51.840-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03397769" xml:lang="en">SSRT100594</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1325.</vuln:summary>
  </entry>
  <entry id="CVE-2012-2020">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:7.36"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.51"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.51.102"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.52"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.53"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.60"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.60.005"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.60.006"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.60.7"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.60.008"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:8.60.501"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:11.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:operations_agent:7.36</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.51</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.51.102</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.52</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.53</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.60</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.60.005</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.60.006</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.60.7</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.60.008</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:8.60.501</vuln:product>
      <vuln:product>cpe:/a:hp:operations_agent:11.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-2020</vuln:cve-id>
    <vuln:published-datetime>2012-07-11T00:54:29.537-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:52.010-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03397769" xml:lang="en">SSRT100594</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1326.</vuln:summary>
  </entry>
  <entry id="CVE-2012-2021">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:assetmanager:5.20"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:assetmanager:5.21"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:assetmanager:5.22"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:assetmanager:9.30"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:assetmanager:5.20</vuln:product>
      <vuln:product>cpe:/a:hp:assetmanager:5.21</vuln:product>
      <vuln:product>cpe:/a:hp:assetmanager:5.22</vuln:product>
      <vuln:product>cpe:/a:hp:assetmanager:9.30</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-2021</vuln:cve-id>
    <vuln:published-datetime>2012-07-16T16:49:19.503-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:52.107-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03403333" xml:lang="en">SSRT100876</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple cross-site scripting (XSS) vulnerabilities in HP AssetManager 5.20, 5.21, 5.22, and 9.30 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-2022">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:8.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:8.11.002"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:8.12.004"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:8.13.005"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:8.13.006"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.20"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:network_node_manager_i:8.0</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:8.10</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:8.11.002</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:8.12.004</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:8.13.005</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:8.13.006</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.0</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.01</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.02</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.03</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.10</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.20</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-2022</vuln:cve-id>
    <vuln:published-datetime>2012-08-07T15:55:01.203-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:04:52.230-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03405705" xml:lang="en">SSRT100908</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i (NNMi) 8.x, 9.0x, 9.1x, and 9.20 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3160">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.33"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.37"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.41"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.81"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23:a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23_bk"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.29"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.30"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.31"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.31:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.32"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.32-bzr"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.33"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.34"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.34:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.35"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.36"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.37"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.37:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.38"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.39"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.40"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.40:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.41"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.42"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.43"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.43:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.44"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.45"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.46"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.46:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.47"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.48"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.49"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.49:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20.32a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.20:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.35"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.52:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.60"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.61"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.62"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.63"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.64"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.65"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.33"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.37"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.41"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.81"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23:a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23_bk"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.29"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.30"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.31"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.31:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.32"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.32-bzr"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.33"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.34"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.34:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.35"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.36"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.37"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.37:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.38"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.39"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.40"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.40:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.41"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.42"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.43"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.43:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.44"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.45"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.46"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.46:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.47"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.48"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.49"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.49:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.50"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20.32a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.20:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.35"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.52:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.60"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.61"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.62"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.63"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.65"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.25:a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.27"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.25</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.26</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.20a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.33</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.37</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.41</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.81</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.5a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23:a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23_bk</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.25</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.26</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.28</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.29</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.30</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.31</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.31:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.32</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.32-bzr</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.33</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.34</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.34:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.35</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.36</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.37</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.37:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.38</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.39</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.40</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.40:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.41</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.42</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.43</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.43:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.44</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.45</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.46</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.46:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.47</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.48</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.49</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.49:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.50</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20.32a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.0:alpha</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.20:beta</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.33</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.35</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.55</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.56</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.57</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.58</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.59</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.52:sp1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.55</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.56</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.57</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.58</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.59</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.60</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.61</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.62</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.63</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.64</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.65</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.20</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.25:a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.27</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3160</vuln:cve-id>
    <vuln:published-datetime>2012-10-16T19:55:04.133-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:35.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2012-1462.html" xml:lang="en">RHSA-2012:1462</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201308-06.xml" xml:lang="en">GLSA-201308-06</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2012/dsa-2581" xml:lang="en">DSA-2581</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2013:150" xml:lang="en">MDVSA-2013:150</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-1621-1" xml:lang="en">USN-1621-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/79394" xml:lang="en">mysqlserver-serverinstallation-info-disc(79394)</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows local users to affect confidentiality via unknown vectors related to Server Installation.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3166">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.33"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.37"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.41"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.81"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23:a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23_bk"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.29"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.30"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.31"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.31:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.32"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.32-bzr"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.33"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.34"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.34:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.35"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.36"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.37"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.37:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.38"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.39"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.40"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.40:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.41"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.42"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.43"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.43:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.44"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.45"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.46"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.46:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.47"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.48"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.49"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.49:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.50"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20.32a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.20:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.35"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.52:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.60"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.61"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.62"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.63"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.65"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.25:a"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.33"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.37"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.41"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.81"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23:a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23_bk"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.29"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.30"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.31"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.31:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.32"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.32-bzr"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.33"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.34"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.34:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.35"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.36"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.37"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.37:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.38"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.39"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.40"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.40:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.41"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.42"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.43"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.43:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.44"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.45"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.46"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.46:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.47"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.48"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.49"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.49:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20.32a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.20:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.35"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.52:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.60"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.61"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.62"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.63"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.25</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.26</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.20a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.33</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.37</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.41</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.81</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.5a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23:a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23_bk</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.25</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.26</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.28</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.29</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.30</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.31</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.31:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.32</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.32-bzr</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.33</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.34</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.34:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.35</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.36</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.37</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.37:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.38</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.39</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.40</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.40:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.41</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.42</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.43</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.43:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.44</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.45</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.46</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.46:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.47</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.48</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.49</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.49:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.50</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20.32a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.0:alpha</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.20:beta</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.33</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.35</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.55</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.56</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.57</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.58</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.59</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.52:sp1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.55</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.56</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.57</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.58</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.59</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.60</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.61</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.62</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.63</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.65</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.20</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.25:a</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3166</vuln:cve-id>
    <vuln:published-datetime>2012-10-16T20:55:01.527-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:35.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2012-1462.html" xml:lang="en">RHSA-2012:1462</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201308-06.xml" xml:lang="en">GLSA-201308-06</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2012/dsa-2581" xml:lang="en">DSA-2581</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2013:150" xml:lang="en">MDVSA-2013:150</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-1621-1" xml:lang="en">USN-1621-1</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3177">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.33"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.37"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.41"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.81"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23:a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23_bk"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.29"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.30"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.31"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.31:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.32"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.32-bzr"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.33"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.34"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.34:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.35"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.36"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.37"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.37:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.38"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.39"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.40"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.40:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.41"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.42"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.43"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.43:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.44"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.45"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.46"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.46:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.47"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.48"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.49"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.49:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20.32a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.20:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.35"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.52:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.60"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.61"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.62"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.63"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.64"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.65"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.2:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.8a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.12a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.13a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.14a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:4.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.1a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.3a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.4a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.10a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.15a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.16a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.17a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.20a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.33"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.37"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.41"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.0.81"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.18"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.19"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.20"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.21"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.22"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23:a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23_bk"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.23a"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.24"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.25"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.26"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.27"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.28"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.29"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.30"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.31"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.31:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.32"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.32-bzr"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.33"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.34"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.34:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.35"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.36"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.37"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.37:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.38"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.39"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.40"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.40:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.41"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.42"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.43"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.43:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.44"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.45"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.46"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.46:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.47"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.48"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.49"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.49:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.1.50"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mysql:mysql:5.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.20.32a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.22.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.20:beta"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.27"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.28:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.29"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.30"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.31"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.32"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.34"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.35"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.36"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.37"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.38"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.39"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.40"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.41"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.42"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.43"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.44"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.46"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.47"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.48"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.49"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.50"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.53a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.54a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:3.23.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.5a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.7:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.8:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.9:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.11:gamma"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:4.0.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.51"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.52"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.52:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.53"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.54"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.55"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.56"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.57"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.58"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.59"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.60"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.61"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.62"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.63"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.1.65"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.20"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.21"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.22"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.23"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.24"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.25"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.25:a"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.26"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:mysql:5.5.27"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysql:mysql:4.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.25</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.26</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.0.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.2:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.8a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.12a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.13a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.14a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.15a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:4.1.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.0.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.1a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3:beta</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.3a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.4a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.10a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.15a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.16a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.17a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.20a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.33</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.37</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.41</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.0.81</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.5a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.9</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.10</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.11</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.12</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.13</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.14</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.15</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.16</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.17</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.18</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.19</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.20</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.21</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.22</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23:a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23_bk</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.23a</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.24</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.25</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.26</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.27</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.28</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.29</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.30</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.31</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.31:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.32</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.32-bzr</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.33</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.34</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.34:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.35</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.36</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.37</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.37:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.38</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.39</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.40</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.40:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.41</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.42</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.43</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.43:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.44</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.45</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.46</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.46:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.47</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.48</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.49</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.49:sp1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.1.50</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.0</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.1</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.2</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.3</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.4</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.5</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.6</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.7</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.8</vuln:product>
      <vuln:product>cpe:/a:mysql:mysql:5.5.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.20.32a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.22.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.0:alpha</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.20:beta</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.27</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.28:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.29</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.30</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.31</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.32</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.33</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.34</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.35</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.36</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.37</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.38</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.39</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.40</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.41</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.42</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.43</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.44</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.45</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.46</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.47</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.48</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.49</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.50</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.53a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.54a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.55</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.56</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.57</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.58</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:3.23.59</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.0</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.2</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.3</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.5a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.6</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.7:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.8:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.9:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.11:gamma</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:4.0.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.51</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.52</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.52:sp1</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.53</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.54</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.55</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.56</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.57</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.58</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.59</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.60</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.61</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.62</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.63</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.64</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.1.65</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.10</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.11</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.12</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.13</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.14</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.15</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.16</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.17</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.18</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.19</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.20</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.21</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.22</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.23</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.24</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.25</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.25:a</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.26</vuln:product>
      <vuln:product>cpe:/a:oracle:mysql:5.5.27</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3177</vuln:cve-id>
    <vuln:published-datetime>2012-10-16T20:55:01.777-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-07T12:42:35.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2012-1462.html" xml:lang="en">RHSA-2012:1462</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201308-06.xml" xml:lang="en">GLSA-201308-06</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2012/dsa-2581" xml:lang="en">DSA-2581</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2013:150" xml:lang="en">MDVSA-2013:150</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-1621-1" xml:lang="en">USN-1621-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/79383" xml:lang="en">mysqlserver-server-dos(79383)</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3249">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:fortify_software_security_center:3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:fortify_software_security_center:3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:fortify_software_security_center:3.4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:fortify_software_security_center:3.5"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:fortify_software_security_center:3.1</vuln:product>
      <vuln:product>cpe:/a:hp:fortify_software_security_center:3.3</vuln:product>
      <vuln:product>cpe:/a:hp:fortify_software_security_center:3.4</vuln:product>
      <vuln:product>cpe:/a:hp:fortify_software_security_center:3.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3249</vuln:cve-id>
    <vuln:published-datetime>2012-08-16T06:38:08.047-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:16.840-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03447895" xml:lang="en">SSRT100923</vuln:reference>
    </vuln:references>
    <vuln:summary>HP Fortify Software Security Center 3.1, 3.3, 3.4, and 3.5 allows remote authenticated users to obtain sensitive information via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3250">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/h:hp:service_center_server:6.2.8"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:service_manager_server:7.11"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:service_manager_server:9.21"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:service_manager_server:9.30"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:service_center_server:6.2.8</vuln:product>
      <vuln:product>cpe:/h:hp:service_manager_server:7.11</vuln:product>
      <vuln:product>cpe:/h:hp:service_manager_server:9.21</vuln:product>
      <vuln:product>cpe:/h:hp:service_manager_server:9.30</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3250</vuln:cve-id>
    <vuln:published-datetime>2012-08-16T06:38:08.127-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:17.013-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03447828" xml:lang="en">HPSBMU02800</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Service Manager Server 7.11, 9.21, and 9.30, and HP Service Center Server 6.28, allows remote attackers to cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3251">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:service_center_web_tier:6.28"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager_web_tier:7.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager_web_tier:9.21"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager_web_tier:9.30"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:service_center_web_tier:6.28</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager_web_tier:7.11</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager_web_tier:9.21</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager_web_tier:9.30</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3251</vuln:cve-id>
    <vuln:published-datetime>2012-08-16T06:38:08.187-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:18.623-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03450382" xml:lang="en">SSRT100926</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP Service Manager Web Tier 7.11, 9.21, and 9.30, and HP Service Center Web Tier 6.28, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3253">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h04"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l02"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h03</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h04</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l02</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3253</vuln:cve-id>
    <vuln:published-datetime>2012-08-30T13:55:01.497-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:18.827-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03473459" xml:lang="en">SSRT100361</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://zerodayinitiative.com/advisories/ZDI-12-164/" xml:lang="en">http://zerodayinitiative.com/advisories/ZDI-12-164/</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple unspecified vulnerabilities in HP Intelligent Management Center (IMC) before 5.0 E0101P05 allow remote attackers to execute arbitrary code via crafted input, as demonstrated by an integer overflow and heap-based buffer overflow in img.exe for a crafted message packet.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3254">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:inode_management_center_pc:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:inode_management_center_pc:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:inode_management_center_pc:5.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:inode_management_center_pc:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:inode_management_center_pc:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:inode_management_center_pc:5.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3254</vuln:cve-id>
    <vuln:published-datetime>2012-08-30T13:55:01.607-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:19.670-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03473527" xml:lang="en">HPSB3C02809</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://zerodayinitiative.com/advisories/ZDI-12-163/" xml:lang="en">http://zerodayinitiative.com/advisories/ZDI-12-163/</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple unspecified vulnerabilities in HP iNode Management Center before iNode PC 5.1 E0304 allow remote attackers to execute arbitrary code via crafted input, as demonstrated by a stack-based buffer overflow in iNodeMngChecker.exe for a crafted 0x0A0BF007 packet.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3260">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:sitescope:11.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:sitescope:11.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:sitescope:11.12"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:sitescope:11.10</vuln:product>
      <vuln:product>cpe:/a:hp:sitescope:11.11</vuln:product>
      <vuln:product>cpe:/a:hp:sitescope:11.12</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3260</vuln:cve-id>
    <vuln:published-datetime>2012-09-25T07:07:46.753-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:20.013-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03489683" xml:lang="en">SSRT100716</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=134825051608877&amp;w=2" xml:lang="en">SSRT100715</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3261">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:sitescope:11.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:sitescope:11.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:sitescope:11.12"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:sitescope:11.10</vuln:product>
      <vuln:product>cpe:/a:hp:sitescope:11.11</vuln:product>
      <vuln:product>cpe:/a:hp:sitescope:11.12</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3261</vuln:cve-id>
    <vuln:published-datetime>2012-09-25T07:07:46.860-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:20.263-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03489683" xml:lang="en">SSRT100717</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=134825051608877&amp;w=2" xml:lang="en">SSRT100715</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3262">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:sitescope:11.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:sitescope:11.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:sitescope:11.12"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:sitescope:11.10</vuln:product>
      <vuln:product>cpe:/a:hp:sitescope:11.11</vuln:product>
      <vuln:product>cpe:/a:hp:sitescope:11.12</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3262</vuln:cve-id>
    <vuln:published-datetime>2012-09-25T07:07:46.907-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:20.357-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03489683" xml:lang="en">SSRT100718</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=134825051608877&amp;w=2" xml:lang="en">SSRT100715</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1464.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3263">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:sitescope:11.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:sitescope:11.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:sitescope:11.12"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:sitescope:11.10</vuln:product>
      <vuln:product>cpe:/a:hp:sitescope:11.11</vuln:product>
      <vuln:product>cpe:/a:hp:sitescope:11.12</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3263</vuln:cve-id>
    <vuln:published-datetime>2012-09-25T07:07:46.957-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:20.450-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03489683" xml:lang="en">SSRT100719</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=134825051608877&amp;w=2" xml:lang="en">SSRT100715</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1465.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3264">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:sitescope:11.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:sitescope:11.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:sitescope:11.12"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:sitescope:11.10</vuln:product>
      <vuln:product>cpe:/a:hp:sitescope:11.11</vuln:product>
      <vuln:product>cpe:/a:hp:sitescope:11.12</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3264</vuln:cve-id>
    <vuln:published-datetime>2012-09-25T07:07:47.300-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:20.527-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03489683" xml:lang="en">SSRT100720</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=134825051608877&amp;w=2" xml:lang="en">SSRT100715</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1472.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3266">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:ibrix:6.1.196"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:ibrix:6.1.210"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:ibrix:6.1.228"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:ibrix:6.1.243"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:ibrix:6.1.247"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:ibrix:6.1.249"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:ibrix:6.1.251"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:ibrix_x9300:aw539d"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:ibrix_x9300:aw540d"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:ibrix_x9320:qp330b"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:ibrix_x9320:qp331b"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:ibrix_x9730:qz730a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:ibrix_x9730:qz731a"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:ibrix:6.1.196</vuln:product>
      <vuln:product>cpe:/a:hp:ibrix:6.1.210</vuln:product>
      <vuln:product>cpe:/a:hp:ibrix:6.1.228</vuln:product>
      <vuln:product>cpe:/a:hp:ibrix:6.1.243</vuln:product>
      <vuln:product>cpe:/a:hp:ibrix:6.1.247</vuln:product>
      <vuln:product>cpe:/a:hp:ibrix:6.1.249</vuln:product>
      <vuln:product>cpe:/a:hp:ibrix:6.1.251</vuln:product>
      <vuln:product>cpe:/h:hp:ibrix_x9300:aw539d</vuln:product>
      <vuln:product>cpe:/h:hp:ibrix_x9300:aw540d</vuln:product>
      <vuln:product>cpe:/h:hp:ibrix_x9320:qp330b</vuln:product>
      <vuln:product>cpe:/h:hp:ibrix_x9320:qp331b</vuln:product>
      <vuln:product>cpe:/h:hp:ibrix_x9730:qz730a</vuln:product>
      <vuln:product>cpe:/h:hp:ibrix_x9730:qz731a</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3266</vuln:cve-id>
    <vuln:published-datetime>2012-10-02T17:55:01.270-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:20.653-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03510876" xml:lang="en">SSRT100960</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in IBRIX 6.1.196 through 6.1.251 on HP IBRIX X9000 Storage allows remote attackers to obtain sensitive information via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3274">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h04"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h03</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h04</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l02</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3274</vuln:cve-id>
    <vuln:published-datetime>2012-12-06T06:45:47.310-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:21.480-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://zerodayinitiative.com/advisories/ZDI-12-171/" xml:lang="en">http://zerodayinitiative.com/advisories/ZDI-12-171/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03589863" xml:lang="en">HPSB3C02831</vuln:reference>
    </vuln:references>
    <vuln:summary>Stack-based buffer overflow in uam.exe in the User Access Manager (UAM) component in HP Intelligent Management Center (IMC) before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3276">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:hp:openvms:7.3-2"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:openvms:8.3"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:openvms:8.3-1h1"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:openvms:8.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:hp:openvms:7.3-2</vuln:product>
      <vuln:product>cpe:/o:hp:openvms:8.3</vuln:product>
      <vuln:product>cpe:/o:hp:openvms:8.3-1h1</vuln:product>
      <vuln:product>cpe:/o:hp:openvms:8.4</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3276</vuln:cve-id>
    <vuln:published-datetime>2012-12-13T06:53:33.523-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:21.670-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-16"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03599086" xml:lang="en">SSRT101055</vuln:reference>
    </vuln:references>
    <vuln:summary>HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and ACME_SERVER ACMELOGIN programs, which allows local users to cause a denial of service via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3277">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:hp:openvms:7.3-2:-:alpha"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:openvms:8.2:-:alpha"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:openvms:8.3:-:alpha"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:openvms:8.3:-:itanium"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:openvms:8.3-1h1:-:itanium"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:openvms:8.4:-:alpha"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:openvms:8.4:-:itanium"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:hp:openvms:7.3-2:-:alpha</vuln:product>
      <vuln:product>cpe:/o:hp:openvms:8.2:-:alpha</vuln:product>
      <vuln:product>cpe:/o:hp:openvms:8.3:-:alpha</vuln:product>
      <vuln:product>cpe:/o:hp:openvms:8.3:-:itanium</vuln:product>
      <vuln:product>cpe:/o:hp:openvms:8.3-1h1:-:itanium</vuln:product>
      <vuln:product>cpe:/o:hp:openvms:8.4:-:alpha</vuln:product>
      <vuln:product>cpe:/o:hp:openvms:8.4:-:itanium</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3277</vuln:cve-id>
    <vuln:published-datetime>2012-12-13T06:53:33.570-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:21.810-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03599086" xml:lang="en">SSRT101055</vuln:reference>
    </vuln:references>
    <vuln:summary>HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and ACME_SERVER ACMELOGIN programs, which allows remote attackers to cause a denial of service via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3278">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:diagnostics_server:8.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:diagnostics_server:8.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:diagnostics_server:8.02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:diagnostics_server:8.03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:diagnostics_server:8.04"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:diagnostics_server:8.05"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:diagnostics_server:8.06"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:diagnostics_server:8.07"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:diagnostics_server:9.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:diagnostics_server:9.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:diagnostics_server:9.02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:diagnostics_server:9.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:diagnostics_server:9.12"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:diagnostics_server:9.20"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:diagnostics_server:9.21"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:diagnostics_server:8.00</vuln:product>
      <vuln:product>cpe:/a:hp:diagnostics_server:8.01</vuln:product>
      <vuln:product>cpe:/a:hp:diagnostics_server:8.02</vuln:product>
      <vuln:product>cpe:/a:hp:diagnostics_server:8.03</vuln:product>
      <vuln:product>cpe:/a:hp:diagnostics_server:8.04</vuln:product>
      <vuln:product>cpe:/a:hp:diagnostics_server:8.05</vuln:product>
      <vuln:product>cpe:/a:hp:diagnostics_server:8.06</vuln:product>
      <vuln:product>cpe:/a:hp:diagnostics_server:8.07</vuln:product>
      <vuln:product>cpe:/a:hp:diagnostics_server:9.00</vuln:product>
      <vuln:product>cpe:/a:hp:diagnostics_server:9.01</vuln:product>
      <vuln:product>cpe:/a:hp:diagnostics_server:9.02</vuln:product>
      <vuln:product>cpe:/a:hp:diagnostics_server:9.10</vuln:product>
      <vuln:product>cpe:/a:hp:diagnostics_server:9.12</vuln:product>
      <vuln:product>cpe:/a:hp:diagnostics_server:9.20</vuln:product>
      <vuln:product>cpe:/a:hp:diagnostics_server:9.21</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3278</vuln:cve-id>
    <vuln:published-datetime>2013-01-25T13:55:01.163-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:21.967-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.zerodayinitiative.com/advisories/ZDI-12-162/" xml:lang="en">http://www.zerodayinitiative.com/advisories/ZDI-12-162/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03645497" xml:lang="en">SSRT100724</vuln:reference>
    </vuln:references>
    <vuln:summary>Stack-based buffer overflow in magentservice.exe in HP Diagnostics Server 8.x through 8.07 and 9.x through 9.21 allows remote attackers to execute arbitrary code via a malformed message packet.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3279">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:8.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:8.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:8.12"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:8.13"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.20"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:network_node_manager_i:8.0</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:8.10</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:8.11</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:8.12</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:8.13</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.0</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.01</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.02</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.03</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.10</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.20</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3279</vuln:cve-id>
    <vuln:published-datetime>2013-02-06T07:05:42.537-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:22.247-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03652323" xml:lang="en">SSRT100909</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i (NNMi) 8.x, 9.0x, 9.1x, and 9.20 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3280">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:g06.29.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:g06.29.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:g06.29.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:g06.29.03"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:g06.30.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:g06.30.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:g06.30.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:g06.31.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:g06.31.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:g06.32.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:g06.32.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.08.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.09.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.10.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.10.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.11.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.11.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.11.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.11.03"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.12.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.13.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.14.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.15.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.15.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.15.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.16.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.16.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.16.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.17.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.17.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.17.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.17.03"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.18.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.18.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.18.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.19.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.19.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.19.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.19.03"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.20.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.20.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.20.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.20.03"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.21.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.21.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:h06.21.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.03"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.04.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.04.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.04.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.05.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.05.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.05.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.06.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.06.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.06.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.06.03"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.07.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.07.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.07.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.08.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.08.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.08.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.08.03"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.08.04"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.09.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.09.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.09.02"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.09.03"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.09.04"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.10.00"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.10.01"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_server_software:j06.10.02"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:nonstop_server"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:nonstop_server_software:g06.29.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:g06.29.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:g06.29.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:g06.29.03</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:g06.30.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:g06.30.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:g06.30.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:g06.31.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:g06.31.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:g06.32.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:g06.32.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.08.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.09.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.10.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.10.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.11.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.11.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.11.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.11.03</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.12.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.13.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.14.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.15.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.15.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.15.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.16.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.16.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.16.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.17.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.17.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.17.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.17.03</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.18.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.18.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.18.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.19.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.19.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.19.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.19.03</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.20.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.20.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.20.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.20.03</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.21.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.21.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:h06.21.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.03</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.04.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.04.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.04.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.05.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.05.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.05.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.06.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.06.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.06.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.06.03</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.07.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.07.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.07.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.08.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.08.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.08.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.08.03</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.08.04</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.09.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.09.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.09.02</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.09.03</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.09.04</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.10.00</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.10.01</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_server_software:j06.10.02</vuln:product>
      <vuln:product>cpe:/h:hp:nonstop_server</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3280</vuln:cve-id>
    <vuln:published-datetime>2013-02-13T16:55:06.290-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:22.700-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.3</cvss:score>
        <cvss:access-vector>ADJACENT_NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03654586" xml:lang="en">HPSBNS02843</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple unspecified vulnerabilities on HP NonStop Servers H06.x and J06.x allow remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via an OSS Remote Operation over an Expand connection.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3281">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:xp_p9000_command_view_advanced_edition:7.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:xp_p9000_command_view_advanced_edition:7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:xp_p9000_command_view_advanced_edition:7.2.0-3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:xp_p9000_command_view_advanced_edition:7.3.1-00"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:xp_p9000_command_view_advanced_edition:7.1.0</vuln:product>
      <vuln:product>cpe:/a:hp:xp_p9000_command_view_advanced_edition:7.2</vuln:product>
      <vuln:product>cpe:/a:hp:xp_p9000_command_view_advanced_edition:7.2.0-3</vuln:product>
      <vuln:product>cpe:/a:hp:xp_p9000_command_view_advanced_edition:7.3.1-00</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3281</vuln:cve-id>
    <vuln:published-datetime>2013-02-06T07:05:42.770-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:23.480-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03650706" xml:lang="en">SSRT101077</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Device Manager in HP XP P9000 Command View Advanced Edition before 7.4.0-00 allows remote attackers to cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3282">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:8.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:8.5"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:9.5"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:lefthand_p4000_virtual_san_appliance:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:lefthand_p4000_virtual_san_appliance:-</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:8.0</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:8.1</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:8.5</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:9.0</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:9.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3282</vuln:cve-id>
    <vuln:published-datetime>2013-02-06T07:05:42.833-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:23.607-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03661318" xml:lang="en">SSRT100722</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1468.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3283">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:8.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:8.5"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:9.5"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:lefthand_p4000_virtual_san_appliance:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:lefthand_p4000_virtual_san_appliance:-</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:8.0</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:8.1</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:8.5</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:9.0</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:9.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3283</vuln:cve-id>
    <vuln:published-datetime>2013-02-06T07:05:42.880-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:23.777-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03661318" xml:lang="en">SSRT100798</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1511.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3284">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:8.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:8.5"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:9.5"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:lefthand_p4000_virtual_san_appliance:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:lefthand_p4000_virtual_san_appliance:-</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:8.0</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:8.1</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:8.5</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:9.0</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:9.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3284</vuln:cve-id>
    <vuln:published-datetime>2013-02-06T07:05:42.927-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:23.903-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03661318" xml:lang="en">HPSBST02846</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1512.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3285">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:8.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:8.5"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:9.5"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:lefthand_p4000_virtual_san_appliance:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:lefthand_p4000_virtual_san_appliance:-</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:8.0</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:8.1</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:8.5</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:9.0</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:9.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3285</vuln:cve-id>
    <vuln:published-datetime>2013-02-06T07:05:42.973-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:24.013-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03661318" xml:lang="en">SSRT100800</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1513.</vuln:summary>
  </entry>
  <entry id="CVE-2012-3286">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:arcsight_connector_appliance_firmware:6.0.0.60023.2"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:arcsight_connector_appliance_firmware:6.2.0.6244.0"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:arcsight_connector_appliance_firmware:6.3"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:arcsight_connector_appliance:c1400"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:arcsight_connector_appliance:c3400"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:arcsight_connector_appliance:c5400"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:arcsight_logger:5.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:arcsight_logger:5.2</vuln:product>
      <vuln:product>cpe:/h:hp:arcsight_connector_appliance:c1400</vuln:product>
      <vuln:product>cpe:/h:hp:arcsight_connector_appliance:c3400</vuln:product>
      <vuln:product>cpe:/h:hp:arcsight_connector_appliance:c5400</vuln:product>
      <vuln:product>cpe:/o:hp:arcsight_connector_appliance_firmware:6.0.0.60023.2</vuln:product>
      <vuln:product>cpe:/o:hp:arcsight_connector_appliance_firmware:6.2.0.6244.0</vuln:product>
      <vuln:product>cpe:/o:hp:arcsight_connector_appliance_firmware:6.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-3286</vuln:cve-id>
    <vuln:published-datetime>2013-02-16T16:55:01.733-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:05:24.107-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03606700" xml:lang="en">HPSBMU02836</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5198">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:arcsight_connector_appliance_firmware:6.0.0.60023.2"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:arcsight_connector_appliance_firmware:6.2.0.6244.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:arcsight_connector_appliance:c1400"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:arcsight_connector_appliance:c3400"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:arcsight_connector_appliance:c5400"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:arcsight_logger:5.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:arcsight_logger:5.2</vuln:product>
      <vuln:product>cpe:/h:hp:arcsight_connector_appliance:c1400</vuln:product>
      <vuln:product>cpe:/h:hp:arcsight_connector_appliance:c3400</vuln:product>
      <vuln:product>cpe:/h:hp:arcsight_connector_appliance:c5400</vuln:product>
      <vuln:product>cpe:/o:hp:arcsight_connector_appliance_firmware:6.0.0.60023.2</vuln:product>
      <vuln:product>cpe:/o:hp:arcsight_connector_appliance_firmware:6.2.0.6244.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5198</vuln:cve-id>
    <vuln:published-datetime>2013-02-16T16:55:01.873-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:00.873-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03606700" xml:lang="en">HPSBMU02836</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/988100" xml:lang="en">VU#988100</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP ArcSight Connector Appliance before 6.3 and ArcSight Logger 5.2 and earlier allows remote attackers to obtain sensitive information via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5199">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:arcsight_connector_appliance_firmware:6.0.0.60023.2"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:arcsight_connector_appliance_firmware:6.2.0.6244.0"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:arcsight_connector_appliance_firmware:6.3"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:arcsight_connector_appliance:c1400"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:arcsight_connector_appliance:c3400"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:arcsight_connector_appliance:c5400"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:arcsight_logger:5.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:arcsight_logger:5.2</vuln:product>
      <vuln:product>cpe:/h:hp:arcsight_connector_appliance:c1400</vuln:product>
      <vuln:product>cpe:/h:hp:arcsight_connector_appliance:c3400</vuln:product>
      <vuln:product>cpe:/h:hp:arcsight_connector_appliance:c5400</vuln:product>
      <vuln:product>cpe:/o:hp:arcsight_connector_appliance_firmware:6.0.0.60023.2</vuln:product>
      <vuln:product>cpe:/o:hp:arcsight_connector_appliance_firmware:6.2.0.6244.0</vuln:product>
      <vuln:product>cpe:/o:hp:arcsight_connector_appliance_firmware:6.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5199</vuln:cve-id>
    <vuln:published-datetime>2013-02-16T16:55:01.967-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:01.060-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03606700" xml:lang="en">HPSBMU02836</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5200">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h04"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0101p01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h03</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h04</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l02</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0101p01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5200</vuln:cve-id>
    <vuln:published-datetime>2013-03-09T06:55:01.340-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:01.157-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276" xml:lang="en">SSRT100881</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5201">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h04"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0101p01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h03</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h04</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l02</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0101p01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5201</vuln:cve-id>
    <vuln:published-datetime>2013-03-09T06:55:01.360-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:01.310-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136268852804156&amp;w=2" xml:lang="en">SSRT100881</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276" xml:lang="en">SSRT101013</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1611.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5202">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h04"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0101p01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h03</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h04</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l02</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0101p01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5202</vuln:cve-id>
    <vuln:published-datetime>2013-03-09T06:55:01.367-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:01.420-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136268852804156&amp;w=2" xml:lang="en">SSRT100881</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276" xml:lang="en">SSRT101014</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1612.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5203">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h04"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0101p01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h03</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h04</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l02</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0101p01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5203</vuln:cve-id>
    <vuln:published-datetime>2013-03-09T06:55:01.377-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:01.513-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136268852804156&amp;w=2" xml:lang="en">SSRT100881</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276" xml:lang="en">HPSBGN02854</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1613.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5204">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h04"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0101p01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h03</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h04</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l02</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0101p01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5204</vuln:cve-id>
    <vuln:published-datetime>2013-03-09T06:55:01.387-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:01.670-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136268852804156&amp;w=2" xml:lang="en">SSRT100881</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276" xml:lang="en">SSRT101016</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1614.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5205">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h04"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0101p01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h03</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h04</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l02</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0101p01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5205</vuln:cve-id>
    <vuln:published-datetime>2013-03-09T06:55:01.397-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:02.357-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136268852804156&amp;w=2" xml:lang="en">SSRT100881</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276" xml:lang="en">SSRT101018</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1650.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5206">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h04"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0101p01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h03</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h04</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l02</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0101p01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5206</vuln:cve-id>
    <vuln:published-datetime>2013-03-09T06:55:01.407-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:02.497-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136268852804156&amp;w=2" xml:lang="en">SSRT100881</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276" xml:lang="en">SSRT101020</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1660.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5207">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h04"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0101p01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h03</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h04</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l02</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0101p01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5207</vuln:cve-id>
    <vuln:published-datetime>2013-03-09T06:55:01.417-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:02.607-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136268852804156&amp;w=2" xml:lang="en">SSRT100881</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276" xml:lang="en">SSRT101021</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1661.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5208">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h04"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0101p01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h03</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h04</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l02</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0101p01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5208</vuln:cve-id>
    <vuln:published-datetime>2013-03-09T06:55:01.427-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:02.717-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136268852804156&amp;w=2" xml:lang="en">SSRT100881</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276" xml:lang="en">SSRT101022</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1615.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5209">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h04"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0101p01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h03</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h04</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l02</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0101p01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5209</vuln:cve-id>
    <vuln:published-datetime>2013-03-09T06:55:01.437-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:02.827-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136268852804156&amp;w=2" xml:lang="en">SSRT100881</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276" xml:lang="en">SSRT101029</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1659.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5210">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:tacacs%2b_authentication_manager:5.1::~~~intelligent_management_center~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:tacacs%2b_authentication_manager:5.1::~~~intelligent_management_center~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5210</vuln:cve-id>
    <vuln:published-datetime>2013-03-09T06:55:01.447-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:02.937-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136268852804156&amp;w=2" xml:lang="en">SSRT100881</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276" xml:lang="en">SSRT101030</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) TACACS+ Authentication Manager (TAM) before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1646.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5211">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center_user_access_manager:5.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center_user_access_manager:5.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5211</vuln:cve-id>
    <vuln:published-datetime>2013-03-09T06:55:01.457-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:03.030-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136268852804156&amp;w=2" xml:lang="en">SSRT100881</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276" xml:lang="en">SSRT101032</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) User Access Manager (UAM) before 5.2 E0402 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1643.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5212">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h04"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0101p01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h03</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h04</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l02</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0101p01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5212</vuln:cve-id>
    <vuln:published-datetime>2013-03-09T06:55:01.467-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:03.140-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136268852804156&amp;w=2" xml:lang="en">SSRT100881</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276" xml:lang="en">SSRT101033</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1663.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5213">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h04"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0101p01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h03</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h04</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l02</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0101p01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0202:enterprise</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center_for_automated_network_manager:5.1:e0202</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5213</vuln:cve-id>
    <vuln:published-datetime>2013-03-09T06:55:01.477-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:03.263-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136268852804156&amp;w=2" xml:lang="en">SSRT100881</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276" xml:lang="en">SSRT101034</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1662.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5214">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:service_center:6.2.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:service_center:6.2.8</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5214</vuln:cve-id>
    <vuln:published-datetime>2013-03-09T06:55:01.487-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:03.373-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03680085" xml:lang="en">HPSBMU02849</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP ServiceCenter 6.2.8 before 6.2.8.10 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5215">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:hotspot_laserjet_pro_m1218nfs_mfp:b4k88a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_m1212nf_mfp:ce841a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_m1213nf_mfp:ce845a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_m1214nfh_mfp:ce842a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_m1216nfh_multifunction_printer:ce843a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_m1217nfw_multifunction_printer:ce844a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_m1219nf_mfp:ce846a"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:hotspot_laserjet_pro_m1218nfs_mfp_firmware:20130210"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_m1212nf_mfp_firmware:20130210"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_m1213nf_mfp_firmware:20130210"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_m1214nfh_mfp_firmware:20130210"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_m1216nfh_multifunction_printer_firmware:20130210"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_m1217nfw_multifunction_printer_firmware:20130210"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_m1219nf_mfp_firmware:20130210"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_cp1025nw:ce914a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_cp1025nw:ce918a"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_cp1025nw_firmware:201302121"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_p1102w:ce657a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_p1102w:ce658a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_p1606dn:ce749a"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_p1102w_firmware:20130212"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_pro_p1606dn_firmware:20130212"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:hotspot_laserjet_pro_m1218nfs_mfp:b4k88a</vuln:product>
      <vuln:product>cpe:/h:hp:hotspot_laserjet_pro_m1218nfs_mfp_firmware:20130210</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_cp1025nw:ce914a</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_cp1025nw:ce918a</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_cp1025nw_firmware:201302121</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_m1212nf_mfp:ce841a</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_m1212nf_mfp_firmware:20130210</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_m1213nf_mfp:ce845a</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_m1213nf_mfp_firmware:20130210</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_m1214nfh_mfp:ce842a</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_m1214nfh_mfp_firmware:20130210</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_m1216nfh_multifunction_printer:ce843a</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_m1216nfh_multifunction_printer_firmware:20130210</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_m1217nfw_multifunction_printer:ce844a</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_m1217nfw_multifunction_printer_firmware:20130210</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_m1219nf_mfp:ce846a</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_m1219nf_mfp_firmware:20130210</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_p1102w:ce657a</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_p1102w:ce658a</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_p1102w_firmware:20130212</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_p1606dn:ce749a</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_pro_p1606dn_firmware:20130212</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5215</vuln:cve-id>
    <vuln:published-datetime>2013-03-09T06:55:01.570-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:03.483-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>8.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/782451" xml:lang="en">VU#782451</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03684249" xml:lang="en">SSRT101078</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability on the HP LaserJet Pro M1212nf, M1213nf, M1214nfh, M1216nfh, M1217nfw, and M1219nf, and HotSpot LaserJet Pro M1218nfs, with firmware before 20130211; LaserJet Pro CP1025nw with firmware before 20130212; and LaserJet Pro P1102w and P1606dn with firmware before 20130213 allows remote attackers to modify data or cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5216">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h:10.74"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h:10.80"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.02"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.03"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.31"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.32"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.41"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.45"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.46"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.50"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.53"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.54"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.55"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.07.56"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.53"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.55"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.56"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.57"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.58"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.59"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.60"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.61"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.62"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.64"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.65"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.67"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.69"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.70"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.71"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.72"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.73"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.74"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.75"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.76"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.77"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.78"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.79"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.80"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.81"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.82"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.83"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.84"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.85"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.86"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.87"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.88"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.89"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.90"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.91"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.92"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.93"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.94"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.95"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.96"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.97"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.98"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.99"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.100"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.101"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.102"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.103"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.104"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.105"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.106"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.107"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.108"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.08.109"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.20"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.21"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.22"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.23"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.24"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.25"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.26"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.27"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.28"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.29"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.30"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.31"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.32"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.33"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.35"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.36"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.37"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.38"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.39"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.40"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.41"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.42"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.43"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.44"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.45"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.46"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.47"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.48"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.49"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.50"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.51"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.52"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.53"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.54"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.55"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.56"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.57"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.58"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.59"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.60"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.61"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.62"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.63"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.64"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.65"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.66"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.67"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.68"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.69"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.70"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.71"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.72"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.73"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.74"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:h.10.80"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.01"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.02"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.03"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.04"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.05"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.06"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.07"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.08"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.02.09"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.03.00"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.03.01"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.03.02"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.03.03"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pa.03.04"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.01"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.02"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.03"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.04"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.05"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.06"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.07"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.08"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.02.09"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.03.00"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.03.01"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.03.02"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.03.03"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:pb.03.04"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.04"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.05"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.06"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.07"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.08"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.09"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.10"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.11"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.12"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.13"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.14"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.15"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.16"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.17"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.18"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.19"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.20"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.21"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.22"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.23"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.24"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.25"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.26"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.27"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.28"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.29"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.30"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.31"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.32"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.33"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.34"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.35"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.36"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.37"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.38"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.39"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.40"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.41"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.42"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.43"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.44"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.45"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.46"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.47"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.48"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.49"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.50"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.51"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.52"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.53"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:r.11.54"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:procurve_switch_software:va.02.08"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_1700-24:-"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch_1700-8:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:procurve_switch_1700-24:-</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch_1700-8:-</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h:10.74</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h:10.80</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.02</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.03</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.31</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.32</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.41</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.45</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.46</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.50</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.53</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.54</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.55</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.07.56</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.53</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.55</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.56</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.57</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.58</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.59</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.60</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.61</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.62</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.64</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.65</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.67</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.69</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.70</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.71</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.72</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.73</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.74</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.75</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.76</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.77</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.78</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.79</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.80</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.81</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.82</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.83</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.84</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.85</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.86</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.87</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.88</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.89</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.90</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.91</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.92</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.93</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.94</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.95</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.96</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.97</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.98</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.99</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.100</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.101</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.102</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.103</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.104</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.105</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.106</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.107</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.108</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.08.109</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.20</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.21</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.22</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.23</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.24</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.25</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.26</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.27</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.28</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.29</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.30</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.31</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.32</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.33</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.35</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.36</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.37</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.38</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.39</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.40</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.41</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.42</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.43</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.44</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.45</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.46</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.47</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.48</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.49</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.50</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.51</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.52</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.53</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.54</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.55</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.56</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.57</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.58</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.59</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.60</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.61</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.62</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.63</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.64</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.65</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.66</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.67</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.68</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.69</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.70</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.71</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.72</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.73</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.74</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:h.10.80</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.01</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.02</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.03</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.04</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.05</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.06</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.07</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.08</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.02.09</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.03.00</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.03.01</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.03.02</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.03.03</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pa.03.04</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.01</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.02</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.03</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.04</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.05</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.06</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.07</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.08</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.02.09</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.03.00</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.03.01</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.03.02</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.03.03</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:pb.03.04</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.04</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.05</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.06</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.07</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.08</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.09</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.10</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.11</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.12</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.13</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.14</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.15</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.16</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.17</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.18</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.19</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.20</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.21</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.22</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.23</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.24</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.25</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.26</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.27</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.28</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.29</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.30</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.31</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.32</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.33</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.34</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.35</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.36</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.37</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.38</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.39</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.40</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.41</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.42</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.43</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.44</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.45</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.46</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.47</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.48</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.49</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.50</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.51</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.52</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.53</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:r.11.54</vuln:product>
      <vuln:product>cpe:/o:hp:procurve_switch_software:va.02.08</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5216</vuln:cve-id>
    <vuln:published-datetime>2013-03-28T19:55:01.400-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:03.763-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03699981" xml:lang="en">SSRT100512</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site request forgery (CSRF) vulnerability on HP ProCurve 1700-8 (aka J9079A) switches with software before VA.02.09 and 1700-24 (aka J9080A) switches with software before VB.02.09 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5217">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5217</vuln:cve-id>
    <vuln:published-datetime>2013-07-22T07:19:33.783-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:05.203-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862" xml:lang="en">SSRT101137</vuln:reference>
    </vuln:references>
    <vuln:summary>HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2355.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5218">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/h:hp:elitepad:900"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:elitepad:900</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5218</vuln:cve-id>
    <vuln:published-datetime>2013-04-24T06:28:31.897-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:05.327-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03727435-1" xml:lang="en">SSRT101158</vuln:reference>
    </vuln:references>
    <vuln:summary>HP ElitePad 900 PCs with BIOS F.0x before F.01 Update 1.0.0.8 do not enable the Secure Boot feature, which allows local users to bypass intended BIOS restrictions and boot unintended operating systems via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5219">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:managed_printing_administration:2.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:managed_printing_administration:2.6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:managed_printing_administration:2.6.5"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:managed_printing_administration:2.6.3</vuln:product>
      <vuln:product>cpe:/a:hp:managed_printing_administration:2.6.4</vuln:product>
      <vuln:product>cpe:/a:hp:managed_printing_administration:2.6.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5219</vuln:cve-id>
    <vuln:published-datetime>2013-04-27T23:24:14.690-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:05.420-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03737200" xml:lang="en">HPSBPI02868</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP Managed Printing Administration (MPA) before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5220">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5220</vuln:cve-id>
    <vuln:published-datetime>2013-04-26T07:41:56.710-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:05.530-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03570121-2" xml:lang="en">SSRT100889</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows local users to gain privileges via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2012-5222">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:service_manager_web_tier:9.31"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:service_manager_web_tier:9.31</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2012-5222</vuln:cve-id>
    <vuln:published-datetime>2013-05-01T23:31:44.090-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:05.843-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748875" xml:lang="en">SSRT101185</vuln:reference>
    </vuln:references>
    <vuln:summary>HP Service Manager Web Tier 9.31 before 9.31.2004 p2 allows remote attackers to obtain sensitive information via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-0169">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8:beta6"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8a"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8b"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8c"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8d"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8e"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8f"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8g"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8h"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8i"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8j"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8k"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8l"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8m"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8m:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8n"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8o"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8p"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8q"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8r"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8s"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8t"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8u"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8v"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8w"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8x"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0a"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0b"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0c"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0d"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0e"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0f"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0g"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0h"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0i"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0j"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1a"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1b"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1c"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1d"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:openjdk:-"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:openjdk:1.6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:openjdk:1.7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:openjdk:1.8.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:0.10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:0.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:0.11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:0.11.1"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:0.12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:0.12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:0.13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:0.14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:0.14.2"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:0.14.3"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:0.99:pre1"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:0.99:pre3"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:0.99:pre4"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:0.99:pre5"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:1.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:1.1.0:rc0"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:1.1.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:1.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:1.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:1.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:polarssl:polarssl:1.1.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8:beta1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8:beta2</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8:beta3</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8:beta4</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8:beta5</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8:beta6</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8a</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8b</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8c</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8d</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8e</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8f</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8g</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8h</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8i</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8j</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8k</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8l</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8m</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8m:beta1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8n</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8o</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8p</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8q</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8r</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8s</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8t</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8u</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8v</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8w</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8x</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0:beta1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0:beta2</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0:beta3</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0:beta4</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0:beta5</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0a</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0b</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0c</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0d</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0e</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0f</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0g</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0h</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0i</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0j</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1:beta1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1:beta2</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1:beta3</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1a</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1b</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1c</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1d</vuln:product>
      <vuln:product>cpe:/a:oracle:openjdk:-</vuln:product>
      <vuln:product>cpe:/a:oracle:openjdk:1.6.0</vuln:product>
      <vuln:product>cpe:/a:oracle:openjdk:1.7.0</vuln:product>
      <vuln:product>cpe:/a:oracle:openjdk:1.8.0</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:0.10.0</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:0.10.1</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:0.11.0</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:0.11.1</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:0.12.0</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:0.12.1</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:0.13.1</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:0.14.0</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:0.14.2</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:0.14.3</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:0.99:pre1</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:0.99:pre3</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:0.99:pre4</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:0.99:pre5</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:1.0.0</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:1.1.0</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:1.1.0:rc0</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:1.1.0:rc1</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:1.1.1</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:1.1.2</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:1.1.3</vuln:product>
      <vuln:product>cpe:/a:polarssl:polarssl:1.1.4</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-0169</vuln:cve-id>
    <vuln:published-datetime>2013-02-08T14:55:01.030-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:06:34.343-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.6</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>HIGH</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18841" name="oval:org.mitre.oval:def:18841"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19016" name="oval:org.mitre.oval:def:19016"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19424" name="oval:org.mitre.oval:def:19424"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19540" name="oval:org.mitre.oval:def:19540"/>
    <vuln:assessment_check system="http://oval.mitre.org/XMLSchema/oval-definitions-5" href="https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19608" name="oval:org.mitre.oval:def:19608"/>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://blog.fuseyism.com/index.php/2013/02/20/security-icedtea-2-1-6-2-2-6-2-3-7-for-openjdk-7-released/" xml:lang="en">http://blog.fuseyism.com/index.php/2013/02/20/security-icedtea-2-1-6-2-2-6-2-3-7-for-openjdk-7-released/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html" xml:lang="en">APPLE-SA-2013-09-12-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101366.html" xml:lang="en">FEDORA-2013-4403</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00020.html" xml:lang="en">SUSE-SU-2013:0328</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00000.html" xml:lang="en">openSUSE-SU-2013:0375</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00002.html" xml:lang="en">openSUSE-SU-2013:0378</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00020.html" xml:lang="en">SUSE-SU-2013:0701</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html" xml:lang="en">SUSE-SU-2014:0320</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html" xml:lang="en">SUSE-SU-2015:0578</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" xml:lang="en">openSUSE-SU-2016:0640</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136396549913849&amp;w=2" xml:lang="en">HPSBUX02856</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136432043316835&amp;w=2" xml:lang="en">SSRT101108</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136439120408139&amp;w=2" xml:lang="en">HPSBUX02857</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=136733161405818&amp;w=2" xml:lang="en">HPSBMU02874</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=137545771702053&amp;w=2" xml:lang="en">SSRT101289</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://openwall.com/lists/oss-security/2013/02/05/24" xml:lang="en">[oss-security] 20130205 Re: CVE request: TLS CBC padding timing flaw in various SSL / TLS implementations</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2013-0587.html" xml:lang="en">RHSA-2013:0587</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2013-0782.html" xml:lang="en">RHSA-2013:0782</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2013-0783.html" xml:lang="en">RHSA-2013:0783</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2013-0833.html" xml:lang="en">RHSA-2013:0833</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2013-1455.html" xml:lang="en">RHSA-2013:1455</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2013-1456.html" xml:lang="en">RHSA-2013:1456</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201406-32.xml" xml:lang="en">GLSA-201406-32</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT5880" xml:lang="en">http://support.apple.com/kb/HT5880</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2013/dsa-2621" xml:lang="en">DSA-2621</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2013/dsa-2622" xml:lang="en">DSA-2622</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.isg.rhul.ac.uk/tls/TLStiming.pdf" xml:lang="en">http://www.isg.rhul.ac.uk/tls/TLStiming.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/737740" xml:lang="en">VU#737740</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2013:095" xml:lang="en">MDVSA-2013:095</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.matrixssl.org/news.html" xml:lang="en">http://www.matrixssl.org/news.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.openssl.org/news/secadv_20130204.txt" xml:lang="en">http://www.openssl.org/news/secadv_20130204.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/javacpufeb2013update-1905892.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/javacpufeb2013update-1905892.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/57778" xml:lang="en">57778</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1029190" xml:lang="en">1029190</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.splunk.com/view/SP-CAAAHXG" xml:lang="en">http://www.splunk.com/view/SP-CAAAHXG</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-1735-1" xml:lang="en">USN-1735-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/cas/techalerts/TA13-051A.html" xml:lang="en">TA13-051A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21644047" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21644047</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf" xml:lang="en">https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="https://lists.debian.org/debian-lts-announce/2018/09/msg00029.html" xml:lang="en">[debian-lts-announce] 20180925 [SECURITY] [DLA 1518-1] polarssl security update</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://polarssl.org/tech-updates/releases/polarssl-1.2.5-released" xml:lang="en">https://polarssl.org/tech-updates/releases/polarssl-1.2.5-released</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://puppet.com/security/cve/cve-2013-0169" xml:lang="en">https://puppet.com/security/cve/cve-2013-0169</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&amp;docId=emr_na-c03883001" xml:lang="en">https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&amp;docId=emr_na-c03883001</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0084" xml:lang="en">https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0084</vuln:reference>
    </vuln:references>
    <vuln:summary>The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2321">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:service_manager_web_tier:9.31"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:service_manager_web_tier:9.31</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2321</vuln:cve-id>
    <vuln:published-datetime>2013-05-01T23:31:52.097-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:22.190-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748875" xml:lang="en">SSRT101185</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP Service Manager Web Tier 9.31 before 9.31.2004 p2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2322">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_sql%2fmx:1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_sql%2fmx:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_sql%2fmx:2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_sql%2fmx:2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_sql%2fmx:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_sql%2fmx:3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_sql%2fmx:3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_sql%2fmx:21"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:nonstop_sql%2fmx:1.8</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_sql%2fmx:2.0</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_sql%2fmx:2.2</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_sql%2fmx:2.3</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_sql%2fmx:3.0</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_sql%2fmx:3.1</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_sql%2fmx:3.2</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_sql%2fmx:21</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2322</vuln:cve-id>
    <vuln:published-datetime>2013-06-28T10:55:00.933-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:22.707-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03762155" xml:lang="en">SSRT101037</vuln:reference>
    </vuln:references>
    <vuln:summary>HP SQL/MX 3.2 and earlier on NonStop servers, when SQL/MP Objects are used, allows remote authenticated users to obtain sensitive information via unspecified vectors, aka the "SQL/MP index" issue.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2323">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_sql%2fmx:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_sql%2fmx:3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:nonstop_sql%2fmx:3.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:nonstop_sql%2fmx:3.0</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_sql%2fmx:3.1</vuln:product>
      <vuln:product>cpe:/a:hp:nonstop_sql%2fmx:3.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2323</vuln:cve-id>
    <vuln:published-datetime>2013-06-28T10:55:02.660-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:22.940-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03762155" xml:lang="en">SSRT101037</vuln:reference>
    </vuln:references>
    <vuln:summary>HP SQL/MX 3.0 through 3.2 on NonStop servers, when SQL/MP Objects are used, allows remote authenticated users to bypass intended access restrictions and modify data via unspecified vectors, aka the "SQL/MP tables" issue.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2324">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2324</vuln:cve-id>
    <vuln:published-datetime>2013-06-06T09:02:15.010-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:23.080-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657" xml:lang="en">SSRT101227</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1629.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2325">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2325</vuln:cve-id>
    <vuln:published-datetime>2013-06-06T09:02:15.077-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:23.377-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657" xml:lang="en">SSRT101227</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1633.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2326">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2326</vuln:cve-id>
    <vuln:published-datetime>2013-06-06T09:02:15.130-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:23.533-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657" xml:lang="en">SSRT101227</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1634.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2327">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2327</vuln:cve-id>
    <vuln:published-datetime>2013-06-06T09:02:15.180-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:23.643-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657" xml:lang="en">SSRT101227</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1635.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2328">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2328</vuln:cve-id>
    <vuln:published-datetime>2013-06-06T09:02:15.217-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:23.767-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657" xml:lang="en">SSRT101227</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1636.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2329">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2329</vuln:cve-id>
    <vuln:published-datetime>2013-06-06T09:02:15.247-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:23.923-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657" xml:lang="en">SSRT101049</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1637.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2330">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2330</vuln:cve-id>
    <vuln:published-datetime>2013-06-06T09:02:15.277-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:24.047-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657" xml:lang="en">SSRT101227</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1638.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2331">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2331</vuln:cve-id>
    <vuln:published-datetime>2013-06-06T09:02:15.307-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:24.190-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657" xml:lang="en">SSRT101227</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1652.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2332">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2332</vuln:cve-id>
    <vuln:published-datetime>2013-06-06T09:02:15.340-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:24.360-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657" xml:lang="en">SSRT101227</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1654.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2333">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2333</vuln:cve-id>
    <vuln:published-datetime>2013-06-06T09:02:15.367-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:24.470-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657" xml:lang="en">SSRT101227</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1680.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2334">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2334</vuln:cve-id>
    <vuln:published-datetime>2013-06-06T09:02:15.397-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:24.627-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657" xml:lang="en">SSRT101227</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1681.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2335">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~sunos~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.00:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~suse_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:7.01:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2335</vuln:cve-id>
    <vuln:published-datetime>2013-06-06T09:02:15.423-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:24.737-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657" xml:lang="en">SSRT101227</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1733.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2336">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:7.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.21"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.30"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.31"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:service_center:6.2.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:service_center:6.2.8</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:7.11</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.21</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.30</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.31</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2336</vuln:cve-id>
    <vuln:published-datetime>2013-06-14T14:55:01.723-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:24.830-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03784101" xml:lang="en">SSRT101207</vuln:reference>
    </vuln:references>
    <vuln:summary>HP Service Manager 7.11, 9.21, 9.30, and 9.31, and ServiceCenter 6.2.8, allows remote attackers to obtain sensitive information via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2337">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:7.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.21"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.30"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.31"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:service_center:6.2.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:service_center:6.2.8</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:7.11</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.21</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.30</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.31</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2337</vuln:cve-id>
    <vuln:published-datetime>2013-06-14T14:55:01.757-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:24.940-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03784101" xml:lang="en">SSRT101208</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31, and ServiceCenter 6.2.8, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2338">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_3_firmware:1.00"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_3_firmware:1.05"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_3_firmware:1.20"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_3_firmware:1.26"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_3_firmware:1.28"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_3_firmware:1.50"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_3_firmware:1.55"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_4_firmware:1.11"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_4_firmware:1.13"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_4_firmware:1.20"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:hp:integrated_lights-out_3_firmware:1.00</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_3_firmware:1.05</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_3_firmware:1.20</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_3_firmware:1.26</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_3_firmware:1.28</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_3_firmware:1.50</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_3_firmware:1.55</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_4_firmware:1.11</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_4_firmware:1.13</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_4_firmware:1.20</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2338</vuln:cve-id>
    <vuln:published-datetime>2013-06-14T15:55:01.140-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:25.033-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03787836" xml:lang="en">SSRT101180</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability on HP Integrated Lights-Out 3 (aka iLO3) cards with firmware before 1.57 and 4 (aka iLO4) cards with firmware before 1.22, when Single-Sign-On (SSO) is used, allows remote attackers to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2339">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:smart_zero_core:4.3"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:smart_zero_core:4.3.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:t410_all-in-one_smart_zero_client"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t410_smart_zero_client"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t510_flexible_thin_client"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t5565z_smart_client"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t610_flexible_thin_client"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t610_plus_flexible_thin_client"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:smart_zero_core:4.3</vuln:product>
      <vuln:product>cpe:/a:hp:smart_zero_core:4.3.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2339</vuln:cve-id>
    <vuln:published-datetime>2013-06-30T15:27:58.553-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:25.563-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03757330" xml:lang="en">SSRT101198</vuln:reference>
    </vuln:references>
    <vuln:summary>HP Smart Zero Core 4.3 and 4.3.1 on the t410 All-in-One Smart Zero Client, t410 Smart Zero Client, t510 Flexible Thin Client, t5565z Smart Client, t610 Flexible Thin Client, and t610 PLUS Flexible Thin Client allows local users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2340">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_baseline_plus_switch:2900"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_baseline_plus_switch:2900g"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_baseline_plus_switch:2900g-28hpwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_baseline_plus_switch:2900g-28pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:3012"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:3013"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:3016"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:3018"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:3036"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:3040"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:3041"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5009"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5012"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5231"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5232"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5640"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5642"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5642_taa"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5680"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5682"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:6040"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:6080"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:jg005a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:ss4_5500g-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4200g"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4200g-ntg"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4200g_pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4210"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4210-24g"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4210-48g"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4210_pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4210_pwr_9p_taa"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4500"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4500_pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4510g"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4510g_pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4800g"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:5500g-ei_sfp"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:e4210-24g-poe"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:e4510-24g"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:ss4_5500-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:ss4_5500-ei-pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:ss4_5500-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:ss4_5500g-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:ss4_5500g-ei-pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:ss4_switch_5500g-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch_taa_compliant:5500g-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch_taa_compliant:5500g-ei-pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch_taa_compliant:5500g-ei-sfp"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_taa_switch:5500-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-28c-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-28c-ei-dc"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-28c-pwr-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-28c-pwr-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-28c-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-28f-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-52c-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-52c-pwr-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-52c-pwr-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-52c-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5600-26c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5600-26c-pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5600-26f"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5600-50c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5600-50c-pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s7502e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s7503e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s7503e-s"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s7506e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s7506e-v"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s7510e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_high_performance_main_processing_unit:msr_50_3ge"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_processing_module:msr_50_g2"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_processor_module:msr_50"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr5040-dc-ovs-h3c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-10"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-11"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-12"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-12_t1"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-13"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-13_w"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-15"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-15_a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-15_a_w"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-15_iw"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-20"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-21"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-40"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_30-10"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_30-20"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_30-20_poe"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_30-20_rtvz33020as"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_30-40"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_30-40_poe"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_30-60"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_30-60_poe"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_50-40"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_50-60"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_900"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_920"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_3010"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_3016"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_3016_poe"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2011-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2012-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2012-ac-ovs-s-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2012-ac-ovs-w-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2012-t-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2013-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2013-ac-ovs-w-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2015-ac-ovs-a-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2015-ac-ovs-aw-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2015-ac-ovs-i-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2015-ac-ovs-iw-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2020-ac-ovs-h3c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2040-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2040-ac-ovs-h3c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3011-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3016-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3016-ac-poe-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3020-ac-poe-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3020-dc-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3040-ac-ovs-as-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3040-ac-ovs-h"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3040-ac-poe-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3060-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3060-ac-poe-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3060-dc-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr5060-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:sr8802"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:sr8805"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:sr8808"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:sr8812"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:sr_20-12_w"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_routing_switch:s9505e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_routing_switch:s9508e-v"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_routing_switch:s9512e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_routing_switch:s12508"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_routing_switch:s12518"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-8c-si_ls-s3100-8c-si-ac-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-8c-si_ls-s3100-8c-si-dc-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-8t-si_ls-s3100-8t-si-ac-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-16c-si_ls-s3100-16c-si-ac-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-16c-si_ls-s3100-16c-si-dc-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-16t-si_ls-s3100-16t-si-ac-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-26c-si_ls-s3100-26c-si-ac-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-26c-si_ls-s3100-26c-si-dc-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-26t-si_ls-s3100-26t-si-ac-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-52p_ls-3100-52p-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-28f-ei_ls-3600-28f-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-28p-ei_ls-3600-28p-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-28p-pwr-ei_ls-3600-28p-pwr-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-28p-pwr-si_ls-3600-28p-pwr-si-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-28p-si_ls-3600-28p-si-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-28tp-si_ls-3600-28tp-si-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-52p-ei_ls-3600-52p-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-52p-pwr-ei_ls-3600-52p-pwr-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-52p-pwr-si_ls-3600-52p-pwr-si-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-52p-si_ls-3600-52p-si-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3610-28f_ls-3610-28f-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3610-28p_ls-3610-28p-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3610-28tp_ls-3610-28tp-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3610-52p_ls-3610-52p-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-8p-ei_ls-5100-8p-ei-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-8p-pwr-ei_ls-5100-8p-pwr-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-8p-si_ls-5100-8p-si-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-16p-ei_ls-5100-16p-ei-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-16p-pwr-ei_ls-5100-16p-pwr-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-16p-si_ls-5100-16p-si-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-24p-ei_ls-5100-24p-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-24p-si_ls-5100-24p-si-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-26c-ei_ls-5100-26c-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-26c-pwr-ei_ls-5100-26c-pwr-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-48p-ei_ls-5100-48p-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-48p-si_ls-5100-48p-si-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-50c-ei_ls-5100-50c-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-50c-pwr-ei_ls-5100-50c-pwr-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-20p-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-24p-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-28c-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-28c-pwr-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-28p-hpwr-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-28p-pwr-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-28p-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-48p-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-52c-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-52c-pwr-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-52p-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5800-32c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5800-32c-pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5800-32f"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5800-56c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5800-56c-pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5800-60c-pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5820x-28c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5820x-28s"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s7502e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s7503e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s7503e-s"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s7506e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s7506e-v"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s9505e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s9508e-v"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s12508"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s12518"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jc147a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jc147b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jc148a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jc148b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jc149a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jc149b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jc150a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jc150b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd429b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd431a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd432a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd433a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd653a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd655a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd656a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd662a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd663a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd663b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd664a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd916a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd917a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd918a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd921a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd922a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd923a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd935a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd943a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd944a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd945a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd946a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd967a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd972a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf182a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf183a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf184a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf228a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf229a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf230a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf231a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf233a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf234a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf235a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf236a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf237a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf238a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf239a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf240a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf241a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf283a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf284a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf285a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf287a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf640a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf800a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf801a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf802a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf803a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf804a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf806a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf807a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf808a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf809a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf812a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf813a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf814a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf815a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf816a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf817a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:658247-b21"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:658250-b21"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc085a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc086a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc099a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc100a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc101a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc102a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc103a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc104a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc105a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc106a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc124a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc124b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc125a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc125b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc474a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc474b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc611a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc612a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc613a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc652a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc653a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc654a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc655a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc691a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc694a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc748a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd007a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd008a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd009a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd010a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd011a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd238a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd238b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd239a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd239b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd240a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd240b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd241a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd241b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd242a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd242b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd243a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd243b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd302a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd303a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd304a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd305a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd306a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd307a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd308a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd309a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd310a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd313b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd317a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd318b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd319b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd320b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd325a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd326a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd327a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd328a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd329a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd330a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd331a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd332a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd333a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd334a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd335a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd336a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd337a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd338a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd344a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd345a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd346a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd347a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd348a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd349a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd350a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd351a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd352a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd353a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd354a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd355a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd356a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd357a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd369a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd370a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd371a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd372a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd373a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd374a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd375a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd376a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd377a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd378a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd379a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd391a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd392a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd393a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd394a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd395a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je005a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je006a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je007a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je008a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je009a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je015a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je016a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je017a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je018a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je019a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je020a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je021a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je022a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je023a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je024a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je025a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je026a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je027a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je028a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je029a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je030a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je031a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je032a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je033a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je045a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je046a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je047a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je048a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je066a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je067a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je068a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je069a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je070a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je071a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je072a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je073a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je074a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je088a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je089a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je090a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je091a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je092a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je093a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je094a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je095a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je096a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je097a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je099a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je100a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je101a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je102a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je104a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je105a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je106a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je107a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je108a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je109a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je110a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je164a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je165a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je166a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je167a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je168a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je169a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf427a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf428a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf430a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf430b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf430c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf431a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf431b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf431c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf551a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf552a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf553a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf844a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf845a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf846a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf847a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg091a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg092a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg219a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg221a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg222a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg223a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg225a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg236a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg237a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg238a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg239a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg240a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg241a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg242a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg243a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg245a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg246a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg247a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg248a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg249a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg250a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg251a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg252a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg253a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg254a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg255a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg256a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg257a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg258a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg259a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg299a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg300a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg301a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg302a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg303a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg304a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg305a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg306a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg307a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg311a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg312a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg315a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg316a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg348a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg349a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg350a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg374a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:vpn_firewall_appliance:jd270a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:vpn_firewall_appliance:jd271a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:vpn_firewall_appliance:jg213a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:vpn_firewall_appliance:jg214a"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:3com_baseline_plus_switch:2900</vuln:product>
      <vuln:product>cpe:/h:hp:3com_baseline_plus_switch:2900g</vuln:product>
      <vuln:product>cpe:/h:hp:3com_baseline_plus_switch:2900g-28hpwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_baseline_plus_switch:2900g-28pwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:3012</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:3013</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:3016</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:3018</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:3036</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:3040</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:3041</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5009</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5012</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5231</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5232</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5640</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5642</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5642_taa</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5680</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5682</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:6040</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:6080</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:jg005a</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:ss4_5500g-ei</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4200g</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4200g-ntg</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4200g_pwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4210</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4210-24g</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4210-48g</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4210_pwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4210_pwr_9p_taa</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4500</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4500_pwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4510g</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4510g_pwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4800g</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:5500g-ei_sfp</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:e4210-24g-poe</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:e4510-24g</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:ss4_5500-ei</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:ss4_5500-ei-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:ss4_5500-si</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:ss4_5500g-ei</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:ss4_5500g-ei-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:ss4_switch_5500g-ei</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch_taa_compliant:5500g-ei</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch_taa_compliant:5500g-ei-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch_taa_compliant:5500g-ei-sfp</vuln:product>
      <vuln:product>cpe:/h:hp:3com_taa_switch:5500-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-28c-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-28c-ei-dc</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-28c-pwr-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-28c-pwr-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-28c-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-28f-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-52c-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-52c-pwr-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-52c-pwr-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-52c-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5600-26c</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5600-26c-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5600-26f</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5600-50c</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5600-50c-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s7502e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s7503e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s7503e-s</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s7506e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s7506e-v</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s7510e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_high_performance_main_processing_unit:msr_50_3ge</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_processing_module:msr_50_g2</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_processor_module:msr_50</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr5040-dc-ovs-h3c</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-10</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-11</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-12</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-12_t1</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-13</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-13_w</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-15</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-15_a</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-15_a_w</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-15_iw</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-20</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-21</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-40</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_30-10</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_30-20</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_30-20_poe</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_30-20_rtvz33020as</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_30-40</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_30-40_poe</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_30-60</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_30-60_poe</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_50-40</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_50-60</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_900</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_920</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_3010</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_3016</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_3016_poe</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2011-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2012-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2012-ac-ovs-s-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2012-ac-ovs-w-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2012-t-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2013-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2013-ac-ovs-w-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2015-ac-ovs-a-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2015-ac-ovs-aw-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2015-ac-ovs-i-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2015-ac-ovs-iw-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2020-ac-ovs-h3c</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2040-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2040-ac-ovs-h3c</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3011-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3016-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3016-ac-poe-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3020-ac-poe-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3020-dc-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3040-ac-ovs-as-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3040-ac-ovs-h</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3040-ac-poe-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3060-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3060-ac-poe-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3060-dc-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr5060-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:sr8802</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:sr8805</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:sr8808</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:sr8812</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:sr_20-12_w</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_routing_switch:s9505e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_routing_switch:s9508e-v</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_routing_switch:s9512e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_routing_switch:s12508</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_routing_switch:s12518</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-8c-si_ls-s3100-8c-si-ac-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-8c-si_ls-s3100-8c-si-dc-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-8t-si_ls-s3100-8t-si-ac-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-16c-si_ls-s3100-16c-si-ac-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-16c-si_ls-s3100-16c-si-dc-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-16t-si_ls-s3100-16t-si-ac-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-26c-si_ls-s3100-26c-si-ac-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-26c-si_ls-s3100-26c-si-dc-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-26t-si_ls-s3100-26t-si-ac-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-52p_ls-3100-52p-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-28f-ei_ls-3600-28f-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-28p-ei_ls-3600-28p-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-28p-pwr-ei_ls-3600-28p-pwr-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-28p-pwr-si_ls-3600-28p-pwr-si-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-28p-si_ls-3600-28p-si-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-28tp-si_ls-3600-28tp-si-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-52p-ei_ls-3600-52p-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-52p-pwr-ei_ls-3600-52p-pwr-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-52p-pwr-si_ls-3600-52p-pwr-si-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-52p-si_ls-3600-52p-si-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3610-28f_ls-3610-28f-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3610-28p_ls-3610-28p-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3610-28tp_ls-3610-28tp-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3610-52p_ls-3610-52p-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-8p-ei_ls-5100-8p-ei-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-8p-pwr-ei_ls-5100-8p-pwr-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-8p-si_ls-5100-8p-si-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-16p-ei_ls-5100-16p-ei-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-16p-pwr-ei_ls-5100-16p-pwr-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-16p-si_ls-5100-16p-si-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-24p-ei_ls-5100-24p-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-24p-si_ls-5100-24p-si-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-26c-ei_ls-5100-26c-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-26c-pwr-ei_ls-5100-26c-pwr-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-48p-ei_ls-5100-48p-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-48p-si_ls-5100-48p-si-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-50c-ei_ls-5100-50c-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-50c-pwr-ei_ls-5100-50c-pwr-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-20p-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-24p-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-28c-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-28c-pwr-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-28p-hpwr-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-28p-pwr-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-28p-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-48p-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-52c-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-52c-pwr-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-52p-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5800-32c</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5800-32c-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5800-32f</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5800-56c</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5800-56c-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5800-60c-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5820x-28c</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5820x-28s</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s7502e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s7503e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s7503e-s</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s7506e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s7506e-v</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s9505e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s9508e-v</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s12508</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s12518</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jc147a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jc147b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jc148a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jc148b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jc149a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jc149b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jc150a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jc150b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd429b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd431a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd432a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd433a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd653a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd655a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd656a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd662a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd663a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd663b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd664a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd916a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd917a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd918a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd921a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd922a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd923a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd935a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd943a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd944a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd945a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd946a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd967a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd972a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf182a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf183a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf184a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf228a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf229a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf230a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf231a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf233a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf234a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf235a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf236a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf237a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf238a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf239a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf240a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf241a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf283a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf284a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf285a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf287a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf640a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf800a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf801a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf802a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf803a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf804a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf806a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf807a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf808a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf809a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf812a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf813a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf814a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf815a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf816a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf817a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:658247-b21</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:658250-b21</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc085a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc086a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc099a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc100a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc101a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc102a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc103a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc104a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc105a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc106a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc124a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc124b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc125a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc125b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc474a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc474b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc611a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc612a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc613a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc652a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc653a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc654a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc655a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc691a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc694a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc748a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd007a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd008a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd009a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd010a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd011a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd238a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd238b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd239a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd239b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd240a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd240b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd241a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd241b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd242a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd242b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd243a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd243b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd302a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd303a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd304a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd305a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd306a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd307a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd308a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd309a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd310a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd313b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd317a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd318b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd319b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd320b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd325a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd326a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd327a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd328a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd329a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd330a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd331a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd332a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd333a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd334a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd335a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd336a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd337a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd338a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd344a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd345a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd346a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd347a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd348a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd349a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd350a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd351a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd352a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd353a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd354a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd355a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd356a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd357a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd369a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd370a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd371a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd372a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd373a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd374a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd375a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd376a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd377a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd378a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd379a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd391a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd392a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd393a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd394a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd395a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je005a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je006a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je007a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je008a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je009a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je015a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je016a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je017a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je018a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je019a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je020a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je021a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je022a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je023a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je024a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je025a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je026a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je027a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je028a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je029a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je030a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je031a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je032a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je033a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je045a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je046a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je047a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je048a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je066a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je067a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je068a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je069a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je070a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je071a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je072a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je073a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je074a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je088a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je089a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je090a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je091a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je092a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je093a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je094a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je095a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je096a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je097a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je099a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je100a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je101a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je102a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je104a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je105a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je106a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je107a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je108a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je109a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je110a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je164a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je165a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je166a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je167a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je168a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je169a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf427a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf428a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf430a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf430b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf430c</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf431a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf431b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf431c</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf551a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf552a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf553a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf844a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf845a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf846a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf847a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg091a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg092a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg219a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg221a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg222a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg223a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg225a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg236a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg237a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg238a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg239a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg240a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg241a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg242a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg243a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg245a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg246a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg247a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg248a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg249a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg250a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg251a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg252a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg253a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg254a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg255a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg256a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg257a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg258a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg259a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg299a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg300a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg301a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg302a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg303a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg304a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg305a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg306a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg307a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg311a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg312a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg315a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg316a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg348a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg349a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg350a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg374a</vuln:product>
      <vuln:product>cpe:/h:hp:vpn_firewall_appliance:jd270a</vuln:product>
      <vuln:product>cpe:/h:hp:vpn_firewall_appliance:jd271a</vuln:product>
      <vuln:product>cpe:/h:hp:vpn_firewall_appliance:jg213a</vuln:product>
      <vuln:product>cpe:/h:hp:vpn_firewall_appliance:jg214a</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2340</vuln:cve-id>
    <vuln:published-datetime>2013-07-06T09:57:36.873-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:25.783-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03808969" xml:lang="en">SSRT100917</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability on the HP ProCurve JC###A, JC###B, JD###A, JD###B, JE###A, JF###A, JF###B, JF###C, JG###A, 658250-B21, and 658247-B21; HP 3COM routers and switches; and HP H3C routers and switches allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2341">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_baseline_plus_switch:2900"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_baseline_plus_switch:2900g"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_baseline_plus_switch:2900g-28hpwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_baseline_plus_switch:2900g-28pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:3012"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:3013"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:3016"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:3018"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:3036"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:3040"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:3041"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5009"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5012"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5231"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5232"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5640"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5642"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5642_taa"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5680"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:5682"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:6040"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:6080"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:jg005a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_router:ss4_5500g-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4200g"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4200g-ntg"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4200g_pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4210"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4210-24g"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4210-48g"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4210_pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4210_pwr_9p_taa"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4500"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4500_pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4510g"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4510g_pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:4800g"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:5500g-ei_sfp"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:e4210-24g-poe"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:e4510-24g"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:ss4_5500-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:ss4_5500-ei-pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:ss4_5500-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:ss4_5500g-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:ss4_5500g-ei-pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch:ss4_switch_5500g-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch_taa_compliant:5500g-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch_taa_compliant:5500g-ei-pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_switch_taa_compliant:5500g-ei-sfp"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:3com_taa_switch:5500-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-28c-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-28c-ei-dc"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-28c-pwr-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-28c-pwr-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-28c-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-28f-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-52c-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-52c-pwr-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-52c-pwr-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5500-52c-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5600-26c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5600-26c-pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5600-26f"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5600-50c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s5600-50c-pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s7502e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s7503e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s7503e-s"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s7506e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s7506e-v"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_ethernet_switch:s7510e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_high_performance_main_processing_unit:msr_50_3ge"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_processing_module:msr_50_g2"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_processor_module:msr_50"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr5040-dc-ovs-h3c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-10"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-11"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-12"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-12_t1"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-13"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-13_w"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-15"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-15_a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-15_a_w"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-15_iw"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-20"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-21"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_20-40"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_30-10"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_30-20"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_30-20_poe"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_30-20_rtvz33020as"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_30-40"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_30-40_poe"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_30-60"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_30-60_poe"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_50-40"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_50-60"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_900"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_920"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_3010"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_3016"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:msr_3016_poe"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2011-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2012-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2012-ac-ovs-s-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2012-ac-ovs-w-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2012-t-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2013-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2013-ac-ovs-w-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2015-ac-ovs-a-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2015-ac-ovs-aw-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2015-ac-ovs-i-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2015-ac-ovs-iw-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2020-ac-ovs-h3c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2040-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr2040-ac-ovs-h3c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3011-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3016-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3016-ac-poe-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3020-ac-poe-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3020-dc-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3040-ac-ovs-as-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3040-ac-ovs-h"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3040-ac-poe-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3060-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3060-ac-poe-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr3060-dc-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:rt-msr5060-ac-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:sr8802"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:sr8805"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:sr8808"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:sr8812"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_router:sr_20-12_w"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_routing_switch:s9505e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_routing_switch:s9508e-v"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_routing_switch:s9512e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_routing_switch:s12508"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_routing_switch:s12518"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-8c-si_ls-s3100-8c-si-ac-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-8c-si_ls-s3100-8c-si-dc-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-8t-si_ls-s3100-8t-si-ac-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-16c-si_ls-s3100-16c-si-ac-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-16c-si_ls-s3100-16c-si-dc-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-16t-si_ls-s3100-16t-si-ac-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-26c-si_ls-s3100-26c-si-ac-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-26c-si_ls-s3100-26c-si-dc-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-26t-si_ls-s3100-26t-si-ac-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3100-52p_ls-3100-52p-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-28f-ei_ls-3600-28f-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-28p-ei_ls-3600-28p-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-28p-pwr-ei_ls-3600-28p-pwr-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-28p-pwr-si_ls-3600-28p-pwr-si-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-28p-si_ls-3600-28p-si-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-28tp-si_ls-3600-28tp-si-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-52p-ei_ls-3600-52p-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-52p-pwr-ei_ls-3600-52p-pwr-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-52p-pwr-si_ls-3600-52p-pwr-si-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3600-52p-si_ls-3600-52p-si-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3610-28f_ls-3610-28f-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3610-28p_ls-3610-28p-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3610-28tp_ls-3610-28tp-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s3610-52p_ls-3610-52p-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-8p-ei_ls-5100-8p-ei-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-8p-pwr-ei_ls-5100-8p-pwr-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-8p-si_ls-5100-8p-si-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-16p-ei_ls-5100-16p-ei-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-16p-pwr-ei_ls-5100-16p-pwr-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-16p-si_ls-5100-16p-si-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-24p-ei_ls-5100-24p-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-24p-si_ls-5100-24p-si-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-26c-ei_ls-5100-26c-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-26c-pwr-ei_ls-5100-26c-pwr-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-48p-ei_ls-5100-48p-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-48p-si_ls-5100-48p-si-ovs-h3"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-50c-ei_ls-5100-50c-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5100-50c-pwr-ei_ls-5100-50c-pwr-ei-ovs"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-20p-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-24p-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-28c-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-28c-pwr-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-28p-hpwr-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-28p-pwr-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-28p-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-48p-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-52c-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-52c-pwr-ei"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5120-52p-si"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5800-32c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5800-32c-pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5800-32f"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5800-56c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5800-56c-pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5800-60c-pwr"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5820x-28c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s5820x-28s"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s7502e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s7503e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s7503e-s"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s7506e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s7506e-v"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s9505e"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s9508e-v"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s12508"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:h3c_switch:s12518"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jc147a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jc147b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jc148a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jc148b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jc149a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jc149b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jc150a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jc150b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd429b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd431a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd432a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd433a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd653a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd655a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd656a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd662a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd663a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd663b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd664a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd916a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd917a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd918a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd921a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd922a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd923a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd935a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd943a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd944a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd945a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd946a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd967a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jd972a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf182a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf183a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf184a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf228a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf229a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf230a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf231a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf233a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf234a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf235a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf236a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf237a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf238a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf239a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf240a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf241a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf283a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf284a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf285a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf287a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf640a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf800a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf801a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf802a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf803a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf804a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf806a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf807a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf808a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf809a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf812a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf813a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf814a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf815a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf816a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_router:jf817a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:658247-b21"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:658250-b21"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc085a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc086a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc099a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc100a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc101a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc102a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc103a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc104a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc105a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc106a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc124a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc124b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc125a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc125b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc474a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc474b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc611a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc612a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc613a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc652a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc653a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc654a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc655a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc691a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc694a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jc748a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd007a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd008a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd009a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd010a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd011a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd238a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd238b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd239a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd239b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd240a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd240b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd241a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd241b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd242a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd242b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd243a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd243b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd302a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd303a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd304a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd305a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd306a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd307a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd308a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd309a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd310a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd313b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd317a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd318b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd319b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd320b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd325a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd326a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd327a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd328a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd329a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd330a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd331a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd332a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd333a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd334a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd335a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd336a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd337a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd338a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd344a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd345a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd346a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd347a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd348a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd349a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd350a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd351a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd352a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd353a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd354a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd355a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd356a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd357a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd369a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd370a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd371a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd372a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd373a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd374a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd375a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd376a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd377a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd378a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd379a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd391a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd392a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd393a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd394a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jd395a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je005a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je006a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je007a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je008a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je009a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je015a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je016a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je017a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je018a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je019a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je020a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je021a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je022a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je023a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je024a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je025a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je026a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je027a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je028a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je029a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je030a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je031a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je032a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je033a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je045a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je046a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je047a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je048a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je066a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je067a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je068a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je069a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je070a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je071a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je072a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je073a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je074a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je088a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je089a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je090a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je091a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je092a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je093a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je094a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je095a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je096a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je097a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je099a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je100a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je101a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je102a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je104a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je105a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je106a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je107a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je108a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je109a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je110a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je164a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je165a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je166a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je167a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je168a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:je169a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf427a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf428a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf430a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf430b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf430c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf431a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf431b"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf431c"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf551a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf552a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf553a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf844a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf845a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf846a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jf847a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg091a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg092a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg219a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg221a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg222a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg223a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg225a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg236a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg237a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg238a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg239a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg240a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg241a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg242a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg243a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg245a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg246a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg247a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg248a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg249a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg250a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg251a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg252a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg253a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg254a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg255a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg256a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg257a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg258a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg259a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg299a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg300a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg301a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg302a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg303a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg304a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg305a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg306a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg307a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg311a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg312a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg315a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg316a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg348a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg349a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg350a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:procurve_switch:jg374a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:vpn_firewall_appliance:jd270a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:vpn_firewall_appliance:jd271a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:vpn_firewall_appliance:jg213a"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:vpn_firewall_appliance:jg214a"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:3com_baseline_plus_switch:2900</vuln:product>
      <vuln:product>cpe:/h:hp:3com_baseline_plus_switch:2900g</vuln:product>
      <vuln:product>cpe:/h:hp:3com_baseline_plus_switch:2900g-28hpwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_baseline_plus_switch:2900g-28pwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:3012</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:3013</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:3016</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:3018</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:3036</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:3040</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:3041</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5009</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5012</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5231</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5232</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5640</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5642</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5642_taa</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5680</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:5682</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:6040</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:6080</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:jg005a</vuln:product>
      <vuln:product>cpe:/h:hp:3com_router:ss4_5500g-ei</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4200g</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4200g-ntg</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4200g_pwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4210</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4210-24g</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4210-48g</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4210_pwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4210_pwr_9p_taa</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4500</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4500_pwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4510g</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4510g_pwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:4800g</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:5500g-ei_sfp</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:e4210-24g-poe</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:e4510-24g</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:ss4_5500-ei</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:ss4_5500-ei-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:ss4_5500-si</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:ss4_5500g-ei</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:ss4_5500g-ei-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch:ss4_switch_5500g-ei</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch_taa_compliant:5500g-ei</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch_taa_compliant:5500g-ei-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:3com_switch_taa_compliant:5500g-ei-sfp</vuln:product>
      <vuln:product>cpe:/h:hp:3com_taa_switch:5500-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-28c-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-28c-ei-dc</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-28c-pwr-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-28c-pwr-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-28c-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-28f-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-52c-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-52c-pwr-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-52c-pwr-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5500-52c-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5600-26c</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5600-26c-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5600-26f</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5600-50c</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s5600-50c-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s7502e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s7503e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s7503e-s</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s7506e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s7506e-v</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_ethernet_switch:s7510e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_high_performance_main_processing_unit:msr_50_3ge</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_processing_module:msr_50_g2</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_processor_module:msr_50</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr5040-dc-ovs-h3c</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-10</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-11</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-12</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-12_t1</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-13</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-13_w</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-15</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-15_a</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-15_a_w</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-15_iw</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-20</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-21</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_20-40</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_30-10</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_30-20</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_30-20_poe</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_30-20_rtvz33020as</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_30-40</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_30-40_poe</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_30-60</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_30-60_poe</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_50-40</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_50-60</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_900</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_920</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_3010</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_3016</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:msr_3016_poe</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2011-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2012-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2012-ac-ovs-s-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2012-ac-ovs-w-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2012-t-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2013-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2013-ac-ovs-w-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2015-ac-ovs-a-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2015-ac-ovs-aw-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2015-ac-ovs-i-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2015-ac-ovs-iw-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2020-ac-ovs-h3c</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2040-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr2040-ac-ovs-h3c</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3011-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3016-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3016-ac-poe-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3020-ac-poe-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3020-dc-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3040-ac-ovs-as-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3040-ac-ovs-h</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3040-ac-poe-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3060-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3060-ac-poe-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr3060-dc-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:rt-msr5060-ac-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:sr8802</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:sr8805</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:sr8808</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:sr8812</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_router:sr_20-12_w</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_routing_switch:s9505e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_routing_switch:s9508e-v</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_routing_switch:s9512e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_routing_switch:s12508</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_routing_switch:s12518</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-8c-si_ls-s3100-8c-si-ac-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-8c-si_ls-s3100-8c-si-dc-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-8t-si_ls-s3100-8t-si-ac-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-16c-si_ls-s3100-16c-si-ac-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-16c-si_ls-s3100-16c-si-dc-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-16t-si_ls-s3100-16t-si-ac-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-26c-si_ls-s3100-26c-si-ac-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-26c-si_ls-s3100-26c-si-dc-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-26t-si_ls-s3100-26t-si-ac-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3100-52p_ls-3100-52p-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-28f-ei_ls-3600-28f-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-28p-ei_ls-3600-28p-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-28p-pwr-ei_ls-3600-28p-pwr-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-28p-pwr-si_ls-3600-28p-pwr-si-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-28p-si_ls-3600-28p-si-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-28tp-si_ls-3600-28tp-si-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-52p-ei_ls-3600-52p-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-52p-pwr-ei_ls-3600-52p-pwr-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-52p-pwr-si_ls-3600-52p-pwr-si-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3600-52p-si_ls-3600-52p-si-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3610-28f_ls-3610-28f-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3610-28p_ls-3610-28p-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3610-28tp_ls-3610-28tp-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s3610-52p_ls-3610-52p-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-8p-ei_ls-5100-8p-ei-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-8p-pwr-ei_ls-5100-8p-pwr-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-8p-si_ls-5100-8p-si-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-16p-ei_ls-5100-16p-ei-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-16p-pwr-ei_ls-5100-16p-pwr-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-16p-si_ls-5100-16p-si-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-24p-ei_ls-5100-24p-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-24p-si_ls-5100-24p-si-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-26c-ei_ls-5100-26c-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-26c-pwr-ei_ls-5100-26c-pwr-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-48p-ei_ls-5100-48p-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-48p-si_ls-5100-48p-si-ovs-h3</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-50c-ei_ls-5100-50c-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5100-50c-pwr-ei_ls-5100-50c-pwr-ei-ovs</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-20p-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-24p-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-28c-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-28c-pwr-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-28p-hpwr-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-28p-pwr-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-28p-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-48p-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-52c-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-52c-pwr-ei</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5120-52p-si</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5800-32c</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5800-32c-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5800-32f</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5800-56c</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5800-56c-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5800-60c-pwr</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5820x-28c</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s5820x-28s</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s7502e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s7503e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s7503e-s</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s7506e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s7506e-v</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s9505e</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s9508e-v</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s12508</vuln:product>
      <vuln:product>cpe:/h:hp:h3c_switch:s12518</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jc147a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jc147b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jc148a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jc148b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jc149a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jc149b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jc150a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jc150b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd429b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd431a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd432a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd433a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd653a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd655a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd656a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd662a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd663a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd663b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd664a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd916a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd917a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd918a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd921a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd922a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd923a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd935a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd943a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd944a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd945a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd946a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd967a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jd972a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf182a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf183a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf184a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf228a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf229a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf230a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf231a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf233a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf234a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf235a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf236a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf237a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf238a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf239a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf240a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf241a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf283a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf284a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf285a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf287a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf640a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf800a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf801a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf802a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf803a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf804a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf806a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf807a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf808a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf809a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf812a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf813a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf814a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf815a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf816a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_router:jf817a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:658247-b21</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:658250-b21</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc085a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc086a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc099a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc100a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc101a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc102a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc103a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc104a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc105a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc106a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc124a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc124b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc125a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc125b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc474a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc474b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc611a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc612a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc613a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc652a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc653a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc654a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc655a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc691a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc694a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jc748a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd007a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd008a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd009a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd010a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd011a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd238a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd238b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd239a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd239b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd240a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd240b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd241a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd241b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd242a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd242b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd243a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd243b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd302a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd303a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd304a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd305a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd306a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd307a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd308a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd309a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd310a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd313b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd317a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd318b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd319b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd320b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd325a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd326a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd327a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd328a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd329a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd330a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd331a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd332a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd333a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd334a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd335a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd336a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd337a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd338a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd344a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd345a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd346a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd347a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd348a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd349a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd350a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd351a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd352a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd353a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd354a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd355a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd356a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd357a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd369a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd370a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd371a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd372a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd373a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd374a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd375a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd376a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd377a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd378a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd379a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd391a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd392a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd393a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd394a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jd395a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je005a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je006a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je007a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je008a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je009a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je015a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je016a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je017a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je018a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je019a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je020a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je021a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je022a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je023a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je024a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je025a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je026a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je027a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je028a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je029a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je030a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je031a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je032a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je033a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je045a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je046a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je047a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je048a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je066a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je067a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je068a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je069a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je070a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je071a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je072a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je073a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je074a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je088a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je089a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je090a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je091a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je092a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je093a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je094a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je095a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je096a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je097a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je099a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je100a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je101a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je102a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je104a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je105a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je106a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je107a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je108a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je109a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je110a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je164a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je165a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je166a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je167a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je168a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:je169a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf427a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf428a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf430a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf430b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf430c</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf431a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf431b</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf431c</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf551a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf552a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf553a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf844a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf845a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf846a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jf847a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg091a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg092a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg219a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg221a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg222a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg223a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg225a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg236a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg237a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg238a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg239a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg240a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg241a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg242a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg243a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg245a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg246a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg247a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg248a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg249a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg250a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg251a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg252a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg253a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg254a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg255a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg256a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg257a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg258a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg259a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg299a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg300a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg301a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg302a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg303a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg304a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg305a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg306a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg307a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg311a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg312a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg315a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg316a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg348a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg349a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg350a</vuln:product>
      <vuln:product>cpe:/h:hp:procurve_switch:jg374a</vuln:product>
      <vuln:product>cpe:/h:hp:vpn_firewall_appliance:jd270a</vuln:product>
      <vuln:product>cpe:/h:hp:vpn_firewall_appliance:jd271a</vuln:product>
      <vuln:product>cpe:/h:hp:vpn_firewall_appliance:jg213a</vuln:product>
      <vuln:product>cpe:/h:hp:vpn_firewall_appliance:jg214a</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2341</vuln:cve-id>
    <vuln:published-datetime>2013-07-06T09:57:36.890-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:29.707-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.1</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>HIGH</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03808969" xml:lang="en">HPSBHF02888</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability on the HP ProCurve JC###A, JC###B, JD###A, JD###B, JE###A, JF###A, JF###B, JF###C, JG###A, 658250-B21, and 658247-B21; HP 3COM routers and switches; and HP H3C routers and switches allows remote authenticated users to execute arbitrary code or obtain sensitive information via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2342">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_d2d:2.1.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_d2d:2.2.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_d2d:2.2.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_d2d:2.2.13"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_d2d:2.2.14"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_d2d:2.2.16"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_d2d:2.2.17"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storeonce_d2d:2.1.01</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_d2d:2.2.00</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_d2d:2.2.10</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_d2d:2.2.13</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_d2d:2.2.14</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_d2d:2.2.16</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_d2d:2.2.17</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2342</vuln:cve-id>
    <vuln:published-datetime>2013-06-30T15:27:59.003-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:30.330-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.7</cvss:score>
        <cvss:access-vector>ADJACENT_NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-255"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.lolware.net/hpstorage.html" xml:lang="en">http://www.lolware.net/hpstorage.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03813919" xml:lang="en">HPSBST02890</vuln:reference>
    </vuln:references>
    <vuln:summary>The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete data via an SSH session.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2343">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:lefthand_p4000_virtual_san_appliance:-"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:lefthand_virtual_san_appliance_hydra:-"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:lefthand_virtual_san_appliance_hydra_software:9.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:lefthand_p4000_virtual_san_appliance:-</vuln:product>
      <vuln:product>cpe:/a:hp:lefthand_virtual_san_appliance_hydra:-</vuln:product>
      <vuln:product>cpe:/a:hp:lefthand_virtual_san_appliance_hydra_software:9.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2343</vuln:cve-id>
    <vuln:published-datetime>2013-07-02T17:55:00.863-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:30.423-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03661318" xml:lang="en">SSRT100798</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1510.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2344">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2344</vuln:cve-id>
    <vuln:published-datetime>2014-01-03T23:51:17.163-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:30.517-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422" xml:lang="en">HPSBMU02895</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1866.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2345">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2345</vuln:cve-id>
    <vuln:published-datetime>2014-01-03T23:51:17.210-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:30.627-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422" xml:lang="en">SSRT101218</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1869.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2346">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2346</vuln:cve-id>
    <vuln:published-datetime>2014-01-03T23:51:17.240-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:30.720-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422" xml:lang="en">SSRT101219</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1870.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2347">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2347</vuln:cve-id>
    <vuln:published-datetime>2014-01-03T23:51:17.257-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:31.110-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://ddilabs.blogspot.com/2014/02/fun-with-hp-data-protector-execbar.html" xml:lang="en">http://ddilabs.blogspot.com/2014/02/fun-with-hp-data-protector-execbar.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422" xml:lang="en">SSRT101220</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.zerodayinitiative.com/advisories/ZDI-14-008/" xml:lang="en">http://www.zerodayinitiative.com/advisories/ZDI-14-008/</vuln:reference>
    </vuln:references>
    <vuln:summary>The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXEC_BAR packet to TCP port 5555, aka ZDI-CAN-1885.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2348">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2348</vuln:cve-id>
    <vuln:published-datetime>2014-01-03T23:51:17.287-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:31.347-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422" xml:lang="en">SSRT101253</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1892.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2349">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2349</vuln:cve-id>
    <vuln:published-datetime>2014-01-03T23:51:17.317-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:31.440-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422" xml:lang="en">HPSBMU02895</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1896.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2350">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2350</vuln:cve-id>
    <vuln:published-datetime>2014-01-03T23:51:17.333-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:31.550-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422" xml:lang="en">SSRT101223</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1897.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2351">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.20"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.0</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.10</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.20</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2351</vuln:cve-id>
    <vuln:published-datetime>2013-07-13T09:09:59.283-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:31.627-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03747342" xml:lang="en">SSRT101012</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.00, 9.1x, and 9.2x allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2352">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:8.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:8.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:8.5"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:9.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:9.5"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:10.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:san%2fiq:10.5"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:dell:poweredge_2950"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:dl320s"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:lefthand_nsm2060"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:lefthand_nsm2060_g2"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:lefthand_nsm2120_g2"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:lefthand_vsa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:p4000_vsa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:p4300"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:p4300_g2"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:p4500"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:p4500_g2"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:p4900_g2"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:storevirtual_4130"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:storevirtual_4330"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:storevirtual_4530"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:storevirtual_4630"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:storevirtual_4730"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:storevirtual_vsa"/>
          <cpe-lang:fact-ref name="cpe:/h:ibm:x3650"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:san%2fiq:8.0</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:8.1</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:8.5</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:9.0</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:9.5</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:10.0</vuln:product>
      <vuln:product>cpe:/a:hp:san%2fiq:10.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2352</vuln:cve-id>
    <vuln:published-datetime>2013-07-10T18:55:00.953-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:31.707-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.4</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-255"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.theregister.co.uk/2013/07/09/hp_storage_more_possible_backdoors/" xml:lang="en">http://www.theregister.co.uk/2013/07/09/hp_storage_more_possible_backdoors/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03825537" xml:lang="en">SSRT101257</vuln:reference>
    </vuln:references>
    <vuln:summary>LeftHand OS (aka SAN iQ) 10.5 and earlier on HP StoreVirtual Storage devices does not provide a mechanism for disabling the HP Support challenge-response root-login feature, which makes it easier for remote attackers to obtain administrative access by leveraging knowledge of an unused one-time password.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2353">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_d2d:1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_d2d:1.2.17"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_d2d:1.2.18"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_d2d:2.1.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_d2d:2.2.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_d2d:2.2.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_d2d:2.2.13"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_d2d:2.2.14"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_d2d:2.2.16"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_d2d:2.2.17"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storeonce_d2d:1.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_d2d:1.2.17</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_d2d:1.2.18</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_d2d:2.1.01</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_d2d:2.2.00</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_d2d:2.2.10</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_d2d:2.2.13</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_d2d:2.2.14</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_d2d:2.2.16</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_d2d:2.2.17</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2353</vuln:cve-id>
    <vuln:published-datetime>2013-08-28T09:13:42.110-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:32.457-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03828580" xml:lang="en">SSRT101258</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP StoreOnce D2D Backup System 1.x before 1.2.19 and 2.x before 2.3.0 allows remote attackers to cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2355">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2355</vuln:cve-id>
    <vuln:published-datetime>2013-07-22T07:19:36.047-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:32.580-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862" xml:lang="en">SSRT100696</vuln:reference>
    </vuln:references>
    <vuln:summary>HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2012-5217.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2356">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2356</vuln:cve-id>
    <vuln:published-datetime>2013-07-22T07:19:36.073-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:32.673-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862" xml:lang="en">SSRT100835</vuln:reference>
    </vuln:references>
    <vuln:summary>HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2363.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2357">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2357</vuln:cve-id>
    <vuln:published-datetime>2013-07-22T07:19:36.157-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:32.767-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862" xml:lang="en">SSRT100907</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2358, CVE-2013-2359, and CVE-2013-2360.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2358">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2358</vuln:cve-id>
    <vuln:published-datetime>2013-07-22T07:19:36.193-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:32.860-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862" xml:lang="en">SSRT100907</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2359, and CVE-2013-2360.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2359">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2359</vuln:cve-id>
    <vuln:published-datetime>2013-07-22T07:19:36.217-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:32.940-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862" xml:lang="en">SSRT100907</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2358, and CVE-2013-2360.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2360">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2360</vuln:cve-id>
    <vuln:published-datetime>2013-07-22T07:19:36.233-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:33.033-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862" xml:lang="en">SSRT100907</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2358, and CVE-2013-2359.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2361">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2361</vuln:cve-id>
    <vuln:published-datetime>2013-07-22T07:19:36.253-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:33.127-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862" xml:lang="en">SSRT101007</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2362">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2362</vuln:cve-id>
    <vuln:published-datetime>2013-07-22T07:19:36.260-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:33.220-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862" xml:lang="en">SSRT101076</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows local users to cause a denial of service via unknown vectors, aka ZDI-CAN-1676.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2363">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2363</vuln:cve-id>
    <vuln:published-datetime>2013-07-22T07:19:36.267-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:33.317-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862" xml:lang="en">SSRT101150</vuln:reference>
    </vuln:references>
    <vuln:summary>HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2356.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2364">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2364</vuln:cve-id>
    <vuln:published-datetime>2013-07-22T07:19:36.277-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:33.393-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862" xml:lang="en">SSRT101151</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2365">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:database_and_middleware_automation:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:database_and_middleware_automation:10.01"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:database_and_middleware_automation:10.0</vuln:product>
      <vuln:product>cpe:/a:hp:database_and_middleware_automation:10.01</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2365</vuln:cve-id>
    <vuln:published-datetime>2013-07-22T07:19:36.283-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:33.487-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.9</cvss:score>
        <cvss:access-vector>ADJACENT_NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03788014" xml:lang="en">HPSBGN02882</vuln:reference>
    </vuln:references>
    <vuln:summary>HP Database and Middleware Automation (DMA) 10.x before 10.10, when SSL is used, allows remote attackers to obtain sensitive information via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2366">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:ibm:business_process_monitor:9.13.1:patch1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:business_process_monitor:9.22:patch1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ibm:business_process_monitor:9.13.1:patch1</vuln:product>
      <vuln:product>cpe:/a:ibm:business_process_monitor:9.22:patch1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2366</vuln:cve-id>
    <vuln:published-datetime>2013-10-13T06:20:03.317-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:33.597-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03844594" xml:lang="en">SSRT101190</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors, aka ZDI-CAN-1802.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2367">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:sitescope:11.20"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:sitescope:11.21"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:sitescope:11.20</vuln:product>
      <vuln:product>cpe:/a:hp:sitescope:11.21</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2367</vuln:cve-id>
    <vuln:published-datetime>2013-07-31T09:20:18.803-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:33.707-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03861260" xml:lang="en">SSRT101073</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2368">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.50.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.51"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.52"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.50"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.51"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:loadrunner:9.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.50.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.51</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.52</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.0.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.50</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.51</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2368</vuln:cve-id>
    <vuln:published-datetime>2013-07-29T09:59:14.167-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:33.800-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03862772" xml:lang="en">SSRT101081</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to cause a denial of service via unknown vectors, aka ZDI-CAN-1669.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2369">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.50.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.51"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.52"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.50"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.51"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:loadrunner:9.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.50.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.51</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.52</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.0.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.50</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.51</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2369</vuln:cve-id>
    <vuln:published-datetime>2013-07-29T09:59:14.197-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:34.207-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03862772" xml:lang="en">SSRT101082</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1670.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2370">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.50.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.51"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.52"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.50"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.51"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:loadrunner:9.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.50.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.51</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.52</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.0.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.50</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.51</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2370</vuln:cve-id>
    <vuln:published-datetime>2013-07-29T09:59:14.223-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:07:34.330-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03862772" xml:lang="en">SSRT101083</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1671.</vuln:summary>
  </entry>
  <entry id="CVE-2013-2805">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.10.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.10.01"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.20.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.21.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.30.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.40.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.50.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.51.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.60.00"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.10.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.10.01</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.20.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.21.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.30.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.40.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.50.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.51.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.60.00</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2805</vuln:cve-id>
    <vuln:published-datetime>2019-03-26T14:29:00.310-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T07:39:41.173-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-125"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02</vuln:reference>
    </vuln:references>
    <vuln:summary>Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it receives a datagram with an incorrect value in the ?Record Data Size? field. By sending a datagram to the service over Port 4444/UDP with the ?Record Data Size? field modified to an oversized value, an attacker could cause an out-of-bounds read access violation that leads to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to this vulnerability can be found at the following Rockwell Automation Security Advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599</vuln:summary>
  </entry>
  <entry id="CVE-2013-2806">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.10.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.10.01"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.20.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.21.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.30.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.40.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.50.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.51.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.60.00"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.10.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.10.01</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.20.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.21.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.30.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.40.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.50.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.51.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.60.00</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2806</vuln:cve-id>
    <vuln:published-datetime>2019-03-26T13:29:00.247-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T07:39:41.267-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-190"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02</vuln:reference>
    </vuln:references>
    <vuln:summary>Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it calculates an incorrect value for the ?End of Current Record? field. By sending a datagram to the service over Port 4444/UDP with the ?Record Data Size? field modified to a specifically oversized value, the service will calculate an undersized value for the ?Total Record Size.? Then the service will calculate an incorrect value for the ?End of Current Record? field causing access violations that lead to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to these vulnerabilities can be found at the following Rockwell Automation security advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599</vuln:summary>
  </entry>
  <entry id="CVE-2013-2807">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.10.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.10.01"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.20.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.21.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.30.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.40.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.50.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.51.00"/>
        <cpe-lang:fact-ref name="cpe:/a:rockwellautomation:rslinx_enterprise:5.60.00"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.10.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.10.01</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.20.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.21.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.30.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.40.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.50.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.51.00</vuln:product>
      <vuln:product>cpe:/a:rockwellautomation:rslinx_enterprise:5.60.00</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-2807</vuln:cve-id>
    <vuln:published-datetime>2019-03-26T13:29:00.310-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T07:39:41.347-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-125"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02</vuln:reference>
    </vuln:references>
    <vuln:summary>Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it calculates an incorrect value for the ?Total Record Size? field. By sending a datagram to the service over Port 4444/UDP with the ?Record Data Size? field modified to a specifically oversized value, the service will calculate an undersized value for the ?Total Record Size? that will cause an out-of-bounds read access violation that leads to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to these vulnerabilities can be found at the following Rockwell Automation Security Advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599</vuln:summary>
  </entry>
  <entry id="CVE-2013-3703">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.4.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.4.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.4.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.4.2</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.4.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-3703</vuln:cve-id>
    <vuln:published-datetime>2018-06-08T13:29:00.333-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:01.520-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-275"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.suse.com/show_bug.cgi?id=828256" xml:lang="en">https://bugzilla.suse.com/show_bug.cgi?id=828256</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/openSUSE/open-build-service/commit/06ad7fdbdd7eb2fef8947d14c4cdd00d8f6387b1" xml:lang="en">https://github.com/openSUSE/open-build-service/commit/06ad7fdbdd7eb2fef8947d14c4cdd00d8f6387b1</vuln:reference>
    </vuln:references>
    <vuln:summary>The controller of the Open Build Service API prior to version 2.4.4 is missing a write permission check, allowing an authenticated attacker to add or remove user roles from packages and/or project meta data.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4548">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:openbsd:openssh:6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openbsd:openssh:6.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:openbsd:openssh:6.2</vuln:product>
      <vuln:product>cpe:/a:openbsd:openssh:6.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4548</vuln:cve-id>
    <vuln:published-datetime>2013-11-08T10:55:13.747-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:17.520-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00017.html" xml:lang="en">openSUSE-SU-2013:1726</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141576985122836&amp;w=2" xml:lang="en">SSRT101487</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://openwall.com/lists/oss-security/2013/11/08/3" xml:lang="en">[oss-security] 20131107 Re: CVE Request - OpenSSH</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.openssh.com/txt/gcmrekey.adv" xml:lang="en">http://www.openssh.com/txt/gcmrekey.adv</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-2014-1" xml:lang="en">USN-2014-1</vuln:reference>
    </vuln:references>
    <vuln:summary>The mm_newkeys_from_blob function in monitor_wrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is used, does not properly initialize memory for a MAC context data structure, which allows remote authenticated users to bypass intended ForceCommand and login-shell restrictions via packet data that provides a crafted callback address.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4804">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:ibm:business_process_monitor:9.13.1:patch1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:business_process_monitor:9.22:patch1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ibm:business_process_monitor:9.13.1:patch1</vuln:product>
      <vuln:product>cpe:/a:ibm:business_process_monitor:9.22:patch1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4804</vuln:cve-id>
    <vuln:published-datetime>2013-10-13T06:20:04.067-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:22.347-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03844594" xml:lang="en">SSRT101197</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4814">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:xp_9000_command_view:7.0.0::~~advanced~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:xp_9000_command_view:7.1.0::~~advanced~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:xp_9000_command_view:7.1.1::~~advanced~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:xp_9000_command_view:7.2.0::~~advanced~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:xp_9000_command_view:7.3.0::~~advanced~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:xp_9000_command_view:7.3.1::~~advanced~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:xp_9000_command_view:7.4.0::~~advanced~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:xp_9000_command_view:7.4.1::~~advanced~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:xp_9000_command_view:7.5.0::~~advanced~~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:xp_9000_command_view:7.0.0::~~advanced~~~</vuln:product>
      <vuln:product>cpe:/a:hp:xp_9000_command_view:7.1.0::~~advanced~~~</vuln:product>
      <vuln:product>cpe:/a:hp:xp_9000_command_view:7.1.1::~~advanced~~~</vuln:product>
      <vuln:product>cpe:/a:hp:xp_9000_command_view:7.2.0::~~advanced~~~</vuln:product>
      <vuln:product>cpe:/a:hp:xp_9000_command_view:7.3.0::~~advanced~~~</vuln:product>
      <vuln:product>cpe:/a:hp:xp_9000_command_view:7.3.1::~~advanced~~~</vuln:product>
      <vuln:product>cpe:/a:hp:xp_9000_command_view:7.4.0::~~advanced~~~</vuln:product>
      <vuln:product>cpe:/a:hp:xp_9000_command_view:7.4.1::~~advanced~~~</vuln:product>
      <vuln:product>cpe:/a:hp:xp_9000_command_view:7.5.0::~~advanced~~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4814</vuln:cve-id>
    <vuln:published-datetime>2013-09-23T06:18:58.877-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:23.363-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03898171" xml:lang="en">HPSBST02919</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP XP P9000 Command View Advanced Edition Suite Software 7.x before 7.5.0-02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4815">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:microfocus:arcsight_enterprise_security_manager:5.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:microfocus:arcsight_enterprise_security_manager:5.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4815</vuln:cve-id>
    <vuln:published-datetime>2013-09-20T17:55:05.410-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:23.537-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03901176" xml:lang="en">SSRT101101</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in the web interface in HP ArcSight Enterprise Security Manager (ESM) before 5.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4821">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1.104"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2.106"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-109"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-118"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0.121"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2-127"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2.127"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3.132"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4-143"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4.143"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5-146"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6-156"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6.156"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7-168"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7.168"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8-177"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8.179"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9-178"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10-186"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:c"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11-197"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11.197:a"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-118"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-200"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12.201"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14.20"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15-210"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15.210"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0-68"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0.64"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1-73"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1.73"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2-77"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0-95"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0.96"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0-103"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0.102"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.2.2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1.104</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2.106</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-109</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0.121</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2-127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2.127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3.132</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4-143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4.143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5-146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6-156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6.156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7-168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7.168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8-177</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8.179</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9-178</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10-186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:c</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11-197</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11.197:a</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-200</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12.201</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14.20</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15-210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15.210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0-68</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0.64</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1-73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1.73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2-77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0-95</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0.96</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0.102</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.2.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.2.2.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.3.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.3.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4821</vuln:cve-id>
    <vuln:published-datetime>2013-09-23T06:18:59.017-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:23.987-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/895524" xml:lang="en">VU#895524</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862" xml:lang="en">SSRT101254</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4822">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:imc_branch_intelligent_management_system_software_module:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:imc_branch_intelligent_management_system_software_module:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:imc_branch_intelligent_management_system_software_module:5.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h04"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0101p01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:imc_branch_intelligent_management_system_software_module:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:imc_branch_intelligent_management_system_software_module:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:imc_branch_intelligent_management_system_software_module:5.2</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h03</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h04</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l02</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0101p01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4822</vuln:cve-id>
    <vuln:published-datetime>2013-10-13T06:20:04.117-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:25.207-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03943425" xml:lang="en">HPSBGN02929</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka BIMS) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1606.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4823">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101h04"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.0:e0101l02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.1:e0101p01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:5.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:imc_branch_intelligent_management_system_software_module:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:imc_branch_intelligent_management_system_software_module:5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:imc_branch_intelligent_management_system_software_module:5.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:imc_branch_intelligent_management_system_software_module:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:imc_branch_intelligent_management_system_software_module:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:imc_branch_intelligent_management_system_software_module:5.2</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h03</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101h04</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.0:e0101l02</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.1:e0101p01</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:5.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4823</vuln:cve-id>
    <vuln:published-datetime>2013-10-13T06:20:04.130-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:25.347-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03943425" xml:lang="en">HPSBGN02929</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka BIMS) allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1607.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4824">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:imc_service_operation_management_software_module:-"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:imc_service_operation_management_software_module:-</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4824</vuln:cve-id>
    <vuln:published-datetime>2013-10-13T06:20:04.163-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:25.443-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-287"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03943547" xml:lang="en">SSRT101023</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to bypass authentication via unknown vectors, aka ZDI-CAN-1644.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4825">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:imc_service_operation_management_software_module:-"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:imc_service_operation_management_software_module:-</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4825</vuln:cve-id>
    <vuln:published-datetime>2013-10-13T06:20:04.177-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:25.567-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03943547" xml:lang="en">SSRT101028</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to bypass intended access restrictions via unknown vectors, aka ZDI-CAN-1645.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4826">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:imc_service_operation_management_software_module:-"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:imc_service_operation_management_software_module:-</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4826</vuln:cve-id>
    <vuln:published-datetime>2013-10-13T06:20:04.193-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:25.660-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03943547" xml:lang="en">SSRT101024</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1647.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4827">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:imc_service_operation_management_software_module:-"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:imc_service_operation_management_software_module:-</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4827</vuln:cve-id>
    <vuln:published-datetime>2013-10-13T06:20:04.210-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:25.737-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03943547" xml:lang="en">SSRT101031</vuln:reference>
    </vuln:references>
    <vuln:summary>SQL injection vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZDI-CAN-1664.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4828">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_cm4540:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_cm4540f:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_cm4540fskm:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_m575dn:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_m575f:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_m775dn:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_m775f:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_m775z:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_m775z%2b:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_enterprise_color_flow_m575c:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_flow_m525c:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m4555:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m4555f:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m4555fskm:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m4555h:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m525dn:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m525f:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m725dn:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m725f:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m725z:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m725z%2b:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:scanjet_enterprise_8500fn1:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:color_laserjet_cm4540:-</vuln:product>
      <vuln:product>cpe:/h:hp:color_laserjet_cm4540f:-</vuln:product>
      <vuln:product>cpe:/h:hp:color_laserjet_cm4540fskm:-</vuln:product>
      <vuln:product>cpe:/h:hp:color_laserjet_m575dn:-</vuln:product>
      <vuln:product>cpe:/h:hp:color_laserjet_m575f:-</vuln:product>
      <vuln:product>cpe:/h:hp:color_laserjet_m775dn:-</vuln:product>
      <vuln:product>cpe:/h:hp:color_laserjet_m775f:-</vuln:product>
      <vuln:product>cpe:/h:hp:color_laserjet_m775z:-</vuln:product>
      <vuln:product>cpe:/h:hp:color_laserjet_m775z%2b:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_enterprise_color_flow_m575c:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_flow_m525c:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m4555:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m4555f:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m4555fskm:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m4555h:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m525dn:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m525f:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m725dn:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m725f:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m725z:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m725z%2b:-</vuln:product>
      <vuln:product>cpe:/h:hp:scanjet_enterprise_8500fn1:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4828</vuln:cve-id>
    <vuln:published-datetime>2013-10-04T06:44:07.383-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:25.833-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03888014" xml:lang="en">HPSBPI02892</vuln:reference>
    </vuln:references>
    <vuln:summary>HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices do not properly encrypt PDF documents, which allows remote attackers to obtain sensitive information via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4829">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_cm4540:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_cm4540f:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_cm4540fskm:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_m575dn:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_m575f:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_m775dn:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_m775f:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_m775z:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:color_laserjet_m775z%2b:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_enterprise_color_flow_m575c:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_flow_m525c:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m4555:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m4555f:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m4555fskm:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m4555h:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m525dn:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m525f:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m725dn:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m725f:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m725z:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:laserjet_m725z%2b:-"/>
        <cpe-lang:fact-ref name="cpe:/h:hp:scanjet_enterprise_8500fn1:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:color_laserjet_cm4540:-</vuln:product>
      <vuln:product>cpe:/h:hp:color_laserjet_cm4540f:-</vuln:product>
      <vuln:product>cpe:/h:hp:color_laserjet_cm4540fskm:-</vuln:product>
      <vuln:product>cpe:/h:hp:color_laserjet_m575dn:-</vuln:product>
      <vuln:product>cpe:/h:hp:color_laserjet_m575f:-</vuln:product>
      <vuln:product>cpe:/h:hp:color_laserjet_m775dn:-</vuln:product>
      <vuln:product>cpe:/h:hp:color_laserjet_m775f:-</vuln:product>
      <vuln:product>cpe:/h:hp:color_laserjet_m775z:-</vuln:product>
      <vuln:product>cpe:/h:hp:color_laserjet_m775z%2b:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_enterprise_color_flow_m575c:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_flow_m525c:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m4555:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m4555f:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m4555fskm:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m4555h:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m525dn:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m525f:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m725dn:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m725f:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m725z:-</vuln:product>
      <vuln:product>cpe:/h:hp:laserjet_m725z%2b:-</vuln:product>
      <vuln:product>cpe:/h:hp:scanjet_enterprise_8500fn1:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4829</vuln:cve-id>
    <vuln:published-datetime>2013-10-04T06:44:07.400-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:26.020-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>1.5</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03888014" xml:lang="en">SSRT101327</vuln:reference>
    </vuln:references>
    <vuln:summary>HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices allow local users to read images of arbitrary scanned documents via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4830">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.30"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.31"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.32"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:service_manager:9.30</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.31</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.32</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4830</vuln:cve-id>
    <vuln:published-datetime>2013-10-16T06:52:20.197-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:26.160-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03960916" xml:lang="en">HPSBMU02931</vuln:reference>
    </vuln:references>
    <vuln:summary>HP Service Manager 9.30 through 9.32 allows remote attackers to execute arbitrary code via an unspecified "injection" approach.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4831">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.30"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.31"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.32"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:service_manager:9.30</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.31</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.32</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4831</vuln:cve-id>
    <vuln:published-datetime>2013-10-16T06:52:44.700-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:26.253-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03960916" xml:lang="en">SSRT101316</vuln:reference>
    </vuln:references>
    <vuln:summary>HP Service Manager 9.30 through 9.32 does not properly manage privileges, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4832">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.30"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.31"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.32"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:service_manager:9.30</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.31</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.32</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4832</vuln:cve-id>
    <vuln:published-datetime>2013-10-16T06:52:44.730-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:26.333-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03960916" xml:lang="en">SSRT101316</vuln:reference>
    </vuln:references>
    <vuln:summary>HP Service Manager 9.30 through 9.32 allows remote authenticated users to obtain sensitive information via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4833">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.30"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.31"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.32"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:service_manager:9.30</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.31</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.32</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4833</vuln:cve-id>
    <vuln:published-datetime>2013-10-16T06:52:44.760-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:26.427-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03960916" xml:lang="en">HPSBMU02931</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP Service Manager 9.30 through 9.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4834">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:application_lifecycle_management:11.00"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:application_lifecycle_management:11.00</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4834</vuln:cve-id>
    <vuln:published-datetime>2013-11-04T11:55:04.843-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:26.503-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969433" xml:lang="en">SSRT100597</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the client component in HP Application LifeCycle Management (ALM) before 11 p11 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1327.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4836">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:alm_synchronizer:1.10"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:alm_synchronizer:1.20"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:alm_synchronizer:1.30"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:alm_synchronizer:1.40"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:alm_synchronizer:1.41"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:application_lifecycle_management:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:alm_synchronizer:1.10</vuln:product>
      <vuln:product>cpe:/a:hp:alm_synchronizer:1.20</vuln:product>
      <vuln:product>cpe:/a:hp:alm_synchronizer:1.30</vuln:product>
      <vuln:product>cpe:/a:hp:alm_synchronizer:1.40</vuln:product>
      <vuln:product>cpe:/a:hp:alm_synchronizer:1.41</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4836</vuln:cve-id>
    <vuln:published-datetime>2013-11-04T11:55:04.890-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:26.647-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969436" xml:lang="en">SSRT101128</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the GossipService SOAP Request implementation in the Synchronizer component before 1.4.2 in HP Application LifeCycle Management (ALM) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1759.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4837">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.50.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.51"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.52"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.50"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.51"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:loadrunner:9.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.50.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.51</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.52</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.0.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.50</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.51</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4837</vuln:cve-id>
    <vuln:published-datetime>2013-11-04T11:55:04.920-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:26.770-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969437" xml:lang="en">SSRT101191</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4838">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.50.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.51"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.52"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.50"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.51"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:loadrunner:9.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.50.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.51</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.52</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.0.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.50</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.51</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4838</vuln:cve-id>
    <vuln:published-datetime>2013-11-04T11:55:04.950-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:26.847-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969437" xml:lang="en">SSRT101192</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1850.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4839">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.50.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.51"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:9.52"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.50"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.51"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:loadrunner:9.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.50.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.51</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:9.52</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.0.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.50</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.51</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4839</vuln:cve-id>
    <vuln:published-datetime>2013-11-04T11:55:04.983-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:26.943-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969437" xml:lang="en">SSRT101193</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1851.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4840">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:h3c:secbladefw:5.20"/>
          <cpe-lang:fact-ref name="cpe:/a:h3c:secpath1000fe:5.20"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:h3c:f1000-e_vpn_firewall:0235a26g"/>
          <cpe-lang:fact-ref name="cpe:/h:h3c:s5820_secblade_vpn_firewall_module:0231a94j"/>
          <cpe-lang:fact-ref name="cpe:/h:h3c:s7500e_secblade_vpn_firewall_module:0231a832"/>
          <cpe-lang:fact-ref name="cpe:/h:h3c:s9500e_secblade_vpn_firewall_module:0231a0av"/>
          <cpe-lang:fact-ref name="cpe:/h:h3c:sr66_gigabit_firewall_module:0231a88a"/>
          <cpe-lang:fact-ref name="cpe:/h:h3c:sr88_firewall_processing_module:0231a88l"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:secbladefw:5.20"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:secpath1000fe:5.20"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:10500%2f7500_advanced_vpn_firewall_module:jd249a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:12500_vpn_firewall_module:jc635a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:5820_vpn_firewall_module:jd255a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:6600_firewall_processing_rtr_module:jd250a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:8800_firewall_processing_module:jd251a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:9500_vpn_firewall_module:jd245a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:s1000-e_vpn_firewall_appliance:jd272a"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:h3c:secbladefw:5.20</vuln:product>
      <vuln:product>cpe:/a:h3c:secpath1000fe:5.20</vuln:product>
      <vuln:product>cpe:/a:hp:secbladefw:5.20</vuln:product>
      <vuln:product>cpe:/a:hp:secpath1000fe:5.20</vuln:product>
      <vuln:product>cpe:/h:h3c:f1000-e_vpn_firewall:0235a26g</vuln:product>
      <vuln:product>cpe:/h:h3c:s5820_secblade_vpn_firewall_module:0231a94j</vuln:product>
      <vuln:product>cpe:/h:h3c:s7500e_secblade_vpn_firewall_module:0231a832</vuln:product>
      <vuln:product>cpe:/h:h3c:s9500e_secblade_vpn_firewall_module:0231a0av</vuln:product>
      <vuln:product>cpe:/h:h3c:sr66_gigabit_firewall_module:0231a88a</vuln:product>
      <vuln:product>cpe:/h:h3c:sr88_firewall_processing_module:0231a88l</vuln:product>
      <vuln:product>cpe:/h:hp:10500%2f7500_advanced_vpn_firewall_module:jd249a</vuln:product>
      <vuln:product>cpe:/h:hp:12500_vpn_firewall_module:jc635a</vuln:product>
      <vuln:product>cpe:/h:hp:5820_vpn_firewall_module:jd255a</vuln:product>
      <vuln:product>cpe:/h:hp:6600_firewall_processing_rtr_module:jd250a</vuln:product>
      <vuln:product>cpe:/h:hp:8800_firewall_processing_module:jd251a</vuln:product>
      <vuln:product>cpe:/h:hp:9500_vpn_firewall_module:jd245a</vuln:product>
      <vuln:product>cpe:/h:hp:s1000-e_vpn_firewall_appliance:jd272a</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4840</vuln:cve-id>
    <vuln:published-datetime>2014-07-28T13:55:06.950-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:27.037-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03993467" xml:lang="en">SSRT101341</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before 5.20.R3177 and SECBLADEFW before 5.20.R3177 allows remote attackers to cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4841">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:lefthand:8.1"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:lefthand:8.5"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:lefthand:9.0"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:lefthand:9.5"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:lefthand:10"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:lefthand:10.5"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:storevirtual_virtual_storage_appliance:-"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:storevirtual_4000:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storevirtual_virtual_storage_appliance:-</vuln:product>
      <vuln:product>cpe:/h:hp:storevirtual_4000:-</vuln:product>
      <vuln:product>cpe:/o:hp:lefthand:8.1</vuln:product>
      <vuln:product>cpe:/o:hp:lefthand:8.5</vuln:product>
      <vuln:product>cpe:/o:hp:lefthand:9.0</vuln:product>
      <vuln:product>cpe:/o:hp:lefthand:9.5</vuln:product>
      <vuln:product>cpe:/o:hp:lefthand:10</vuln:product>
      <vuln:product>cpe:/o:hp:lefthand:10.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4841</vuln:cve-id>
    <vuln:published-datetime>2014-02-26T09:55:08.363-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:27.270-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03995204" xml:lang="en">HPSBST02937</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in dbd_manager in LeftHand OS before 11.0 in HP StoreVirtual 4000 and StoreVirtual VSA Software (formerly LeftHand Virtual SAN Appliance) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1509.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4842">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_firmware:1.10"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_firmware:1.15"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_firmware:1.15a"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_firmware:1.16a"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_firmware:1.20a"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_firmware:1.26a"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_firmware:1.27a"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:integrated_lights-out:4.0"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:integrated_lights-out:4.0</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_firmware:1.10</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_firmware:1.15</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_firmware:1.15a</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_firmware:1.16a</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_firmware:1.20a</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_firmware:1.26a</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_firmware:1.27a</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4842</vuln:cve-id>
    <vuln:published-datetime>2013-11-17T22:55:05.883-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:27.410-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03996804" xml:lang="en">HPSBHF02939</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware before 1.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4843">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_firmware:1.10"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_firmware:1.15"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_firmware:1.15a"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_firmware:1.16a"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_firmware:1.20a"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_firmware:1.26a"/>
          <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_firmware:1.27a"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:integrated_lights-out:4.0"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:integrated_lights-out:4.0</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_firmware:1.10</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_firmware:1.15</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_firmware:1.15a</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_firmware:1.16a</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_firmware:1.20a</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_firmware:1.26a</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_firmware:1.27a</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4843</vuln:cve-id>
    <vuln:published-datetime>2013-11-17T22:55:05.913-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:27.520-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03996804" xml:lang="en">SSRT101326</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware before 1.32 allows remote authenticated users to obtain sensitive information via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4844">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:7.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.21"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.30"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.31"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.32"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:service_center:6.2.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:service_center:6.2.8</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:7.11</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.21</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.30</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.31</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.32</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4844</vuln:cve-id>
    <vuln:published-datetime>2013-11-28T23:33:29.073-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:27.677-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04026812" xml:lang="en">HPSBGN02942</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, 9.31, and 9.32, and ServiceCenter 6.2.8, allows remote attackers to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4845">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:officejet_pro_8500_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:officejet_pro_8500:cb022a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:officejet_pro_8500:cb023a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:officejet_pro_8500:cb025a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:officejet_pro_8500:cb793a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:officejet_pro_8500:cb794a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:officejet_pro_8500:cb862a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:officejet_pro_8500:cb874a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:officejet_pro_8500:cn539a"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:officejet_pro_8500:cb022a</vuln:product>
      <vuln:product>cpe:/h:hp:officejet_pro_8500:cb023a</vuln:product>
      <vuln:product>cpe:/h:hp:officejet_pro_8500:cb025a</vuln:product>
      <vuln:product>cpe:/h:hp:officejet_pro_8500:cb793a</vuln:product>
      <vuln:product>cpe:/h:hp:officejet_pro_8500:cb794a</vuln:product>
      <vuln:product>cpe:/h:hp:officejet_pro_8500:cb862a</vuln:product>
      <vuln:product>cpe:/h:hp:officejet_pro_8500:cb874a</vuln:product>
      <vuln:product>cpe:/h:hp:officejet_pro_8500:cn539a</vuln:product>
      <vuln:product>cpe:/o:hp:officejet_pro_8500_firmware:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4845</vuln:cve-id>
    <vuln:published-datetime>2013-12-14T17:55:02.973-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:28.130-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04035829" xml:lang="en">SSRT101164</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability on HP Officejet Pro 8500 (aka A909) All-in-One printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-4846">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.1.104"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.0.2.106"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-109"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0-118"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.0.121"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2-127"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.2.127"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.3.132"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4-143"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.4.143"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5-146"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.5.146:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6-156"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.6.156"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7-168"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.7.168"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8-177"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.8.179"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.9-178"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10-186"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.10.186:c"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11-197"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.11.197:a"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-118"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12-200"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.12.201"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.14.20"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15-210"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.1.15.210"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:2.2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0-68"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.0.64"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1-73"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.1.73"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2-77"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:3.0.2.77:b"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0-95"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.0.0.96"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0-103"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.1.0.102"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.2.2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:6.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.1.104</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.0.2.106</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-103%28a%29</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-109</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.0.121</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2-127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.2.127</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.3.132</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4-143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.4.143</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5-146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.5.146:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6-156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.6.156</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7-168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.7.168</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8-177</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.8.179</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.9-178</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10-186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.10.186:c</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11-197</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.11.197:a</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-118</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12-200</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.12.201</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.14.20</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15-210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.1.15.210</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.6</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:2.2.8</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0-68</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.0.64</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1-73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.1.73</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2-77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:3.0.2.77:b</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0-95</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.0.0.96</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0-103</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.1.0.102</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.2.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.2.2.7</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.3.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:6.3.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-4846</vuln:cve-id>
    <vuln:published-datetime>2014-03-14T06:55:05.287-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:28.317-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04039138" xml:lang="en">SSRT101285</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP System Management Homepage (SMH) before 7.3 allows remote attackers to obtain sensitive information via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6188">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6188</vuln:cve-id>
    <vuln:published-datetime>2014-03-14T06:55:05.397-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:52.880-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04039138" xml:lang="en">SSRT101149</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6189">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:application_information_optimizer:6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:application_information_optimizer:6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:application_information_optimizer:6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:application_information_optimizer:7.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:application_information_optimizer:6.2</vuln:product>
      <vuln:product>cpe:/a:hp:application_information_optimizer:6.3</vuln:product>
      <vuln:product>cpe:/a:hp:application_information_optimizer:6.4</vuln:product>
      <vuln:product>cpe:/a:hp:application_information_optimizer:7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6189</vuln:cve-id>
    <vuln:published-datetime>2013-12-28T23:25:57.637-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:53.053-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04041078" xml:lang="en">SSRT101211</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1029542" xml:lang="en">1029542</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the Archive Query Server in HP Application Information Optimizer (formerly HP Database Archiving) 6.2, 6.3, 6.4, and 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1666.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6194">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6194</vuln:cve-id>
    <vuln:published-datetime>2014-01-03T23:51:17.367-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:53.410-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422" xml:lang="en">SSRT101253</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="http://www.exploit-db.com/exploits/31181" xml:lang="en">31181</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1905.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6195">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.20:-:~~~windows_server_2008~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~hp-ux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~redhat_enterprise_linux~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~solaris~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2003~~</vuln:product>
      <vuln:product>cpe:/a:hp:storage_data_protector:6.21:-:~~~windows_server_2008~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6195</vuln:cve-id>
    <vuln:published-datetime>2014-01-03T23:51:17.397-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:53.507-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422" xml:lang="en">SSRT101348</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-2008.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6200">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:hp:hp-ux:b.11.23"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:hp-ux:b.11.31"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:hp:hp-ux:b.11.23</vuln:product>
      <vuln:product>cpe:/o:hp:hp-ux:b.11.31</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6200</vuln:cve-id>
    <vuln:published-datetime>2014-03-11T09:01:04.310-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:53.787-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04103553" xml:lang="en">SSRT101297</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in m4 in HP HP-UX B.11.23 and B.11.31 allows local users to obtain sensitive information or modify data via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6201">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:security_management_system:3.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:security_management_system:3.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:security_management_system:3.6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:security_management_system:3.6.0.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:security_management_system:3.3.0</vuln:product>
      <vuln:product>cpe:/a:hp:security_management_system:3.5.0</vuln:product>
      <vuln:product>cpe:/a:hp:security_management_system:3.6.0</vuln:product>
      <vuln:product>cpe:/a:hp:security_management_system:3.6.0.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6201</vuln:cve-id>
    <vuln:published-datetime>2014-03-06T06:55:04.973-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:53.880-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04156626" xml:lang="en">SSRT101434</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Security Management System 3.3.0, 3.5.0 before patch 1, and 3.6.0 before patch 2 allows remote attackers to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6202">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.30"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.31"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.32"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:service_manager:9.33"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:service_manager:9.30</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.31</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.32</vuln:product>
      <vuln:product>cpe:/a:hp:service_manager:9.33</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6202</vuln:cve-id>
    <vuln:published-datetime>2014-02-23T23:48:09.850-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:53.973-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04117626" xml:lang="en">SSRT101437</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1029803" xml:lang="en">1029803</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple cross-site request forgery (CSRF) vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that (1) insert XSS sequences or (2) execute arbitrary code.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6203">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:application_information_optimizer:6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:application_information_optimizer:6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:application_information_optimizer:6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:application_information_optimizer:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:application_information_optimizer:7.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:application_information_optimizer:6.2</vuln:product>
      <vuln:product>cpe:/a:hp:application_information_optimizer:6.3</vuln:product>
      <vuln:product>cpe:/a:hp:application_information_optimizer:6.4</vuln:product>
      <vuln:product>cpe:/a:hp:application_information_optimizer:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:application_information_optimizer:7.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6203</vuln:cve-id>
    <vuln:published-datetime>2014-02-26T09:55:08.380-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:54.053-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04140965" xml:lang="en">SSRT101299</vuln:reference>
    </vuln:references>
    <vuln:summary>The Web Console in HP Application Information Optimizer (formerly HP Database Archiving) 6.2, 6.3, 6.4, 7.0, and 7.1 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, aka ZDI-CAN-1656.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6204">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:application_information_optimizer:6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:application_information_optimizer:6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:application_information_optimizer:6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:application_information_optimizer:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:application_information_optimizer:7.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:application_information_optimizer:6.2</vuln:product>
      <vuln:product>cpe:/a:hp:application_information_optimizer:6.3</vuln:product>
      <vuln:product>cpe:/a:hp:application_information_optimizer:6.4</vuln:product>
      <vuln:product>cpe:/a:hp:application_information_optimizer:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:application_information_optimizer:7.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6204</vuln:cve-id>
    <vuln:published-datetime>2014-02-26T09:55:08.397-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:54.147-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04140965" xml:lang="en">SSRT101349</vuln:reference>
    </vuln:references>
    <vuln:summary>The Web Console in HP Application Information Optimizer (formerly HP Database Archiving) 6.2, 6.3, 6.4, 7.0, and 7.1 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, aka ZDI-CAN-2004.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6205">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_control_server_deployment:-"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:rapid_deployment_pack:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:insight_control_server_deployment:-</vuln:product>
      <vuln:product>cpe:/a:hp:rapid_deployment_pack:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6205</vuln:cve-id>
    <vuln:published-datetime>2014-03-14T06:55:05.410-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:54.223-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.1</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04135307" xml:lang="en">SSRT101443</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Rapid Deployment Pack (RDP) and Insight Control Server Deployment allows local users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6206">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_control_server_deployment:-"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:rapid_deployment_pack:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:insight_control_server_deployment:-</vuln:product>
      <vuln:product>cpe:/a:hp:rapid_deployment_pack:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6206</vuln:cve-id>
    <vuln:published-datetime>2014-03-14T06:55:05.443-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:54.317-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04135307" xml:lang="en">SSRT101443</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Rapid Deployment Pack (RDP) and Insight Control Server Deployment allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6208">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:smart_update_manager:5.3.5"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:smart_update_manager:5.3.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6208</vuln:cve-id>
    <vuln:published-datetime>2014-03-16T10:06:44.880-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:54.473-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04000397" xml:lang="en">SSRT101366</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Smart Update Manager 5.3.5 before build 70 on Linux allows local users to gain privileges via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6209">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:hp:hp-ux:b.11.11"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:hp-ux:b.11.23"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:hp:hp-ux:b.11.11</vuln:product>
      <vuln:product>cpe:/o:hp:hp-ux:b.11.23</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6209</vuln:cve-id>
    <vuln:published-datetime>2014-03-14T06:55:05.490-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:54.583-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04174142" xml:lang="en">HPSBUX02976</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in rpc.lockd in the NFS subsystem in HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6210">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:unified_functional_testing:11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:unified_functional_testing:11.5"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:unified_functional_testing:11.0</vuln:product>
      <vuln:product>cpe:/a:hp:unified_functional_testing:11.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6210</vuln:cve-id>
    <vuln:published-datetime>2014-03-16T10:06:45.023-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:54.677-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04122007" xml:lang="en">HPSBMU02967</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Unified Functional Testing before 12.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1932.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6211">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_2610_iscsi_backup_system:3.6.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_2620_iscsi_backup_system:3.6.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_4210_fc_backup_system:3.6.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_4210_iscsi_backup_system:3.6.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_4220_backup_system:3.6.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_4420_backup_system:3.6.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_4430_backup_system:3.6.5"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:storeonce_virtual_storage_appliance:3.7.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:storeonce_2610_iscsi_backup_system:3.6.5</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_2620_iscsi_backup_system:3.6.5</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_4210_fc_backup_system:3.6.5</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_4210_iscsi_backup_system:3.6.5</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_4220_backup_system:3.6.5</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_4420_backup_system:3.6.5</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_4430_backup_system:3.6.5</vuln:product>
      <vuln:product>cpe:/a:hp:storeonce_virtual_storage_appliance:3.7.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6211</vuln:cve-id>
    <vuln:published-datetime>2014-03-28T21:55:06.997-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:54.787-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04126368" xml:lang="en">HPSBST02968</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP StoreOnce Virtual Storage Appliance (VSA) before 3.7.2, StoreOnce 26xx and 4210 iSCSI Backup System before 3.9.0, StoreOnce 4210 FC Backup System before 3.9.0, and StoreOnce 4xxx Backup System before 3.9.0 allows remote attackers to obtain sensitive information or cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6212">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:database_and_middleware_automation:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:database_and_middleware_automation:10.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:database_and_middleware_automation:10.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:database_and_middleware_automation:10.20"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:database_and_middleware_automation:10.0</vuln:product>
      <vuln:product>cpe:/a:hp:database_and_middleware_automation:10.01</vuln:product>
      <vuln:product>cpe:/a:hp:database_and_middleware_automation:10.10</vuln:product>
      <vuln:product>cpe:/a:hp:database_and_middleware_automation:10.20</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6212</vuln:cve-id>
    <vuln:published-datetime>2014-04-19T17:55:06.307-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:54.943-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04201408" xml:lang="en">SSRT101475</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Database and Middleware Automation 10.0, 10.01, 10.10, and 10.20 before 10.20.100 allows remote authenticated users to obtain sensitive information via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6213">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.0.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.50"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.51"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.52"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:loadrunner:11.0.0.0</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.50</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.51</vuln:product>
      <vuln:product>cpe:/a:hp:loadrunner:11.52</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6213</vuln:cve-id>
    <vuln:published-datetime>2014-04-19T00:49:24.740-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:55.083-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969437" xml:lang="en">SSRT101357</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 Patch 1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1833.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6214">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:universal_configuration_management_database:9.05"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:universal_configuration_management_database:10.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:universal_configuration_management_database:10.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:universal_configuration_management_database:9.05</vuln:product>
      <vuln:product>cpe:/a:hp:universal_configuration_management_database:10.01</vuln:product>
      <vuln:product>cpe:/a:hp:universal_configuration_management_database:10.10</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6214</vuln:cve-id>
    <vuln:published-datetime>2014-04-19T00:49:24.770-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:55.177-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04220407" xml:lang="en">SSRT101373</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 9.05, 10.01, and 10.10 allows remote authenticated users to obtain sensitive information via unknown vectors, aka ZDI-CAN-2042.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6215">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:universal_configuration_management_database:10.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:universal_configuration_management_database:10.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:universal_configuration_management_database:10.01</vuln:product>
      <vuln:product>cpe:/a:hp:universal_configuration_management_database:10.10</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6215</vuln:cve-id>
    <vuln:published-datetime>2014-04-19T17:55:06.387-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:55.270-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>8.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04219959" xml:lang="en">SSRT101372</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 10.01 and 10.10 allows remote authenticated users to execute arbitrary code via unknown vectors, aka ZDI-CAN-1977.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6216">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:array_configuration_utility:9.40"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:array_diagnostics_utility:9.40"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:proliant_array_diagnostics:9.40"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:smartssd_wear_gauge_utility:9.40"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:array_configuration_utility:9.40</vuln:product>
      <vuln:product>cpe:/a:hp:array_diagnostics_utility:9.40</vuln:product>
      <vuln:product>cpe:/a:hp:proliant_array_diagnostics:9.40</vuln:product>
      <vuln:product>cpe:/a:hp:smartssd_wear_gauge_utility:9.40</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6216</vuln:cve-id>
    <vuln:published-datetime>2014-04-12T00:37:31.237-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:55.350-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04187357" xml:lang="en">SSRT101452</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Array Configuration Utility, Array Diagnostics Utility, ProLiant Array Diagnostics, and SmartSSD Wear Gauge Utility 9.40 and earlier allows local users to gain privileges via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6218">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.02"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.03"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.20"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.0</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.01</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.02</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.03</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.10</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.20</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6218</vuln:cve-id>
    <vuln:published-datetime>2014-04-19T17:55:06.430-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:55.490-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04026039" xml:lang="en">SSRT101374</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6219">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:hp-ux_whitelisting:a.01.02"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:hp-ux:b.11.31"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:hp-ux_whitelisting:a.01.02</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6219</vuln:cve-id>
    <vuln:published-datetime>2014-04-19T17:55:06.493-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:55.600-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.8</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>HIGH</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04227671" xml:lang="en">SSRT101382</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP HP-UX Whitelisting (aka WLI) before A.01.02.02 on HP-UX B.11.31 allows local users to bypass intended access restrictions via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2013-6220">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_node_manager_i:9.20"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.0</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.10</vuln:product>
      <vuln:product>cpe:/a:hp:network_node_manager_i:9.20</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2013-6220</vuln:cve-id>
    <vuln:published-datetime>2014-05-09T21:55:05.843-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:08:55.707-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030218" xml:lang="en">1030218</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04273695" xml:lang="en">SSRT101479</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0, 9.10, and 9.20 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0160">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1a"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1b"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1c"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1d"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1e"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1f"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.2:beta1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1:beta1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1:beta2</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1:beta3</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1a</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1b</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1c</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1d</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1e</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1f</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.2:beta1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0160</vuln:cve-id>
    <vuln:published-datetime>2014-04-07T18:55:03.893-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:09:21.837-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://advisories.mageia.org/MGASA-2014-0165.html" xml:lang="en">http://advisories.mageia.org/MGASA-2014-0165.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/" xml:lang="en">http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://cogentdatahub.com/ReleaseNotes.html" xml:lang="en">http://cogentdatahub.com/ReleaseNotes.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01" xml:lang="en">http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=96db9023b881d7cd9f379b0c154650d6c108e9a3" xml:lang="en">http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=96db9023b881d7cd9f379b0c154650d6c108e9a3</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://heartbleed.com/" xml:lang="en">http://heartbleed.com/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html" xml:lang="en">FEDORA-2014-4879</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html" xml:lang="en">FEDORA-2014-4910</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html" xml:lang="en">FEDORA-2014-9308</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html" xml:lang="en">openSUSE-SU-2014:0492</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html" xml:lang="en">SUSE-SA:2014:002</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html" xml:lang="en">openSUSE-SU-2014:0560</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139722163017074&amp;w=2" xml:lang="en">HPSBMU02995</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139757726426985&amp;w=2" xml:lang="en">HPSBMU02994</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139757819327350&amp;w=2" xml:lang="en">HPSBMU02998</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139757919027752&amp;w=2" xml:lang="en">HPSBMU02997</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139758572430452&amp;w=2" xml:lang="en">HPSBST03001</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139765756720506&amp;w=2" xml:lang="en">HPSBMU02999</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139774054614965&amp;w=2" xml:lang="en">HPSBGN03008</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139774703817488&amp;w=2" xml:lang="en">HPSBGN03010</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139808058921905&amp;w=2" xml:lang="en">HPSBMU03012</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139817685517037&amp;w=2" xml:lang="en">HPSBMU03019</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139817727317190&amp;w=2" xml:lang="en">HPSBMU03017</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139817782017443&amp;w=2" xml:lang="en">HPSBMU03018</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139824923705461&amp;w=2" xml:lang="en">HPSBST03015</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139824993005633&amp;w=2" xml:lang="en">HPSBMU03013</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139833395230364&amp;w=2" xml:lang="en">HPSBGN03011</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139835815211508&amp;w=2" xml:lang="en">HPSBHF03021</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139835844111589&amp;w=2" xml:lang="en">HPSBPI03014</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139836085512508&amp;w=2" xml:lang="en">HPSBMU03020</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139842151128341&amp;w=2" xml:lang="en">HPSBST03016</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139843768401936&amp;w=2" xml:lang="en">HPSBMU03023</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139869720529462&amp;w=2" xml:lang="en">HPSBMU03025</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139869891830365&amp;w=2" xml:lang="en">HPSBMU03022</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139889113431619&amp;w=2" xml:lang="en">HPSBMU03024</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139889295732144&amp;w=2" xml:lang="en">HPSBPI03031</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139905202427693&amp;w=2" xml:lang="en">HPSBMU03029</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139905243827825&amp;w=2" xml:lang="en">HPSBMU03028</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139905295427946&amp;w=2" xml:lang="en">HPSBMU03033</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139905351928096&amp;w=2" xml:lang="en">HPSBMU03030</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139905405728262&amp;w=2" xml:lang="en">HPSBMU03032</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139905458328378&amp;w=2" xml:lang="en">HPSBMU03009</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139905653828999&amp;w=2" xml:lang="en">HPSBST03004</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=139905868529690&amp;w=2" xml:lang="en">HPSBST03027</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140015787404650&amp;w=2" xml:lang="en">HPSBMU03040</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140075368411126&amp;w=2" xml:lang="en">HPSBMU03044</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140724451518351&amp;w=2" xml:lang="en">HPSBMU03037</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140752315422991&amp;w=2" xml:lang="en">HPSBMU03062</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141287864628122&amp;w=2" xml:lang="en">HPSBHF03136</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142660345230545&amp;w=2" xml:lang="en">SSRT101846</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1" xml:lang="en">http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3" xml:lang="en">http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-0376.html" xml:lang="en">RHSA-2014:0376</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-0377.html" xml:lang="en">RHSA-2014:0377</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-0378.html" xml:lang="en">RHSA-2014:0378</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-0396.html" xml:lang="en">RHSA-2014:0396</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/109" xml:lang="en">20140409 Re: heartbleed OpenSSL bug CVE-2014-0160</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/173" xml:lang="en">20140411 MRI Rubies may contain statically linked, vulnerable OpenSSL</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/190" xml:lang="en">20140412 Re: heartbleed OpenSSL bug CVE-2014-0160</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/90" xml:lang="en">20140408 heartbleed OpenSSL bug CVE-2014-0160</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Apr/91" xml:lang="en">20140408 Re: heartbleed OpenSSL bug CVE-2014-0160</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Dec/23" xml:lang="en">20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59139" xml:lang="en">59139</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59243" xml:lang="en">59243</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59347" xml:lang="en">59347</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.citrix.com/article/CTX140605" xml:lang="en">http://support.citrix.com/article/CTX140605</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed" xml:lang="en">20140409 OpenSSL Heartbeat Extension Vulnerability in Multiple Cisco Products</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf" xml:lang="en">http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.blackberry.com/btsc/KB35882" xml:lang="en">http://www.blackberry.com/btsc/KB35882</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2014/dsa-2896" xml:lang="en">DSA-2896</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="http://www.exploit-db.com/exploits/32745" xml:lang="en">32745</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="http://www.exploit-db.com/exploits/32764" xml:lang="en">32764</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.f-secure.com/en/web/labs_global/fsc-2014-1" xml:lang="en">http://www.f-secure.com/en/web/labs_global/fsc-2014-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/" xml:lang="en">http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/" xml:lang="en">http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/" xml:lang="en">http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/" xml:lang="en">http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf" xml:lang="en">http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/720951" xml:lang="en">VU#720951</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.kerio.com/support/kerio-control/release-history" xml:lang="en">http://www.kerio.com/support/kerio-control/release-history</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2015:062" xml:lang="en">MDVSA-2015:062</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.openssl.org/news/secadv_20140407.txt" xml:lang="en">http://www.openssl.org/news/secadv_20140407.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/534161/100/0/threaded" xml:lang="en">20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/66690" xml:lang="en">66690</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030026" xml:lang="en">1030026</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030074" xml:lang="en">1030074</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030077" xml:lang="en">1030077</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030078" xml:lang="en">1030078</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030079" xml:lang="en">1030079</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030080" xml:lang="en">1030080</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030081" xml:lang="en">1030081</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030082" xml:lang="en">1030082</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.splunk.com/view/SP-CAAAMB3" xml:lang="en">http://www.splunk.com/view/SP-CAAAMB3</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=&amp;suid=20160512_00" xml:lang="en">http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=&amp;suid=20160512_00</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-2165-1" xml:lang="en">USN-2165-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/ncas/alerts/TA14-098A" xml:lang="en">TA14-098A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.vmware.com/security/advisories/VMSA-2014-0012.html" xml:lang="en">http://www.vmware.com/security/advisories/VMSA-2014-0012.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0" xml:lang="en">http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=isg400001841" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=isg400001841</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=isg400001843" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=isg400001843</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21670161" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21670161</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://blog.torproject.org/blog/openssl-bug-cve-2014-0160" xml:lang="en">https://blog.torproject.org/blog/openssl-bug-cve-2014-0160</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1084875" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1084875</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://code.google.com/p/mod-spdy/issues/detail?id=85" xml:lang="en">https://code.google.com/p/mod-spdy/issues/detail?id=85</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://filezilla-project.org/versions.php?type=server" xml:lang="en">https://filezilla-project.org/versions.php?type=server</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://gist.github.com/chapmajs/10473815" xml:lang="en">https://gist.github.com/chapmajs/10473815</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&amp;spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&amp;javax.portlet.begCacheTok=com.vignette.cachetoken&amp;javax.portlet.endCacheTok=com.vignette.cachetoken" xml:lang="en">HPSBST03000</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d@%3Cdev.tomcat.apache.org%3E" xml:lang="en">[tomcat-dev] 20190319 svn commit: r1855831 [26/30] - in /tomcat/site/trunk: ./ docs/ xdocs/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2@%3Cdev.tomcat.apache.org%3E" xml:lang="en">[tomcat-dev] 20190325 svn commit: r1856174 [26/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html" xml:lang="en">[syslog-ng-announce] 20140411 syslog-ng Premium Edition 5 LTS (5.0.4a) has been released</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html" xml:lang="en">https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217" xml:lang="en">https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.cert.fi/en/reports/2014/vulnerability788210.html" xml:lang="en">https://www.cert.fi/en/reports/2014/vulnerability788210.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008" xml:lang="en">https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008</vuln:reference>
    </vuln:references>
    <vuln:summary>The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0224">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0a"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0b"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0c"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0d"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0e"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0f"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0g"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0h"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0i"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0j"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0k"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0l"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:redhat:jboss_enterprise_application_platform:5.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:redhat:jboss_enterprise_application_platform:6.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:redhat:jboss_enterprise_web_platform:5.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:redhat:jboss_enterprise_web_server:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:redhat:storage:2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:fedoraproject:fedora"/>
        <cpe-lang:fact-ref name="cpe:/o:opensuse:opensuse:13.1"/>
        <cpe-lang:fact-ref name="cpe:/o:opensuse:opensuse:13.2"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux:4"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux:5"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux:6.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8y"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1a"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1b"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1c"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1d"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1e"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1f"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1g"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8y</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0:beta1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0:beta2</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0:beta3</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0:beta4</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0:beta5</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0a</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0b</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0c</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0d</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0e</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0f</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0g</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0h</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0i</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0j</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0k</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0l</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1:beta1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1:beta2</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1:beta3</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1a</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1b</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1c</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1d</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1e</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1f</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1g</vuln:product>
      <vuln:product>cpe:/a:redhat:jboss_enterprise_application_platform:5.2.0</vuln:product>
      <vuln:product>cpe:/a:redhat:jboss_enterprise_application_platform:6.2.3</vuln:product>
      <vuln:product>cpe:/a:redhat:jboss_enterprise_web_platform:5.2.0</vuln:product>
      <vuln:product>cpe:/a:redhat:jboss_enterprise_web_server:2.0.1</vuln:product>
      <vuln:product>cpe:/a:redhat:storage:2.1</vuln:product>
      <vuln:product>cpe:/o:fedoraproject:fedora</vuln:product>
      <vuln:product>cpe:/o:opensuse:opensuse:13.1</vuln:product>
      <vuln:product>cpe:/o:opensuse:opensuse:13.2</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux:4</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux:5</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux:6.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0224</vuln:cve-id>
    <vuln:published-datetime>2014-06-05T17:55:07.817-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:09:24.477-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc" xml:lang="en">http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://ccsinjection.lepidum.co.jp" xml:lang="en">http://ccsinjection.lepidum.co.jp</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://dev.mysql.com/doc/relnotes/workbench/en/wb-news-6-1-7.html" xml:lang="en">http://dev.mysql.com/doc/relnotes/workbench/en/wb-news-6-1-7.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://esupport.trendmicro.com/solution/en-US/1103813.aspx" xml:lang="en">http://esupport.trendmicro.com/solution/en-US/1103813.aspx</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10629" xml:lang="en">http://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10629</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://kb.juniper.net/InfoCenter/index?page=content&amp;id=KB29195" xml:lang="en">http://kb.juniper.net/InfoCenter/index?page=content&amp;id=KB29195</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://kb.juniper.net/InfoCenter/index?page=content&amp;id=KB29217" xml:lang="en">http://kb.juniper.net/InfoCenter/index?page=content&amp;id=KB29217</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://linux.oracle.com/errata/ELSA-2014-1053.html" xml:lang="en">http://linux.oracle.com/errata/ELSA-2014-1053.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html" xml:lang="en">FEDORA-2014-9301</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html" xml:lang="en">FEDORA-2014-9308</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html" xml:lang="en">SUSE-SU-2015:0578</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html" xml:lang="en">SUSE-SU-2015:0743</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" xml:lang="en">openSUSE-SU-2016:0640</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html" xml:lang="en">openSUSE-SU-2015:0229</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140266410314613&amp;w=2" xml:lang="en">HPSBUX03046</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140317760000786&amp;w=2" xml:lang="en">HPSBOV03047</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140369637402535&amp;w=2" xml:lang="en">HPSBMU03053</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140386311427810&amp;w=2" xml:lang="en">HPSBMU03058</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140389274407904&amp;w=2" xml:lang="en">HPSBMU03057</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140389355508263&amp;w=2" xml:lang="en">HPSBMU03056</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140431828824371&amp;w=2" xml:lang="en">HPSBMU03055</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140448122410568&amp;w=2" xml:lang="en">HPSBMU03051</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140482916501310&amp;w=2" xml:lang="en">HPSBGN03050</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140491231331543&amp;w=2" xml:lang="en">HPSBMU03065</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140499864129699&amp;w=2" xml:lang="en">HPSBMU03070</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140544599631400&amp;w=2" xml:lang="en">HPSBGN03068</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140604261522465&amp;w=2" xml:lang="en">HPSBMU03071</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140621259019789&amp;w=2" xml:lang="en">HPSBMU03074</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140672208601650&amp;w=2" xml:lang="en">HPSBMU03078</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140752315422991&amp;w=2" xml:lang="en">HPSBMU03062</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140784085708882&amp;w=2" xml:lang="en">HPSBMU03089</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140794476212181&amp;w=2" xml:lang="en">HPSBHF03088</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140852757108392&amp;w=2" xml:lang="en">HPSBMU03094</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140852826008699&amp;w=2" xml:lang="en">HPSBMU03101</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140870499402361&amp;w=2" xml:lang="en">HPSBST03098</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140904544427729&amp;w=2" xml:lang="en">HPSBMU03076</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=140983229106599&amp;w=2" xml:lang="en">HPSBMU03083</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141025641601169&amp;w=2" xml:lang="en">HPSBST03106</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141147110427269&amp;w=2" xml:lang="en">HPSBPI03107</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141164638606214&amp;w=2" xml:lang="en">HPSBST03103</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141383410222440&amp;w=2" xml:lang="en">HPSBST03097</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141383465822787&amp;w=2" xml:lang="en">HPSBHF03145</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141658880509699&amp;w=2" xml:lang="en">HPSBHF03052</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142350350616251&amp;w=2" xml:lang="en">SSRT101818</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142546741516006&amp;w=2" xml:lang="en">HPSBST03265</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142805027510172&amp;w=2" xml:lang="en">HPSBST03195</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://puppetlabs.com/security/cve/cve-2014-0224" xml:lang="en">http://puppetlabs.com/security/cve/cve-2014-0224</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-0624.html" xml:lang="en">RHSA-2014:0624</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-0626.html" xml:lang="en">RHSA-2014:0626</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-0627.html" xml:lang="en">RHSA-2014:0627</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-0630.html" xml:lang="en">RHSA-2014:0630</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-0631.html" xml:lang="en">RHSA-2014:0631</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-0632.html" xml:lang="en">RHSA-2014:0632</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-0633.html" xml:lang="en">RHSA-2014:0633</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-0680.html" xml:lang="en">RHSA-2014:0680</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Dec/23" xml:lang="en">20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Jun/38" xml:lang="en">20140607 Re: More OpenSSL issues</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58337" xml:lang="en">58337</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58433" xml:lang="en">58433</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58492" xml:lang="en">58492</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58615" xml:lang="en">58615</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58660" xml:lang="en">58660</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58667" xml:lang="en">58667</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58713" xml:lang="en">58713</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58714" xml:lang="en">58714</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58716" xml:lang="en">58716</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58719" xml:lang="en">58719</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58742" xml:lang="en">58742</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58945" xml:lang="en">58945</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/58977" xml:lang="en">58977</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59004" xml:lang="en">59004</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59040" xml:lang="en">59040</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59093" xml:lang="en">59093</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59101" xml:lang="en">59101</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59132" xml:lang="en">59132</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59135" xml:lang="en">59135</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59142" xml:lang="en">59142</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59163" xml:lang="en">59163</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59167" xml:lang="en">59167</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59175" xml:lang="en">59175</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59186" xml:lang="en">59186</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59188" xml:lang="en">59188</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59189" xml:lang="en">59189</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59190" xml:lang="en">59190</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59192" xml:lang="en">59192</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59202" xml:lang="en">59202</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59211" xml:lang="en">59211</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59214" xml:lang="en">59214</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59215" xml:lang="en">59215</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59223" xml:lang="en">59223</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59231" xml:lang="en">59231</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59264" xml:lang="en">59264</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59282" xml:lang="en">59282</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59284" xml:lang="en">59284</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59287" xml:lang="en">59287</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59305" xml:lang="en">59305</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59306" xml:lang="en">59306</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59310" xml:lang="en">59310</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59338" xml:lang="en">59338</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59347" xml:lang="en">59347</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59362" xml:lang="en">59362</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59364" xml:lang="en">59364</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59365" xml:lang="en">59365</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59368" xml:lang="en">59368</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59374" xml:lang="en">59374</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59375" xml:lang="en">59375</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59380" xml:lang="en">59380</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59389" xml:lang="en">59389</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59429" xml:lang="en">59429</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59435" xml:lang="en">59435</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59437" xml:lang="en">59437</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59440" xml:lang="en">59440</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59441" xml:lang="en">59441</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59444" xml:lang="en">59444</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59445" xml:lang="en">59445</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59446" xml:lang="en">59446</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59447" xml:lang="en">59447</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59448" xml:lang="en">59448</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59449" xml:lang="en">59449</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59454" xml:lang="en">59454</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59460" xml:lang="en">59460</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59483" xml:lang="en">59483</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59502" xml:lang="en">59502</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59518" xml:lang="en">59518</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59525" xml:lang="en">59525</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59529" xml:lang="en">59529</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59661" xml:lang="en">59661</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59677" xml:lang="en">59677</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/61254" xml:lang="en">61254</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="http://security.gentoo.org/glsa/glsa-201407-05.xml" xml:lang="en">GLSA-201407-05</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT6443" xml:lang="en">http://support.apple.com/kb/HT6443</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.citrix.com/article/CTX140876" xml:lang="en">http://support.citrix.com/article/CTX140876</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15325.html" xml:lang="en">http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15325.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl" xml:lang="en">20140605 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.blackberry.com/btsc/KB36051" xml:lang="en">http://www.blackberry.com/btsc/KB36051</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.fortiguard.com/advisory/FG-IR-14-018/" xml:lang="en">http://www.fortiguard.com/advisory/FG-IR-14-018/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.f-secure.com/en/web/labs_global/fsc-2014-6" xml:lang="en">http://www.f-secure.com/en/web/labs_global/fsc-2014-6</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm" xml:lang="en">http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.ibm.com/support/docview.wss?uid=isg3T1020948" xml:lang="en">http://www.ibm.com/support/docview.wss?uid=isg3T1020948</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.ibm.com/support/docview.wss?uid=ssg1S1004678" xml:lang="en">http://www.ibm.com/support/docview.wss?uid=ssg1S1004678</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>AIXAPAR</vuln:source>
      <vuln:reference href="http://www.ibm.com/support/docview.wss?uid=swg1IT02314" xml:lang="en">IT02314</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.ibm.com/support/docview.wss?uid=swg21676356" xml:lang="en">http://www.ibm.com/support/docview.wss?uid=swg21676356</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.ibm.com/support/docview.wss?uid=swg21676793" xml:lang="en">http://www.ibm.com/support/docview.wss?uid=swg21676793</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.ibm.com/support/docview.wss?uid=swg21676877" xml:lang="en">http://www.ibm.com/support/docview.wss?uid=swg21676877</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.ibm.com/support/docview.wss?uid=swg24037783" xml:lang="en">http://www.ibm.com/support/docview.wss?uid=swg24037783</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf" xml:lang="en">http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/978508" xml:lang="en">VU#978508</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.kerio.com/support/kerio-control/release-history" xml:lang="en">http://www.kerio.com/support/kerio-control/release-history</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2014:105" xml:lang="en">MDVSA-2014:105</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2014:106" xml:lang="en">MDVSA-2014:106</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2015:062" xml:lang="en">MDVSA-2015:062</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.novell.com/support/kb/doc.php?id=7015264" xml:lang="en">http://www.novell.com/support/kb/doc.php?id=7015264</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.novell.com/support/kb/doc.php?id=7015300" xml:lang="en">http://www.novell.com/support/kb/doc.php?id=7015300</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.openssl.org/news/secadv_20140605.txt" xml:lang="en">http://www.openssl.org/news/secadv_20140605.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html" xml:lang="en">http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html" xml:lang="en">http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html" xml:lang="en">http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html" xml:lang="en">http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/534161/100/0/threaded" xml:lang="en">20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031032" xml:lang="en">1031032</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031594" xml:lang="en">1031594</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.splunk.com/view/SP-CAAAM2D" xml:lang="en">http://www.splunk.com/view/SP-CAAAM2D</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.tenable.com/blog/nessus-527-and-pvs-403-are-available-for-download" xml:lang="en">http://www.tenable.com/blog/nessus-527-and-pvs-403-are-available-for-download</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.vmware.com/security/advisories/VMSA-2014-0006.html" xml:lang="en">http://www.vmware.com/security/advisories/VMSA-2014-0006.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.vmware.com/security/advisories/VMSA-2014-0012.html" xml:lang="en">http://www.vmware.com/security/advisories/VMSA-2014-0012.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0" xml:lang="en">http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=isg400001841" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=isg400001841</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=isg400001843" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=isg400001843</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=nas8N1020172" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=nas8N1020172</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004690" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004690</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>AIXAPAR</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg1IV61506" xml:lang="en">IV61506</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21673137" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21673137</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21675626" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21675626</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21675821" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21675821</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676035" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676035</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676062" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676062</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676071" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676071</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676333" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676333</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676334" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676334</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676419" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676419</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676478" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676478</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676496" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676496</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676501" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676501</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676529" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676529</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676536" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676536</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676615" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676615</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676644" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676644</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676655" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676655</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676786" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676786</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676833" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676833</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676845" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676845</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676879" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676879</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21676889" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21676889</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21677080" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21677080</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21677131" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21677131</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21677390" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21677390</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21677527" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21677527</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21677567" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21677567</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21677695" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21677695</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21677828" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21677828</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21677836" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21677836</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21678167" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21678167</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21678233" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21678233</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21678289" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21678289</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21683332" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21683332</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg24037727" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg24037727</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg24037729" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg24037729</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg24037730" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg24037730</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg24037731" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg24037731</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg24037732" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg24037732</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg24037761" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg24037761</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg24037870" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg24037870</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&amp;ID=6060&amp;myns=phmc&amp;mync=E" xml:lang="en">http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&amp;ID=6060&amp;myns=phmc&amp;mync=E</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&amp;ID=6061&amp;myns=phmc&amp;mync=E" xml:lang="en">http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&amp;ID=6061&amp;myns=phmc&amp;mync=E</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095737" xml:lang="en">http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095737</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095740" xml:lang="en">http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095740</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754" xml:lang="en">http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755" xml:lang="en">http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756" xml:lang="en">http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757" xml:lang="en">http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://access.redhat.com/site/blogs/766093/posts/908133" xml:lang="en">https://access.redhat.com/site/blogs/766093/posts/908133</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues" xml:lang="en">https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues1" xml:lang="en">https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1103586" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1103586</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://discussions.nessus.org/thread/7517" xml:lang="en">https://discussions.nessus.org/thread/7517</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://filezilla-project.org/versions.php?type=server" xml:lang="en">https://filezilla-project.org/versions.php?type=server</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=bc8923b1ec9c467755cd86f7848c50ee8812e441" xml:lang="en">https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=bc8923b1ec9c467755cd86f7848c50ee8812e441</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946" xml:lang="en">https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://kb.bluecoat.com/index?page=content&amp;id=SA80" xml:lang="en">https://kb.bluecoat.com/index?page=content&amp;id=SA80</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10075" xml:lang="en">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10075</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.ibm.com/support/docview.wss?uid=ssg1S1004670" xml:lang="en">https://www.ibm.com/support/docview.wss?uid=ssg1S1004670</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.ibm.com/support/docview.wss?uid=ssg1S1004671" xml:lang="en">https://www.ibm.com/support/docview.wss?uid=ssg1S1004671</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.imperialviolet.org/2014/06/05/earlyccs.html" xml:lang="en">https://www.imperialviolet.org/2014/06/05/earlyccs.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_SNARE_for_MSSQL.pdf" xml:lang="en">https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_SNARE_for_MSSQL.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_Snare_for_Windows.pdf" xml:lang="en">https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_Snare_for_Windows.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.novell.com/support/kb/doc.php?id=7015271" xml:lang="en">https://www.novell.com/support/kb/doc.php?id=7015271</vuln:reference>
    </vuln:references>
    <vuln:summary>OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0593">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2014-0593</vuln:cve-id>
    <vuln:published-datetime>2018-06-08T13:29:00.380-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:09:34.397-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.suse.com/show_bug.cgi?id=866966" xml:lang="en">https://bugzilla.suse.com/show_bug.cgi?id=866966</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/openSUSE/obs-service-set_version/commit/10d5bddcea29f74a175f7f550924bf6407e52e93" xml:lang="en">https://github.com/openSUSE/obs-service-set_version/commit/10d5bddcea29f74a175f7f550924bf6407e52e93</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="https://lists.opensuse.org/opensuse-buildservice/2014-03/msg00014.html" xml:lang="en">[opensuse-buildservice] 20140303 EXE package format</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.suse.com/de-de/security/cve/CVE-2014-0593/" xml:lang="en">https://www.suse.com/de-de/security/cve/CVE-2014-0593/</vuln:reference>
    </vuln:references>
    <vuln:summary>The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS). In versions prior to 0.5.3-1.1 this script did not properly sanitize the input provided by the user, allowing for code execution on the executing server.</vuln:summary>
  </entry>
  <entry id="CVE-2014-0594">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.9.4"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:0.9.5"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.7.4"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.7.5"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.7.6"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.7.7"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.9.90"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.9.91"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:1.9.92"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.103"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.104"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.0.106"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.14"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.15"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.16"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.1.17"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.3.1-7"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.3.4"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.3.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.3.7"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.3.8"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.3.60"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.3.90"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.3.91"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.3.95"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.3.96"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.3.97"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.4.3"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.4.4"/>
        <cpe-lang:fact-ref name="cpe:/a:opensuse:open_build_service:2.4.5"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.2.3</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.4.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.4.2</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.5.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.5.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.5.2</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.5.3</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.6.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.7.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.8.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.9.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.9.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.9.2</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.9.3</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.9.4</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:0.9.5</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.7.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.7.2</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.7.3</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.7.4</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.7.5</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.7.6</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.7.7</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.9.90</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.9.91</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:1.9.92</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.2</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.3</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.4</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.5</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.6</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.7</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.8</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.16</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.103</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.104</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.0.106</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.2</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.3</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.4</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.5</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.5.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.6</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.7</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.8</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.8.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.9</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.10</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.11</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.12</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.13</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.14</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.15</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.16</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.1.17</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.3.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.3.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.3.1-7</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.3.2</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.3.3</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.3.4</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.3.4.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.3.5</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.3.6</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.3.7</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.3.8</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.3.60</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.3.90</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.3.91</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.3.95</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.3.96</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.3.97</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.4.0</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.4.1</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.4.2</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.4.3</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.4.4</vuln:product>
      <vuln:product>cpe:/a:opensuse:open_build_service:2.4.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-0594</vuln:cve-id>
    <vuln:published-datetime>2018-06-08T13:29:00.443-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:09:34.523-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.suse.com/show_bug.cgi?id=870606" xml:lang="en">https://bugzilla.suse.com/show_bug.cgi?id=870606</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/openSUSE/open-build-service/commit/2188c059b67b82171d0e28ef59f77e62d22a09d8" xml:lang="en">https://github.com/openSUSE/open-build-service/commit/2188c059b67b82171d0e28ef59f77e62d22a09d8</vuln:reference>
    </vuln:references>
    <vuln:summary>In the Open Build Service (OBS) before version 2.4.6 the CSRF protection is incorrectly disabled in the web interface, allowing for requests without the user's consent.</vuln:summary>
  </entry>
  <entry id="CVE-2014-10064">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2014-10064</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:00.220-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:09:44.197-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-399"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/28" xml:lang="en">https://nodesecurity.io/advisories/28</vuln:reference>
    </vuln:references>
    <vuln:summary>The qs module before 1.0.0 does not have an option or default for specifying object depth and when parsing a string representing a deeply nested object will block the event loop for long periods of time. An attacker could leverage this to cause a temporary denial-of-service condition, for example, in a web application, other requests would not be processed while this blocking is occurring.</vuln:summary>
  </entry>
  <entry id="CVE-2014-10065">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:remarkable_project:remarkable:0.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:remarkable_project:remarkable:1.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:remarkable_project:remarkable:1.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:remarkable_project:remarkable:1.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:remarkable_project:remarkable:1.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:remarkable_project:remarkable:1.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:remarkable_project:remarkable:1.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:remarkable_project:remarkable:1.2.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:remarkable_project:remarkable:1.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:remarkable_project:remarkable:1.4.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:remarkable_project:remarkable:0.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:remarkable_project:remarkable:1.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:remarkable_project:remarkable:1.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:remarkable_project:remarkable:1.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:remarkable_project:remarkable:1.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:remarkable_project:remarkable:1.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:remarkable_project:remarkable:1.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:remarkable_project:remarkable:1.2.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:remarkable_project:remarkable:1.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:remarkable_project:remarkable:1.4.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-10065</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:00.267-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:09:44.320-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/jonschlinkert/remarkable/issues/97" xml:lang="en">https://github.com/jonschlinkert/remarkable/issues/97</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/30" xml:lang="en">https://nodesecurity.io/advisories/30</vuln:reference>
    </vuln:references>
    <vuln:summary>Certain input when passed into remarkable before 1.4.1 will bypass the bad protocol check that disallows the javascript: scheme allowing for javascript: url's to be injected into the rendered content.</vuln:summary>
  </entry>
  <entry id="CVE-2014-10066">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2014-10066</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:00.317-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:09:44.430-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/9" xml:lang="en">https://nodesecurity.io/advisories/9</vuln:reference>
    </vuln:references>
    <vuln:summary>Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal. An attacker can provide input such as `../` to read files outside of the served directory.</vuln:summary>
  </entry>
  <entry id="CVE-2014-10068">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hapi:inert:1.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapi:inert:1.1.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hapi:inert:1.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapi:inert:1.1.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-10068</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:00.283-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:09:44.570-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/hapijs/inert/commit/e8f99f94da4cb08e8032eda984761c3f111e3e82" xml:lang="en">https://github.com/hapijs/inert/commit/e8f99f94da4cb08e8032eda984761c3f111e3e82</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/hapijs/inert/pull/15" xml:lang="en">https://github.com/hapijs/inert/pull/15</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/14" xml:lang="en">https://nodesecurity.io/advisories/14</vuln:reference>
    </vuln:references>
    <vuln:summary>The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, even when `showHidden` is false.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1426">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha4"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha5"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:-</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha3</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha4</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha5</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:beta1</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:beta2</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:rc1</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:rc2</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:rc3</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:rc4</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1426</vuln:cve-id>
    <vuln:published-datetime>2019-04-22T12:29:00.460-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:09:49.307-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://launchpad.net/maas/+milestone/1.9.2" xml:lang="en">https://launchpad.net/maas/+milestone/1.9.2</vuln:reference>
    </vuln:references>
    <vuln:summary>A vulnerability in maasserver.api.get_file_by_name of Ubuntu MAAS allows unauthenticated network clients to download any file. This issue affects: Ubuntu MAAS versions prior to 1.9.2.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1427">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha4"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha5"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:-</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha3</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha4</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha5</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:beta1</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:beta2</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:rc1</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:rc2</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:rc3</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:rc4</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1427</vuln:cve-id>
    <vuln:published-datetime>2019-04-22T12:29:00.537-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:09:49.570-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://launchpad.net/maas/+milestone/1.9.2" xml:lang="en">https://launchpad.net/maas/+milestone/1.9.2</vuln:reference>
    </vuln:references>
    <vuln:summary>A vulnerability in the REST API of Ubuntu MAAS allows an attacker to cause a logged-in user to execute commands via cross-site scripting. This issue affects MAAS versions prior to 1.9.2.</vuln:summary>
  </entry>
  <entry id="CVE-2014-1428">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha4"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha5"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:-</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha3</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha4</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha5</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:beta1</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:beta2</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:rc1</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:rc2</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:rc3</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:rc4</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-1428</vuln:cve-id>
    <vuln:published-datetime>2019-04-22T12:29:00.583-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:09:49.710-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-254"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://launchpad.net/maas/+milestone/1.9.2" xml:lang="en">https://launchpad.net/maas/+milestone/1.9.2</vuln:reference>
    </vuln:references>
    <vuln:summary>A vulnerability in generate_filestorage_key of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior to 1.9.2.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2600">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:icewall_identity_manager:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:icewall_identity_manager:4.0:sp1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:icewall_identity_manager:5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:icewall_sso_password_reset_option:10.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:icewall_identity_manager:4.0</vuln:product>
      <vuln:product>cpe:/a:hp:icewall_identity_manager:4.0:sp1</vuln:product>
      <vuln:product>cpe:/a:hp:icewall_identity_manager:5.0</vuln:product>
      <vuln:product>cpe:/a:hp:icewall_sso_password_reset_option:10.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2600</vuln:cve-id>
    <vuln:published-datetime>2014-04-05T10:55:03.823-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:12.213-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04214298" xml:lang="en">SSRT101450</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used, allows remote authenticated users to cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2602">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:oneview:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:oneview:1.01"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:oneview:1.0</vuln:product>
      <vuln:product>cpe:/a:hp:oneview:1.01</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2602</vuln:cve-id>
    <vuln:published-datetime>2014-05-08T06:55:04.560-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:12.477-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04273152" xml:lang="en">HPSBGN03034</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP OneView 1.0 and 1.01 allows remote authenticated users to gain privileges via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2603">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:hp_h-series_fibre_channel_switch_firmware:8.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:8%2f20q_fibre_channel_switch_16_port:ak242a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:8%2f20q_fibre_channel_switch_16_port:ak242b"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:8%2f20q_fibre_channel_switch_8_port:aq233a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:8%2f20q_fibre_channel_switch_8_port:aq233b"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:8gb_simple_san_connection_kit:ak241a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:8gb_simple_san_connection_kit:ak241b"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:sn6000_stackable_8gb_12-port_single_power_fibre_channel_switch:bk780a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:sn6000_stackable_8gb_12-port_single_power_fibre_channel_switch:bk780b"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:sn6000_stackable_8gb_24-port_dual_power_fibre_channel_switch:aw576a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:sn6000_stackable_8gb_24-port_dual_power_fibre_channel_switch:aw576b"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:sn6000_stackable_8gb_24-port_single_power_fibre_channel_switch:aw575a"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:sn6000_stackable_8gb_24-port_single_power_fibre_channel_switch:aw575b"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/h:hp:8%2f20q_fibre_channel_switch_16_port:ak242a</vuln:product>
      <vuln:product>cpe:/h:hp:8%2f20q_fibre_channel_switch_16_port:ak242b</vuln:product>
      <vuln:product>cpe:/h:hp:8%2f20q_fibre_channel_switch_8_port:aq233a</vuln:product>
      <vuln:product>cpe:/h:hp:8%2f20q_fibre_channel_switch_8_port:aq233b</vuln:product>
      <vuln:product>cpe:/h:hp:8gb_simple_san_connection_kit:ak241a</vuln:product>
      <vuln:product>cpe:/h:hp:8gb_simple_san_connection_kit:ak241b</vuln:product>
      <vuln:product>cpe:/h:hp:sn6000_stackable_8gb_12-port_single_power_fibre_channel_switch:bk780a</vuln:product>
      <vuln:product>cpe:/h:hp:sn6000_stackable_8gb_12-port_single_power_fibre_channel_switch:bk780b</vuln:product>
      <vuln:product>cpe:/h:hp:sn6000_stackable_8gb_24-port_dual_power_fibre_channel_switch:aw576a</vuln:product>
      <vuln:product>cpe:/h:hp:sn6000_stackable_8gb_24-port_dual_power_fibre_channel_switch:aw576b</vuln:product>
      <vuln:product>cpe:/h:hp:sn6000_stackable_8gb_24-port_single_power_fibre_channel_switch:aw575a</vuln:product>
      <vuln:product>cpe:/h:hp:sn6000_stackable_8gb_24-port_single_power_fibre_channel_switch:aw575b</vuln:product>
      <vuln:product>cpe:/o:hp:hp_h-series_fibre_channel_switch_firmware:8.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2603</vuln:cve-id>
    <vuln:published-datetime>2014-05-09T21:55:05.907-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:12.603-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>1.7</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>HIGH</cvss:access-complexity>
        <cvss:authentication>MULTIPLE_INSTANCES</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04277407" xml:lang="en">SSRT101555</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability on HP 8/20q switches, SN6000 switches, and 8Gb Simple SAN Connection Kit with firmware before 8.0.14.08.00 allows remote authenticated users to obtain sensitive information via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2607">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_manager_i:9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_manager_i:9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_manager_i:9.12"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_manager_i:9.13"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_manager_i:9.23"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_manager_i:9.24"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:operations_manager_i:9.1</vuln:product>
      <vuln:product>cpe:/a:hp:operations_manager_i:9.2</vuln:product>
      <vuln:product>cpe:/a:hp:operations_manager_i:9.12</vuln:product>
      <vuln:product>cpe:/a:hp:operations_manager_i:9.13</vuln:product>
      <vuln:product>cpe:/a:hp:operations_manager_i:9.23</vuln:product>
      <vuln:product>cpe:/a:hp:operations_manager_i:9.24</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2607</vuln:cve-id>
    <vuln:published-datetime>2014-05-25T20:25:31.970-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:13.070-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>8.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04296442" xml:lang="en">SSRT101575</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Operations Manager i 9.1 through 9.13 and 9.2 through 9.24 allows remote authenticated users to execute arbitrary code by leveraging the OMi operator role.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2608">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:smart_update_manager:6.0.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:smart_update_manager:6.1.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:smart_update_manager:6.2.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:smart_update_manager:6.3.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:smart_update_manager:6.3.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:smart_update_manager:6.4.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:smart_update_manager:6.2.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:smart_update_manager:6.3.0"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:smart_update_manager:6.3.1"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:smart_update_manager:6.4.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:smart_update_manager:6.0.1</vuln:product>
      <vuln:product>cpe:/a:hp:smart_update_manager:6.1.0</vuln:product>
      <vuln:product>cpe:/a:hp:smart_update_manager:6.2.0</vuln:product>
      <vuln:product>cpe:/a:hp:smart_update_manager:6.3.0</vuln:product>
      <vuln:product>cpe:/a:hp:smart_update_manager:6.3.1</vuln:product>
      <vuln:product>cpe:/a:hp:smart_update_manager:6.4.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2608</vuln:cve-id>
    <vuln:published-datetime>2014-12-10T16:59:02.320-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:13.227-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04302476" xml:lang="en">SSRT101578</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Smart Update Manager 6.x before 6.4.1 on Windows, and 6.2.x through 6.4.x before 6.4.1 on Linux, allows local users to obtain sensitive information, and consequently gain privileges, via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2611">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:executive_scorecard:9.40"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:executive_scorecard:9.41"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:executive_scorecard:9.40</vuln:product>
      <vuln:product>cpe:/a:hp:executive_scorecard:9.41</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2611</vuln:cve-id>
    <vuln:published-datetime>2014-06-19T06:50:04.270-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:13.510-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/68093" xml:lang="en">68093</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030439" xml:lang="en">1030439</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://zerodayinitiative.com/advisories/ZDI-14-210/" xml:lang="en">http://zerodayinitiative.com/advisories/ZDI-14-210/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295" xml:lang="en">SSRT101431</vuln:reference>
    </vuln:references>
    <vuln:summary>Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code, or obtain sensitive information or delete data, via unspecified vectors, aka ZDI-CAN-2120.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2618">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:imc_branch_intelligent_management_system_software_module:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:intelligent_management_center:7.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:imc_branch_intelligent_management_system_software_module:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:intelligent_management_center:7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2618</vuln:cve-id>
    <vuln:published-datetime>2014-07-16T00:58:33.227-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:14.027-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/68540" xml:lang="en">68540</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030568" xml:lang="en">1030568</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04369484" xml:lang="en">HPSBHF02913</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Intelligent Management Center (iMC) before 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2080.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2628">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:enterprise_maps:1.00"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:enterprise_maps:1.00</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2628</vuln:cve-id>
    <vuln:published-datetime>2014-08-11T20:55:03.483-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:14.667-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04390793" xml:lang="en">SSRT101627</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2635">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:sprinter:12.01"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:sprinter:12.01</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2635</vuln:cve-id>
    <vuln:published-datetime>2014-10-09T21:55:07.837-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:15.180-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04454636" xml:lang="en">HPSBMU03110</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2343.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2636">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:sprinter:12.01"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:sprinter:12.01</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2636</vuln:cve-id>
    <vuln:published-datetime>2014-10-09T21:55:07.883-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:15.400-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04454636" xml:lang="en">HPSBMU03110</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2336.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2637">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:sprinter:12.01"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:sprinter:12.01</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2637</vuln:cve-id>
    <vuln:published-datetime>2014-10-09T21:55:07.947-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:15.493-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04454636" xml:lang="en">HPSBMU03110</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2342.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2638">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:sprinter:12.01"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:sprinter:12.01</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2638</vuln:cve-id>
    <vuln:published-datetime>2014-10-09T21:55:07.993-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:15.603-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04454636" xml:lang="en">SSRT101587</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2344.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2639">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:mpio_device_specific_module_manager:4.01.00"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:mpio_device_specific_module_manager:4.01.01"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:mpio_device_specific_module_manager:4.01.00</vuln:product>
      <vuln:product>cpe:/a:hp:mpio_device_specific_module_manager:4.01.01</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2639</vuln:cve-id>
    <vuln:published-datetime>2014-09-28T15:55:05.770-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:15.743-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04048122" xml:lang="en">HPSBST02958</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP MPIO Device Specific Module Manager before 4.02.00 allows local users to gain privileges via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2640">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2640</vuln:cve-id>
    <vuln:published-datetime>2014-10-01T20:55:03.250-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:16.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/125228" xml:lang="en">VU#125228</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030960" xml:lang="en">1030960</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2641">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2641</vuln:cve-id>
    <vuln:published-datetime>2014-10-01T20:55:03.297-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:16.557-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030960" xml:lang="en">1030960</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2642">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:system_management_homepage:7.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.2.1</vuln:product>
      <vuln:product>cpe:/a:hp:system_management_homepage:7.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2642</vuln:cve-id>
    <vuln:published-datetime>2014-10-01T20:55:03.343-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:16.650-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030960" xml:lang="en">1030960</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04463322" xml:lang="en">SSRT101701</vuln:reference>
    </vuln:references>
    <vuln:summary>HP System Management Homepage (SMH) before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2643">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:7.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:systems_insight_manager:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:7.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:7.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2643</vuln:cve-id>
    <vuln:published-datetime>2014-10-04T21:55:08.733-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:16.743-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030970" xml:lang="en">1030970</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04468121" xml:lang="en">SSRT101715</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote authenticated users to gain privileges via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2644">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:7.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:systems_insight_manager:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:7.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:7.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2644</vuln:cve-id>
    <vuln:published-datetime>2014-10-05T21:55:07.913-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:17.180-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/70223" xml:lang="en">70223</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030970" xml:lang="en">1030970</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2645">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:systems_insight_manager:7.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:systems_insight_manager:7.0</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:7.1</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:7.2</vuln:product>
      <vuln:product>cpe:/a:hp:systems_insight_manager:7.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2645</vuln:cve-id>
    <vuln:published-datetime>2014-10-04T21:55:08.780-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:17.277-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1030970" xml:lang="en">1030970</vuln:reference>
    </vuln:references>
    <vuln:summary>HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2646">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:network_automation:9.10"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:network_automation:9.20"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:network_automation:9.10</vuln:product>
      <vuln:product>cpe:/a:hp:network_automation:9.20</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2646</vuln:cve-id>
    <vuln:published-datetime>2014-10-09T21:55:08.040-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:17.370-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.2</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04470581" xml:lang="en">SSRT101427</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Network Automation 9.10 and 9.20 allows local users to bypass intended access restrictions via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2647">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:operations_agent:11.13"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:operations_agent:11.13</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2647</vuln:cve-id>
    <vuln:published-datetime>2014-10-18T21:55:10.230-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:17.463-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="http://www.exploit-db.com/exploits/35076" xml:lang="en">35076</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04472444" xml:lang="en">SSRT101643</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP Operations Agent in HP Operations Manager (formerly OpenView Communications Broker) before 11.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2648">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:operations_manager:9.10"/>
          <cpe-lang:fact-ref name="cpe:/a:hp:operations_manager:9.11"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:operations_manager:9.10</vuln:product>
      <vuln:product>cpe:/a:hp:operations_manager:9.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2648</vuln:cve-id>
    <vuln:published-datetime>2014-10-09T21:55:08.087-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:17.573-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04472866" xml:lang="en">SSRT101727</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Operations Manager 9.10 and 9.11 on UNIX allows remote attackers to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-2649">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:operations_manager:9.20"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:linux:kernel:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:operations_manager:9.20</vuln:product>
      <vuln:product>cpe:/o:linux:kernel:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-2649</vuln:cve-id>
    <vuln:published-datetime>2014-10-09T21:55:08.133-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:17.697-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04472866" xml:lang="en">SSRT101727</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-3566">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux:5"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_desktop:6.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_desktop:7.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_desktop_supplementary:5.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_desktop_supplementary:6.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_desktop_supplementary:76.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_server:6.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_server:7.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_server_supplementary:5.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_server_supplementary:6.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_server_supplementary:7.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_workstation:6.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_workstation:7.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_workstation_supplementary:6.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_workstation_supplementary:7.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:ibm:aix:5.3"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:aix:6.1"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:aix:7.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.10.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:mageia:mageia:3.0"/>
        <cpe-lang:fact-ref name="cpe:/o:mageia:mageia:4.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:novell:suse_linux_enterprise_desktop:9.0"/>
        <cpe-lang:fact-ref name="cpe:/o:novell:suse_linux_enterprise_desktop:10.0"/>
        <cpe-lang:fact-ref name="cpe:/o:novell:suse_linux_enterprise_desktop:11.0"/>
        <cpe-lang:fact-ref name="cpe:/o:novell:suse_linux_enterprise_desktop:12.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:novell:suse_linux_enterprise_server:11.0:sp3"/>
        <cpe-lang:fact-ref name="cpe:/o:novell:suse_linux_enterprise_server:11.0:sp3:~~~vmware~~"/>
        <cpe-lang:fact-ref name="cpe:/o:novell:suse_linux_enterprise_server:12.0"/>
        <cpe-lang:fact-ref name="cpe:/o:novell:suse_linux_enterprise_software_development_kit:11.0:sp3"/>
        <cpe-lang:fact-ref name="cpe:/o:novell:suse_linux_enterprise_software_development_kit:12.0"/>
        <cpe-lang:fact-ref name="cpe:/o:opensuse:opensuse:12.3"/>
        <cpe-lang:fact-ref name="cpe:/o:opensuse:opensuse:13.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:fedoraproject:fedora:19"/>
        <cpe-lang:fact-ref name="cpe:/o:fedoraproject:fedora:20"/>
        <cpe-lang:fact-ref name="cpe:/o:fedoraproject:fedora:21"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8a"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8b"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8c"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8d"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8e"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8f"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8g"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8h"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8i"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8j"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8k"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8l"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8m"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8m:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8n"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8o"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8p"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8q"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8r"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8s"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8t"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8u"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8v"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8w"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8x"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8y"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8z"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8za"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:0.9.8zb"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0:beta5"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0a"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0b"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0c"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0d"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0e"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0f"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0g"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0h"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0i"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0j"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0k"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0l"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0m"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.0n"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1a"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1b"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1c"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1d"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1e"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1f"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1g"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1h"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1i"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.1.0"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.1.3"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.1.4"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.1.5"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.1.6"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.1.7"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.1.8"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.1.9"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.2.0"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.2.2"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.2.3"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.2.4"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.2.5"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.3.0"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/o:ibm:vios:2.2.3.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:5.1"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:5.2"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:5.2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:5.2.2"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:6.0"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:6.0:beta"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:6.0.3"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:6.0.4"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:6.0.5"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:6.0.6"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:6.1"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:6.1.1"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:6.1.2"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:6.1.3"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:6.1.4"/>
        <cpe-lang:fact-ref name="cpe:/o:netbsd:netbsd:6.1.5"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:7.0"/>
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:8.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:database:11.2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:database:12.1.0.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8a</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8b</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8c</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8d</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8e</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8f</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8g</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8h</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8i</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8j</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8k</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8l</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8m</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8m:beta1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8n</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8o</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8p</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8q</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8r</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8s</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8t</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8u</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8v</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8w</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8x</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8y</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8z</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8za</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:0.9.8zb</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0:beta1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0:beta2</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0:beta3</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0:beta4</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0:beta5</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0a</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0b</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0c</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0d</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0e</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0f</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0g</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0h</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0i</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0j</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0k</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0l</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0m</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.0n</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1:beta1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1:beta2</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1:beta3</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1a</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1b</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1c</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1d</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1e</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1f</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1g</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1h</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1i</vuln:product>
      <vuln:product>cpe:/a:oracle:database:11.2.0.4</vuln:product>
      <vuln:product>cpe:/a:oracle:database:12.1.0.2</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.10.1</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:7.0</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:8.0</vuln:product>
      <vuln:product>cpe:/o:fedoraproject:fedora:19</vuln:product>
      <vuln:product>cpe:/o:fedoraproject:fedora:20</vuln:product>
      <vuln:product>cpe:/o:fedoraproject:fedora:21</vuln:product>
      <vuln:product>cpe:/o:ibm:aix:5.3</vuln:product>
      <vuln:product>cpe:/o:ibm:aix:6.1</vuln:product>
      <vuln:product>cpe:/o:ibm:aix:7.1</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.0.10</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.0.11</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.0.12</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.0.13</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.1.0</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.1.1</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.1.3</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.1.4</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.1.5</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.1.6</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.1.7</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.1.8</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.1.9</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.2.0</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.2.1</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.2.2</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.2.3</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.2.4</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.2.5</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.3.0</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.3.1</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.3.2</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.3.3</vuln:product>
      <vuln:product>cpe:/o:ibm:vios:2.2.3.4</vuln:product>
      <vuln:product>cpe:/o:mageia:mageia:3.0</vuln:product>
      <vuln:product>cpe:/o:mageia:mageia:4.0</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:5.1</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:5.1.1</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:5.1.2</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:5.1.3</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:5.1.4</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:5.2</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:5.2.1</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:5.2.2</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:6.0</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:6.0:beta</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:6.0.1</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:6.0.2</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:6.0.3</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:6.0.4</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:6.0.5</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:6.0.6</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:6.1</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:6.1.1</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:6.1.2</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:6.1.3</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:6.1.4</vuln:product>
      <vuln:product>cpe:/o:netbsd:netbsd:6.1.5</vuln:product>
      <vuln:product>cpe:/o:novell:suse_linux_enterprise_desktop:9.0</vuln:product>
      <vuln:product>cpe:/o:novell:suse_linux_enterprise_desktop:10.0</vuln:product>
      <vuln:product>cpe:/o:novell:suse_linux_enterprise_desktop:11.0</vuln:product>
      <vuln:product>cpe:/o:novell:suse_linux_enterprise_desktop:12.0</vuln:product>
      <vuln:product>cpe:/o:novell:suse_linux_enterprise_server:11.0:sp3</vuln:product>
      <vuln:product>cpe:/o:novell:suse_linux_enterprise_server:11.0:sp3:~~~vmware~~</vuln:product>
      <vuln:product>cpe:/o:novell:suse_linux_enterprise_server:12.0</vuln:product>
      <vuln:product>cpe:/o:novell:suse_linux_enterprise_software_development_kit:11.0:sp3</vuln:product>
      <vuln:product>cpe:/o:novell:suse_linux_enterprise_software_development_kit:12.0</vuln:product>
      <vuln:product>cpe:/o:opensuse:opensuse:12.3</vuln:product>
      <vuln:product>cpe:/o:opensuse:opensuse:13.1</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux:5</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_desktop:6.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_desktop:7.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_desktop_supplementary:5.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_desktop_supplementary:6.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_desktop_supplementary:76.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_server:6.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_server:7.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_server_supplementary:5.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_server_supplementary:6.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_server_supplementary:7.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_workstation:6.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_workstation:7.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_workstation_supplementary:6.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_workstation_supplementary:7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-3566</vuln:cve-id>
    <vuln:published-datetime>2014-10-14T20:55:02.137-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:35.260-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>NETBSD</vuln:source>
      <vuln:reference href="ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc" xml:lang="en">NetBSD-SA2014-015</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://advisories.mageia.org/MGASA-2014-0416.html" xml:lang="en">http://advisories.mageia.org/MGASA-2014-0416.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc" xml:lang="en">http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html" xml:lang="en">APPLE-SA-2014-10-16-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html" xml:lang="en">APPLE-SA-2014-10-16-3</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566" xml:lang="en">http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.html" xml:lang="en">http://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/" xml:lang="en">http://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://blogs.technet.com/b/msrc/archive/2014/10/14/security-advisory-3009008-released.aspx" xml:lang="en">http://blogs.technet.com/b/msrc/archive/2014/10/14/security-advisory-3009008-released.aspx</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf" xml:lang="en">http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://downloads.asterisk.org/pub/security/AST-2014-011.html" xml:lang="en">http://downloads.asterisk.org/pub/security/AST-2014-011.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html" xml:lang="en">http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581" xml:lang="en">HPSBUX03281</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034" xml:lang="en">http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10705" xml:lang="en">http://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10705</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html" xml:lang="en">APPLE-SA-2015-01-27-4</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html" xml:lang="en">APPLE-SA-2015-09-16-2</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://lists.fedoraproject.org/pipermail/package-announce/2014-November/142330.html" xml:lang="en">FEDORA-2014-12951</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141114.html" xml:lang="en">FEDORA-2014-13069</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141158.html" xml:lang="en">FEDORA-2014-13012</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169361.html" xml:lang="en">FEDORA-2015-9110</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169374.html" xml:lang="en">FEDORA-2015-9090</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html" xml:lang="en">openSUSE-SU-2014:1331</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html" xml:lang="en">SUSE-SU-2014:1357</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html" xml:lang="en">SUSE-SU-2014:1361</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" xml:lang="en">SUSE-SU-2014:1526</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" xml:lang="en">SUSE-SU-2014:1549</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html" xml:lang="en">openSUSE-SU-2015:0190</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html" xml:lang="en">SUSE-SU-2015:0336</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html" xml:lang="en">SUSE-SU-2015:0344</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html" xml:lang="en">SUSE-SU-2015:0345</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html" xml:lang="en">SUSE-SU-2015:0376</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html" xml:lang="en">SUSE-SU-2015:0392</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html" xml:lang="en">SUSE-SU-2015:0503</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html" xml:lang="en">SUSE-SU-2015:0578</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" xml:lang="en">openSUSE-SU-2016:0640</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.html" xml:lang="en">SUSE-SU-2016:1457</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.html" xml:lang="en">SUSE-SU-2016:1459</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141450452204552&amp;w=2" xml:lang="en">HPSBMU03152</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141450973807288&amp;w=2" xml:lang="en">HPSBHF03156</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141477196830952&amp;w=2" xml:lang="en">HPSBUX03162</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141576815022399&amp;w=2" xml:lang="en">HPSBGN03191</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141577087123040&amp;w=2" xml:lang="en">HPSBMU03184</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141577350823734&amp;w=2" xml:lang="en">HPSBGN03164</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141620103726640&amp;w=2" xml:lang="en">HPSBGN03192</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141628688425177&amp;w=2" xml:lang="en">HPSBMU03183</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141694355519663&amp;w=2" xml:lang="en">HPSBMU03214</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141697638231025&amp;w=2" xml:lang="en">HPSBGN03201</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141697676231104&amp;w=2" xml:lang="en">HPSBGN03203</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141703183219781&amp;w=2" xml:lang="en">HPSBGN03202</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141715130023061&amp;w=2" xml:lang="en">HPSBGN03209</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141775427104070&amp;w=2" xml:lang="en">HPSBGN03205</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141813976718456&amp;w=2" xml:lang="en">HPSBGN03222</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141814011518700&amp;w=2" xml:lang="en">SSRT101838</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141879378918327&amp;w=2" xml:lang="en">SSRT101849</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142103967620673&amp;w=2" xml:lang="en">HPSBOV03227</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142118135300698&amp;w=2" xml:lang="en">SSRT101868</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142296755107581&amp;w=2" xml:lang="en">SSRT101854</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142350196615714&amp;w=2" xml:lang="en">SSRT101897</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142350298616097&amp;w=2" xml:lang="en">SSRT101898</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142350743917559&amp;w=2" xml:lang="en">SSRT101896</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142354438527235&amp;w=2" xml:lang="en">HPSBGN03251</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142357976805598&amp;w=2" xml:lang="en">HPSBGN03255</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142495837901899&amp;w=2" xml:lang="en">HPSBMU03260</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142496355704097&amp;w=2" xml:lang="en">SSRT101951</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142546741516006&amp;w=2" xml:lang="en">HPSBST03265</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142607790919348&amp;w=2" xml:lang="en">SSRT101968</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142624590206005&amp;w=2" xml:lang="en">HPSBMU03267</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142624619906067" xml:lang="en">SSRT101922</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142624619906067&amp;w=2" xml:lang="en">HPSBMU03259</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142624679706236&amp;w=2" xml:lang="en">HPSBMU03283</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142624719706349&amp;w=2" xml:lang="en">SSRT101921</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142660345230545&amp;w=2" xml:lang="en">SSRT101846</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142721830231196&amp;w=2" xml:lang="en">HPSBMU03301</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142721887231400&amp;w=2" xml:lang="en">SSRT101790</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142740155824959&amp;w=2" xml:lang="en">SSRT101795</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142791032306609&amp;w=2" xml:lang="en">HPSBMU03304</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142804214608580&amp;w=2" xml:lang="en">HPSBHF03300</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142805027510172&amp;w=2" xml:lang="en">HPSBST03195</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142962817202793&amp;w=2" xml:lang="en">HPSBGN03305</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143039249603103&amp;w=2" xml:lang="en">HPSBMU03241</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143101048219218&amp;w=2" xml:lang="en">HPSBUX03194</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143290371927178&amp;w=2" xml:lang="en">HPSBGN03332</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143290437727362&amp;w=2" xml:lang="en">HPSBMU03263</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143290522027658&amp;w=2" xml:lang="en">HPSBMU03261</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143290583027876&amp;w=2" xml:lang="en">HPSBMU03223</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143558137709884&amp;w=2" xml:lang="en">HPSBPI03107</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143558192010071&amp;w=2" xml:lang="en">HPSBPI03360</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143628269912142&amp;w=2" xml:lang="en">HPSBMU03234</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=144101915224472&amp;w=2" xml:lang="en">HPSBMU03416</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=144251162130364&amp;w=2" xml:lang="en">HPSBST03418</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=144294141001552&amp;w=2" xml:lang="en">HPSBGN03391</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=145983526810210&amp;w=2" xml:lang="en">HPSBGN03569</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://marc.info/?l=openssl-dev&amp;m=141333049205629&amp;w=2" xml:lang="en">[openssl-dev] 20141014 Patch to mitigate CVE-2014-3566 ("POODLE")</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3566.html" xml:lang="en">http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3566.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-1652.html" xml:lang="en">RHSA-2014:1652</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-1653.html" xml:lang="en">RHSA-2014:1653</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-1692.html" xml:lang="en">RHSA-2014:1692</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-1876.html" xml:lang="en">RHSA-2014:1876</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-1877.html" xml:lang="en">RHSA-2014:1877</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-1880.html" xml:lang="en">RHSA-2014:1880</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-1881.html" xml:lang="en">RHSA-2014:1881</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-1882.html" xml:lang="en">RHSA-2014:1882</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-1920.html" xml:lang="en">RHSA-2014:1920</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-1948.html" xml:lang="en">RHSA-2014:1948</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-0068.html" xml:lang="en">RHSA-2015:0068</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-0079.html" xml:lang="en">RHSA-2015:0079</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-0080.html" xml:lang="en">RHSA-2015:0080</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-0085.html" xml:lang="en">RHSA-2015:0085</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-0086.html" xml:lang="en">RHSA-2015:0086</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-0264.html" xml:lang="en">RHSA-2015:0264</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-0698.html" xml:lang="en">RHSA-2015:0698</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1545.html" xml:lang="en">RHSA-2015:1545</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1546.html" xml:lang="en">RHSA-2015:1546</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/HT204244" xml:lang="en">http://support.apple.com/HT204244</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.citrix.com/article/CTX200238" xml:lang="en">http://support.citrix.com/article/CTX200238</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle" xml:lang="en">20141014 SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2014/dsa-3053" xml:lang="en">DSA-3053</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2015/dsa-3144" xml:lang="en">DSA-3144</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2015/dsa-3147" xml:lang="en">DSA-3147</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2015/dsa-3253" xml:lang="en">DSA-3253</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2016/dsa-3489" xml:lang="en">DSA-3489</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/577193" xml:lang="en">VU#577193</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2014:203" xml:lang="en">MDVSA-2014:203</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2015:062" xml:lang="en">MDVSA-2015:062</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html" xml:lang="en">http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html" xml:lang="en">http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html" xml:lang="en">http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/533724/100/0/threaded" xml:lang="en">APPLE-SA-2014-10-16-4</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/533746" xml:lang="en">APPLE-SA-2014-10-20-2</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/533747" xml:lang="en">APPLE-SA-2014-10-20-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/70574" xml:lang="en">70574</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031029" xml:lang="en">1031029</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031039" xml:lang="en">1031039</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031085" xml:lang="en">1031085</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031086" xml:lang="en">1031086</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031087" xml:lang="en">1031087</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031088" xml:lang="en">1031088</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031089" xml:lang="en">1031089</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031090" xml:lang="en">1031090</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031091" xml:lang="en">1031091</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031092" xml:lang="en">1031092</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031093" xml:lang="en">1031093</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031094" xml:lang="en">1031094</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031095" xml:lang="en">1031095</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031096" xml:lang="en">1031096</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031105" xml:lang="en">1031105</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031106" xml:lang="en">1031106</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031107" xml:lang="en">1031107</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031120" xml:lang="en">1031120</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031123" xml:lang="en">1031123</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031124" xml:lang="en">1031124</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031130" xml:lang="en">1031130</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031131" xml:lang="en">1031131</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031132" xml:lang="en">1031132</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-2486-1" xml:lang="en">USN-2486-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-2487-1" xml:lang="en">USN-2487-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/ncas/alerts/TA14-290A" xml:lang="en">TA14-290A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.vmware.com/security/advisories/VMSA-2015-0003.html" xml:lang="en">http://www.vmware.com/security/advisories/VMSA-2015-0003.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0" xml:lang="en">http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=isg3T1021431" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=isg3T1021431</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=isg3T1021439" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=isg3T1021439</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21686997" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21686997</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21687172" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21687172</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21687611" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21687611</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21688283" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21688283</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21692299" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21692299</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-405500.htm" xml:lang="en">http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-405500.htm</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://access.redhat.com/articles/1232123" xml:lang="en">https://access.redhat.com/articles/1232123</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/" xml:lang="en">https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6" xml:lang="en">https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bto.bluecoat.com/security-advisory/sa83" xml:lang="en">https://bto.bluecoat.com/security-advisory/sa83</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1076983" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=1076983</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1152789" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1152789</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://devcentral.f5.com/articles/cve-2014-3566-removing-sslv3-from-big-ip" xml:lang="en">https://devcentral.f5.com/articles/cve-2014-3566-removing-sslv3-from-big-ip</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/mpgn/poodle-PoC" xml:lang="en">https://github.com/mpgn/poodle-PoC</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://groups.google.com/forum/#!topic/docker-user/oYm0i3xShJU" xml:lang="en">https://groups.google.com/forum/#!topic/docker-user/oYm0i3xShJU</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635" xml:lang="en">https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681" xml:lang="en">https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667" xml:lang="en">https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946" xml:lang="en">https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10090" xml:lang="en">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10090</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10091" xml:lang="en">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10091</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10104" xml:lang="en">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10104</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://puppet.com/security/cve/poodle-sslv3-vulnerability" xml:lang="en">https://puppet.com/security/cve/poodle-sslv3-vulnerability</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="https://security.gentoo.org/glsa/201507-14" xml:lang="en">GLSA-201507-14</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="https://security.gentoo.org/glsa/201606-11" xml:lang="en">GLSA-201606-11</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://security.netapp.com/advisory/ntap-20141015-0001/" xml:lang="en">https://security.netapp.com/advisory/ntap-20141015-0001/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.apple.com/HT205217" xml:lang="en">https://support.apple.com/HT205217</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.apple.com/kb/HT6527" xml:lang="en">https://support.apple.com/kb/HT6527</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.apple.com/kb/HT6529" xml:lang="en">https://support.apple.com/kb/HT6529</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.apple.com/kb/HT6531" xml:lang="en">https://support.apple.com/kb/HT6531</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.apple.com/kb/HT6535" xml:lang="en">https://support.apple.com/kb/HT6535</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.apple.com/kb/HT6536" xml:lang="en">https://support.apple.com/kb/HT6536</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.apple.com/kb/HT6541" xml:lang="en">https://support.apple.com/kb/HT6541</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.apple.com/kb/HT6542" xml:lang="en">https://support.apple.com/kb/HT6542</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.citrix.com/article/CTX216642" xml:lang="en">https://support.citrix.com/article/CTX216642</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.lenovo.com/product_security/poodle" xml:lang="en">https://support.lenovo.com/product_security/poodle</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.lenovo.com/us/en/product_security/poodle" xml:lang="en">https://support.lenovo.com/us/en/product_security/poodle</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://technet.microsoft.com/library/security/3009008.aspx" xml:lang="en">https://technet.microsoft.com/library/security/3009008.aspx</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html" xml:lang="en">https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.dfranke.us/posts/2014-10-14-how-poodle-happened.html" xml:lang="en">https://www.dfranke.us/posts/2014-10-14-how-poodle-happened.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.elastic.co/blog/logstash-1-4-3-released" xml:lang="en">https://www.elastic.co/blog/logstash-1-4-3-released</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.imperialviolet.org/2014/10/14/poodle.html" xml:lang="en">https://www.imperialviolet.org/2014/10/14/poodle.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.openssl.org/~bodo/ssl-poodle.pdf" xml:lang="en">https://www.openssl.org/~bodo/ssl-poodle.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.openssl.org/news/secadv_20141015.txt" xml:lang="en">https://www.openssl.org/news/secadv_20141015.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.suse.com/support/kb/doc.php?id=7015773" xml:lang="en">https://www.suse.com/support/kb/doc.php?id=7015773</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www-01.ibm.com/support/docview.wss?uid=swg21688165" xml:lang="en">https://www-01.ibm.com/support/docview.wss?uid=swg21688165</vuln:reference>
    </vuln:references>
    <vuln:summary>The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.</vuln:summary>
  </entry>
  <entry id="CVE-2014-4661">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:records_manager:7.3.4"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:records_manager:8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:records_manager:8.1:patch1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:records_manager:8.1:patch2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:records_manager:7.3.4</vuln:product>
      <vuln:product>cpe:/a:hp:records_manager:8.1</vuln:product>
      <vuln:product>cpe:/a:hp:records_manager:8.1:patch1</vuln:product>
      <vuln:product>cpe:/a:hp:records_manager:8.1:patch2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-4661</vuln:cve-id>
    <vuln:published-datetime>2014-10-09T21:55:09.353-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:10:57.480-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/70286" xml:lang="en">70286</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04441391" xml:lang="en">SSRT101645</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in HP Records Manager before 7.3.5 and 8.x before 8.1 Patch 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-5401">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hospira:mednet:5.8"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hospira:mednet:5.8</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-5401</vuln:cve-id>
    <vuln:published-datetime>2019-03-26T13:29:00.340-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:11:09.933-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-15-090-03" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-15-090-03</vuln:reference>
    </vuln:references>
    <vuln:summary>Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise Application Platform software that may allow unauthenticated users to execute arbitrary code on the target system. Hospira has developed a new version of the MedNet software, MedNet 6.1. Existing versions of MedNet can be upgraded to MedNet 6.1.</vuln:summary>
  </entry>
  <entry id="CVE-2014-5431">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:baxter:sigma_spectrum_infusion_system_firmware:6.05"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:baxter:sigma_spectrum_infusion_system:-"/>
          <cpe-lang:fact-ref name="cpe:/h:baxter:wireless_battery_module:16"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:baxter:sigma_spectrum_infusion_system_firmware:6.05</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-5431</vuln:cve-id>
    <vuln:published-datetime>2019-03-26T12:29:00.243-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:11:10.560-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-798"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01</vuln:reference>
    </vuln:references>
    <vuln:summary>Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 contains a hard-coded password, which provides access to basic biomedical information, limited device settings, and network configuration of the WBM, if connected. The hard-coded password may allow an attacker with physical access to the device to access management functions to make unauthorized configuration changes to biomedical settings such as turn on and off wireless connections and the phase-complete audible alarm that indicates the end of an infusion phase. Baxter has released a new version of the SIGMA Spectrum Infusion System, version 8, which incorporates hardware and software changes.</vuln:summary>
  </entry>
  <entry id="CVE-2014-5432">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:baxter:sigma_spectrum_infusion_system_firmware:6.05"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:baxter:sigma_spectrum_infusion_system:-"/>
          <cpe-lang:fact-ref name="cpe:/h:baxter:wireless_battery_module:16"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:baxter:sigma_spectrum_infusion_system_firmware:6.05</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-5432</vuln:cve-id>
    <vuln:published-datetime>2019-03-26T12:29:00.290-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:11:10.730-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-287"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01</vuln:reference>
    </vuln:references>
    <vuln:summary>Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 is remotely accessible via Port 22/SSH without authentication. A remote attacker may be able to make unauthorized configuration changes to the WBM, as well as issue commands to access account credentials and shared keys. Baxter asserts that this vulnerability only allows access to features and functionality on the WBM and that the SIGMA Spectrum infusion pump cannot be controlled from the WBM. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.</vuln:summary>
  </entry>
  <entry id="CVE-2014-5433">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:baxter:sigma_spectrum_infusion_system_firmware:6.05"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:baxter:sigma_spectrum_infusion_system:-"/>
          <cpe-lang:fact-ref name="cpe:/h:baxter:wireless_battery_module:16"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:baxter:sigma_spectrum_infusion_system_firmware:6.05</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-5433</vuln:cve-id>
    <vuln:published-datetime>2019-03-26T12:29:00.337-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:11:10.873-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-255"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01</vuln:reference>
    </vuln:references>
    <vuln:summary>An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16, which may allow an attacker to gain access the host network. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.</vuln:summary>
  </entry>
  <entry id="CVE-2014-5434">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:baxter:sigma_spectrum_infusion_system_firmware:6.05"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:baxter:sigma_spectrum_infusion_system:-"/>
          <cpe-lang:fact-ref name="cpe:/h:baxter:wireless_battery_module:16"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:baxter:sigma_spectrum_infusion_system_firmware:6.05</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-5434</vuln:cve-id>
    <vuln:published-datetime>2019-03-26T11:29:00.287-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:11:11.060-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-798"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01</vuln:reference>
    </vuln:references>
    <vuln:summary>Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a default account with hard-coded credentials used with the FTP protocol. Baxter asserts no files can be transferred to or from the WBM using this account. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.</vuln:summary>
  </entry>
  <entry id="CVE-2014-5435">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2014-5435</vuln:cve-id>
    <vuln:published-datetime>2019-04-08T12:29:00.307-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:11:11.200-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-787"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01</vuln:reference>
    </vuln:references>
    <vuln:summary>An arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, that could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.</vuln:summary>
  </entry>
  <entry id="CVE-2014-5436">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2014-5436</vuln:cve-id>
    <vuln:published-datetime>2019-04-08T12:29:00.417-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:11:11.700-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01</vuln:reference>
    </vuln:references>
    <vuln:summary>A directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, which could lead to possible information disclosure. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.</vuln:summary>
  </entry>
  <entry id="CVE-2014-6271">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:1.14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:1.14.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:1.14.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:1.14.3"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:1.14.4"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:1.14.5"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:1.14.6"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:1.14.7"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:2.01"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:2.01.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:2.02"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:2.02.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:2.03"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:2.04"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:2.05"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:2.05:a"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:2.05:b"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:3.0.16"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:3.2.48"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:4.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:gnu:bash:4.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:gnu:bash:1.14.0</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:1.14.1</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:1.14.2</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:1.14.3</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:1.14.4</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:1.14.5</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:1.14.6</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:1.14.7</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:2.0</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:2.01</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:2.01.1</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:2.02</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:2.02.1</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:2.03</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:2.04</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:2.05</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:2.05:a</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:2.05:b</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:3.0</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:3.0.16</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:3.1</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:3.2</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:3.2.48</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:4.0</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:4.0:rc1</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:4.1</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:4.2</vuln:product>
      <vuln:product>cpe:/a:gnu:bash:4.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-6271</vuln:cve-id>
    <vuln:published-datetime>2014-09-24T14:48:04.477-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:11:26.420-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-78"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://advisories.mageia.org/MGASA-2014-0388.html" xml:lang="en">http://advisories.mageia.org/MGASA-2014-0388.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html" xml:lang="en">APPLE-SA-2014-10-16-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>JVN</vuln:source>
      <vuln:reference href="http://jvn.jp/en/jp/JVN55667175/index.html" xml:lang="en">JVN#55667175</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>JVNDB</vuln:source>
      <vuln:reference href="http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126" xml:lang="en">JVNDB-2014-000126</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10673" xml:lang="en">http://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10673</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html" xml:lang="en">http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://linux.oracle.com/errata/ELSA-2014-1293.html" xml:lang="en">http://linux.oracle.com/errata/ELSA-2014-1293.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://linux.oracle.com/errata/ELSA-2014-1294.html" xml:lang="en">http://linux.oracle.com/errata/ELSA-2014-1294.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html" xml:lang="en">SUSE-SU-2014:1212</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html" xml:lang="en">SUSE-SU-2014:1213</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html" xml:lang="en">SUSE-SU-2014:1223</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html" xml:lang="en">openSUSE-SU-2014:1226</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.html" xml:lang="en">openSUSE-SU-2014:1238</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html" xml:lang="en">openSUSE-SU-2014:1254</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html" xml:lang="en">SUSE-SU-2014:1260</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html" xml:lang="en">SUSE-SU-2014:1287</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html" xml:lang="en">openSUSE-SU-2014:1308</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html" xml:lang="en">openSUSE-SU-2014:1310</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141216207813411&amp;w=2" xml:lang="en">HPSBGN03117</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141216668515282&amp;w=2" xml:lang="en">HPSBHF03119</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141235957116749&amp;w=2" xml:lang="en">HPSBHF03124</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141319209015420&amp;w=2" xml:lang="en">HPSBST03122</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141330425327438&amp;w=2" xml:lang="en">HPSBMU03133</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141330468527613&amp;w=2" xml:lang="en">HPSBGN03138</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141345648114150&amp;w=2" xml:lang="en">HPSBHF03125</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141383026420882&amp;w=2" xml:lang="en">HPSBMU03143</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141383081521087&amp;w=2" xml:lang="en">HPSBMU03144</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141383138121313&amp;w=2" xml:lang="en">HPSBST03131</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141383196021590&amp;w=2" xml:lang="en">HPSBST03129</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141383244821813&amp;w=2" xml:lang="en">HPSBGN03142</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141383304022067&amp;w=2" xml:lang="en">HPSBGN03141</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141383353622268&amp;w=2" xml:lang="en">HPSBHF03146</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141383465822787&amp;w=2" xml:lang="en">HPSBHF03145</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141450491804793&amp;w=2" xml:lang="en">HPSBST03157</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141576728022234&amp;w=2" xml:lang="en">HPSBST03155</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141577137423233&amp;w=2" xml:lang="en">HPSBMU03165</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141577241923505&amp;w=2" xml:lang="en">HPSBST03181</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141577297623641&amp;w=2" xml:lang="en">HPSBST03154</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141585637922673&amp;w=2" xml:lang="en">HPSBMU03182</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141694386919794&amp;w=2" xml:lang="en">HPSBST03148</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=141879528318582&amp;w=2" xml:lang="en">HPSBMU03217</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142113462216480&amp;w=2" xml:lang="en">SSRT101711</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142118135300698&amp;w=2" xml:lang="en">SSRT101868</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142358026505815&amp;w=2" xml:lang="en">HPSBMU03245</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142358078406056&amp;w=2" xml:lang="en">HPSBMU03246</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142546741516006&amp;w=2" xml:lang="en">HPSBST03265</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142719845423222&amp;w=2" xml:lang="en">SSRT101816</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142721162228379&amp;w=2" xml:lang="en">SSRT101819</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142805027510172&amp;w=2" xml:lang="en">HPSBST03195</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html" xml:lang="en">http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html" xml:lang="en">http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.html" xml:lang="en">http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Execution.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html" xml:lang="en">http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-Injection-Shellshock.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-1293.html" xml:lang="en">RHSA-2014:1293</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-1294.html" xml:lang="en">RHSA-2014:1294</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-1295.html" xml:lang="en">RHSA-2014:1295</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2014-1354.html" xml:lang="en">RHSA-2014:1354</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2014/Oct/0" xml:lang="en">20141001 FW: NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59272" xml:lang="en">59272</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/61542" xml:lang="en">61542</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/61547" xml:lang="en">61547</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/62228" xml:lang="en">62228</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT6495" xml:lang="en">http://support.apple.com/kb/HT6495</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.novell.com/security/cve/CVE-2014-6271.html" xml:lang="en">http://support.novell.com/security/cve/CVE-2014-6271.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CISCO</vuln:source>
      <vuln:reference href="http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash" xml:lang="en">20140926 GNU Bash Environmental Variable Command Injection Vulnerability</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2014/dsa-3032" xml:lang="en">DSA-3032</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/252743" xml:lang="en">VU#252743</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2015:164" xml:lang="en">MDVSA-2015:164</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.novell.com/support/kb/doc.php?id=7015701" xml:lang="en">http://www.novell.com/support/kb/doc.php?id=7015701</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.novell.com/support/kb/doc.php?id=7015721" xml:lang="en">http://www.novell.com/support/kb/doc.php?id=7015721</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.qnap.com/i/en/support/con_show.php?cid=61" xml:lang="en">http://www.qnap.com/i/en/support/con_show.php?cid=61</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/533593/100/0/threaded" xml:lang="en">20141001 NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/70103" xml:lang="en">70103</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-2362-1" xml:lang="en">USN-2362-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/ncas/alerts/TA14-268A" xml:lang="en">TA14-268A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.vmware.com/security/advisories/VMSA-2014-0010.html" xml:lang="en">http://www.vmware.com/security/advisories/VMSA-2014-0010.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0" xml:lang="en">http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21685541" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21685541</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21685604" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21685604</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21685733" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21685733</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21685749" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21685749</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21685914" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21685914</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21686084" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21686084</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21686131" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21686131</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21686246" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21686246</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21686445" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21686445</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21686447" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21686447</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21686479" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21686479</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21686494" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21686494</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21687079" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21687079</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315" xml:lang="en">http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://access.redhat.com/articles/1200223" xml:lang="en">https://access.redhat.com/articles/1200223</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://access.redhat.com/node/1200223" xml:lang="en">https://access.redhat.com/node/1200223</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1141597" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1141597</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes" xml:lang="en">https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://kb.bluecoat.com/index?page=content&amp;id=SA82" xml:lang="en">https://kb.bluecoat.com/index?page=content&amp;id=SA82</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10648" xml:lang="en">https://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10648</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10085" xml:lang="en">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10085</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/" xml:lang="en">https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.apple.com/kb/HT6535" xml:lang="en">https://support.apple.com/kb/HT6535</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.citrix.com/article/CTX200217" xml:lang="en">https://support.citrix.com/article/CTX200217</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.citrix.com/article/CTX200223" xml:lang="en">https://support.citrix.com/article/CTX200223</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html" xml:lang="en">https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&amp;docId=emr_na-c04497075" xml:lang="en">https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&amp;docId=emr_na-c04497075</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&amp;docId=emr_na-c04518183" xml:lang="en">https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&amp;docId=emr_na-c04518183</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk102673&amp;src=securityAlerts" xml:lang="en">https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk102673&amp;src=securityAlerts</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/34879/" xml:lang="en">34879</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/37816/" xml:lang="en">37816</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/38849/" xml:lang="en">38849</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/39918/" xml:lang="en">39918</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/40619/" xml:lang="en">40619</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/40938/" xml:lang="en">40938</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/42938/" xml:lang="en">42938</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.suse.com/support/shellshock/" xml:lang="en">https://www.suse.com/support/shellshock/</vuln:reference>
    </vuln:references>
    <vuln:summary>GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock."  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.</vuln:summary>
  </entry>
  <entry id="CVE-2014-6321">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_7:-:sp1"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_8:-"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_8.1:-"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_rt:-"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_rt_8.1:-"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2003:-:sp2"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2008:-:sp2"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2008:r2:sp1:~~~~itanium~"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2008:r2:sp1:~~~~x64~"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2012:-"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_server_2012:r2"/>
        <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_vista:-:sp2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:microsoft:windows_7:-:sp1</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_8:-</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_8.1:-</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_rt:-</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_rt_8.1:-</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_server_2003:-:sp2</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_server_2008:-:sp2</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_server_2008:r2:sp1:~~~~itanium~</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_server_2008:r2:sp1:~~~~x64~</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_server_2012:-</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_server_2012:r2</vuln:product>
      <vuln:product>cpe:/o:microsoft:windows_vista:-:sp2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-6321</vuln:cve-id>
    <vuln:published-datetime>2014-11-11T17:55:04.997-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:11:27.700-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://blog.beyondtrust.com/triggering-ms14-066" xml:lang="en">http://blog.beyondtrust.com/triggering-ms14-066</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142384364031268&amp;w=2" xml:lang="en">SSRT101856</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECUNIA</vuln:source>
      <vuln:reference href="http://secunia.com/advisories/59800" xml:lang="en">59800</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/505120" xml:lang="en">VU#505120</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/70954" xml:lang="en">70954</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.securitysift.com/exploiting-ms14-066-cve-2014-6321-aka-winshock/" xml:lang="en">http://www.securitysift.com/exploiting-ms14-066-cve-2014-6321-aka-winshock/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/ncas/alerts/TA14-318A" xml:lang="en">TA14-318A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MS</vuln:source>
      <vuln:reference href="https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-066" xml:lang="en">MS14-066</vuln:reference>
    </vuln:references>
    <vuln:summary>Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via crafted packets, aka "Microsoft Schannel Remote Code Execution Vulnerability."</vuln:summary>
  </entry>
  <entry id="CVE-2014-7876">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_2_firmware:2.25"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_4_firmware:2.01"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:integrated_lights-out_chassis_management_firmware:1.29"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:hp:integrated_lights-out_2_firmware:2.25</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_4_firmware:2.01</vuln:product>
      <vuln:product>cpe:/o:hp:integrated_lights-out_chassis_management_firmware:1.29</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-7876</vuln:cve-id>
    <vuln:published-datetime>2015-03-31T06:59:00.073-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:11:59.170-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031972" xml:lang="en">1031972</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04486432" xml:lang="en">SSRT101745</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (CM) firmware before 1.30 allows remote attackers to gain privileges, execute arbitrary code, or cause a denial of service via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-7879">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:hp:hp-ux:b.11.11"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:hp-ux:b.11.23"/>
        <cpe-lang:fact-ref name="cpe:/o:hp:hp-ux:b.11.31"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:hp:hp-ux:b.11.11</vuln:product>
      <vuln:product>cpe:/o:hp:hp-ux:b.11.23</vuln:product>
      <vuln:product>cpe:/o:hp:hp-ux:b.11.31</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-7879</vuln:cve-id>
    <vuln:published-datetime>2014-12-10T16:59:13.320-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:11:59.450-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>8.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-287"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04511778" xml:lang="en">SSRT101489</vuln:reference>
    </vuln:references>
    <vuln:summary>HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpam_updbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-7881">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:insight_control_server_deployment:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:insight_control_server_deployment:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-7881</vuln:cve-id>
    <vuln:published-datetime>2015-01-15T17:59:00.053-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:11:59.607-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04537915" xml:lang="en">SSRT101875</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerability in the server in HP Insight Control allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-7883">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:universal_configuration_management_database:9.05"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:universal_configuration_management_database:10.01"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:universal_configuration_management_database:10.11"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:universal_configuration_management_database:9.05</vuln:product>
      <vuln:product>cpe:/a:hp:universal_configuration_management_database:10.01</vuln:product>
      <vuln:product>cpe:/a:hp:universal_configuration_management_database:10.11</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-7883</vuln:cve-id>
    <vuln:published-datetime>2015-02-15T15:59:00.120-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:11:59.827-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/867593" xml:lang="en">VU#867593</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031688" xml:lang="en">1031688</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04553906" xml:lang="en">SSRT101848</vuln:reference>
    </vuln:references>
    <vuln:summary>HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a response.</vuln:summary>
  </entry>
  <entry id="CVE-2014-7884">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:arcsight_logger:6.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:arcsight_logger:6.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-7884</vuln:cve-id>
    <vuln:published-datetime>2015-03-13T21:59:02.987-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:11:59.983-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/868948" xml:lang="en">VU#868948</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031921" xml:lang="en">1031921</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04562193" xml:lang="en">SSRT101697</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-7885">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:microfocus:arcsight_enterprise_security_manager:6.5c"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:microfocus:arcsight_enterprise_security_manager:6.5c</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-7885</vuln:cve-id>
    <vuln:published-datetime>2015-03-13T21:59:05.610-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:00.077-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/868948" xml:lang="en">VU#868948</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031921" xml:lang="en">1031921</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04562193" xml:lang="en">SSRT101697</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager (ESM) before 6.8c have unknown impact and remote attack vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-7888">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:ole_point_of_sale_driver:1.13.001"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:hybrid_pos_printer_with_micr_us_fk184aa:-"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:pusb_thermal_receipt_printer_f7m67aa:-"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:pusb_thermal_receipt_printer_fk224aa:-"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:serialusb_thermal_receipt_printer_bm476aa:-"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:value_serial%2fusb_receipt_printer_f7m66aa:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:ole_point_of_sale_driver:1.13.001</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-7888</vuln:cve-id>
    <vuln:published-datetime>2015-03-09T13:59:00.063-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:00.187-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031840" xml:lang="en">1031840</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185" xml:lang="en">SSRT101696</vuln:reference>
    </vuln:references>
    <vuln:summary>The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSMICR.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt printers, and Value Serial/USB Receipt printers, aka ZDI-CAN-2512.</vuln:summary>
  </entry>
  <entry id="CVE-2014-7889">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:ole_point_of_sale_driver:1.13.001"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:graphical_pos_pole_display_qz704aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:lcd_pole_display_f7a93aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:pos_pole_display_fk225aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:retail_integrated_2x20_complex_g7g29aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:retail_integrated_2x20_display_g6u79aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:retail_rp7_vfd_customer_display_qz701aa"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:ole_point_of_sale_driver:1.13.001</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-7889</vuln:cve-id>
    <vuln:published-datetime>2015-03-09T13:59:01.877-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:00.343-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031840" xml:lang="en">1031840</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185" xml:lang="en">SSRT101695</vuln:reference>
    </vuln:references>
    <vuln:summary>The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSLineDisplay.ocx for Retail RP7 VFD Customer Display monitors, Retail Integrated 2x20 Display monitors, Retail Integrated 2x20 Complex monitors, POS Pole Display monitors, Graphical POS Pole Display monitors, and LCD Pole Display monitors, aka ZDI-CAN-2511.</vuln:summary>
  </entry>
  <entry id="CVE-2014-7890">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:ole_point_of_sale_driver:1.13.001"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:pos_keyboard_fk221aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:pos_keyboard_with_msr_fk218aa"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:ole_point_of_sale_driver:1.13.001</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-7890</vuln:cve-id>
    <vuln:published-datetime>2015-03-09T13:59:02.987-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:00.513-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031840" xml:lang="en">1031840</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185" xml:lang="en">SSRT101694</vuln:reference>
    </vuln:references>
    <vuln:summary>The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSToneIndicator.ocx for POS keyboards and POS keyboards with MSR, aka ZDI-CAN-2510.</vuln:summary>
  </entry>
  <entry id="CVE-2014-7891">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:ole_point_of_sale_driver:1.13.001"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:pos_keyboard_fk221aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:pos_keyboard_with_msr_fk218aa"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:ole_point_of_sale_driver:1.13.001</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-7891</vuln:cve-id>
    <vuln:published-datetime>2015-03-09T13:59:03.890-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:00.623-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031840" xml:lang="en">1031840</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185" xml:lang="en">SSRT101693</vuln:reference>
    </vuln:references>
    <vuln:summary>The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSPOSKeyboard.ocx for POS keyboards and POS keyboards with MSR, aka ZDI-CAN-2509.</vuln:summary>
  </entry>
  <entry id="CVE-2014-7892">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:ole_point_of_sale_driver:1.13.001"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:integrated_single_head_msr_w%2fo_sred_j1a33aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:integrated_single_head_w%2fo_msr_sred_j1a34aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:mini_msr_fk186aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:pos_keyboard_fk221aa:-"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:pos_keyboard_with_msr_fk218aa:-"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:retail_integrated_dual-head_msr_qz673aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:rp7_single_head_msr_w%2fo_sred_k1k15aa"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:ole_point_of_sale_driver:1.13.001</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-7892</vuln:cve-id>
    <vuln:published-datetime>2015-03-09T13:59:04.907-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:00.747-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031840" xml:lang="en">1031840</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185" xml:lang="en">SSRT101692</vuln:reference>
    </vuln:references>
    <vuln:summary>The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSMSR.ocx for Mini MSR magnetic stripe readers, Retail Integrated Dual-Head MSR magnetic stripe readers, Integrated Single Head MSR w/o SRED magnetic stripe readers, Integrated Single Head w/o MSR SRED magnetic stripe readers, RP7 Single Head MSR w/o SRED magnetic stripe readers, POS keyboards, and POS keyboards with MSR, aka ZDI-CAN-2508.</vuln:summary>
  </entry>
  <entry id="CVE-2014-7893">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:ole_point_of_sale_driver:1.13.001"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:hybrid_pos_printer_with_micr_us_fk184aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:pusb_thermal_receipt_printer_f7m67aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:pusb_thermal_receipt_printer_fk224aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:serialusb_thermal_receipt_printer_bm476aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:value_serial%2fusb_receipt_printer_f7m66aa"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:ole_point_of_sale_driver:1.13.001</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-7893</vuln:cve-id>
    <vuln:published-datetime>2015-03-09T13:59:05.847-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:01.140-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031840" xml:lang="en">1031840</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185" xml:lang="en">SSRT101691</vuln:reference>
    </vuln:references>
    <vuln:summary>The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSCheckScanner.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt printers, and Value Serial/USB Receipt printers, aka ZDI-CAN-2507.</vuln:summary>
  </entry>
  <entry id="CVE-2014-7894">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:ole_point_of_sale_driver:1.13.001"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:hybrid_pos_printer_with_micr_us_fk184aa:-"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:pusb_thermal_receipt_printer_f7m67aa:-"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:pusb_thermal_receipt_printer_fk224aa:-"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:serialusb_thermal_receipt_printer_bm476aa:-"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:value_serial%2fusb_receipt_printer_f7m66aa:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:ole_point_of_sale_driver:1.13.001</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-7894</vuln:cve-id>
    <vuln:published-datetime>2015-03-09T13:59:06.597-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:01.280-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031840" xml:lang="en">1031840</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185" xml:lang="en">SSRT101690</vuln:reference>
    </vuln:references>
    <vuln:summary>The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSPOSPrinter.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt printers, and Value Serial/USB Receipt printers, aka ZDI-CAN-2506.</vuln:summary>
  </entry>
  <entry id="CVE-2014-7895">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:ole_point_of_sale_driver:1.13.001"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:hybrid_pos_printer_with_micr_us_fk184aa:-"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:pusb_thermal_receipt_printer_f7m67aa:-"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:pusb_thermal_receipt_printer_fk224aa:-"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:serialusb_thermal_receipt_printer_bm476aa:-"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:usb_standard_duty_cash_drawer_e8e45aa:-"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:value_serial%2fusb_receipt_printer_f7m66aa:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:ole_point_of_sale_driver:1.13.001</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-7895</vuln:cve-id>
    <vuln:published-datetime>2015-03-09T13:59:07.453-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:01.373-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031840" xml:lang="en">1031840</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185" xml:lang="en">SSRT101689</vuln:reference>
    </vuln:references>
    <vuln:summary>The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSCashDrawer.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt printers, Value Serial/USB Receipt printers, and USB Standard Duty cash drawers, aka ZDI-CAN-2505.</vuln:summary>
  </entry>
  <entry id="CVE-2014-7897">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:ole_point_of_sale_driver:1.13.001"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:2d_value_wireless_scanner_k3l28aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:imaging_barcode_scanner_bw868aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:linear_barcode_scanner_qy405aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:presentation_barcode_scanner_qy439aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:retail_integrated_barcode_scanner_e1l07aa"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:wireless_barcode_scanner_e6p34aa"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:ole_point_of_sale_driver:1.13.001</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-7897</vuln:cve-id>
    <vuln:published-datetime>2015-03-09T13:59:08.500-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:01.547-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031840" xml:lang="en">1031840</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185" xml:lang="en">SSRT101689</vuln:reference>
    </vuln:references>
    <vuln:summary>The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSScanner.ocx for Imaging Barcode scanners, Linear Barcode scanners, Presentation Barcode scanners, Retail Integrated Barcode scanners, Wireless Barcode scanners, and 2D Value Wireless scanners.</vuln:summary>
  </entry>
  <entry id="CVE-2014-7898">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:ole_point_of_sale_driver:1.13.001"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:ole_point_of_sale_driver:1.13.001</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-7898</vuln:cve-id>
    <vuln:published-datetime>2015-03-09T13:59:09.470-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:01.687-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031840" xml:lang="en">1031840</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04583185" xml:lang="en">SSRT101689</vuln:reference>
    </vuln:references>
    <vuln:summary>The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2014-8183">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.2.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.2.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.4.3"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.4.4"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.4.5"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.7.3"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.7.4"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.7.5"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.8.2"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.8.3"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.8.4"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.9.3"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.10.2"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.10.3"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.10.4"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.11.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.11.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.11.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.11.1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.11.2"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.11.3"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.11.4"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.12.2"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.12.3"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.12.4"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.13.2"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.13.3"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.13.4"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.14.1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.14.2"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.14.3"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.15.1"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.15.2"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.15.3"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.15.4"/>
        <cpe-lang:fact-ref name="cpe:/a:theforeman:foreman:1.15.5"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:redhat:satellite:6.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:redhat:satellite:6.0</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.0</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.0.1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.2.0</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.2.0:rc1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.2.0:rc2</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.2.1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.2.2</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.2.3</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.3.0</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.3.1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.3.2</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.4.0</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.4.1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.4.2</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.4.3</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.4.4</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.4.5</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.5.0</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.5.1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.5.2</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.5.3</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.6.0</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.6.1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.6.3</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.7.0</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.7.1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.7.2</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.7.3</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.7.4</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.7.5</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.8.0</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.8.1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.8.2</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.8.3</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.8.4</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.9.0</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.9.1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.9.2</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.9.3</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.10.0</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.10.1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.10.2</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.10.3</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.10.4</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.11.0</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.11.0:rc1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.11.0:rc2</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.11.0:rc3</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.11.1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.11.2</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.11.3</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.11.4</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.12.0</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.12.1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.12.2</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.12.3</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.12.4</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.13.0</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.13.1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.13.2</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.13.3</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.13.4</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.14.0</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.14.1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.14.2</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.14.3</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.15.0</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.15.1</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.15.2</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.15.3</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.15.4</vuln:product>
      <vuln:product>cpe:/a:theforeman:foreman:1.15.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-8183</vuln:cve-id>
    <vuln:published-datetime>2019-08-01T10:15:10.847-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:06.843-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-284"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8183" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8183</vuln:reference>
    </vuln:references>
    <vuln:summary>It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations.</vuln:summary>
  </entry>
  <entry id="CVE-2014-8184">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:liblouis:liblouis:2.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:liblouis:liblouis:2.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:liblouis:liblouis:2.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:liblouis:liblouis:2.5.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:liblouis:liblouis:2.5.0</vuln:product>
      <vuln:product>cpe:/a:liblouis:liblouis:2.5.1</vuln:product>
      <vuln:product>cpe:/a:liblouis:liblouis:2.5.2</vuln:product>
      <vuln:product>cpe:/a:liblouis:liblouis:2.5.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-8184</vuln:cve-id>
    <vuln:published-datetime>2019-08-02T09:15:11.217-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:07.013-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8184" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8184</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/liblouis/liblouis/issues/425" xml:lang="en">https://github.com/liblouis/liblouis/issues/425</vuln:reference>
    </vuln:references>
    <vuln:summary>A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable() in liblouis. An attacker could create a malicious file that would cause applications that use liblouis (such as Orca) to crash, or potentially execute arbitrary code when opened.</vuln:summary>
  </entry>
  <entry id="CVE-2014-9186">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2014-9186</vuln:cve-id>
    <vuln:published-datetime>2019-04-08T12:29:00.493-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:24.250-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01</vuln:reference>
    </vuln:references>
    <vuln:summary>A file inclusion vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, which could lead to accepting an arbitrary file into the function, and potential information disclosure or remote code execution. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.</vuln:summary>
  </entry>
  <entry id="CVE-2014-9187">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2014-9187</vuln:cve-id>
    <vuln:published-datetime>2019-03-25T16:29:00.253-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:24.390-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules, which could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.</vuln:summary>
  </entry>
  <entry id="CVE-2014-9189">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2014-9189</vuln:cve-id>
    <vuln:published-datetime>2019-03-25T16:29:00.300-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:24.530-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules that could lead to possible remote code execution, dynamic memory corruption, or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.</vuln:summary>
  </entry>
  <entry id="CVE-2014-9709">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:alpha4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:alpha5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:alpha6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.2:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.4:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.6:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.6:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.7:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.7:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.8:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.8:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.9:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.9:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.10:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.10:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.11:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.11:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.12:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.12:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.13:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.13:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.14:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.14:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.15:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.15:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.16:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.16:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.17:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.17:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.18:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.18:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.19:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.19:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.20"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.20:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.20:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:alpha4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:alpha5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.3:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.4:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.4:rc1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:opensuse:opensuse:13.1"/>
        <cpe-lang:fact-ref name="cpe:/o:opensuse:opensuse:13.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:libgd:libgd:2.1.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:7.0"/>
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:8.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:15.10"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:libgd:libgd:2.1.1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:alpha3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:alpha4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:alpha5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:alpha6</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:beta1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:beta2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:beta3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:beta4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.2:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.4:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.4:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.5:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.5:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.6</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.6:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.6:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.7</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.7:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.7:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.8</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.8:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.8:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.9</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.9:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.9:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.10</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.10:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.10:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.11</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.11:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.11:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.12</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.12:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.12:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.13</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.13:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.13:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.14</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.14:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.14:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.15</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.15:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.15:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.16</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.16:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.16:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.17</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.17:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.17:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.18</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.18:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.18:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.19</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.19:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.19:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.20</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.20:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.20:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:alpha3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:alpha4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:alpha5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:beta1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:beta2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:beta3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:beta4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.1:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.1:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.3:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.4:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.4:rc1</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:15.10</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:7.0</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:8.0</vuln:product>
      <vuln:product>cpe:/o:opensuse:opensuse:13.1</vuln:product>
      <vuln:product>cpe:/o:opensuse:opensuse:13.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2014-9709</vuln:cve-id>
    <vuln:published-datetime>2015-03-30T06:59:05.677-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:35.267-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://advisories.mageia.org/MGASA-2015-0040.html" xml:lang="en">http://advisories.mageia.org/MGASA-2015-0040.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html" xml:lang="en">APPLE-SA-2015-09-30-3</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html" xml:lang="en">SUSE-SU-2015:0868</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html" xml:lang="en">openSUSE-SU-2015:0644</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143403519711434&amp;w=2" xml:lang="en">SSRT102066</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://php.net/ChangeLog-5.php" xml:lang="en">http://php.net/ChangeLog-5.php</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1053.html" xml:lang="en">RHSA-2015:1053</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1066.html" xml:lang="en">RHSA-2015:1066</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1135.html" xml:lang="en">RHSA-2015:1135</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1218.html" xml:lang="en">RHSA-2015:1218</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2015/dsa-3215" xml:lang="en">DSA-3215</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2015:153" xml:lang="en">MDVSA-2015:153</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/73306" xml:lang="en">73306</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033703" xml:lang="en">1033703</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-2987-1" xml:lang="en">USN-2987-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bitbucket.org/libgd/gd-libgd/commits/47eb44b2e90ca88a08dca9f9a1aa9041e9587f43" xml:lang="en">https://bitbucket.org/libgd/gd-libgd/commits/47eb44b2e90ca88a08dca9f9a1aa9041e9587f43</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugs.php.net/bug.php?id=68601" xml:lang="en">https://bugs.php.net/bug.php?id=68601</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1188639" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1188639</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="https://security.gentoo.org/glsa/201606-10" xml:lang="en">GLSA-201606-10</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="https://security.gentoo.org/glsa/201607-04" xml:lang="en">GLSA-201607-04</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.apple.com/HT205267" xml:lang="en">https://support.apple.com/HT205267</vuln:reference>
    </vuln:references>
    <vuln:summary>The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.</vuln:summary>
  </entry>
  <entry id="CVE-2015-0796">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2015-0796</vuln:cve-id>
    <vuln:published-datetime>2018-03-02T15:29:00.207-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:12:58.687-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-59"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.suse.com/show_bug.cgi?id=941099" xml:lang="en">https://bugzilla.suse.com/show_bug.cgi?id=941099</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/openSUSE/open-build-service/commit/474a3db19498765f0118ba3dbc0b1cc90b0097fc" xml:lang="en">https://github.com/openSUSE/open-build-service/commit/474a3db19498765f0118ba3dbc0b1cc90b0097fc</vuln:reference>
    </vuln:references>
    <vuln:summary>In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like symlinks or device nodes, which could allow buildservice users to break of confinement or cause denial of service attacks on the source service.</vuln:summary>
  </entry>
  <entry id="CVE-2015-1006">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2015-1006</vuln:cve-id>
    <vuln:published-datetime>2019-05-10T10:29:00.233-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:03.360-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-15-120-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-15-120-01</vuln:reference>
    </vuln:references>
    <vuln:summary>A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.4006, PAC Display Basic versions prior to R9.4f, PAC Display Professional versions prior to R9.4f, OptoOPCServer versions prior to R9.4c, and OptoDataLink version R9.4d and prior versions that were installed by PAC Project installer, versions prior to R9.4006, is susceptible to a heap-based buffer overflow condition that may allow remote code execution on the target system. Opto 22 suggests upgrading to the new product version as soon as possible.</vuln:summary>
  </entry>
  <entry id="CVE-2015-1007">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:opto22:optodatalink:r9.4d"/>
        <cpe-lang:fact-ref name="cpe:/a:opto22:optoopcserver:r9.4c"/>
        <cpe-lang:fact-ref name="cpe:/a:opto22:pac_display:r9.4f::~~basic~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:opto22:pac_display:r9.4f::~~professional~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:opto22:pac_project:r9.4006::~~basic~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:opto22:pac_project:r9.4006::~~professional~~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:opto22:optodatalink:r9.4d</vuln:product>
      <vuln:product>cpe:/a:opto22:optoopcserver:r9.4c</vuln:product>
      <vuln:product>cpe:/a:opto22:pac_display:r9.4f::~~basic~~~</vuln:product>
      <vuln:product>cpe:/a:opto22:pac_display:r9.4f::~~professional~~~</vuln:product>
      <vuln:product>cpe:/a:opto22:pac_project:r9.4006::~~basic~~~</vuln:product>
      <vuln:product>cpe:/a:opto22:pac_project:r9.4006::~~professional~~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-1007</vuln:cve-id>
    <vuln:published-datetime>2019-03-25T15:29:00.243-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:03.563-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-15-120-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-15-120-01</vuln:reference>
    </vuln:references>
    <vuln:summary>A specially crafted configuration file could be used to cause a stack-based buffer overflow condition in the OPCTest.exe, which may allow remote code execution on Opto 22 PAC Project Professional versions prior to R9.4008, PAC Project Basic versions prior to R9.4008, PAC Display Basic versions prior to R9.4g, PAC Display Professional versions prior to R9.4g, OptoOPCServer version R9.4c and prior that were installed by PAC Project installer, versions prior to R9.4008, and OptoDataLink version R9.4d and prior that were installed by PAC Project installer, versions prior to R9.4008. Opto 22 suggests upgrading to the new product version as soon as possible.</vuln:summary>
  </entry>
  <entry id="CVE-2015-1012">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:pfizer:lifecare_pca_infusion_system_firmware:5.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:pfizer:lifecare_pca_infusion_system:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:pfizer:lifecare_pca_infusion_system_firmware:5.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-1012</vuln:cve-id>
    <vuln:published-datetime>2019-03-25T15:29:00.290-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:03.783-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-15-125-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-15-125-01</vuln:reference>
    </vuln:references>
    <vuln:summary>Wireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System. According to Hospira, version 3 of the LifeCare PCA Infusion System is not indicated for wireless use, is not shipped with wireless capabilities, and should not be modified to be used in a wireless capacity in a clinical setting. Hospira has developed a new version of the PCS Infusion System, version 7.0 that addresses the identified vulnerabilities. Version 7.0 has Port 20/FTP and Port 23/TELNET closed by default to prevent unauthorized access.</vuln:summary>
  </entry>
  <entry id="CVE-2015-1014">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:schneider-electric:opc_factory_server:3.5"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:schneider-electric:citectscada:7.20"/>
          <cpe-lang:fact-ref name="cpe:/a:schneider-electric:citectscada:7.30"/>
          <cpe-lang:fact-ref name="cpe:/a:schneider-electric:citectscada:7.40"/>
          <cpe-lang:fact-ref name="cpe:/a:schneider-electric:scada_expert_vijeo_citect:7.20"/>
          <cpe-lang:fact-ref name="cpe:/a:schneider-electric:scada_expert_vijeo_citect:7.30"/>
          <cpe-lang:fact-ref name="cpe:/a:schneider-electric:scada_expert_vijeo_citect:7.40"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:schneider-electric:opc_factory_server:3.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-1014</vuln:cve-id>
    <vuln:published-datetime>2019-03-25T15:29:00.337-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:03.937-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.4</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-427"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-15-141-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-15-141-01</vuln:reference>
    </vuln:references>
    <vuln:summary>A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider Electric OFS v3.5 with version v7.40 of SCADA Expert Vijeo Citect/CitectSCADA, OFS v3.5 with version v7.30 of Vijeo Citect/CitectSCADA, and OFS v3.5 with version v7.20 of Vijeo Citect/CitectSCADA.. If the application attempts to open that file, the application could crash or allow the attacker to execute arbitrary code. Schneider Electric recommends vulnerable users upgrade the OFS to V3.5 and install the latest service pack (SP 6 or newer) for their associated version.</vuln:summary>
  </entry>
  <entry id="CVE-2015-1316">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2015-1316</vuln:cve-id>
    <vuln:published-datetime>2019-04-22T12:29:00.647-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:10.847-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-320"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://bazaar.launchpad.net/~juju-core/juju-core/trunk/revision/4119" xml:lang="en">http://bazaar.launchpad.net/~juju-core/juju-core/trunk/revision/4119</vuln:reference>
    </vuln:references>
    <vuln:summary>Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key.</vuln:summary>
  </entry>
  <entry id="CVE-2015-1320">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha4"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:alpha5"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:canonical:metal_as_a_service:1.9.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:-</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha3</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha4</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:alpha5</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:beta1</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:beta2</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:rc1</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:rc2</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:rc3</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.0:rc4</vuln:product>
      <vuln:product>cpe:/a:canonical:metal_as_a_service:1.9.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-1320</vuln:cve-id>
    <vuln:published-datetime>2019-04-22T12:29:00.723-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:11.047-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-255"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://launchpad.net/maas/+milestone/1.9.2" xml:lang="en">https://launchpad.net/maas/+milestone/1.9.2</vuln:reference>
    </vuln:references>
    <vuln:summary>The SeaMicro provisioning of Ubuntu MAAS logs credentials, including username and password, for the management interface. This issue affects Ubuntu MAAS versions prior to 1.9.2.</vuln:summary>
  </entry>
  <entry id="CVE-2015-1326">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.5"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.6"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.7"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.7.1"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.7.2"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.8"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.9"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.10"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.10.2"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.10.3"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.11"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.11.1"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.11.2"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.11.3"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.11.4"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.12"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.13"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.14"/>
        <cpe-lang:fact-ref name="cpe:/a:python-dbusmock_project:python-dbusmock:0.15"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.0.1</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.0.2</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.0.3</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.1</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.1.1</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.1.2</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.1.3</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.2.0</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.2.1</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.2.2</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.3</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.3.1</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.4.0</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.5</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.6</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.6.1</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.6.2</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.6.3</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.7</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.7.1</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.7.2</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.8</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.8.1</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.9</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.9.1</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.9.2</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.10</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.10.1</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.10.2</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.10.3</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.11</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.11.1</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.11.2</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.11.3</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.11.4</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.12</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.13</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.14</vuln:product>
      <vuln:product>cpe:/a:python-dbusmock_project:python-dbusmock:0.15</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-1326</vuln:cve-id>
    <vuln:published-datetime>2019-04-22T12:29:00.770-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:11.283-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/martinpitt/python-dbusmock/commit/4e7d0df9093" xml:lang="en">https://github.com/martinpitt/python-dbusmock/commit/4e7d0df9093</vuln:reference>
    </vuln:references>
    <vuln:summary>python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method could be tricked into executing malicious code if an attacker supplies a .pyc file.</vuln:summary>
  </entry>
  <entry id="CVE-2015-1327">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:15.04"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:15.04</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-1327</vuln:cve-id>
    <vuln:published-datetime>2019-04-22T12:29:00.833-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:11.423-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bazaar.launchpad.net/~phablet-team/content-hub/trunk/revision/212" xml:lang="en">https://bazaar.launchpad.net/~phablet-team/content-hub/trunk/revision/212</vuln:reference>
    </vuln:references>
    <vuln:summary>Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which would then send a copy of that file to another app.</vuln:summary>
  </entry>
  <entry id="CVE-2015-1340">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:linuxcontainers:lxd:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:linuxcontainers:lxd:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-1340</vuln:cve-id>
    <vuln:published-datetime>2019-04-22T12:29:00.897-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:11.830-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-362"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/lxc/lxd/commit/19c6961cc1012c8a529f20807328a9357f5034f4" xml:lang="en">https://github.com/lxc/lxd/commit/19c6961cc1012c8a529f20807328a9357f5034f4</vuln:reference>
    </vuln:references>
    <vuln:summary>LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice.</vuln:summary>
  </entry>
  <entry id="CVE-2015-1343">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:15.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:15.10</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-1343</vuln:cve-id>
    <vuln:published-datetime>2019-04-22T12:29:01.053-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:12.080-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-532"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bugs.launchpad.net/ubuntu/+source/unity-scope-gdrive/+bug/1509076" xml:lang="en">https://bugs.launchpad.net/ubuntu/+source/unity-scope-gdrive/+bug/1509076</vuln:reference>
    </vuln:references>
    <vuln:summary>All versions of unity-scope-gdrive logs search terms to syslog.</vuln:summary>
  </entry>
  <entry id="CVE-2015-1352">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.10.5"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.7"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:php:php:5.6.7</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.10.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-1352</vuln:cve-id>
    <vuln:published-datetime>2015-03-30T06:59:08.770-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:12.500-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://git.php.net/?p=php-src.git;a=commit;h=124fb22a13fafa3648e4e15b4f207c7096d8155e" xml:lang="en">http://git.php.net/?p=php-src.git;a=commit;h=124fb22a13fafa3648e4e15b4f207c7096d8155e</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html" xml:lang="en">APPLE-SA-2015-09-30-3</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143403519711434&amp;w=2" xml:lang="en">SSRT102066</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://openwall.com/lists/oss-security/2015/01/24/9" xml:lang="en">[oss-security] 20150124 Re: CVE Request: PHP</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1053.html" xml:lang="en">RHSA-2015:1053</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2015:079" xml:lang="en">MDVSA-2015:079</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/71932" xml:lang="en">71932</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugs.php.net/bug.php?id=68741" xml:lang="en">https://bugs.php.net/bug.php?id=68741</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="https://security.gentoo.org/glsa/201606-10" xml:lang="en">GLSA-201606-10</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.apple.com/HT205267" xml:lang="en">https://support.apple.com/HT205267</vuln:reference>
    </vuln:references>
    <vuln:summary>The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate token extraction for table names, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name.</vuln:summary>
  </entry>
  <entry id="CVE-2015-1592">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:7.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.2::~~advanced~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.2::~~open_source~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.2::~~pro~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.3::~~advanced~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.3::~~open_source~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.3::~~pro~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.4::~~advanced~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.4::~~open_source~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.4::~~pro~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.5::~~advanced~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.5::~~open_source~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.5::~~pro~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.6::~~advanced~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.6::~~open_source~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.6::~~pro~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.7::~~advanced~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.7::~~open_source~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.7::~~pro~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.8::~~advanced~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.8::~~open_source~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.8::~~pro~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.9::~~advanced~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.9::~~open_source~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.9::~~pro~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.10::~~advanced~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.10::~~open_source~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sixapart:movable_type:5.2.10::~~pro~~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.2::~~advanced~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.2::~~open_source~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.2::~~pro~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.3::~~advanced~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.3::~~open_source~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.3::~~pro~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.4::~~advanced~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.4::~~open_source~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.4::~~pro~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.5::~~advanced~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.5::~~open_source~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.5::~~pro~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.6::~~advanced~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.6::~~open_source~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.6::~~pro~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.7::~~advanced~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.7::~~open_source~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.7::~~pro~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.8::~~advanced~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.8::~~open_source~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.8::~~pro~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.9::~~advanced~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.9::~~open_source~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.9::~~pro~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.10::~~advanced~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.10::~~open_source~~~</vuln:product>
      <vuln:product>cpe:/a:sixapart:movable_type:5.2.10::~~pro~~~</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-1592</vuln:cve-id>
    <vuln:published-datetime>2015-02-19T10:59:16.580-05:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-08T20:20:52.437-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-04T14:28:22.867-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-74"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2015/02/12/17" xml:lang="en">[oss-security] 20150212 Re: CVE request: MovableType before 5.2.12 - Movable Type</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://www.openwall.com/lists/oss-security/2015/02/12/2" xml:lang="en">[oss-security] 20150212 CVE request: MovableType before 5.2.12</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/72606" xml:lang="en">72606</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031777" xml:lang="en">1031777</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/100912" xml:lang="en">movable-type-cve20151592-file-include(100912)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://movabletype.org/news/2015/02/movable_type_607_and_5212_released_to_close_security_vulnera.html" xml:lang="en">https://movabletype.org/news/2015/02/movable_type_607_and_5212_released_to_close_security_vulnera.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="https://www.debian.org/security/2015/dsa-3183" xml:lang="en">DSA-3183</vuln:reference>
    </vuln:references>
    <vuln:summary>Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2015-2107">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:operations_manager_i_management_pack:1.0"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:sap:netweaver:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:operations_manager_i_management_pack:1.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-2107</vuln:cve-id>
    <vuln:published-datetime>2015-03-13T21:59:15.533-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:28.237-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-284"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04588084" xml:lang="en">SSRT101971</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031870" xml:lang="en">1031870</vuln:reference>
    </vuln:references>
    <vuln:summary>HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges.</vuln:summary>
  </entry>
  <entry id="CVE-2015-2110">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:loadrunner:11.52"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:loadrunner:11.52</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-2110</vuln:cve-id>
    <vuln:published-datetime>2015-05-25T13:59:00.093-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:28.487-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04594015" xml:lang="en">SSRT101319</vuln:reference>
    </vuln:references>
    <vuln:summary>Buffer overflow in HP LoadRunner 11.52 allows remote attackers to execute arbitrary code via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2015-2112">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:easy_tools:3.0.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:t510"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t520"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t5540"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t5740"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t5740e"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t610"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t620"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t820"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:easy_tools:3.0.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-2112</vuln:cve-id>
    <vuln:published-datetime>2015-04-14T18:59:14.307-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:28.657-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/73961" xml:lang="en">73961</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04629160" xml:lang="en">SSRT101680</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote authenticated users to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2015-2113">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:hp:easy_tools:3.0.1"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:hp:t510"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t520"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t5540"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t5740"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t5740e"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t610"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t620"/>
          <cpe-lang:fact-ref name="cpe:/h:hp:t820"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:easy_tools:3.0.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-2113</vuln:cve-id>
    <vuln:published-datetime>2015-04-14T18:59:15.400-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:28.847-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/73964" xml:lang="en">73964</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04629160" xml:lang="en">SSRT101680</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote attackers to execute arbitrary code via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2015-2118">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:access_control:12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:access_control:12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:access_control:12.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:access_control:12.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:access_control:13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:access_control:14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:access_control:14.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:access_control:12.0</vuln:product>
      <vuln:product>cpe:/a:hp:access_control:12.1</vuln:product>
      <vuln:product>cpe:/a:hp:access_control:12.2</vuln:product>
      <vuln:product>cpe:/a:hp:access_control:12.3</vuln:product>
      <vuln:product>cpe:/a:hp:access_control:13.0</vuln:product>
      <vuln:product>cpe:/a:hp:access_control:14.0</vuln:product>
      <vuln:product>cpe:/a:hp:access_control:14.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-2118</vuln:cve-id>
    <vuln:published-datetime>2015-05-25T13:59:01.310-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:29.173-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04649315" xml:lang="en">SSRT102033</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in the Secure Pull Print and Security Pull Print components in HP Access Control (AC) Software 12.x through 14.x before 14.1.2 allows remote authenticated users to obtain sensitive information via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2015-2125">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hp:webinspect:7.8"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:webinspect:8.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:webinspect:9.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:webinspect:10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:webinspect:10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:webinspect:10.2"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:webinspect:10.3"/>
        <cpe-lang:fact-ref name="cpe:/a:hp:webinspect:10.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hp:webinspect:7.8</vuln:product>
      <vuln:product>cpe:/a:hp:webinspect:8.1</vuln:product>
      <vuln:product>cpe:/a:hp:webinspect:9.2</vuln:product>
      <vuln:product>cpe:/a:hp:webinspect:10.0</vuln:product>
      <vuln:product>cpe:/a:hp:webinspect:10.1</vuln:product>
      <vuln:product>cpe:/a:hp:webinspect:10.2</vuln:product>
      <vuln:product>cpe:/a:hp:webinspect:10.3</vuln:product>
      <vuln:product>cpe:/a:hp:webinspect:10.4</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-2125</vuln:cve-id>
    <vuln:published-datetime>2015-06-07T14:59:06.423-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:29.610-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-611"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/75036" xml:lang="en">75036</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032478" xml:lang="en">1032478</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04695307" xml:lang="en">SSRT102038</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/37250/" xml:lang="en">37250</vuln:reference>
    </vuln:references>
    <vuln:summary>Unspecified vulnerability in HP WebInspect 7.x through 10.4 before 10.4 update 1 allows remote authenticated users to bypass intended access restrictions via unknown vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2015-2301">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:10.04::~~lts~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:14.10"/>
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:7.0"/>
        <cpe-lang:fact-ref name="cpe:/o:opensuse:opensuse:13.1"/>
        <cpe-lang:fact-ref name="cpe:/o:opensuse:opensuse:13.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:alpha4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:alpha5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:alpha6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.2:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.4:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.6"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.6:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.6:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.7"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.7:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.7:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.8"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.8:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.8:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.9"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.9:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.9:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.10"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.10:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.10:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.11"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.11:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.11:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.12"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.12:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.12:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.13"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.13:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.13:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.14"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.14:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.14:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.15"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.15:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.15:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.16"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.16:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.16:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.17"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.17:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.17:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.18"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.18:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.18:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.19"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.19:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.19:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.20"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.20:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.20:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.21"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.21:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.5.21:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:alpha4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:alpha5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:beta4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.1:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.3:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.4:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.5"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.5:-"/>
        <cpe-lang:fact-ref name="cpe:/a:php:php:5.6.5:rc1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.10.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_desktop:7.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_hpc_node:7.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_hpc_node_eus:7.1"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_server:7.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_server_eus:7.1"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_workstation:7.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:php:php:5.5.0</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:alpha3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:alpha4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:alpha5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:alpha6</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:beta1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:beta2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:beta3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:beta4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.2:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.2:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.4:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.4:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.5:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.5:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.6</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.6:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.6:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.7</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.7:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.7:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.8</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.8:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.8:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.9</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.9:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.9:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.10</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.10:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.10:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.11</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.11:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.11:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.12</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.12:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.12:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.13</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.13:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.13:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.14</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.14:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.14:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.15</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.15:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.15:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.16</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.16:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.16:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.17</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.17:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.17:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.18</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.18:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.18:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.19</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.19:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.19:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.20</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.20:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.20:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.21</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.21:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.5.21:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:alpha3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:alpha4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:alpha5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:beta1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:beta2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:beta3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:beta4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:rc2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:rc3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.0:rc4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.1:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.1:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.2</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.3</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.3:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.3:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.4</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.4:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.4:rc1</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.5</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.5:-</vuln:product>
      <vuln:product>cpe:/a:php:php:5.6.5:rc1</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.10.4</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:10.04::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:14.10</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:7.0</vuln:product>
      <vuln:product>cpe:/o:opensuse:opensuse:13.1</vuln:product>
      <vuln:product>cpe:/o:opensuse:opensuse:13.2</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_desktop:7.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_hpc_node:7.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_hpc_node_eus:7.1</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_server:7.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_server_eus:7.1</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_workstation:7.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-2301</vuln:cve-id>
    <vuln:published-datetime>2015-03-30T06:59:10.630-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:13:33.157-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://git.php.net/?p=php-src.git;a=commit;h=b2cf3f064b8f5efef89bb084521b61318c71781b" xml:lang="en">http://git.php.net/?p=php-src.git;a=commit;h=b2cf3f064b8f5efef89bb084521b61318c71781b</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html" xml:lang="en">APPLE-SA-2015-09-30-3</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html" xml:lang="en">SUSE-SU-2015:0868</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html" xml:lang="en">openSUSE-SU-2015:0644</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143403519711434&amp;w=2" xml:lang="en">SSRT102066</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143748090628601&amp;w=2" xml:lang="en">HPSBMU03380</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=144050155601375&amp;w=2" xml:lang="en">HPSBMU03409</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://openwall.com/lists/oss-security/2015/03/15/6" xml:lang="en">[oss-security] 20150315 Re: CVE Request: PHP 5.6.6 changelog</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://php.net/ChangeLog-5.php" xml:lang="en">http://php.net/ChangeLog-5.php</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1053.html" xml:lang="en">RHSA-2015:1053</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1066.html" xml:lang="en">RHSA-2015:1066</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1135.html" xml:lang="en">RHSA-2015:1135</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1218.html" xml:lang="en">RHSA-2015:1218</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2015/dsa-3198" xml:lang="en">DSA-3198</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MANDRIVA</vuln:source>
      <vuln:reference href="http://www.mandriva.com/security/advisories?name=MDVSA-2015:079" xml:lang="en">MDVSA-2015:079</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/73037" xml:lang="en">73037</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1031949" xml:lang="en">1031949</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-2535-1" xml:lang="en">USN-2535-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugs.php.net/bug.php?id=68901" xml:lang="en">https://bugs.php.net/bug.php?id=68901</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=1194747" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=1194747</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="https://security.gentoo.org/glsa/201606-10" xml:lang="en">GLSA-201606-10</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.apple.com/HT205267" xml:lang="en">https://support.apple.com/HT205267</vuln:reference>
    </vuln:references>
    <vuln:summary>Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of an existing file.</vuln:summary>
  </entry>
  <entry id="CVE-2015-3952">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:pifzer:plum_a%2b_infusion_system_firmware:13.4"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:pifzer:plum_a%2b_infusion_system:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:pifzer:plum_a%2b3_infusion_system_firmware:13.6"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:pifzer:plum_a%2b3_infusion_system:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:pifzer:symbiq_infusion_system_firmware:3.13"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:pifzer:symbiq_infusion_system:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:pifzer:plum_a%2b3_infusion_system_firmware:13.6</vuln:product>
      <vuln:product>cpe:/o:pifzer:plum_a%2b_infusion_system_firmware:13.4</vuln:product>
      <vuln:product>cpe:/o:pifzer:symbiq_infusion_system_firmware:3.13</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-3952</vuln:cve-id>
    <vuln:published-datetime>2019-03-25T12:29:00.303-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:14:05.410-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01</vuln:reference>
    </vuln:references>
    <vuln:summary>Wireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.</vuln:summary>
  </entry>
  <entry id="CVE-2015-3953">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:pifzer:plum_a%2b_infusion_system_firmware:13.4"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:pifzer:plum_a%2b_infusion_system:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:pifzer:plum_a%2b3_infusion_system_firmware:13.6"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:pifzer:plum_a%2b3_infusion_system:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:pifzer:symbiq_infusion_system_firmware:3.13"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:pifzer:symbiq_infusion_system:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:pifzer:plum_a%2b3_infusion_system_firmware:13.6</vuln:product>
      <vuln:product>cpe:/o:pifzer:plum_a%2b_infusion_system_firmware:13.4</vuln:product>
      <vuln:product>cpe:/o:pifzer:symbiq_infusion_system_firmware:3.13</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-3953</vuln:cve-id>
    <vuln:published-datetime>2019-03-25T13:29:00.623-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:14:05.630-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-798"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01</vuln:reference>
    </vuln:references>
    <vuln:summary>Hard-coded accounts may be used to access Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.</vuln:summary>
  </entry>
  <entry id="CVE-2015-3954">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:pifzer:plum_a%2b_infusion_system_firmware:13.4"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:pifzer:plum_a%2b_infusion_system:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:pifzer:plum_a%2b3_infusion_system_firmware:13.6"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:pifzer:plum_a%2b3_infusion_system:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:pifzer:symbiq_infusion_system_firmware:3.13"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:pifzer:symbiq_infusion_system:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:pifzer:plum_a%2b3_infusion_system_firmware:13.6</vuln:product>
      <vuln:product>cpe:/o:pifzer:plum_a%2b_infusion_system_firmware:13.4</vuln:product>
      <vuln:product>cpe:/o:pifzer:symbiq_infusion_system_firmware:3.13</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-3954</vuln:cve-id>
    <vuln:published-datetime>2019-03-25T13:29:00.670-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:14:05.787-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-285"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01</vuln:reference>
    </vuln:references>
    <vuln:summary>Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior give unauthenticated users root privileges on Port 23/TELNET by default. An unauthorized user could issue commands to the pump. Hospira recommends that customers close Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.</vuln:summary>
  </entry>
  <entry id="CVE-2015-3956">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:pifzer:plum_a%2b_infusion_system_firmware:13.4"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:pifzer:plum_a%2b_infusion_system:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:pifzer:plum_a%2b3_infusion_system_firmware:13.6"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:pifzer:plum_a%2b3_infusion_system:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:pifzer:symbiq_infusion_system_firmware:3.13"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:pifzer:symbiq_infusion_system:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:pifzer:plum_a%2b3_infusion_system_firmware:13.6</vuln:product>
      <vuln:product>cpe:/o:pifzer:plum_a%2b_infusion_system_firmware:13.4</vuln:product>
      <vuln:product>cpe:/o:pifzer:symbiq_infusion_system_firmware:3.13</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-3956</vuln:cve-id>
    <vuln:published-datetime>2019-03-25T14:29:00.323-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:14:05.973-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-345"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01</vuln:reference>
    </vuln:references>
    <vuln:summary>Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior accept drug libraries, firmware updates, pump commands, and unauthorized configuration changes from unauthenticated devices on the host network. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.</vuln:summary>
  </entry>
  <entry id="CVE-2015-4000">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1a"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1b"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1c"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1d"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1e"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1f"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1g"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1h"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1i"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1j"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1k"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1l"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1m"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.2:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.2:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.2:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.2a"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:14.10"/>
        <cpe-lang:fact-ref name="cpe:/o:canonical:ubuntu_linux:15.04"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:openssl:openssl:1.0.1m"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:hp:hp-ux:b.11.31"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:ibm:content_manager:8.5::~~~enterprise~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:jrockit:r28.3.6"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:7.0"/>
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:8.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:jdk:1.6.0:update_95"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:jdk:1.7.0:update_75"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:jdk:1.7.0:update_80"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:jdk:1.8.0:update_33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:jdk:1.8.0:update_45"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:jre:1.6.0:update_95"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:jre:1.7.0:update_75"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:jre:1.7.0:update_80"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:jre:1.8.0:update_33"/>
        <cpe-lang:fact-ref name="cpe:/a:oracle:jre:1.8.0:update_45"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:suse:linux_enterprise_desktop:12"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:linux_enterprise_server:11.0:sp4"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:linux_enterprise_software_development_kit:12"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:suse_linux_enterprise_server:12"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:apple:iphone_os:8.3"/>
        <cpe-lang:fact-ref name="cpe:/o:apple:mac_os_x:10.10.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:network_security_services:3.19"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:oracle:sparc-opl_service_processor:1121"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:apple:safari"/>
        <cpe-lang:fact-ref name="cpe:/a:google:chrome:-"/>
        <cpe-lang:fact-ref name="cpe:/a:microsoft:ie"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox"/>
        <cpe-lang:fact-ref name="cpe:/a:opera:opera_browser:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox:39.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:31.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:firefox_esr:38.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:seamonkey:2.35"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:31.8"/>
        <cpe-lang:fact-ref name="cpe:/a:mozilla:thunderbird:38.1"/>
        <cpe-lang:fact-ref name="cpe:/o:mozilla:firefox_os:2.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:apple:safari</vuln:product>
      <vuln:product>cpe:/a:google:chrome:-</vuln:product>
      <vuln:product>cpe:/a:ibm:content_manager:8.5::~~~enterprise~~</vuln:product>
      <vuln:product>cpe:/a:microsoft:ie</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox:39.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:31.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:firefox_esr:38.1.0</vuln:product>
      <vuln:product>cpe:/a:mozilla:network_security_services:3.19</vuln:product>
      <vuln:product>cpe:/a:mozilla:seamonkey:2.35</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:31.8</vuln:product>
      <vuln:product>cpe:/a:mozilla:thunderbird:38.1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1:beta1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1:beta2</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1:beta3</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1a</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1b</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1c</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1d</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1e</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1f</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1g</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1h</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1i</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1j</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1k</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1l</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.1m</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.2</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.2:beta1</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.2:beta2</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.2:beta3</vuln:product>
      <vuln:product>cpe:/a:openssl:openssl:1.0.2a</vuln:product>
      <vuln:product>cpe:/a:opera:opera_browser:-</vuln:product>
      <vuln:product>cpe:/a:oracle:jdk:1.6.0:update_95</vuln:product>
      <vuln:product>cpe:/a:oracle:jdk:1.7.0:update_75</vuln:product>
      <vuln:product>cpe:/a:oracle:jdk:1.7.0:update_80</vuln:product>
      <vuln:product>cpe:/a:oracle:jdk:1.8.0:update_33</vuln:product>
      <vuln:product>cpe:/a:oracle:jdk:1.8.0:update_45</vuln:product>
      <vuln:product>cpe:/a:oracle:jre:1.6.0:update_95</vuln:product>
      <vuln:product>cpe:/a:oracle:jre:1.7.0:update_75</vuln:product>
      <vuln:product>cpe:/a:oracle:jre:1.7.0:update_80</vuln:product>
      <vuln:product>cpe:/a:oracle:jre:1.8.0:update_33</vuln:product>
      <vuln:product>cpe:/a:oracle:jre:1.8.0:update_45</vuln:product>
      <vuln:product>cpe:/a:oracle:jrockit:r28.3.6</vuln:product>
      <vuln:product>cpe:/a:oracle:sparc-opl_service_processor:1121</vuln:product>
      <vuln:product>cpe:/o:apple:iphone_os:8.3</vuln:product>
      <vuln:product>cpe:/o:apple:mac_os_x:10.10.3</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:14.10</vuln:product>
      <vuln:product>cpe:/o:canonical:ubuntu_linux:15.04</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:7.0</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:8.0</vuln:product>
      <vuln:product>cpe:/o:hp:hp-ux:b.11.31</vuln:product>
      <vuln:product>cpe:/o:mozilla:firefox_os:2.2</vuln:product>
      <vuln:product>cpe:/o:suse:linux_enterprise_desktop:12</vuln:product>
      <vuln:product>cpe:/o:suse:linux_enterprise_server:11.0:sp4</vuln:product>
      <vuln:product>cpe:/o:suse:linux_enterprise_software_development_kit:12</vuln:product>
      <vuln:product>cpe:/o:suse:suse_linux_enterprise_server:12</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-4000</vuln:cve-id>
    <vuln:published-datetime>2015-05-20T20:59:00.087-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:14:06.940-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.asc" xml:lang="en">http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.asc</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery" xml:lang="en">http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>NETBSD</vuln:source>
      <vuln:reference href="http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc" xml:lang="en">NetBSD-SA2015-008</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402" xml:lang="en">http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778" xml:lang="en">http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10681" xml:lang="en">http://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10681</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10727" xml:lang="en">http://kb.juniper.net/InfoCenter/index?page=content&amp;id=JSA10727</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html" xml:lang="en">APPLE-SA-2015-06-30-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>APPLE</vuln:source>
      <vuln:reference href="http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html" xml:lang="en">APPLE-SA-2015-06-30-2</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159314.html" xml:lang="en">FEDORA-2015-9130</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159351.html" xml:lang="en">FEDORA-2015-9048</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FEDORA</vuln:source>
      <vuln:reference href="http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160117.html" xml:lang="en">FEDORA-2015-9161</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html" xml:lang="en">openSUSE-SU-2015:1139</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html" xml:lang="en">SUSE-SU-2015:1143</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html" xml:lang="en">SUSE-SU-2015:1150</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html" xml:lang="en">SUSE-SU-2015:1177</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html" xml:lang="en">SUSE-SU-2015:1181</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html" xml:lang="en">SUSE-SU-2015:1182</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html" xml:lang="en">SUSE-SU-2015:1183</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html" xml:lang="en">SUSE-SU-2015:1184</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html" xml:lang="en">SUSE-SU-2015:1185</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" xml:lang="en">openSUSE-SU-2015:1229</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" xml:lang="en">openSUSE-SU-2015:1266</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" xml:lang="en">SUSE-SU-2015:1268</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" xml:lang="en">SUSE-SU-2015:1269</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" xml:lang="en">openSUSE-SU-2015:1277</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" xml:lang="en">openSUSE-SU-2015:1288</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" xml:lang="en">openSUSE-SU-2015:1289</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" xml:lang="en">SUSE-SU-2015:1319</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" xml:lang="en">SUSE-SU-2015:1320</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" xml:lang="en">SUSE-SU-2015:1449</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html" xml:lang="en">SUSE-SU-2015:1581</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html" xml:lang="en">SUSE-SU-2015:1663</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html" xml:lang="en">SUSE-SU-2016:0224</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html" xml:lang="en">openSUSE-SU-2016:0226</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html" xml:lang="en">openSUSE-SU-2016:0255</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html" xml:lang="en">openSUSE-SU-2016:0261</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html" xml:lang="en">SUSE-SU-2016:0262</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-updates/2015-07/msg00016.html" xml:lang="en">openSUSE-SU-2015:1209</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html" xml:lang="en">openSUSE-SU-2015:1684</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-updates/2016-02/msg00094.html" xml:lang="en">openSUSE-SU-2016:0478</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-updates/2016-02/msg00097.html" xml:lang="en">openSUSE-SU-2016:0483</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143506486712441&amp;w=2" xml:lang="en">HPSBMU03356</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143557934009303&amp;w=2" xml:lang="en">HPSBGN03351</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143558092609708&amp;w=2" xml:lang="en">HPSBGN03362</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143628304012255&amp;w=2" xml:lang="en">HPSBGN03361</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143637549705650&amp;w=2" xml:lang="en">HPSBUX03363</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143655800220052&amp;w=2" xml:lang="en">HPSBGN03373</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=143880121627664&amp;w=2" xml:lang="en">SSRT102180</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=144043644216842&amp;w=2" xml:lang="en">HPSBMU03345</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=144050121701297&amp;w=2" xml:lang="en">HPSBGN03404</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=144060576831314&amp;w=2" xml:lang="en">HPSBGN03399</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=144060606031437&amp;w=2" xml:lang="en">HPSBGN03405</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=144061542602287&amp;w=2" xml:lang="en">HPSBGN03411</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=144069189622016&amp;w=2" xml:lang="en">HPSBGN03402</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=144102017024820&amp;w=2" xml:lang="en">HPSBGN03407</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=144104533800819&amp;w=2" xml:lang="en">HPSBMU03401</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=144493176821532&amp;w=2" xml:lang="en">HPSBUX03512</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=145409266329539&amp;w=2" xml:lang="en">HPSBGN03533</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://openwall.com/lists/oss-security/2015/05/20/8" xml:lang="en">[oss-security] 20150520 CVE-2015-4000 - TLS does not properly convey server's ciphersuite choice</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1072.html" xml:lang="en">RHSA-2015:1072</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1185.html" xml:lang="en">RHSA-2015:1185</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1197.html" xml:lang="en">RHSA-2015:1197</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1228.html" xml:lang="en">RHSA-2015:1228</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1229.html" xml:lang="en">RHSA-2015:1229</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1230.html" xml:lang="en">RHSA-2015:1230</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1241.html" xml:lang="en">RHSA-2015:1241</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1242.html" xml:lang="en">RHSA-2015:1242</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1243.html" xml:lang="en">RHSA-2015:1243</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1485.html" xml:lang="en">RHSA-2015:1485</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1486.html" xml:lang="en">RHSA-2015:1486</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1488.html" xml:lang="en">RHSA-2015:1488</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1526.html" xml:lang="en">RHSA-2015:1526</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1544.html" xml:lang="en">RHSA-2015:1544</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1604.html" xml:lang="en">RHSA-2015:1604</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2016-1624.html" xml:lang="en">RHSA-2016:1624</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2016-2056.html" xml:lang="en">RHSA-2016:2056</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT204941" xml:lang="en">http://support.apple.com/kb/HT204941</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.apple.com/kb/HT204942" xml:lang="en">http://support.apple.com/kb/HT204942</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://support.citrix.com/article/CTX201114" xml:lang="en">http://support.citrix.com/article/CTX201114</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2015/dsa-3287" xml:lang="en">DSA-3287</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2015/dsa-3300" xml:lang="en">DSA-3300</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2015/dsa-3316" xml:lang="en">DSA-3316</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2015/dsa-3324" xml:lang="en">DSA-3324</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2015/dsa-3339" xml:lang="en">DSA-3339</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>DEBIAN</vuln:source>
      <vuln:reference href="http://www.debian.org/security/2016/dsa-3688" xml:lang="en">DSA-3688</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.fortiguard.com/advisory/2015-05-20-logjam-attack" xml:lang="en">http://www.fortiguard.com/advisory/2015-05-20-logjam-attack</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.mozilla.org/security/announce/2015/mfsa2015-70.html" xml:lang="en">http://www.mozilla.org/security/announce/2015/mfsa2015-70.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html" xml:lang="en">http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html" xml:lang="en">http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html" xml:lang="en">http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/74733" xml:lang="en">74733</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/91787" xml:lang="en">91787</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032474" xml:lang="en">1032474</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032475" xml:lang="en">1032475</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032476" xml:lang="en">1032476</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032637" xml:lang="en">1032637</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032645" xml:lang="en">1032645</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032647" xml:lang="en">1032647</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032648" xml:lang="en">1032648</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032649" xml:lang="en">1032649</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032650" xml:lang="en">1032650</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032651" xml:lang="en">1032651</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032652" xml:lang="en">1032652</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032653" xml:lang="en">1032653</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032654" xml:lang="en">1032654</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032655" xml:lang="en">1032655</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032656" xml:lang="en">1032656</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032688" xml:lang="en">1032688</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032699" xml:lang="en">1032699</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032702" xml:lang="en">1032702</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032727" xml:lang="en">1032727</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032759" xml:lang="en">1032759</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032777" xml:lang="en">1032777</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032778" xml:lang="en">1032778</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032783" xml:lang="en">1032783</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032784" xml:lang="en">1032784</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032856" xml:lang="en">1032856</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032864" xml:lang="en">1032864</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032865" xml:lang="en">1032865</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032871" xml:lang="en">1032871</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032884" xml:lang="en">1032884</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032910" xml:lang="en">1032910</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032932" xml:lang="en">1032932</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032960" xml:lang="en">1032960</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033019" xml:lang="en">1033019</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033064" xml:lang="en">1033064</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033065" xml:lang="en">1033065</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033067" xml:lang="en">1033067</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033208" xml:lang="en">1033208</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033209" xml:lang="en">1033209</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033210" xml:lang="en">1033210</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033222" xml:lang="en">1033222</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033341" xml:lang="en">1033341</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033385" xml:lang="en">1033385</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033416" xml:lang="en">1033416</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033430" xml:lang="en">1033430</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033433" xml:lang="en">1033433</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033513" xml:lang="en">1033513</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033760" xml:lang="en">1033760</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033891" xml:lang="en">1033891</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1033991" xml:lang="en">1033991</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1034087" xml:lang="en">1034087</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1034728" xml:lang="en">1034728</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1034884" xml:lang="en">1034884</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1036218" xml:lang="en">1036218</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1040630" xml:lang="en">1040630</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/releaseNotes.htm" xml:lang="en">http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/releaseNotes.htm</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-2656-1" xml:lang="en">USN-2656-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-2656-2" xml:lang="en">USN-2656-2</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-2673-1" xml:lang="en">USN-2673-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-2696-1" xml:lang="en">USN-2696-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>UBUNTU</vuln:source>
      <vuln:reference href="http://www.ubuntu.com/usn/USN-2706-1" xml:lang="en">USN-2706-1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21959111" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21959111</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21959195" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21959195</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21959325" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21959325</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21959453" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21959453</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21959481" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21959481</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21959517" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21959517</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21959530" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21959530</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21959539" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21959539</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21959636" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21959636</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21959812" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21959812</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21960191" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21960191</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21961717" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21961717</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21962455" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21962455</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21962739" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21962739</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-304.ibm.com/support/docview.wss?uid=swg21958984" xml:lang="en">http://www-304.ibm.com/support/docview.wss?uid=swg21958984</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-304.ibm.com/support/docview.wss?uid=swg21959132" xml:lang="en">http://www-304.ibm.com/support/docview.wss?uid=swg21959132</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-304.ibm.com/support/docview.wss?uid=swg21960041" xml:lang="en">http://www-304.ibm.com/support/docview.wss?uid=swg21960041</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-304.ibm.com/support/docview.wss?uid=swg21960194" xml:lang="en">http://www-304.ibm.com/support/docview.wss?uid=swg21960194</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-304.ibm.com/support/docview.wss?uid=swg21960380" xml:lang="en">http://www-304.ibm.com/support/docview.wss?uid=swg21960380</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-304.ibm.com/support/docview.wss?uid=swg21960418" xml:lang="en">http://www-304.ibm.com/support/docview.wss?uid=swg21960418</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-304.ibm.com/support/docview.wss?uid=swg21962816" xml:lang="en">http://www-304.ibm.com/support/docview.wss?uid=swg21962816</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-304.ibm.com/support/docview.wss?uid=swg21967893" xml:lang="en">http://www-304.ibm.com/support/docview.wss?uid=swg21967893</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://blog.cloudflare.com/logjam-the-latest-tls-vulnerability-explained/" xml:lang="en">https://blog.cloudflare.com/logjam-the-latest-tls-vulnerability-explained/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bto.bluecoat.com/security-advisory/sa98" xml:lang="en">https://bto.bluecoat.com/security-advisory/sa98</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1138554" xml:lang="en">https://bugzilla.mozilla.org/show_bug.cgi?id=1138554</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes" xml:lang="en">https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04718196" xml:lang="en">SSRT102112</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140" xml:lang="en">https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190" xml:lang="en">https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119" xml:lang="en">https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241" xml:lang="en">https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246" xml:lang="en">https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04918839" xml:lang="en">https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04918839</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923929" xml:lang="en">https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923929</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789" xml:lang="en">https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04740527" xml:lang="en">https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04740527</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953655" xml:lang="en">https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953655</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763" xml:lang="en">https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128722" xml:lang="en">https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128722</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193083" xml:lang="en">https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193083</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes" xml:lang="en">https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10122" xml:lang="en">https://kc.mcafee.com/corporate/index?page=content&amp;id=SB10122</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://openssl.org/news/secadv/20150611.txt" xml:lang="en">https://openssl.org/news/secadv/20150611.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://puppet.com/security/cve/CVE-2015-4000" xml:lang="en">https://puppet.com/security/cve/CVE-2015-4000</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="https://security.gentoo.org/glsa/201506-02" xml:lang="en">GLSA-201506-02</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="https://security.gentoo.org/glsa/201512-10" xml:lang="en">GLSA-201512-10</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="https://security.gentoo.org/glsa/201603-11" xml:lang="en">GLSA-201603-11</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="https://security.gentoo.org/glsa/201701-46" xml:lang="en">GLSA-201701-46</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://security.netapp.com/advisory/ntap-20150619-0001/" xml:lang="en">https://security.netapp.com/advisory/ntap-20150619-0001/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.citrix.com/article/CTX216642" xml:lang="en">https://support.citrix.com/article/CTX216642</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&amp;docId=emr_na-hpesbhf03831en_us" xml:lang="en">https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&amp;docId=emr_na-hpesbhf03831en_us</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://weakdh.org/" xml:lang="en">https://weakdh.org/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://weakdh.org/imperfect-forward-secrecy.pdf" xml:lang="en">https://weakdh.org/imperfect-forward-secrecy.pdf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/" xml:lang="en">https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.openssl.org/news/secadv_20150611.txt" xml:lang="en">https://www.openssl.org/news/secadv_20150611.txt</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.suse.com/security/cve/CVE-2015-4000.html" xml:lang="en">https://www.suse.com/security/cve/CVE-2015-4000.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www-304.ibm.com/support/docview.wss?uid=swg21959745" xml:lang="en">https://www-304.ibm.com/support/docview.wss?uid=swg21959745</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098403" xml:lang="en">https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098403</vuln:reference>
    </vuln:references>
    <vuln:summary>The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.</vuln:summary>
  </entry>
  <entry id="CVE-2015-4010">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:everybit:encrypted_contact_form:1.0.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:everybit:encrypted_contact_form:1.0.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:everybit:encrypted_contact_form:1.0.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:everybit:encrypted_contact_form:1.0.4::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:everybit:encrypted_contact_form:1.0.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:everybit:encrypted_contact_form:1.0.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:everybit:encrypted_contact_form:1.0.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:everybit:encrypted_contact_form:1.0.4::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-4010</vuln:cve-id>
    <vuln:published-datetime>2015-06-09T10:59:05.160-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:14:08.113-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=142607790919348&amp;w=2" xml:lang="en">HPSBUX03281</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/132209/WordPress-Encrypted-Contact-Form-1.0.4-CSRF-XSS.html" xml:lang="en">http://packetstormsecurity.com/files/132209/WordPress-Encrypted-Contact-Form-1.0.4-CSRF-XSS.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>FULLDISC</vuln:source>
      <vuln:reference href="http://seclists.org/fulldisclosure/2015/May/63" xml:lang="en">20150515 CSRF &amp; XSS vulnerabilities in Encrypted Contact Form Wordpress Plugin v1.0.4</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BUGTRAQ</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/archive/1/535699/100/0/threaded" xml:lang="en">20150606 CVE-2015-4010 - Cross-site Request Forgery &amp; Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/73433" xml:lang="en">73433</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://plugins.trac.wordpress.org/changeset/1125443/" xml:lang="en">https://plugins.trac.wordpress.org/changeset/1125443/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/encrypted-contact-form/changelog/" xml:lang="en">https://wordpress.org/plugins/encrypted-contact-form/changelog/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/7992" xml:lang="en">https://wpvulndb.com/vulnerabilities/7992</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/37264/" xml:lang="en">37264</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site request forgery (CSRF) vulnerability in the Encrypted Contact Form plugin before 1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the iframe_url parameter in an Update Page action in the conformconf page to wp-admin/options-general.php.</vuln:summary>
  </entry>
  <entry id="CVE-2015-5122">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:13.0::~~esr~~~"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:13.0.0.302::~~esr~~~"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:18.0::~~~chrome~~"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:18.0.0.203::~~~chrome~~"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player_desktop_runtime:18.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player_desktop_runtime:18.0.0.203"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os:-"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:18.0::~~~chrome~~"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:18.0.0.203::~~~chrome~~"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:18.0.0.204::~~~chrome~~"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:18.0::~~~internet_explorer_10~~"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:18.0::~~~internet_explorer_11~~"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:18.0.0.203::~~~internet_explorer_10~~"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:18.0.0.203::~~~internet_explorer_11~~"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_8.0:-"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows_8.1:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.0.1.152"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.0.1.152::~~~~x64~"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.0.1.153"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.102.55"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.102.55::~~~~x64~"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.102.59"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.102.62"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.102.63"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.111.8"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.111.13"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.111.44"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.111.50"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.111.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.111.64"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.111.73"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.7"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.34"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.48"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.58"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.59"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.63"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.69"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.81"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.223"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.228"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.233"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.235"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.236"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.238"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.243"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.251"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.258"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.261"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.262"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.270"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.273"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.275"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.285"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.291"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.297"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.310"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.327"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.332"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.335"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.336"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.341"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.346"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.350"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.356"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.359"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.378"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.394"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.400"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.406"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.411"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.418"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.424"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.425"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.429"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.438"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.440"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.442"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.451"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.457"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.460"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.466"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.468"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.475"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.481"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_desktop:5.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_desktop:6.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_server:5.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_server:6.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_server_eus:6.6"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_workstation:5.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_workstation:6.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:opensuse:evergreen:11.4"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:linux_enterprise_desktop:11:sp3"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:linux_enterprise_desktop:11:sp4"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:linux_enterprise_desktop:12"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:linux_enterprise_workstation_extension:12"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:11.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.0.1.152</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.0.1.152::~~~~x64~</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.0.1.153</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.102.55</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.102.55::~~~~x64~</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.102.59</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.102.62</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.102.63</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.111.8</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.111.13</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.111.44</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.111.50</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.111.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.111.64</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.111.73</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.7</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.34</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.48</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.58</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.59</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.63</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.69</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.81</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.223</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.228</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.233</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.235</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.236</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.238</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.243</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.251</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.258</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.261</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.262</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.270</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.273</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.275</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.285</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.291</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.297</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.310</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.327</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.332</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.335</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.336</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.341</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.346</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.350</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.356</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.359</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.378</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.394</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.400</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.406</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.411</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.418</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.424</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.425</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.429</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.438</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.440</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.442</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.451</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.457</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.460</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.466</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.468</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.475</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.481</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:13.0::~~esr~~~</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:13.0.0.302::~~esr~~~</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:18.0::~~~chrome~~</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:18.0::~~~internet_explorer_10~~</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:18.0::~~~internet_explorer_11~~</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:18.0.0.203::~~~chrome~~</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:18.0.0.203::~~~internet_explorer_10~~</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:18.0.0.203::~~~internet_explorer_11~~</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:18.0.0.204::~~~chrome~~</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player_desktop_runtime:18.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player_desktop_runtime:18.0.0.203</vuln:product>
      <vuln:product>cpe:/o:opensuse:evergreen:11.4</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_desktop:5.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_desktop:6.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_server:5.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_server:6.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_server_eus:6.6</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_workstation:5.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_workstation:6.0</vuln:product>
      <vuln:product>cpe:/o:suse:linux_enterprise_desktop:11:sp3</vuln:product>
      <vuln:product>cpe:/o:suse:linux_enterprise_desktop:11:sp4</vuln:product>
      <vuln:product>cpe:/o:suse:linux_enterprise_desktop:12</vuln:product>
      <vuln:product>cpe:/o:suse:linux_enterprise_workstation_extension:12</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-5122</vuln:cve-id>
    <vuln:published-datetime>2015-07-14T06:59:00.213-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:14:30.177-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00028.html" xml:lang="en">SUSE-SU-2015:1255</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00029.html" xml:lang="en">SUSE-SU-2015:1258</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00032.html" xml:lang="en">openSUSE-SU-2015:1267</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=144050155601375&amp;w=2" xml:lang="en">HPSBMU03409</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/132663/Adobe-Flash-opaqueBackground-Use-After-Free.html" xml:lang="en">http://packetstormsecurity.com/files/132663/Adobe-Flash-opaqueBackground-Use-After-Free.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1235.html" xml:lang="en">RHSA-2015:1235</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/338736" xml:lang="en">VU#338736</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.rapid7.com/db/modules/exploit/multi/browser/adobe_flash_opaque_background_uaf" xml:lang="en">http://www.rapid7.com/db/modules/exploit/multi/browser/adobe_flash_opaque_background_uaf</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/75712" xml:lang="en">75712</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032890" xml:lang="en">1032890</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/ncas/alerts/TA15-195A" xml:lang="en">TA15-195A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04796784" xml:lang="en">HPSBHF03509</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952467" xml:lang="en">https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952467</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://helpx.adobe.com/security/products/flash-player/apsa15-04.html" xml:lang="en">https://helpx.adobe.com/security/products/flash-player/apsa15-04.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://helpx.adobe.com/security/products/flash-player/apsb15-18.html" xml:lang="en">https://helpx.adobe.com/security/products/flash-player/apsb15-18.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://perception-point.io/2018/04/11/breaking-cfi-cve-2015-5122-coop/" xml:lang="en">https://perception-point.io/2018/04/11/breaking-cfi-cve-2015-5122-coop/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://perception-point.io/new/breaking-cfi.php" xml:lang="en">https://perception-point.io/new/breaking-cfi.php</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="https://security.gentoo.org/glsa/201508-01" xml:lang="en">GLSA-201508-01</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/37599/" xml:lang="en">37599</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.fireeye.com/blog/threat-research/2015/07/cve-2015-5122_-_seco.html" xml:lang="en">https://www.fireeye.com/blog/threat-research/2015/07/cve-2015-5122_-_seco.html</vuln:reference>
    </vuln:references>
    <vuln:summary>Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.</vuln:summary>
  </entry>
  <entry id="CVE-2015-5123">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_desktop:5.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_desktop:6.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_server:5.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_server:6.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_server_eus:6.6"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_workstation:5.0"/>
        <cpe-lang:fact-ref name="cpe:/o:redhat:enterprise_linux_workstation:6.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:opensuse:evergreen:11.4"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:linux_enterprise_desktop:11:sp3"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:linux_enterprise_desktop:11:sp4"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:linux_enterprise_desktop:12"/>
        <cpe-lang:fact-ref name="cpe:/o:suse:linux_enterprise_workstation_extension:12"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.0.1.152"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.0.1.152::~~~~x64~"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.0.1.153"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.102.55"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.102.55::~~~~x64~"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.102.59"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.102.62"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.102.63"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.111.8"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.111.13"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.111.44"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.111.50"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.111.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.111.64"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.111.73"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.7"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.34"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.48"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.54"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.58"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.59"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.63"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.69"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.1.115.81"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.223"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.228"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.233"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.235"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.236"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.238"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.243"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.251"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.258"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.261"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.262"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.270"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.273"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.275"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.280"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.285"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.291"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.297"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.310"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.327"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.332"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.335"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.336"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.341"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.346"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.350"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.356"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.359"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.378"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.394"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.400"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.406"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.411"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.418"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.424"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.425"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.429"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.438"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.440"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.442"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.451"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.457"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.460"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.466"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.468"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.475"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:11.2.202.481"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:13.0::~~esr~~~"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player:13.0.0.302::~~esr~~~"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player_desktop_runtime:18.0"/>
          <cpe-lang:fact-ref name="cpe:/a:adobe:flash_player_desktop_runtime:18.0.0.203"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:apple:mac_os:-"/>
          <cpe-lang:fact-ref name="cpe:/o:microsoft:windows:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adobe:flash_player:11.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.0.1.152</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.0.1.152::~~~~x64~</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.0.1.153</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.102.55</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.102.55::~~~~x64~</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.102.59</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.102.62</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.102.63</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.111.8</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.111.13</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.111.44</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.111.50</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.111.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.111.64</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.111.73</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.7</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.34</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.48</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.54</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.58</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.59</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.63</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.69</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.1.115.81</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.223</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.228</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.233</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.235</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.236</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.238</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.243</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.251</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.258</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.261</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.262</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.270</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.273</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.275</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.280</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.285</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.291</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.297</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.310</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.327</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.332</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.335</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.336</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.341</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.346</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.350</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.356</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.359</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.378</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.394</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.400</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.406</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.411</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.418</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.424</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.425</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.429</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.438</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.440</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.442</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.451</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.457</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.460</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.466</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.468</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.475</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:11.2.202.481</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:13.0::~~esr~~~</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player:13.0.0.302::~~esr~~~</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player_desktop_runtime:18.0</vuln:product>
      <vuln:product>cpe:/a:adobe:flash_player_desktop_runtime:18.0.0.203</vuln:product>
      <vuln:product>cpe:/o:opensuse:evergreen:11.4</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_desktop:5.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_desktop:6.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_server:5.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_server:6.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_server_eus:6.6</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_workstation:5.0</vuln:product>
      <vuln:product>cpe:/o:redhat:enterprise_linux_workstation:6.0</vuln:product>
      <vuln:product>cpe:/o:suse:linux_enterprise_desktop:11:sp3</vuln:product>
      <vuln:product>cpe:/o:suse:linux_enterprise_desktop:11:sp4</vuln:product>
      <vuln:product>cpe:/o:suse:linux_enterprise_desktop:12</vuln:product>
      <vuln:product>cpe:/o:suse:linux_enterprise_workstation_extension:12</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-5123</vuln:cve-id>
    <vuln:published-datetime>2015-07-14T06:59:01.337-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:14:30.457-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-416"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://blog.trendmicro.com/trendlabs-security-intelligence/new-zero-day-vulnerability-cve-2015-5123-in-adobe-flash-emerges-from-hacking-team-leak/" xml:lang="en">http://blog.trendmicro.com/trendlabs-security-intelligence/new-zero-day-vulnerability-cve-2015-5123-in-adobe-flash-emerges-from-hacking-team-leak/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00028.html" xml:lang="en">SUSE-SU-2015:1255</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00029.html" xml:lang="en">SUSE-SU-2015:1258</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SUSE</vuln:source>
      <vuln:reference href="http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00032.html" xml:lang="en">openSUSE-SU-2015:1267</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="http://marc.info/?l=bugtraq&amp;m=144050155601375&amp;w=2" xml:lang="en">HPSBMU03409</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="http://rhn.redhat.com/errata/RHSA-2015-1235.html" xml:lang="en">RHSA-2015:1235</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT-VN</vuln:source>
      <vuln:reference href="http://www.kb.cert.org/vuls/id/918568" xml:lang="en">VU#918568</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/75710" xml:lang="en">75710</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>SECTRACK</vuln:source>
      <vuln:reference href="http://www.securitytracker.com/id/1032890" xml:lang="en">1032890</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CERT</vuln:source>
      <vuln:reference href="http://www.us-cert.gov/ncas/alerts/TA15-195A" xml:lang="en">TA15-195A</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>HP</vuln:source>
      <vuln:reference href="https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04796784" xml:lang="en">SSRT102253</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://helpx.adobe.com/security/products/flash-player/apsa15-04.html" xml:lang="en">https://helpx.adobe.com/security/products/flash-player/apsa15-04.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://helpx.adobe.com/security/products/flash-player/apsb15-18.html" xml:lang="en">https://helpx.adobe.com/security/products/flash-player/apsb15-18.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>GENTOO</vuln:source>
      <vuln:reference href="https://security.gentoo.org/glsa/201508-01" xml:lang="en">GLSA-201508-01</vuln:reference>
    </vuln:references>
    <vuln:summary>Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.</vuln:summary>
  </entry>
  <entry id="CVE-2015-5297">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:-"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.9.6"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.16.0"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.16.2"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.16.4"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.16.6"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.18.0"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.18.2"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.18.4"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.20.0"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.20.2"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.22.0"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.22.2"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.24.0"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.24.2"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.24.4"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.26.0"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.26.2"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.28.0"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.28.2"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.30.0"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.30.2"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.32.0"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.32.2"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.32.4"/>
        <cpe-lang:fact-ref name="cpe:/a:pixman:pixman:0.32.6"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:pixman:pixman:-</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.9.6</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.10.0</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.12.0</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.14.0</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.16.0</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.16.2</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.16.4</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.16.6</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.18.0</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.18.2</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.18.4</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.20.0</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.20.2</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.22.0</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.22.2</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.24.0</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.24.2</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.24.4</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.26.0</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.26.2</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.28.0</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.28.2</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.30.0</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.30.2</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.32.0</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.32.2</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.32.4</vuln:product>
      <vuln:product>cpe:/a:pixman:pixman:0.32.6</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-5297</vuln:cve-id>
    <vuln:published-datetime>2019-07-31T19:15:10.653-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:14:34.270-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-190"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bugs.freedesktop.org/show_bug.cgi?id=92027" xml:lang="en">https://bugs.freedesktop.org/show_bug.cgi?id=92027</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-5297" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-5297</vuln:reference>
    </vuln:references>
    <vuln:summary>An integer overflow issue has been reported in the general_composite_rect() function in pixman prior to version 0.32.8. An attacker could exploit this issue to cause an application using pixman to crash or, potentially, execute arbitrary code.</vuln:summary>
  </entry>
  <entry id="CVE-2015-6457">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:moxa:softcms:1.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:moxa:softcms:1.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-6457</vuln:cve-id>
    <vuln:published-datetime>2019-03-21T16:29:00.250-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:14:58.210-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-15-239-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-15-239-01</vuln:reference>
    </vuln:references>
    <vuln:summary>Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.</vuln:summary>
  </entry>
  <entry id="CVE-2015-6458">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:moxa:softcms:1.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:moxa:softcms:1.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-6458</vuln:cve-id>
    <vuln:published-datetime>2019-03-21T16:29:00.297-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:14:58.413-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-15-239-01" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-15-239-01</vuln:reference>
    </vuln:references>
    <vuln:summary>Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.</vuln:summary>
  </entry>
  <entry id="CVE-2015-6461">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxnoc0401_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxnoc0401:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxnoe0100_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxnoe0100:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxnoe0110_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxnoe0110:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxnoe0110h_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxnoe0110h:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxnor0200h_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxnor0200h:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxp342020_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxp342020:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxp342020h_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxp342020h:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxp342030_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxp342030:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxp3420302_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxp3420302:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxp3420302h_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxp3420302h:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxp342030h_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxp342030h:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:schneider-electric:bmxnoc0401_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxnoe0100_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxnoe0110_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxnoe0110h_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxnor0200h_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxp342020_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxp342020h_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxp3420302_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxp3420302h_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxp342030_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxp342030h_firmware:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-6461</vuln:cve-id>
    <vuln:published-datetime>2019-03-21T15:29:00.267-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:14:58.600-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-15-246-02" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-15-246-02</vuln:reference>
    </vuln:references>
    <vuln:summary>Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, when launched, will result in the browser redirecting to a remote file via a Java script loaded with the web page.</vuln:summary>
  </entry>
  <entry id="CVE-2015-6462">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxnoc0401_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxnoc0401:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxnoe0100_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxnoe0100:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxnoe0110_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxnoe0110:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxnoe0110h_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxnoe0110h:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxnor0200h_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxnor0200h:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxp342020_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxp342020:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxp342020h_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxp342020h:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxp342030_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxp342030:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxp3420302_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxp3420302:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxp3420302h_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxp3420302h:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:schneider-electric:bmxp342030h_firmware:-"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:schneider-electric:bmxp342030h:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:schneider-electric:bmxnoc0401_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxnoe0100_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxnoe0110_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxnoe0110h_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxnor0200h_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxp342020_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxp342020h_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxp3420302_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxp3420302h_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxp342030_firmware:-</vuln:product>
      <vuln:product>cpe:/o:schneider-electric:bmxp342030h_firmware:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-6462</vuln:cve-id>
    <vuln:published-datetime>2019-03-21T15:29:00.317-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:14:58.927-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://ics-cert.us-cert.gov/advisories/ICSA-15-246-02" xml:lang="en">https://ics-cert.us-cert.gov/advisories/ICSA-15-246-02</vuln:reference>
    </vuln:references>
    <vuln:summary>Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC client browser.</vuln:summary>
  </entry>
  <entry id="CVE-2015-7559">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:-"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:4.0:m4"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:4.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.4.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.7.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.8.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.9.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.9.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.10.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.10.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.10.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.11.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.11.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.11.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.11.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.12.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.12.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.12.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.12.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.13.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.13.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.13.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.13.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.13.4"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.13.5"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.14.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.14.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.14.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.14.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.14.4"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.15.0"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.15.1"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.15.2"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.15.3"/>
        <cpe-lang:fact-ref name="cpe:/a:apache:activemq:5.15.4"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:apache:activemq:-</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:4.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:4.0:m4</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:4.0:rc2</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:4.0.1</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:4.0.2</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:4.1.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:4.1.1</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:4.1.2</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.0.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.1.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.2.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.3.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.3.1</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.3.2</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.4.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.4.1</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.4.2</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.4.3</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.5.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.5.1</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.6.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.7.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.8.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.9.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.9.1</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.10.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.10.1</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.10.2</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.11.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.11.1</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.11.2</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.11.3</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.12.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.12.1</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.12.2</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.12.3</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.13.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.13.1</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.13.2</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.13.3</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.13.4</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.13.5</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.14.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.14.1</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.14.2</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.14.3</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.14.4</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.15.0</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.15.1</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.15.2</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.15.3</vuln:product>
      <vuln:product>cpe:/a:apache:activemq:5.15.4</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-7559</vuln:cve-id>
    <vuln:published-datetime>2019-08-01T10:15:10.940-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:15:22.397-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-7559" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-7559</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.apache.org/jira/browse/AMQ-6470" xml:lang="en">https://issues.apache.org/jira/browse/AMQ-6470</vuln:reference>
    </vuln:references>
    <vuln:summary>It was found that the Apache ActiveMQ client before 5.15.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client.</vuln:summary>
  </entry>
  <entry id="CVE-2015-7882">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mongodb:mongodb:3.0.0::~~enterprise~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:mongodb:mongodb:3.0.6::~~enterprise~~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mongodb:mongodb:3.0.0::~~enterprise~~~</vuln:product>
      <vuln:product>cpe:/a:mongodb:mongodb:3.0.6::~~enterprise~~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-7882</vuln:cve-id>
    <vuln:published-datetime>2019-07-19T12:15:11.930-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:15:29.383-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-287"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://jira.mongodb.org/browse/SERVER-20691" xml:lang="en">https://jira.mongodb.org/browse/SERVER-20691</vuln:reference>
    </vuln:references>
    <vuln:summary>Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9056">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.2.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.2.0:beta2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.1.0</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.1.1</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.1.2</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.2.0</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.2.0:beta1</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.2.0:beta2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9056</vuln:cve-id>
    <vuln:published-datetime>2017-06-16T17:29:00.197-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:15:53.587-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.elastic.co/community/security" xml:lang="en">https://www.elastic.co/community/security</vuln:reference>
    </vuln:references>
    <vuln:summary>Kibana versions prior to 4.1.3 and 4.2.1 are vulnerable to a XSS attack.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9102">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:synology:photo_station:6.3-2960"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:synology:photo_station:6.3-2960</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9102</vuln:cve-id>
    <vuln:published-datetime>2017-06-30T09:29:00.177-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:15:54.510-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.fortiguard.com/zeroday/FG-VD-15-103" xml:lang="en">http://www.fortiguard.com/zeroday/FG-VD-15-103</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.fortiguard.com/zeroday/FG-VD-15-104" xml:lang="en">http://www.fortiguard.com/zeroday/FG-VD-15-104</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.fortiguard.com/zeroday/FG-VD-15-109" xml:lang="en">http://www.fortiguard.com/zeroday/FG-VD-15-109</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.fortiguard.com/zeroday/FG-VD-15-112" xml:lang="en">http://www.fortiguard.com/zeroday/FG-VD-15-112</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.synology.com/en-global/support/security/Photo_Station_6_3_2962" xml:lang="en">https://www.synology.com/en-global/support/security/Photo_Station_6_3_2962</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple cross-site scripting (XSS) vulnerabilities in Synology Photo Station 6.0 before 6.0-2638 and 6.3 before 6.3-2962 allow remote authenticated attackers to inject arbitrary web script or HTML via the (1) album name, (2) file name of uploaded photos, (3) description of photos, or (4) tag of the photos.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9103">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:synology:note_station:1.1-0212"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:synology:note_station:1.1-0212</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9103</vuln:cve-id>
    <vuln:published-datetime>2017-06-30T09:29:00.223-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:15:54.697-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.fortiguard.com/zeroday/FG-VD-15-110" xml:lang="en">http://www.fortiguard.com/zeroday/FG-VD-15-110</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.fortiguard.com/zeroday/FG-VD-15-111" xml:lang="en">http://www.fortiguard.com/zeroday/FG-VD-15-111</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.synology.com/en-global/support/security/Note_Station_1_1_0214" xml:lang="en">https://www.synology.com/en-global/support/security/Note_Station_1_1_0214</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple cross-site scripting (XSS) vulnerabilities in Synology Note Station 1.1-0212 and earlier allow remote authenticated attackers to inject arbitrary web script or HTML via the (1) note title or (2) file name of attachments.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9104">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:synology:audio_station:5.1-2541"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:audio_station:5.1-2542"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:audio_station:5.1-2547"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:audio_station:5.1-2549"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:audio_station:5.4-2852"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:audio_station:5.4-2853"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:audio_station:5.4-2855"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:synology:audio_station:5.1-2541</vuln:product>
      <vuln:product>cpe:/a:synology:audio_station:5.1-2542</vuln:product>
      <vuln:product>cpe:/a:synology:audio_station:5.1-2547</vuln:product>
      <vuln:product>cpe:/a:synology:audio_station:5.1-2549</vuln:product>
      <vuln:product>cpe:/a:synology:audio_station:5.4-2852</vuln:product>
      <vuln:product>cpe:/a:synology:audio_station:5.4-2853</vuln:product>
      <vuln:product>cpe:/a:synology:audio_station:5.4-2855</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9104</vuln:cve-id>
    <vuln:published-datetime>2017-06-30T09:29:00.253-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:15:54.823-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.fortiguard.com/zeroday/FG-VD-15-106" xml:lang="en">http://www.fortiguard.com/zeroday/FG-VD-15-106</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.synology.com/en-global/support/security/Audio_Station_5_4_2857" xml:lang="en">https://www.synology.com/en-global/support/security/Audio_Station_5_4_2857</vuln:reference>
    </vuln:references>
    <vuln:summary>Cross-site scripting (XSS) vulnerabilities in Synology Audio Station 5.1 before 5.1-2550 and 5.4 before 5.4-2857 allows remote authenticated attackers to inject arbitrary web script or HTML via the album title.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9105">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:synology:video_station:1.2-0439"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:video_station:1.2-0443"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:video_station:1.2-0447"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:video_station:1.2-0451"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:video_station:1.2-0453"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:video_station:1.5-0753"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:video_station:1.5-0754"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:video_station:1.5-0757"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:video_station:1.5-0763"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:video_station:1.5-0770"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:video_station:1.6-0835"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:video_station:1.6-0840"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:video_station:1.6-0841"/>
        <cpe-lang:fact-ref name="cpe:/a:synology:video_station:1.6-0844"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:synology:video_station:1.2-0439</vuln:product>
      <vuln:product>cpe:/a:synology:video_station:1.2-0443</vuln:product>
      <vuln:product>cpe:/a:synology:video_station:1.2-0447</vuln:product>
      <vuln:product>cpe:/a:synology:video_station:1.2-0451</vuln:product>
      <vuln:product>cpe:/a:synology:video_station:1.2-0453</vuln:product>
      <vuln:product>cpe:/a:synology:video_station:1.5-0753</vuln:product>
      <vuln:product>cpe:/a:synology:video_station:1.5-0754</vuln:product>
      <vuln:product>cpe:/a:synology:video_station:1.5-0757</vuln:product>
      <vuln:product>cpe:/a:synology:video_station:1.5-0763</vuln:product>
      <vuln:product>cpe:/a:synology:video_station:1.5-0770</vuln:product>
      <vuln:product>cpe:/a:synology:video_station:1.6-0835</vuln:product>
      <vuln:product>cpe:/a:synology:video_station:1.6-0840</vuln:product>
      <vuln:product>cpe:/a:synology:video_station:1.6-0841</vuln:product>
      <vuln:product>cpe:/a:synology:video_station:1.6-0844</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9105</vuln:cve-id>
    <vuln:published-datetime>2017-06-30T09:29:00.287-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:15:54.963-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.fortiguard.com/zeroday/FG-VD-15-107" xml:lang="en">http://www.fortiguard.com/zeroday/FG-VD-15-107</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://www.fortiguard.com/zeroday/FG-VD-15-108" xml:lang="en">http://www.fortiguard.com/zeroday/FG-VD-15-108</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.synology.com/en-global/support/security/Video_station_1_5_0772" xml:lang="en">https://www.synology.com/en-global/support/security/Video_station_1_5_0772</vuln:reference>
    </vuln:references>
    <vuln:summary>Multiple cross-site scripting (XSS) vulnerabilities in Synology Video Station 1.2 before 1.2-0455, 1.5 before 1.5-0772, and 1.6 before 1.6-0847 allow remote authenticated attackers to inject arbitrary web script or HTML via the (1) file name or (2) collection name of videos.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9235">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:0.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:0.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:0.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:0.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:0.4.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:1.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:1.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:1.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:1.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:1.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:1.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:1.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:2.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:3.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:3.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:3.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:3.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:3.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:3.2.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:4.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:4.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:4.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:auth0:jsonwebtoken:4.2.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:0.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:0.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:0.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:0.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:0.4.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:1.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:1.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:1.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:1.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:1.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:1.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:1.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:2.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:3.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:3.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:3.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:3.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:3.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:3.2.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:4.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:4.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:4.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:auth0:jsonwebtoken:4.2.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9235</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:00.330-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:15:57.760-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-327"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/" xml:lang="en">https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/auth0/node-jsonwebtoken/commit/1bb584bc382295eeb7ee8c4452a673a77a68b687" xml:lang="en">https://github.com/auth0/node-jsonwebtoken/commit/1bb584bc382295eeb7ee8c4452a673a77a68b687</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/17" xml:lang="en">https://nodesecurity.io/advisories/17</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.timmclean.net/2015/02/25/jwt-alg-none.html" xml:lang="en">https://www.timmclean.net/2015/02/25/jwt-alg-none.html</vuln:reference>
    </vuln:references>
    <vuln:summary>In jsonwebtoken node module before 4.2.2 it is possible for an attacker to bypass verification when a token digitally signed with an asymmetric key (RS/ES family) of algorithms but instead the attacker send a token digitally signed with a symmetric algorithm (HS* family).</vuln:summary>
  </entry>
  <entry id="CVE-2015-9236">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.1.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.4.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.4.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.4.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.4.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.5.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.6.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.7.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.7.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.8.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.8.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.8.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.9.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.9.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.9.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.10.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.10.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.11.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.11.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.11.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.11.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.11.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.12.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.13.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.13.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.13.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.13.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.14.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.14.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.14.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.16.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.6.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.6.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.7.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.7.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.7.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.7.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.8.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.8.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.10.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.11.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.11.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.12.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.13.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.14.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.15.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.16.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.16.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.17.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.18.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.20.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:3.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:3.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:3.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:3.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.1.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.1.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:5.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:5.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.2.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.7.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.7.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.9.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.10.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.11.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.11.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.5.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.5.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.3.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.5.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.5.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.6.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.3.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.4.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.5.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.1.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.4.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.4.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.4.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.4.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.5.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.6.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.7.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.7.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.8.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.8.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.8.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.9.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.9.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.9.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.10.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.10.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.11.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.11.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.11.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.11.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.11.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.12.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.13.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.13.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.13.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.13.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.14.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.14.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.14.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.16.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.6.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.6.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.7.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.7.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.7.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.7.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.8.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.8.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.10.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.11.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.11.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.12.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.13.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.14.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.15.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.16.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.16.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.17.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.18.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.20.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:3.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:3.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:3.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:3.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.1.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.1.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:5.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:5.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.2.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.7.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.7.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.9.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.10.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.11.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.11.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.5.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.5.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.3.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.5.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.5.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.6.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.3.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.4.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.5.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9236</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:00.360-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:15:57.883-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/hapijs/hapi/issues/2840" xml:lang="en">https://github.com/hapijs/hapi/issues/2840</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/hapijs/hapi/issues/2850" xml:lang="en">https://github.com/hapijs/hapi/issues/2850</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/45" xml:lang="en">https://nodesecurity.io/advisories/45</vuln:reference>
    </vuln:references>
    <vuln:summary>Hapi versions less than 11.0.0 implement CORS incorrectly and allowed for configurations that at best returned inconsistent headers and at worst allowed cross-origin activities that were expected to be forbidden. If the connection has CORS enabled but one route has it off, and the route is not GET, the OPTIONS prefetch request will return the default CORS headers and then the actual request will go through and return no CORS headers. This defeats the purpose of turning CORS on the route.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9238">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2015-9238</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:00.423-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:15:58.010-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-134"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/vdemedes/secure-compare/pull/1" xml:lang="en">https://github.com/vdemedes/secure-compare/pull/1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/50" xml:lang="en">https://nodesecurity.io/advisories/50</vuln:reference>
    </vuln:references>
    <vuln:summary>secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two strings of the same length.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9239">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:ansi2html_project:ansi2html:0.0.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ansi2html_project:ansi2html:0.0.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9239</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:00.457-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:15:58.133-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/51" xml:lang="en">https://nodesecurity.io/advisories/51</vuln:reference>
    </vuln:references>
    <vuln:summary>ansi2html is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9241">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.1.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.4.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.4.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.4.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.4.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.5.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.6.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.7.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.7.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.8.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.8.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.8.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.9.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.9.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.9.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.10.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.10.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.11.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.11.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.11.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.11.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.11.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.12.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.13.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.13.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.13.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.13.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.14.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.14.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.14.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.16.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.6.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.6.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.7.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.7.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.7.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.7.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.8.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.8.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.10.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.11.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.11.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.12.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.13.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.14.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.15.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.16.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.16.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.17.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.18.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.20.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:3.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:3.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:3.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:3.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.1.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.1.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:5.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:5.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.2.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.7.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.7.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.9.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.10.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.11.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.11.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.5.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.5.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.3.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.5.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.5.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.6.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.3.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.4.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.0.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.1.2::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.1.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.4.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.4.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.4.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.4.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.5.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.6.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.7.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.7.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.8.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.8.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.8.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.9.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.9.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.9.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.10.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.10.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.11.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.11.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.11.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.11.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.11.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.12.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.13.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.13.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.13.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.13.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.14.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.14.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.14.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.16.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.6.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.6.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.7.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.7.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.7.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.7.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.8.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.8.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.10.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.11.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.11.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.12.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.13.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.14.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.15.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.16.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.16.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.17.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.18.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.20.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:3.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:3.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:3.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:3.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.1.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.1.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:5.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:5.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.2.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.7.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.7.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.9.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.10.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.11.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.11.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.5.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.5.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.3.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.5.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.5.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.6.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.3.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.4.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.0.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.1.2::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9241</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:00.440-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:15:58.277-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/hapijs/hapi/commit/aab2496e930dce5ee1ab28eecec94e0e45f03580" xml:lang="en">https://github.com/hapijs/hapi/commit/aab2496e930dce5ee1ab28eecec94e0e45f03580</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/jfhbrook/node-ecstatic/pull/179" xml:lang="en">https://github.com/jfhbrook/node-ecstatic/pull/179</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/63" xml:lang="en">https://nodesecurity.io/advisories/63</vuln:reference>
    </vuln:references>
    <vuln:summary>Certain input passed into the If-Modified-Since or Last-Modified headers will cause an 'illegal access' exception to be raised. Instead of sending a HTTP 500 error back to the sender, hapi node module before 11.1.3 will continue to hold the socket open until timed out (default node timeout is 2 minutes).</vuln:summary>
  </entry>
  <entry id="CVE-2015-9242">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.1.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.1.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.1.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.1.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.3.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.3.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.4.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.4.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.4.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.4.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.4.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.4.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.4.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.4.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.4.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.4.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.4.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.4.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.4.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.5.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.5.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.5.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.5.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.5.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.5.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.5.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.6.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.7.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.7.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.7.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.7.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.7.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.7.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.7.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:0.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:1.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:1.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:1.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:1.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:1.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:1.1.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:1.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:1.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ecstatic_project:ecstatic:1.3.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.1.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.1.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.1.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.1.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.3.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.3.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.4.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.4.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.4.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.4.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.4.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.4.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.4.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.4.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.4.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.4.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.4.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.4.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.4.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.5.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.5.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.5.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.5.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.5.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.5.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.5.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.6.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.7.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.7.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.7.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.7.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.7.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.7.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.7.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:0.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:1.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:1.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:1.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:1.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:1.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:1.1.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:1.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:1.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ecstatic_project:ecstatic:1.3.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9242</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:00.503-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:15:58.417-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bugs.chromium.org/p/v8/issues/detail?id=4640" xml:lang="en">https://bugs.chromium.org/p/v8/issues/detail?id=4640</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/jfhbrook/node-ecstatic/pull/179" xml:lang="en">https://github.com/jfhbrook/node-ecstatic/pull/179</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/64" xml:lang="en">https://nodesecurity.io/advisories/64</vuln:reference>
    </vuln:references>
    <vuln:summary>Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to raise an exception. This leads to a crash and denial of service in ecstatic when this input is passed into the server via the If-Modified-Since header.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9243">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.0.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.1.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.4.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.4.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.4.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.4.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.5.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.6.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.7.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.7.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.8.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.8.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.8.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.9.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.9.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.9.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.10.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.10.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.11.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.11.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.11.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.11.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.11.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.12.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.13.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.13.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.13.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.13.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.14.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.14.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.14.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.15.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:0.16.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.6.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.6.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.7.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.7.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.7.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.7.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.8.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.8.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.9.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.10.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.11.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.11.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.12.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.13.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.14.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.15.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.16.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.16.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.17.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.18.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.19.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:1.20.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:2.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:3.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:3.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:3.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:3.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.1.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:4.1.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:5.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:5.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.2.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.7.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.7.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.9.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.10.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.11.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:6.11.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.5.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:7.5.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.3.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.5.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.5.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.6.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:8.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.3.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:9.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.4.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:10.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.0.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:hapijs:hapi:11.1.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.0.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.1.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.4.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.4.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.4.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.4.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.5.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.6.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.7.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.7.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.8.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.8.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.8.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.9.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.9.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.9.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.10.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.10.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.11.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.11.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.11.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.11.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.11.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.12.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.13.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.13.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.13.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.13.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.14.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.14.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.14.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.15.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:0.16.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.6.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.6.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.7.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.7.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.7.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.7.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.8.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.8.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.9.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.10.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.11.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.11.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.12.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.13.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.14.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.15.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.16.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.16.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.17.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.18.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.19.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:1.20.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:2.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:3.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:3.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:3.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:3.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.1.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:4.1.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:5.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:5.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.2.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.7.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.7.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.9.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.10.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.11.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:6.11.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.5.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:7.5.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.3.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.5.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.5.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.6.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:8.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.3.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:9.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.4.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:10.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.0.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:hapijs:hapi:11.1.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9243</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:00.547-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:15:58.510-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-254"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/hapijs/hapi/issues/2980" xml:lang="en">https://github.com/hapijs/hapi/issues/2980</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/65" xml:lang="en">https://nodesecurity.io/advisories/65</vuln:reference>
    </vuln:references>
    <vuln:summary>When server level, connection level or route level CORS configurations in hapi node module before 11.1.4 are combined and when a higher level config included security restrictions (like origin), a higher level config that included security restrictions (like origin) would have those restrictions overridden by less restrictive defaults (e.g. origin defaults to all origins `*`).</vuln:summary>
  </entry>
  <entry id="CVE-2015-9244">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mysqljs:mysql_node_module:0.9.6"/>
        <cpe-lang:fact-ref name="cpe:/a:mysqljs:mysql_node_module:2.0.0:alpha"/>
        <cpe-lang:fact-ref name="cpe:/a:mysqljs:mysql_node_module:2.0.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:mysqljs:mysql_node_module:2.0.0:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:mysqljs:mysql_node_module:2.0.0:alpha4"/>
        <cpe-lang:fact-ref name="cpe:/a:mysqljs:mysql_node_module:2.0.0:alpha7"/>
        <cpe-lang:fact-ref name="cpe:/a:mysqljs:mysql_node_module:2.0.0:preview"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mysqljs:mysql_node_module:0.9.6</vuln:product>
      <vuln:product>cpe:/a:mysqljs:mysql_node_module:2.0.0:alpha</vuln:product>
      <vuln:product>cpe:/a:mysqljs:mysql_node_module:2.0.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:mysqljs:mysql_node_module:2.0.0:alpha3</vuln:product>
      <vuln:product>cpe:/a:mysqljs:mysql_node_module:2.0.0:alpha4</vuln:product>
      <vuln:product>cpe:/a:mysqljs:mysql_node_module:2.0.0:alpha7</vuln:product>
      <vuln:product>cpe:/a:mysqljs:mysql_node_module:2.0.0:preview</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9244</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:00.597-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:15:58.620-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/felixge/node-mysql/issues/342" xml:lang="en">https://github.com/felixge/node-mysql/issues/342</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/66" xml:lang="en">https://nodesecurity.io/advisories/66</vuln:reference>
    </vuln:references>
    <vuln:summary>Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9266">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:ubnt:airmax_ac_firmware:7.1.3"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:ubnt:airmax_ac:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false"/>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:ubnt:airmax_m_xm:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false"/>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:ubnt:airmax_m_xw:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false"/>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:ubnt:airmax_m_ti:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false"/>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:ubnt:airgateway:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false"/>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:ubnt:airfiber_af24:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false"/>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:ubnt:airfiber_af24hd:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false"/>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:ubnt:af5x:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false"/>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:ubnt:af5:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false"/>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:ubnt:airmax_ac:-"/>
          <cpe-lang:fact-ref name="cpe:/h:ubnt:airmax_m:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false"/>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/h:ubnt:edgeswitch_xp:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:ubnt:airmax_ac_firmware:7.1.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9266</vuln:cve-id>
    <vuln:published-datetime>2018-09-05T16:29:00.253-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:15:59.197-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://community.ubnt.com/t5/airMAX-General-Discussion/Virus-attack-URGENT-UBNT/td-p/1562940" xml:lang="en">https://community.ubnt.com/t5/airMAX-General-Discussion/Virus-attack-URGENT-UBNT/td-p/1562940</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://community.ubnt.com/t5/airMAX-Updates-Blog/Important-Security-Notice-and-airOS-5-6-5-Release/ba-p/1565949" xml:lang="en">https://community.ubnt.com/t5/airMAX-Updates-Blog/Important-Security-Notice-and-airOS-5-6-5-Release/ba-p/1565949</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://community.ubnt.com/t5/airMAX-Updates-Blog/Security-Release-for-airMAX-TOUGHSwitch-and-airGateway-Released/ba-p/1300494" xml:lang="en">https://community.ubnt.com/t5/airMAX-Updates-Blog/Security-Release-for-airMAX-TOUGHSwitch-and-airGateway-Released/ba-p/1300494</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://hackerone.com/reports/73480" xml:lang="en">https://hackerone.com/reports/73480</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/39701/" xml:lang="en">39701</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/39853/" xml:lang="en">39853</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.rapid7.com/db/modules/exploit/linux/ssh/ubiquiti_airos_file_upload" xml:lang="en">https://www.rapid7.com/db/modules/exploit/linux/ssh/ubiquiti_airos_file_upload</vuln:reference>
    </vuln:references>
    <vuln:summary>The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques. An attacker can exploit this vulnerability to gain root privileges. This vulnerability is fixed in the following product versions (fixes released in July 2015, all prior versions are affected): airMAX AC 7.1.3; airMAX M (and airRouter) 5.6.2 XM/XW/TI, 5.5.11 XM/TI, and 5.5.10u2 XW; airGateway 1.1.5; airFiber AF24/AF24HD 2.2.1, AF5x 3.0.2.1, and AF5 2.2.1; airOS 4 XS2/XS5 4.0.4; and EdgeSwitch XP (formerly TOUGHSwitch) 1.3.2.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9284">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:omniauth:omniauth:-::~~~ruby~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:omniauth:omniauth:-::~~~ruby~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9284</vuln:cve-id>
    <vuln:published-datetime>2019-04-26T11:29:00.267-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:15:59.917-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/omniauth/omniauth/pull/809" xml:lang="en">https://github.com/omniauth/omniauth/pull/809</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/omniauth/omniauth-rails/pull/1" xml:lang="en">https://github.com/omniauth/omniauth-rails/pull/1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="https://www.openwall.com/lists/oss-security/2015/05/26/11" xml:lang="en">[oss-security] 20150526 CVE Request: CSRF vulnerability in OmniAuth request phase</vuln:reference>
    </vuln:references>
    <vuln:summary>The request phase of the OmniAuth Ruby gem is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able to sign into the web application as the primary account.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9450">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:-::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.2.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.7::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.8::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.9::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.7::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.8::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.9::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.7::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.8::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.9::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.7::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.10::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.7::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.8::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.9::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.10::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.11::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.12::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.13::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:-::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.2.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.7::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.8::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.9::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.7::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.8::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.9::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.7::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.8::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.9::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.7::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.10::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.7::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.8::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.9::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.10::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.11::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.12::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.13::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9450</vuln:cve-id>
    <vuln:published-datetime>2019-10-07T11:15:10.060-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-08T20:37:35.433-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-08T14:45:28.953-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://cinu.pl/research/wp-plugins/mail_ec951d52aa603c9caaca8c7005b84004.html" xml:lang="en">http://cinu.pl/research/wp-plugins/mail_ec951d52aa603c9caaca8c7005b84004.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/plugmatter-optin-feature-box-lite/#developers" xml:lang="en">https://wordpress.org/plugins/plugmatter-optin-feature-box-lite/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8340" xml:lang="en">https://wpvulndb.com/vulnerabilities/8340</vuln:reference>
    </vuln:references>
    <vuln:summary>The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfb_cc pmfb_tid parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9451">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:-::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.2.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.7::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.8::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.9::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.7::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.8::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.9::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.7::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.8::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.9::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.7::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:1.10::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.7::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.8::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.9::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.10::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.11::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.12::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.13::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:-::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.2.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.7::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.8::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.3.9::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.7::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.8::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.4.9::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.7::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.8::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.5.9::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.6.7::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:1.10::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.7::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.8::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.9::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.10::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.11::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.12::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:sizmic:plugmatter_optin_feature_box:2.0.13::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9451</vuln:cve-id>
    <vuln:published-datetime>2019-10-07T11:15:10.153-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-08T16:28:35.597-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-08T15:02:12.360-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://cinu.pl/research/wp-plugins/mail_ec951d52aa603c9caaca8c7005b84004.html" xml:lang="en">http://cinu.pl/research/wp-plugins/mail_ec951d52aa603c9caaca8c7005b84004.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/plugmatter-optin-feature-box-lite/#developers" xml:lang="en">https://wordpress.org/plugins/plugmatter-optin-feature-box-lite/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8340" xml:lang="en">https://wpvulndb.com/vulnerabilities/8340</vuln:reference>
    </vuln:references>
    <vuln:summary>The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfb_mailchimp pmfb_tid parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9452">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:-::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.0.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.0.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.0.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.0.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.0.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.0.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:2.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:2.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:2.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:2.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:2.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:3.0.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:3.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:3.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:3.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:3.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:4.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:4.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:4.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:4.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:4.6::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:-::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.0.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.0.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.0.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.0.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.0.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.0.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:1.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:2.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:2.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:2.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:2.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:2.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:3.0.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:3.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:3.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:3.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:3.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:4.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:4.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:4.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:4.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:nex-forms_-_ultimate_form_builder_project:nex-forms_-_ultimate_form_builder:4.6::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9452</vuln:cve-id>
    <vuln:published-datetime>2019-10-07T11:15:10.233-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-08T16:29:59.537-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-08T15:12:12.560-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://cinu.pl/research/wp-plugins/mail_cb24b6204803e8e94943b198edc37af7.html" xml:lang="en">http://cinu.pl/research/wp-plugins/mail_cb24b6204803e8e94943b198edc37af7.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/nex-forms-express-wp-form-builder/#developers" xml:lang="en">https://wordpress.org/plugins/nex-forms-express-wp-form-builder/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8336" xml:lang="en">https://wpvulndb.com/vulnerabilities/8336</vuln:reference>
    </vuln:references>
    <vuln:summary>The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?page=nex-forms-main nex_forms_Id parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9453">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.0:alpha:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.1:alpha:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.2:alpha:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.3:alpha:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.4:alpha:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.5:alpha:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.6:alpha:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.7:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.8:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.9:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.0:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.1:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.2:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.3:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.4:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.5:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.6:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.7:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.8:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.9:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.3.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.3.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.3.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.3.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.3.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.4.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.4.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.5.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.5.5::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.0:alpha:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.1:alpha:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.2:alpha:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.3:alpha:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.4:alpha:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.5:alpha:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.6:alpha:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.7:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.8:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.9:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.0:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.1:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.2:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.3:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.4:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.5:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.6:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.7:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.8:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.9:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.3.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.3.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.3.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.3.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.3.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.4.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.4.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.5.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.5.5::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9453</vuln:cve-id>
    <vuln:published-datetime>2019-10-07T11:15:10.280-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T16:52:04.760-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-10T11:55:23.590-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://cinu.pl/research/wp-plugins/mail_b677bb83a6c1495f85f76faa5b13011d.html" xml:lang="en">http://cinu.pl/research/wp-plugins/mail_b677bb83a6c1495f85f76faa5b13011d.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/broken-link-manager/#developers" xml:lang="en">https://wordpress.org/plugins/broken-link-manager/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8333" xml:lang="en">https://wpvulndb.com/vulnerabilities/8333</vuln:reference>
    </vuln:references>
    <vuln:summary>The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9454">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:1.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:1.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.1.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.1.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.3.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.3.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.3.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.3.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.5.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.6.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.6.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.6.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.6.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:slidervilla:smooth_slider:2.6.5::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:1.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:1.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.1.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.1.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.3.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.3.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.3.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.3.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.5.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.6.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.6.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.6.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.6.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:slidervilla:smooth_slider:2.6.5::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9454</vuln:cve-id>
    <vuln:published-datetime>2019-10-07T11:15:10.387-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T16:48:10.343-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-10T12:14:11.847-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://cinu.pl/research/wp-plugins/mail_36e814da6ac4dd903be2c77cfbdd0afd.html" xml:lang="en">http://cinu.pl/research/wp-plugins/mail_36e814da6ac4dd903be2c77cfbdd0afd.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/smooth-slider/#developers" xml:lang="en">https://wordpress.org/plugins/smooth-slider/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8284" xml:lang="en">https://wpvulndb.com/vulnerabilities/8284</vuln:reference>
    </vuln:references>
    <vuln:summary>The smooth-slider plugin before 2.7 for WordPress has SQL Injection via the wp-admin/admin.php?page=smooth-slider-admin current_slider_id parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9455">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2015-9455</vuln:cve-id>
    <vuln:published-datetime>2019-10-07T11:15:10.450-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T16:38:18.317-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-10T15:08:20.333-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://security.dxw.com/advisories/csrf-and-arbitrary-file-deletion-in-buddypress-activity-plus-1-5/" xml:lang="en">https://security.dxw.com/advisories/csrf-and-arbitrary-file-deletion-in-buddypress-activity-plus-1-5/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/buddypress-activity-plus/#developers" xml:lang="en">https://wordpress.org/plugins/buddypress-activity-plus/#developers</vuln:reference>
    </vuln:references>
    <vuln:summary>The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant directory traversal via the wp-admin/admin-ajax.php bpfb_photos[] parameter in a bpfb_remove_temp_images action.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9456">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.0.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.0.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.0.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.0.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.0.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.0.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.0.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.0.7::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.0.8::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.0.9::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.1.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.1.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.1.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.1.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.1.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.1.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.1.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.1.7::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.1.8::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.1.9::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.2.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.2.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.2.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.2.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.2.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.2.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:orbisius:child_theme_creator:1.2.7::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.0.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.0.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.0.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.0.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.0.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.0.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.0.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.0.7::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.0.8::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.0.9::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.1.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.1.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.1.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.1.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.1.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.1.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.1.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.1.7::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.1.8::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.1.9::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.2.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.2.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.2.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.2.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.2.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.2.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:orbisius:child_theme_creator:1.2.7::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9456</vuln:cve-id>
    <vuln:published-datetime>2019-10-07T11:15:10.543-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T16:29:17.043-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-09T15:53:49.220-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-732"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://cinu.pl/research/wp-plugins/mail_28c91eee00e8e4b5868ebc58b5b1f730.html" xml:lang="en">http://cinu.pl/research/wp-plugins/mail_28c91eee00e8e4b5868ebc58b5b1f730.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/orbisius-child-theme-creator/#developers" xml:lang="en">https://wordpress.org/plugins/orbisius-child-theme-creator/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8315" xml:lang="en">https://wpvulndb.com/vulnerabilities/8315</vuln:reference>
    </vuln:references>
    <vuln:summary>The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification via the wp-admin/admin-ajax.php?action=orbisius_ctc_theme_editor_ajax&amp;sub_cmd=save_file theme_1, theme_1_file, or theme_1_file_contents parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9457">
    <vuln:cve-id>CVE-2015-9457</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T12:15:10.940-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T13:10:24.173-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://cinu.pl/research/wp-plugins/mail_9ca443a3759e5c7fd889ae0e02e044e6.html" xml:lang="en">http://cinu.pl/research/wp-plugins/mail_9ca443a3759e5c7fd889ae0e02e044e6.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/pretty-link/#developers" xml:lang="en">https://wordpress.org/plugins/pretty-link/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8249" xml:lang="en">https://wpvulndb.com/vulnerabilities/8249</vuln:reference>
    </vuln:references>
    <vuln:summary>The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9458">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:seo_searchterms_tagging_2_project:seo_searchterms_tagging_2:1.535::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:seo_searchterms_tagging_2_project:seo_searchterms_tagging_2:1.535::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9458</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T12:15:11.020-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T10:58:36.887-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-11T10:18:47.857-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://cinu.pl/research/wp-plugins/mail_d14e213879cd60e80e538bde21c0359b.html" xml:lang="en">http://cinu.pl/research/wp-plugins/mail_d14e213879cd60e80e538bde21c0359b.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/searchterms-tagging-2/#developers" xml:lang="en">https://wordpress.org/plugins/searchterms-tagging-2/#developers</vuln:reference>
    </vuln:references>
    <vuln:summary>The searchterms-tagging-2 plugin through 1.535 for WordPress has SQL injection via the pk_stt2_db_get_popular_terms count parameter exploitable via CSRF.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9459">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:seo_searchterms_tagging_2_project:seo_searchterms_tagging_2:1.535::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:seo_searchterms_tagging_2_project:seo_searchterms_tagging_2:1.535::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9459</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T12:15:11.317-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T11:04:14.873-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-11T10:16:37.087-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://cinu.pl/research/wp-plugins/mail_d14e213879cd60e80e538bde21c0359b.html" xml:lang="en">http://cinu.pl/research/wp-plugins/mail_d14e213879cd60e80e538bde21c0359b.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/searchterms-tagging-2/#developers" xml:lang="en">https://wordpress.org/plugins/searchterms-tagging-2/#developers</vuln:reference>
    </vuln:references>
    <vuln:summary>The searchterms-tagging-2 plugin through 1.535 for WordPress has XSS via the wp-admin/options-general.php count parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9460">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2015-9460</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T12:15:11.393-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T10:30:35.280-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-15T08:54:57.677-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://cinu.pl/research/wp-plugins/mail_dad9a09a6290ae952bfd97010583bdbd.html" xml:lang="en">http://cinu.pl/research/wp-plugins/mail_dad9a09a6290ae952bfd97010583bdbd.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/booking-system/#developers" xml:lang="en">https://wordpress.org/plugins/booking-system/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8339" xml:lang="en">https://wpvulndb.com/vulnerabilities/8339</vuln:reference>
    </vuln:references>
    <vuln:summary>The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9461">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:brinidesigner:awesome_filterable_portfolio:1.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:brinidesigner:awesome_filterable_portfolio:1.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:brinidesigner:awesome_filterable_portfolio:1.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:brinidesigner:awesome_filterable_portfolio:1.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:brinidesigner:awesome_filterable_portfolio:1.8::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:brinidesigner:awesome_filterable_portfolio:1.8.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:brinidesigner:awesome_filterable_portfolio:1.8.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:brinidesigner:awesome_filterable_portfolio:1.8.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:brinidesigner:awesome_filterable_portfolio:1.8.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:brinidesigner:awesome_filterable_portfolio:1.8.5::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:brinidesigner:awesome_filterable_portfolio:1.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:brinidesigner:awesome_filterable_portfolio:1.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:brinidesigner:awesome_filterable_portfolio:1.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:brinidesigner:awesome_filterable_portfolio:1.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:brinidesigner:awesome_filterable_portfolio:1.8::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:brinidesigner:awesome_filterable_portfolio:1.8.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:brinidesigner:awesome_filterable_portfolio:1.8.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:brinidesigner:awesome_filterable_portfolio:1.8.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:brinidesigner:awesome_filterable_portfolio:1.8.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:brinidesigner:awesome_filterable_portfolio:1.8.5::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9461</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T12:15:11.440-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T11:06:55.177-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-11T09:57:57.193-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://cinu.pl/research/wp-plugins/mail_082287dbf7a24d415ff71581fc248330.html" xml:lang="en">http://cinu.pl/research/wp-plugins/mail_082287dbf7a24d415ff71581fc248330.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/awesome-filterable-portfolio/#developers" xml:lang="en">https://wordpress.org/plugins/awesome-filterable-portfolio/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8311" xml:lang="en">https://wpvulndb.com/vulnerabilities/8311</vuln:reference>
    </vuln:references>
    <vuln:summary>The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_portfolio_item_page SQL injection via the item_id parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9462">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2015-9462</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T12:15:11.520-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T09:54:25.323-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-11T09:53:46.870-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://cinu.pl/research/wp-plugins/mail_082287dbf7a24d415ff71581fc248330.html" xml:lang="en">http://cinu.pl/research/wp-plugins/mail_082287dbf7a24d415ff71581fc248330.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/awesome-filterable-portfolio/#developers" xml:lang="en">https://wordpress.org/plugins/awesome-filterable-portfolio/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8311" xml:lang="en">https://wpvulndb.com/vulnerabilities/8311</vuln:reference>
    </vuln:references>
    <vuln:summary>The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_category_page SQL injection via the cat_id parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9463">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:s3bubble:s3bubble-amazon-s3-audio-streaming:2.0::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:s3bubble:s3bubble-amazon-s3-audio-streaming:2.0::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9463</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T13:15:15.077-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T16:27:37.670-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-15T14:53:35.820-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://packetstormsecurity.com/files/132578/" xml:lang="en">http://packetstormsecurity.com/files/132578/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/s3bubble-amazon-s3-audio-streaming/#developers" xml:lang="en">https://wordpress.org/plugins/s3bubble-amazon-s3-audio-streaming/#developers</vuln:reference>
    </vuln:references>
    <vuln:summary>The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9464">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:s3bubble:s3bubble-amazon-s3-html-5-video-with-adverts:0.7::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:s3bubble:s3bubble-amazon-s3-html-5-video-with-adverts:0.7::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9464</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T12:15:11.567-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T15:48:28.767-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-15T13:23:05.950-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/s3bubble-amazon-s3-html-5-video-with-adverts/#developers" xml:lang="en">https://wordpress.org/plugins/s3bubble-amazon-s3-html-5-video-with-adverts/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/37494" xml:lang="en">Exploit Database</vuln:reference>
    </vuln:references>
    <vuln:summary>The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9465">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2015-9465</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T13:15:15.153-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T16:15:18.103-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-15T14:22:08.830-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://cinu.pl/research/wp-plugins/mail_041b796c7533880df03a43895fed5f00.html" xml:lang="en">http://cinu.pl/research/wp-plugins/mail_041b796c7533880df03a43895fed5f00.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/yet-another-stars-rating/#developers" xml:lang="en">https://wordpress.org/plugins/yet-another-stars-rating/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8309" xml:lang="en">https://wpvulndb.com/vulnerabilities/8309</vuln:reference>
    </vuln:references>
    <vuln:summary>The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9466">
    <vuln:cve-id>CVE-2015-9466</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T13:15:15.217-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T14:30:44.203-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://cinu.pl/research/wp-plugins/mail_576345187f5867ec8921b12de5884fb1.html" xml:lang="en">http://cinu.pl/research/wp-plugins/mail_576345187f5867ec8921b12de5884fb1.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/wti-like-post/#developers" xml:lang="en">https://wordpress.org/plugins/wti-like-post/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8318" xml:lang="en">https://wpvulndb.com/vulnerabilities/8318</vuln:reference>
    </vuln:references>
    <vuln:summary>The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL injection via the HTTP_CLIENT_IP, HTTP_X_FORWARDED_FOR, HTTP_X_FORWARDED, HTTP_FORWARDED_FOR, or HTTP_FORWARDED variable.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9467">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.0:alpha:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.1:alpha:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.2:alpha:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.3:alpha:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.4:alpha:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.5:alpha:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.6:alpha:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.7:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.8:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.1.9:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.0:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.1:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.2:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.3:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.4:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.5:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.6:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.7:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.8:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.2.9:beta:~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.3.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.3.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.3.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.3.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.3.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.4.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.4.5::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.0:alpha:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.1:alpha:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.2:alpha:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.3:alpha:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.4:alpha:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.5:alpha:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.6:alpha:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.7:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.8:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.1.9:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.0:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.1:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.2:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.3:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.4:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.5:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.6:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.7:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.8:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.2.9:beta:~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.3.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.3.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.3.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.3.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.3.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.4.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.4.5::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9467</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T13:15:15.280-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T11:14:55.933-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-11T09:49:06.920-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://cinu.pl/research/wp-plugins/mail_604dd4c86dca013f6e5e89751352f36d.html" xml:lang="en">http://cinu.pl/research/wp-plugins/mail_604dd4c86dca013f6e5e89751352f36d.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/broken-link-manager/#developers" xml:lang="en">https://wordpress.org/plugins/broken-link-manager/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8320" xml:lang="en">https://wpvulndb.com/vulnerabilities/8320</vuln:reference>
    </vuln:references>
    <vuln:summary>The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9468">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:k-78:broken_link_manager:0.4.5::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:k-78:broken_link_manager:0.4.5::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9468</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T13:15:15.343-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T11:02:18.243-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-11T09:47:45.853-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://cinu.pl/research/wp-plugins/mail_604dd4c86dca013f6e5e89751352f36d.html" xml:lang="en">http://cinu.pl/research/wp-plugins/mail_604dd4c86dca013f6e5e89751352f36d.html</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/broken-link-manager/#developers" xml:lang="en">https://wordpress.org/plugins/broken-link-manager/#developers</vuln:reference>
    </vuln:references>
    <vuln:summary>The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9469">
    <vuln:cve-id>CVE-2015-9469</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T13:15:15.403-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T14:30:40.233-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://packetstormsecurity.com/files/132910/" xml:lang="en">https://packetstormsecurity.com/files/132910/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/content-grabber/#developers" xml:lang="en">https://wordpress.org/plugins/content-grabber/#developers</vuln:reference>
    </vuln:references>
    <vuln:summary>The content-grabber plugin 1.0 for WordPress has XSS via obj_field_name or obj_field_id.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9470">
    <vuln:cve-id>CVE-2015-9470</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T13:15:15.467-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T14:30:40.233-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://packetstormsecurity.com/files/132279/" xml:lang="en">https://packetstormsecurity.com/files/132279/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/history-collection/#developers" xml:lang="en">https://wordpress.org/plugins/history-collection/#developers</vuln:reference>
    </vuln:references>
    <vuln:summary>The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9471">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:digitalzoomstudio:dzs-zoomsounds:2.0::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:digitalzoomstudio:dzs-zoomsounds:2.0::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9471</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T13:15:15.530-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T15:31:00.827-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-15T13:47:07.750-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-434"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://packetstormsecurity.com/files/132124/" xml:lang="en">https://packetstormsecurity.com/files/132124/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/dzs-zoomsounds/#developers" xml:lang="en">https://wordpress.org/plugins/dzs-zoomsounds/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8019" xml:lang="en">https://wpvulndb.com/vulnerabilities/8019</vuln:reference>
    </vuln:references>
    <vuln:summary>The dzs-zoomsounds plugin through 2.0 for WordPress has admin/upload.php arbitrary file upload.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9472">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:monitorbacklinks:incoming_links:-::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:monitorbacklinks:incoming_links:0.9.1b::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:monitorbacklinks:incoming_links:0.9.2b::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:monitorbacklinks:incoming_links:0.9.3b::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:monitorbacklinks:incoming_links:0.9.4b::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:monitorbacklinks:incoming_links:0.9.5b::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:monitorbacklinks:incoming_links:0.9.6b::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:monitorbacklinks:incoming_links:0.9.7b::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:monitorbacklinks:incoming_links:0.9.8b::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:monitorbacklinks:incoming_links:0.9.9b::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:monitorbacklinks:incoming_links:-::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:monitorbacklinks:incoming_links:0.9.1b::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:monitorbacklinks:incoming_links:0.9.2b::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:monitorbacklinks:incoming_links:0.9.3b::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:monitorbacklinks:incoming_links:0.9.4b::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:monitorbacklinks:incoming_links:0.9.5b::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:monitorbacklinks:incoming_links:0.9.6b::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:monitorbacklinks:incoming_links:0.9.7b::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:monitorbacklinks:incoming_links:0.9.8b::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:monitorbacklinks:incoming_links:0.9.9b::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9472</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T13:15:15.607-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T14:40:45.393-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-15T13:35:41.123-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://plugins.trac.wordpress.org/changeset/1080044/incoming-links" xml:lang="en">https://plugins.trac.wordpress.org/changeset/1080044/incoming-links</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/incoming-links/#developers" xml:lang="en">https://wordpress.org/plugins/incoming-links/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8015" xml:lang="en">https://wpvulndb.com/vulnerabilities/8015</vuln:reference>
    </vuln:references>
    <vuln:summary>The incoming-links plugin before 0.9.10b for WordPress has referrers.php XSS via the Referer HTTP header.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9473">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:estrutura-basica_project:estrutura-basica:2015-09-13::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:estrutura-basica_project:estrutura-basica:2015-09-13::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9473</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T13:15:15.670-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T15:32:21.393-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-15T13:18:23.437-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://packetstormsecurity.com/files/132042/" xml:lang="en">https://packetstormsecurity.com/files/132042/</vuln:reference>
    </vuln:references>
    <vuln:summary>The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9474">
    <vuln:cve-id>CVE-2015-9474</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T13:15:15.733-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T14:30:40.233-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8061" xml:lang="en">https://wpvulndb.com/vulnerabilities/8061</vuln:reference>
    </vuln:references>
    <vuln:summary>The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9475">
    <vuln:cve-id>CVE-2015-9475</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T13:15:15.797-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T14:30:40.233-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8061" xml:lang="en">https://wpvulndb.com/vulnerabilities/8061</vuln:reference>
    </vuln:references>
    <vuln:summary>The Pont theme 1.5 for WordPress has insufficient restrictions on option updates.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9476">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:teardrop_project:teardrop:1.8.1::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:teardrop_project:teardrop:1.8.1::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9476</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T13:15:15.857-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T15:15:09.050-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-15T13:28:12.137-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-276"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8061" xml:lang="en">https://wpvulndb.com/vulnerabilities/8061</vuln:reference>
    </vuln:references>
    <vuln:summary>The Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9477">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:vernissage_project:vernissage:1.2.8::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:vernissage_project:vernissage:1.2.8::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9477</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T13:15:15.937-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T15:06:36.933-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-15T12:04:27.893-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-276"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/8061" xml:lang="en">https://wpvulndb.com/vulnerabilities/8061</vuln:reference>
    </vuln:references>
    <vuln:summary>The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9478">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:-::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:1.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:1.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:1.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.1.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.1.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.1.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.2.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.2.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.2.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.2.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.2.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.2.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.2.7::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.3.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.3.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.3.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.4.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.4.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.4.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.5.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.5.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.5.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.5.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.5.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:2.5.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:3.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:3.0.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:3.0.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:3.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:3.1.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:3.1.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:3.1.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:3.1.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:no-margin-for-error:prettyphoto:3.1.5::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:-::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:1.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:1.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:1.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.1.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.1.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.1.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.2.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.2.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.2.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.2.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.2.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.2.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.2.7::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.3.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.3.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.3.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.4.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.4.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.4.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.5.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.5.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.5.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.5.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.5.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:2.5.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:3.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:3.0.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:3.0.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:3.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:3.1.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:3.1.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:3.1.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:3.1.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:no-margin-for-error:prettyphoto:3.1.5::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9478</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T13:15:16.047-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T12:36:15.370-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-15T12:32:54.500-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/scaron/prettyphoto/issues/149" xml:lang="en">https://github.com/scaron/prettyphoto/issues/149</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/scaron/prettyphoto/releases/tag/3.1.6" xml:lang="en">https://github.com/scaron/prettyphoto/releases/tag/3.1.6</vuln:reference>
    </vuln:references>
    <vuln:summary>prettyPhoto before 3.1.6 has js/jquery.prettyPhoto.js XSS.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9479">
    <vuln:cve-id>CVE-2015-9479</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T13:15:16.170-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-10T14:30:40.233-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://packetstormsecurity.com/files/132590/" xml:lang="en">https://packetstormsecurity.com/files/132590/</vuln:reference>
    </vuln:references>
    <vuln:summary>The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9480">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:robot-cpa:robotcpa:5::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:robot-cpa:robotcpa:5::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2015-9480</vuln:cve-id>
    <vuln:published-datetime>2019-10-10T13:15:16.233-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T14:13:27.147-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
        <cvss:generated-on-datetime>2019-10-15T11:04:26.340-04:00</cvss:generated-on-datetime>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>EXPLOIT-DB</vuln:source>
      <vuln:reference href="https://www.exploit-db.com/exploits/37252" xml:lang="en">Exploit Database</vuln:reference>
    </vuln:references>
    <vuln:summary>The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9481">
    <vuln:cve-id>CVE-2015-9481</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T14:15:10.677-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T15:29:39.737-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://packetstormsecurity.com/files/131957/" xml:lang="en">https://packetstormsecurity.com/files/131957/</vuln:reference>
    </vuln:references>
    <vuln:summary>The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9482">
    <vuln:cve-id>CVE-2015-9482</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T14:15:10.753-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T15:29:39.737-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://packetstormsecurity.com/files/131957/" xml:lang="en">https://packetstormsecurity.com/files/131957/</vuln:reference>
    </vuln:references>
    <vuln:summary>The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9483">
    <vuln:cve-id>CVE-2015-9483</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T14:15:10.817-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T15:29:39.737-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://packetstormsecurity.com/files/131957/" xml:lang="en">https://packetstormsecurity.com/files/131957/</vuln:reference>
    </vuln:references>
    <vuln:summary>The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9484">
    <vuln:cve-id>CVE-2015-9484</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T14:15:10.863-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T15:29:39.737-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://packetstormsecurity.com/files/131957/" xml:lang="en">https://packetstormsecurity.com/files/131957/</vuln:reference>
    </vuln:references>
    <vuln:summary>The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9485">
    <vuln:cve-id>CVE-2015-9485</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T14:15:10.957-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T15:29:39.737-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://packetstormsecurity.com/files/131957/" xml:lang="en">https://packetstormsecurity.com/files/131957/</vuln:reference>
    </vuln:references>
    <vuln:summary>The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9486">
    <vuln:cve-id>CVE-2015-9486</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T15:15:09.400-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T15:29:33.957-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://packetstormsecurity.com/files/131957/" xml:lang="en">https://packetstormsecurity.com/files/131957/</vuln:reference>
    </vuln:references>
    <vuln:summary>The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9487">
    <vuln:cve-id>CVE-2015-9487</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T15:15:09.573-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T15:29:33.957-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://packetstormsecurity.com/files/131957/" xml:lang="en">https://packetstormsecurity.com/files/131957/</vuln:reference>
    </vuln:references>
    <vuln:summary>The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9488">
    <vuln:cve-id>CVE-2015-9488</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T15:15:09.650-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T15:29:33.957-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://packetstormsecurity.com/files/131957/" xml:lang="en">https://packetstormsecurity.com/files/131957/</vuln:reference>
    </vuln:references>
    <vuln:summary>The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9489">
    <vuln:cve-id>CVE-2015-9489</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T15:15:09.713-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T15:29:33.957-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://packetstormsecurity.com/files/131957/" xml:lang="en">https://packetstormsecurity.com/files/131957/</vuln:reference>
    </vuln:references>
    <vuln:summary>The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9490">
    <vuln:cve-id>CVE-2015-9490</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T15:15:09.777-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T15:29:33.957-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://packetstormsecurity.com/files/131957/" xml:lang="en">https://packetstormsecurity.com/files/131957/</vuln:reference>
    </vuln:references>
    <vuln:summary>The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9491">
    <vuln:cve-id>CVE-2015-9491</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T15:15:09.837-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T15:29:33.957-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://packetstormsecurity.com/files/131957/" xml:lang="en">https://packetstormsecurity.com/files/131957/</vuln:reference>
    </vuln:references>
    <vuln:summary>The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.</vuln:summary>
  </entry>
  <entry id="CVE-2015-9492">
    <vuln:cve-id>CVE-2015-9492</vuln:cve-id>
    <vuln:published-datetime>2019-10-11T15:15:09.917-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-11T15:29:33.957-04:00</vuln:last-modified-datetime>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://packetstormsecurity.com/files/131957/" xml:lang="en">https://packetstormsecurity.com/files/131957/</vuln:reference>
    </vuln:references>
    <vuln:summary>The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.</vuln:summary>
  </entry>
  <entry id="CVE-2016-0205">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:ibm:cloud_orchestrator:2.3.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:cloud_orchestrator:2.3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:cloud_orchestrator:2.4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:cloud_orchestrator:2.4.0.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ibm:cloud_orchestrator:2.3.0.0</vuln:product>
      <vuln:product>cpe:/a:ibm:cloud_orchestrator:2.3.0.1</vuln:product>
      <vuln:product>cpe:/a:ibm:cloud_orchestrator:2.4.0.0</vuln:product>
      <vuln:product>cpe:/a:ibm:cloud_orchestrator:2.4.0.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-0205</vuln:cve-id>
    <vuln:published-datetime>2018-08-30T12:29:00.243-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:08.073-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/109394" xml:lang="en">ibm-co-cve20160205-info-disc(109394)</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www-01.ibm.com/support/docview.wss?uid=swg2C4000049" xml:lang="en">https://www-01.ibm.com/support/docview.wss?uid=swg2C4000049</vuln:reference>
    </vuln:references>
    <vuln:summary>A vulnerability has been identified in IBM Cloud Orchestrator 2.3, 2.3.0.1, 2.4, and 2.4.0.1 that could allow an attacker after authentication to enumerate valid users of the system. IBM X-Force ID: 109394.</vuln:summary>
  </entry>
  <entry id="CVE-2016-0234">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:ibm:openpages_grc_platform:7.1.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:openpages_grc_platform:7.1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:openpages_grc_platform:7.1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:openpages_grc_platform:7.1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:openpages_grc_platform:7.2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:openpages_grc_platform:7.2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:openpages_grc_platform:7.2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:openpages_grc_platform:7.3.0.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ibm:openpages_grc_platform:7.1.0.0</vuln:product>
      <vuln:product>cpe:/a:ibm:openpages_grc_platform:7.1.0.1</vuln:product>
      <vuln:product>cpe:/a:ibm:openpages_grc_platform:7.1.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:openpages_grc_platform:7.1.0.3</vuln:product>
      <vuln:product>cpe:/a:ibm:openpages_grc_platform:7.2.0.0</vuln:product>
      <vuln:product>cpe:/a:ibm:openpages_grc_platform:7.2.0.1</vuln:product>
      <vuln:product>cpe:/a:ibm:openpages_grc_platform:7.2.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:openpages_grc_platform:7.3.0.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-0234</vuln:cve-id>
    <vuln:published-datetime>2018-08-30T12:29:00.417-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:08.837-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-613"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg21997687" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg21997687</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/110303" xml:lang="en">ibm-openpages-cve20160234-info-disc(110303)</vuln:reference>
    </vuln:references>
    <vuln:summary>IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow a local user to obtain sensitive information when a previous user has logged out of the system but neglected to close their browser. IBM X-Force ID: 110303.</vuln:summary>
  </entry>
  <entry id="CVE-2016-0373">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.0.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.0.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.0.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.0.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.0.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.0.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.0.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.0.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.0.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.0.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.0.1.10"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.0.1.11"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.0.1.12"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.0.1.13"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.0.4"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.3.4"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.3.5"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.3.6"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.3.7"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.1.3.8"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.2.0.201"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.2.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.2.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.2.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:ibm:urbancode_deploy:6.2.2.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.0</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.0.1.0</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.0.1.1</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.0.1.2</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.0.1.3</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.0.1.4</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.0.1.5</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.0.1.6</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.0.1.7</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.0.1.8</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.0.1.9</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.0.1.10</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.0.1.11</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.0.1.12</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.0.1.13</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.0.1</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.0.3</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.0.4</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.1</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.1.0</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.1.1</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.1.2</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.1.3</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.1.4</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.1.5</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.1.6</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.1.7</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.1.8</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.2</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.3</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.3.1</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.3.2</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.3.3</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.3.4</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.3.5</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.3.6</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.3.7</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.1.3.8</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.2</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.2.0.0</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.2.0.1</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.2.0.2</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.2.0.201</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.2.1</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.2.1.0</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.2.1.1</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.2.1.2</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.2.2</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.2.2.0</vuln:product>
      <vuln:product>cpe:/a:ibm:urbancode_deploy:6.2.2.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-0373</vuln:cve-id>
    <vuln:published-datetime>2018-08-30T12:29:00.557-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:11.790-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-285"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="http://www-01.ibm.com/support/docview.wss?uid=swg2C1000219" xml:lang="en">http://www-01.ibm.com/support/docview.wss?uid=swg2C1000219</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>XF</vuln:source>
      <vuln:reference href="https://exchange.xforce.ibmcloud.com/vulnerabilities/112119" xml:lang="en">ibm-ucd-cve20160373-info-disc(112119)</vuln:reference>
    </vuln:references>
    <vuln:summary>IBM UrbanCode Deploy 6.0 through 6.2.2.1 could allow an authenticated user to read sensitive information due to UCD REST endpoints not properly authorizing users when determining who can read data. IBM X-Force ID: 112119.</vuln:summary>
  </entry>
  <entry id="CVE-2016-0715">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.1"/>
        <cpe-lang:fact-ref name="cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.2"/>
        <cpe-lang:fact-ref name="cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.3"/>
        <cpe-lang:fact-ref name="cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.4"/>
        <cpe-lang:fact-ref name="cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.5"/>
        <cpe-lang:fact-ref name="cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.6"/>
        <cpe-lang:fact-ref name="cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.7"/>
        <cpe-lang:fact-ref name="cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.8"/>
        <cpe-lang:fact-ref name="cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.9"/>
        <cpe-lang:fact-ref name="cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.10"/>
        <cpe-lang:fact-ref name="cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.11"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.0</vuln:product>
      <vuln:product>cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.1</vuln:product>
      <vuln:product>cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.2</vuln:product>
      <vuln:product>cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.3</vuln:product>
      <vuln:product>cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.4</vuln:product>
      <vuln:product>cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.5</vuln:product>
      <vuln:product>cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.6</vuln:product>
      <vuln:product>cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.7</vuln:product>
      <vuln:product>cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.8</vuln:product>
      <vuln:product>cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.9</vuln:product>
      <vuln:product>cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.10</vuln:product>
      <vuln:product>cpe:/a:pivotal_software:cloud_foundry_elastic_runtime:1.6.11</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-0715</vuln:cve-id>
    <vuln:published-datetime>2018-09-11T13:29:00.223-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:19.697-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://pivotal.io/security/cve-2016-0715" xml:lang="en">https://pivotal.io/security/cve-2016-0715</vuln:reference>
    </vuln:references>
    <vuln:summary>Pivotal Cloud Foundry Elastic Runtime version 1.4.0 through 1.4.5, 1.5.0 through 1.5.11 and 1.6.0 through 1.6.11 is vulnerable to a remote information disclosure. It was found that original mitigation configuration instructions provided as part of CVE-2016-0708 were incomplete and could leave PHP Buildpack, Staticfile Buildpack and potentially other custom Buildpack applications vulnerable to remote information disclosure. Affected applications use automated buildpack detection, serve files directly from the root of the application and have a buildpack that matched after the Java Buildpack in the system buildpack priority when Java Buildpack versions 2.0 through 3.4 were present.</vuln:summary>
  </entry>
  <entry id="CVE-2016-0750">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.9"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.10"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.11"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.12"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.13"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.14"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.15"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.16"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.17"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.18"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.19"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.20"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.21"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.22"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.2.23"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:5.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:6.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:6.0.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:6.0.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:6.0.0:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:6.0.0:alpha4"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:6.0.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:6.0.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:6.0.0:cr1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:6.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:6.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.0.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.0.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.0.0:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.0.0:alpha4"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.0.0:alpha5"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.0.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.0.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.0.0:cr1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.0.0:cr2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.0.3"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.1.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.1.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.1.0:cr1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.1.0:cr2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.2.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.2.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.2.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.2.0:cr1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:7.2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.0.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.0.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.0.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.0.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.0.0:beta3"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.0.0:cr1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.1.0"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.1.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.1.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.1.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.1.0:cr1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.1.1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.1.2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.1.3"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.1.4"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.1.5"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.1.6"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.1.7"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.1.8"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.1.9"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.2.0"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.2.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.2.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.2.0:cr1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.2.1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.2.2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.2.3"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.2.4"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.2.5"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.2.6"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.2.7"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.2.8"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.2.9"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.2.10"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:8.2.11"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:9.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:9.0.0:alpha1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:9.0.0:alpha2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:9.0.0:alpha3"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:9.0.0:alpha4"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:9.0.0:beta1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:9.0.0:beta2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:9.0.0:cr1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:9.0.0:cr2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:9.0.0:cr3"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:9.0.0:cr4"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:9.0.1"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:9.0.2"/>
        <cpe-lang:fact-ref name="cpe:/a:infinispan:infinispan:9.0.3"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:infinispan:infinispan:4.0.0</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:4.1.0</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:4.2.0</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:4.2.1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.0.0</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.0.1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.1.0</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.1.1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.1.2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.1.3</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.1.4</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.1.5</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.1.6</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.1.7</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.1.8</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.0</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.3</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.4</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.5</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.6</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.7</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.8</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.9</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.10</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.11</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.12</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.13</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.14</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.15</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.16</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.17</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.18</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.19</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.20</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.21</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.22</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.2.23</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:5.3.0</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:6.0.0</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:6.0.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:6.0.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:6.0.0:alpha3</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:6.0.0:alpha4</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:6.0.0:beta1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:6.0.0:beta2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:6.0.0:cr1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:6.0.1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:6.0.2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.0.0</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.0.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.0.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.0.0:alpha3</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.0.0:alpha4</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.0.0:alpha5</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.0.0:beta1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.0.0:beta2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.0.0:cr1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.0.0:cr2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.0.1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.0.2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.0.3</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.1.0</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.1.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.1.0:beta1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.1.0:cr1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.1.0:cr2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.1.1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.2.0</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.2.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.2.0:beta1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.2.0:beta2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.2.0:cr1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.2.1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.2.2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.2.3</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.2.4</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:7.2.5</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.0.0</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.0.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.0.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.0.0:beta1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.0.0:beta2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.0.0:beta3</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.0.0:cr1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.0.1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.0.2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.1.0</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.1.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.1.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.1.0:beta1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.1.0:cr1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.1.1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.1.2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.1.3</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.1.4</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.1.5</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.1.6</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.1.7</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.1.8</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.1.9</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.2.0</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.2.0:beta1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.2.0:beta2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.2.0:cr1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.2.1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.2.2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.2.3</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.2.4</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.2.5</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.2.6</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.2.7</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.2.8</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.2.9</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.2.10</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:8.2.11</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:9.0.0</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:9.0.0:alpha1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:9.0.0:alpha2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:9.0.0:alpha3</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:9.0.0:alpha4</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:9.0.0:beta1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:9.0.0:beta2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:9.0.0:cr1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:9.0.0:cr2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:9.0.0:cr3</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:9.0.0:cr4</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:9.0.1</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:9.0.2</vuln:product>
      <vuln:product>cpe:/a:infinispan:infinispan:9.0.3</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-0750</vuln:cve-id>
    <vuln:published-datetime>2018-09-11T09:29:00.433-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:20.590-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-502"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/101910" xml:lang="en">101910</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="https://access.redhat.com/errata/RHSA-2017:3244" xml:lang="en">RHSA-2017:3244</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>REDHAT</vuln:source>
      <vuln:reference href="https://access.redhat.com/errata/RHSA-2018:0501" xml:lang="en">RHSA-2018:0501</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-0750" xml:lang="en">https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-0750</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/infinispan/infinispan/pull/5116" xml:lang="en">https://github.com/infinispan/infinispan/pull/5116</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://issues.jboss.org/browse/ISPN-7781" xml:lang="en">https://issues.jboss.org/browse/ISPN-7781</vuln:reference>
    </vuln:references>
    <vuln:summary>The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10329">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:synology:photo_station:6.5.2-3225"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:synology:photo_station:6.5.2-3225</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10329</vuln:cve-id>
    <vuln:published-datetime>2017-05-12T16:29:00.203-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:36.747-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-77"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://seclists.org/oss-sec/2016/q1/236" xml:lang="en">[oss-security] 20160128 CVE request: Synology Photo Station command injection and privilege escalation</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016/#Vul-01-PhotoStation-Login-without-password" xml:lang="en">https://bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016/#Vul-01-PhotoStation-Login-without-password</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016/#Vul-02-PhotoStation-Remote-Code-Execution" xml:lang="en">https://bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016/#Vul-02-PhotoStation-Remote-Code-Execution</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.synology.com/en-global/support/security/Photo_Station_6_5_3_3226" xml:lang="en">https://www.synology.com/en-global/support/security/Photo_Station_6_5_3_3226</vuln:reference>
    </vuln:references>
    <vuln:summary>Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code via shell metacharacters in the crafted 'X-Forwarded-For' header.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10330">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:synology:photo_station:6.5.2-3225"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:synology:photo_station:6.5.2-3225</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10330</vuln:cve-id>
    <vuln:published-datetime>2017-05-12T16:29:00.250-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:36.950-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.6</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="http://seclists.org/oss-sec/2016/q1/236" xml:lang="en">[oss-security] 20160128 CVE request: Synology Photo Station command injection and privilege escalation</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016/#Vul-03-Read-Write-Arbitrary-Files" xml:lang="en">https://bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016/#Vul-03-Read-Write-Arbitrary-Files</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016/#Vul-04-Privilege-Escalation" xml:lang="en">https://bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016/#Vul-04-Privilege-Escalation</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.synology.com/en-global/support/security/Photo_Station_6_5_3_3226" xml:lang="en">https://www.synology.com/en-global/support/security/Photo_Station_6_5_3_3226</vuln:reference>
    </vuln:references>
    <vuln:summary>Directory traversal vulnerability in synophoto_dsm_user, a SUID program, as used in Synology Photo Station before 6.5.3-3226 allows local users to write to arbitrary files via unspecified vectors.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10331">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:synology:photo_station:6.5.2-3225"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:synology:photo_station:6.5.2-3225</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10331</vuln:cve-id>
    <vuln:published-datetime>2017-05-12T16:29:00.283-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:37.073-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016/#Vul-06-Local-File-Inclusion" xml:lang="en">https://bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016/#Vul-06-Local-File-Inclusion</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.synology.com/en-global/support/security/Photo_Station_6_5_3_3226" xml:lang="en">https://www.synology.com/en-global/support/security/Photo_Station_6_5_3_3226</vuln:reference>
    </vuln:references>
    <vuln:summary>Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to read arbitrary files via a full pathname in the id parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10362">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:output_plugin:5.0.0::~~~logstash~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:elasticsearch:output_plugin:5.0.0::~~~logstash~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10362</vuln:cve-id>
    <vuln:published-datetime>2017-06-16T17:29:00.400-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:37.887-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>BID</vuln:source>
      <vuln:reference href="http://www.securityfocus.com/bid/99154" xml:lang="en">99154</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.elastic.co/community/security" xml:lang="en">https://www.elastic.co/community/security</vuln:reference>
    </vuln:references>
    <vuln:summary>Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10363">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:elastic:logstash:2.3.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:elastic:logstash:2.3.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10363</vuln:cve-id>
    <vuln:published-datetime>2017-06-16T17:29:00.430-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:38.010-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-404"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.elastic.co/community/security" xml:lang="en">https://www.elastic.co/community/security</vuln:reference>
    </vuln:references>
    <vuln:summary>Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could perform a denial of service attack on the Logstash instance. The errors resulting from these crafted inputs are not handled by the codec and can cause the Logstash process to exit.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10364">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:5.0.0"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:5.0.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:elasticsearch:kibana:5.0.0</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:5.0.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10364</vuln:cve-id>
    <vuln:published-datetime>2017-06-16T17:29:00.477-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:38.167-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-264"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.elastic.co/community/security" xml:lang="en">https://www.elastic.co/community/security</vuln:reference>
    </vuln:references>
    <vuln:summary>With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any authenticated user could make requests to those services regardless of their own permissions.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10365">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.6.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:5.0.0:rc1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.6.2</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:5.0.0:rc1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10365</vuln:cve-id>
    <vuln:published-datetime>2017-06-16T17:29:00.523-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:38.307-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-601"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.elastic.co/community/security" xml:lang="en">https://www.elastic.co/community/security</vuln:reference>
    </vuln:references>
    <vuln:summary>Kibana versions before 4.6.3 and 5.0.1 have an open redirect vulnerability that would enable an attacker to craft a link in the Kibana domain that redirects to an arbitrary website.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10366">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.3.0"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.3.1"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.3.2"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.3.3"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.4.0"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.4.1"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.4.2"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.5.0"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.5.1"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.5.2"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.5.3"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.5.4"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.6.0"/>
        <cpe-lang:fact-ref name="cpe:/a:elasticsearch:kibana:4.6.1"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.3.0</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.3.1</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.3.2</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.3.3</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.4.0</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.4.1</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.4.2</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.5.0</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.5.1</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.5.2</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.5.3</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.5.4</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.6.0</vuln:product>
      <vuln:product>cpe:/a:elasticsearch:kibana:4.6.1</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10366</vuln:cve-id>
    <vuln:published-datetime>2017-06-16T17:29:00.557-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:38.450-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://www.elastic.co/community/security" xml:lang="en">https://www.elastic.co/community/security</vuln:reference>
    </vuln:references>
    <vuln:summary>Kibana versions after and including 4.3 and before 4.6.2 are vulnerable to a cross-site scripting (XSS) attack.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10518">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.2.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.2.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.2.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.2.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.2.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.3.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.3.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.3.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.3.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.3.4-2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.3.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.3.5-2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.3.5-3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.3.5-4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.3.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.3.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.3.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.3.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.14::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.15::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.16::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.17::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.18::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.19::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.20::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.21::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.22::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.23::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.24::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.25::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.26::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.27::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.28::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.29::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.30::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.31::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.4.32::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.6.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.6.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.6.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.6.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.6.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.7.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.7.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:0.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:1.0.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ws_project:ws:0.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.2.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.2.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.2.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.2.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.2.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.3.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.3.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.3.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.3.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.3.4-2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.3.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.3.5-2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.3.5-3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.3.5-4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.3.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.3.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.3.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.3.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.14::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.15::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.16::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.17::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.18::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.19::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.20::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.21::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.22::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.23::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.24::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.25::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.26::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.27::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.28::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.29::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.30::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.31::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.4.32::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.6.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.6.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.6.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.6.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.6.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.7.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.7.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:0.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ws_project:ws:1.0.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10518</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:00.503-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:41.807-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://gist.github.com/c0nrad/e92005446c480707a74a" xml:lang="en">https://gist.github.com/c0nrad/e92005446c480707a74a</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/websockets/ws/releases/tag/1.0.1" xml:lang="en">https://github.com/websockets/ws/releases/tag/1.0.1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/67" xml:lang="en">https://nodesecurity.io/advisories/67</vuln:reference>
    </vuln:references>
    <vuln:summary>A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memory by sending a ping frame. The ping functionality by default responds with a pong frame and the previously given payload of the ping frame. This is exactly what you expect, but internally ws always transforms all data that we need to send to a Buffer instance and that is where the vulnerability existed. ws didn't do any checks for the type of data it was sending. With buffers in node when you allocate it when a number instead of a string it will allocate the amount of bytes.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10519">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2016-10519</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:00.567-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:41.917-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/feross/bittorrent-dht/issues/87" xml:lang="en">https://github.com/feross/bittorrent-dht/issues/87</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/68" xml:lang="en">https://nodesecurity.io/advisories/68</vuln:reference>
    </vuln:references>
    <vuln:summary>A security issue was found in bittorrent-dht before 5.1.3 that allows someone to send a specific series of messages to a listening peer and get it to reveal internal memory.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10520">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:jadedown_project:jadedown:0.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:jadedown_project:jadedown:0.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:jadedown_project:jadedown:0.0.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:jadedown_project:jadedown:0.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:jadedown_project:jadedown:0.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:jadedown_project:jadedown:0.0.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10520</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:00.627-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:42.027-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/52" xml:lang="en">https://nodesecurity.io/advisories/52</vuln:reference>
    </vuln:references>
    <vuln:summary>jadedown is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10521">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:jshamcrest_project:jshamcrest:0.6.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:jshamcrest_project:jshamcrest:0.7.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:jshamcrest_project:jshamcrest:0.7.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:jshamcrest_project:jshamcrest:0.6.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:jshamcrest_project:jshamcrest:0.7.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:jshamcrest_project:jshamcrest:0.7.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10521</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:00.673-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:42.153-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/53" xml:lang="en">https://nodesecurity.io/advisories/53</vuln:reference>
    </vuln:references>
    <vuln:summary>jshamcrest is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in to the emailAddress validator.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10522">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2016-10522</vuln:cve-id>
    <vuln:published-datetime>2018-07-05T12:29:00.250-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:42.263-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://github.com/sferik/rails_admin/commit/b13e879eb93b661204e9fb5e55f7afa4f397537a" xml:lang="en">https://github.com/sferik/rails_admin/commit/b13e879eb93b661204e9fb5e55f7afa4f397537a</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.sourceclear.com/blog/Rails_admin-Vulnerability-Disclosure/" xml:lang="en">https://www.sourceclear.com/blog/Rails_admin-Vulnerability-Disclosure/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.sourceclear.com/registry/security/cross-site-request-forgery-csrf-/ruby/sid-3173" xml:lang="en">https://www.sourceclear.com/registry/security/cross-site-request-forgery-csrf-/ruby/sid-3173</vuln:reference>
    </vuln:references>
    <vuln:summary>rails_admin ruby gem &lt;v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks. Non-GET methods were not validating CSRF tokens and, as a result, an attacker could hypothetically gain access to the application administrative endpoints exposed by the gem.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10523">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mqtt-packet_project:mqtt-packet:4.0.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mqtt-packet_project:mqtt-packet:4.0.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10523</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:00.720-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:42.620-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/mcollina/mosca/issues/393" xml:lang="en">https://github.com/mcollina/mosca/issues/393</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/mqttjs/mqtt-packet/pull/8" xml:lang="en">https://github.com/mqttjs/mqtt-packet/pull/8</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/75" xml:lang="en">https://nodesecurity.io/advisories/75</vuln:reference>
    </vuln:references>
    <vuln:summary>MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10524">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:i18n-node-angular_project:i18n-node-angular:0.2.0:-:~~node.js~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:i18n-node-angular_project:i18n-node-angular:0.2.0:beta1:~~node.js~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:i18n-node-angular_project:i18n-node-angular:0.2.0:beta2:~~node.js~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:i18n-node-angular_project:i18n-node-angular:0.3.0::~~node.js~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:i18n-node-angular_project:i18n-node-angular:0.3.1::~~node.js~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:i18n-node-angular_project:i18n-node-angular:0.3.2::~~node.js~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:i18n-node-angular_project:i18n-node-angular:1.1.3::~~node.js~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:i18n-node-angular_project:i18n-node-angular:1.2.0::~~node.js~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:i18n-node-angular_project:i18n-node-angular:1.2.1::~~node.js~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:i18n-node-angular_project:i18n-node-angular:1.3.0::~~node.js~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:i18n-node-angular_project:i18n-node-angular:1.3.2::~~node.js~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:i18n-node-angular_project:i18n-node-angular:1.3.3::~~node.js~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:i18n-node-angular_project:i18n-node-angular:1.3.4::~~node.js~~~"/>
        <cpe-lang:fact-ref name="cpe:/a:i18n-node-angular_project:i18n-node-angular:1.3.5::~~node.js~~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:i18n-node-angular_project:i18n-node-angular:0.2.0:-:~~node.js~~~</vuln:product>
      <vuln:product>cpe:/a:i18n-node-angular_project:i18n-node-angular:0.2.0:beta1:~~node.js~~~</vuln:product>
      <vuln:product>cpe:/a:i18n-node-angular_project:i18n-node-angular:0.2.0:beta2:~~node.js~~~</vuln:product>
      <vuln:product>cpe:/a:i18n-node-angular_project:i18n-node-angular:0.3.0::~~node.js~~~</vuln:product>
      <vuln:product>cpe:/a:i18n-node-angular_project:i18n-node-angular:0.3.1::~~node.js~~~</vuln:product>
      <vuln:product>cpe:/a:i18n-node-angular_project:i18n-node-angular:0.3.2::~~node.js~~~</vuln:product>
      <vuln:product>cpe:/a:i18n-node-angular_project:i18n-node-angular:1.1.3::~~node.js~~~</vuln:product>
      <vuln:product>cpe:/a:i18n-node-angular_project:i18n-node-angular:1.2.0::~~node.js~~~</vuln:product>
      <vuln:product>cpe:/a:i18n-node-angular_project:i18n-node-angular:1.2.1::~~node.js~~~</vuln:product>
      <vuln:product>cpe:/a:i18n-node-angular_project:i18n-node-angular:1.3.0::~~node.js~~~</vuln:product>
      <vuln:product>cpe:/a:i18n-node-angular_project:i18n-node-angular:1.3.2::~~node.js~~~</vuln:product>
      <vuln:product>cpe:/a:i18n-node-angular_project:i18n-node-angular:1.3.3::~~node.js~~~</vuln:product>
      <vuln:product>cpe:/a:i18n-node-angular_project:i18n-node-angular:1.3.4::~~node.js~~~</vuln:product>
      <vuln:product>cpe:/a:i18n-node-angular_project:i18n-node-angular:1.3.5::~~node.js~~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10524</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:00.767-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:42.870-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.9</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-74"/>
    <vuln:references xml:lang="en" reference_type="PATCH">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/oliversalzburg/i18n-node-angular/commit/877720d2d9bb90dc8233706e81ffa03f99fc9dc8" xml:lang="en">https://github.com/oliversalzburg/i18n-node-angular/commit/877720d2d9bb90dc8233706e81ffa03f99fc9dc8</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/80" xml:lang="en">https://nodesecurity.io/advisories/80</vuln:reference>
    </vuln:references>
    <vuln:summary>i18n-node-angular is a module used to interact between i18n and angular without using additional resources. A REST API endpoint that is used for development in i18n-node-angular before 1.4.0 was not disabled in production environments a malicious user could fill up the server causing a Denial of Service or content injection.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10526">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.7.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.7.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.7.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.7.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.7.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.7.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.7.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.9.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.7.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.7.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.7.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.7.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.7.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.7.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.7.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:grunt-gh-pages_project:grunt-gh-pages:0.9.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10526</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:00.817-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:43.013-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-255"/>
    <vuln:cwe id="CWE-532"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/tschaub/grunt-gh-pages/pull/41" xml:lang="en">https://github.com/tschaub/grunt-gh-pages/pull/41</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/85" xml:lang="en">https://nodesecurity.io/advisories/85</vuln:reference>
    </vuln:references>
    <vuln:summary>A common setup to deploy to gh-pages on every commit via a CI system is to expose a github token to ENV and to use it directly in the auth part of the url. In module versions &lt; 0.9.1 the auth portion of the url is outputted as part of the grunt tasks logging function. If this output is publicly available then the credentials should be considered compromised.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10527">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:riot.js:riot-compiler:2.3.21::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:riot.js:riot-compiler:2.3.21::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10527</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:00.847-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:43.167-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-399"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/riot/compiler/issues/46" xml:lang="en">https://github.com/riot/compiler/issues/46</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/86" xml:lang="en">https://nodesecurity.io/advisories/86</vuln:reference>
    </vuln:references>
    <vuln:summary>The riot-compiler version version 2.3.21 has an issue in a regex (Catastrophic Backtracking) thats make it unusable under certain conditions.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10528">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.0.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.0.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.0.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.0.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.0.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.0.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.0.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.0.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.0.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.0.14::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.0.15::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.1.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.1.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.2.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.2.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.2.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.2.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.2.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.2.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.2.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.2.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.3.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.3.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.3.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.3.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.3.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.3.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.3.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.3.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.3.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.3.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.3.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.3.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.3.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.3.14::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.4.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.4.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.5.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.5.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:restafary_project:restafary:1.6.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:restafary_project:restafary:1.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.0.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.0.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.0.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.0.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.0.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.0.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.0.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.0.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.0.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.0.14::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.0.15::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.1.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.1.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.2.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.2.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.2.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.2.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.2.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.2.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.2.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.2.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.3.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.3.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.3.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.3.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.3.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.3.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.3.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.3.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.3.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.3.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.3.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.3.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.3.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.3.14::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.4.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.4.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.5.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.5.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:restafary_project:restafary:1.6.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10528</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:00.893-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:43.277-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/89" xml:lang="en">https://nodesecurity.io/advisories/89</vuln:reference>
    </vuln:references>
    <vuln:summary>restafary is a REpresentful State Transfer API for Creating, Reading, Using, Deleting files on a server from the web. Restafary before 1.6.1 is able to set up a root path, which should only allow it to run inside of that root path it specified.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10529">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.5.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.5.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.5.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.5.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.5.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.5.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.14::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.15::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.16::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.17::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.18::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.6.19::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.14::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.15::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.16::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.17::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.18::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.19::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.20::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.21::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.22::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.23::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.24::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.25::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.26::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.27::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.7.28::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.8.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.8.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.8.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.14::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.15::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.16::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.17::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.18::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.19::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.20::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.21::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.22::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.23::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.24::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.25::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.26::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.27::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.28::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.29::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.30::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.31::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.33::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.9.34::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.10.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.10.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.10.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.10.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.10.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.10.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.10.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.10.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.10.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:0.10.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.14::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.15::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.16::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.17::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.18::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.19::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.20::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.21::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.22::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.23::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.24::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.25::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.26::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.27::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.28::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.29::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.30::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.31::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.32::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.0.33::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.1.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.1.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.2.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.14::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.15::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.16::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.17::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.18::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.19::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.20::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.21::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.22::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.23::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.24::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.25::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.26::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.27::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.28::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.29::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.30::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.31::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.32::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.33::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.34::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.35::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.3.36::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.4.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.4.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.4.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.4.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.4.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.4.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.4.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.4.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.4.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.4.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.4.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.4.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.4.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.4.14::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.4.15::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.4.16::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.5.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.5.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.5.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.5.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.6.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.6.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.6.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.14::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.15::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.16::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.7.17::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.8.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.8.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.8.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.14::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.15::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.16::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.17::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.18::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.19::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.20::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.21::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.22::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.23::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.24::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.25::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.27::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.28::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.29::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.30::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.31::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.32::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.33::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.34::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.35::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.36::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.37::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:1.9.38::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.0.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.0.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.0.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.0.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.0.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.0.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.0.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.0.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.14::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.15::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.16::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.17::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.18::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.19::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.20::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.21::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.1.22::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.2.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.2.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.2.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.14::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.15::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.16::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.17::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.18::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.19::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.20::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.21::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.3.22::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.4.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.4.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.4.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.4.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.4.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.4.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.4.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.4.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.4.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:2.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.0.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.0.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.0.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.0.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.0.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.0.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.1.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.1.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.1.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.2.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.2.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.2.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.2.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.2.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.2.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.2.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.2.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.2.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.2.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.2.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.2.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.2.14::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.3.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:droppy_project:droppy:3.4.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:droppy_project:droppy:0.5.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.5.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.5.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.5.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.5.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.5.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.14::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.15::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.16::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.17::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.18::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.6.19::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.14::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.15::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.16::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.17::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.18::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.19::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.20::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.21::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.22::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.23::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.24::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.25::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.26::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.27::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.7.28::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.8.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.8.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.8.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.14::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.15::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.16::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.17::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.18::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.19::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.20::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.21::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.22::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.23::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.24::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.25::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.26::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.27::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.28::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.29::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.30::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.31::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.33::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.9.34::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.10.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.10.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.10.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.10.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.10.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.10.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.10.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.10.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.10.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:0.10.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.14::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.15::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.16::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.17::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.18::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.19::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.20::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.21::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.22::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.23::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.24::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.25::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.26::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.27::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.28::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.29::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.30::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.31::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.32::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.0.33::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.1.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.1.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.2.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.14::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.15::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.16::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.17::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.18::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.19::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.20::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.21::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.22::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.23::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.24::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.25::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.26::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.27::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.28::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.29::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.30::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.31::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.32::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.33::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.34::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.35::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.3.36::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.4.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.4.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.4.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.4.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.4.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.4.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.4.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.4.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.4.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.4.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.4.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.4.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.4.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.4.14::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.4.15::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.4.16::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.5.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.5.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.5.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.5.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.6.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.6.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.6.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.14::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.15::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.16::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.7.17::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.8.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.8.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.8.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.14::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.15::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.16::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.17::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.18::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.19::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.20::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.21::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.22::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.23::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.24::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.25::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.27::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.28::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.29::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.30::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.31::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.32::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.33::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.34::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.35::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.36::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.37::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:1.9.38::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.0.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.0.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.0.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.0.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.0.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.0.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.0.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.0.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.14::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.15::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.16::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.17::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.18::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.19::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.20::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.21::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.1.22::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.2.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.2.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.2.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.14::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.15::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.16::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.17::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.18::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.19::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.20::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.21::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.3.22::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.4.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.4.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.4.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.4.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.4.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.4.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.4.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.4.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.4.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:2.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.0.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.0.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.0.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.0.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.0.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.0.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.1.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.1.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.1.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.2.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.2.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.2.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.2.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.2.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.2.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.2.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.2.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.2.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.2.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.2.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.2.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.2.14::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.3.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:droppy_project:droppy:3.4.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10529</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:00.940-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:43.387-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/91" xml:lang="en">https://nodesecurity.io/advisories/91</vuln:reference>
    </vuln:references>
    <vuln:summary>Droppy versions &lt;3.5.0 does not perform any verification for cross-domain websocket requests. An attacker is able to make a specially crafted page that can send requests as the context of the currently logged in user. For example this means the malicious user could add a new admin account under his control and delete others.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10530">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:airbrake:airbrake:0.3.8::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:airbrake:airbrake:0.3.8::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10530</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:00.987-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:43.513-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/airbrake/node-airbrake/issues/70" xml:lang="en">https://github.com/airbrake/node-airbrake/issues/70</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/96" xml:lang="en">https://nodesecurity.io/advisories/96</vuln:reference>
    </vuln:references>
    <vuln:summary>The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could be on the same network as a regular user and intercept all the secret keys the user is sending. This goes against common best practice, which is to use HTTPS.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10531">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:marked_project:marked:0.3.5::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:marked_project:marked:0.3.5::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10531</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.033-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:43.620-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/chjj/marked/pull/592" xml:lang="en">https://github.com/chjj/marked/pull/592</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/chjj/marked/pull/592/commits/2cff85979be8e7a026a9aca35542c470cf5da523" xml:lang="en">https://github.com/chjj/marked/pull/592/commits/2cff85979be8e7a026a9aca35542c470cf5da523</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/101" xml:lang="en">https://nodesecurity.io/advisories/101</vuln:reference>
    </vuln:references>
    <vuln:summary>marked is an application that is meant to parse and compile markdown. Due to the way that marked 0.3.5 and earlier parses input, specifically HTML entities, it's possible to bypass marked's content injection protection (`sanitize: true`) to inject a `javascript:` URL. This flaw exists because `&amp;#xNNanything;` gets parsed to what it could and leaves the rest behind, resulting in just `anything;` being left.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10533">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:express-restify-mongoose_project:express-restify-mongoose:2.4.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:express-restify-mongoose_project:express-restify-mongoose:3.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:express-restify-mongoose_project:express-restify-mongoose:3.0.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:express-restify-mongoose_project:express-restify-mongoose:2.4.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:express-restify-mongoose_project:express-restify-mongoose:3.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:express-restify-mongoose_project:express-restify-mongoose:3.0.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10533</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.110-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:43.763-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-200"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/florianholzapfel/express-restify-mongoose/issues/252" xml:lang="en">https://github.com/florianholzapfel/express-restify-mongoose/issues/252</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/92" xml:lang="en">https://nodesecurity.io/advisories/92</vuln:reference>
    </vuln:references>
    <vuln:summary>express-restify-mongoose is a module to easily create a flexible REST interface for mongoose models. express-restify-mongoose 2.4.2 and earlier and 3.0.X through 3.0.1 allows a malicious user to send a request for `GET /User?distinct=password` and get all the passwords for all the users in the database, despite the field being set to private. This can be used for other private data if the malicious user knew what was set as private for specific routes.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10534">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:electron-packager_project:electron-packager:5.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:electron-packager_project:electron-packager:6.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:electron-packager_project:electron-packager:6.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:electron-packager_project:electron-packager:6.0.2::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:electron-packager_project:electron-packager:5.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:electron-packager_project:electron-packager:6.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:electron-packager_project:electron-packager:6.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:electron-packager_project:electron-packager:6.0.2::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10534</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.157-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:43.870-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-295"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/electron-userland/electron-packager/issues/333" xml:lang="en">https://github.com/electron-userland/electron-packager/issues/333</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/104" xml:lang="en">https://nodesecurity.io/advisories/104</vuln:reference>
    </vuln:references>
    <vuln:summary>electron-packager is a command line tool that packages Electron source code into `.app` and `.exe` packages. along with Electron. The `--strict-ssl` command line option in electron-packager >= 5.2.1 &lt;= 6.0.0 || >=6.0.0 &lt;= 6.0.2 defaults to false if not explicitly set to true. This could allow an attacker to perform a man in the middle attack.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10535">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:csrf-lite_project:csrf-lite:0.1.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:csrf-lite_project:csrf-lite:0.1.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10535</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.207-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:43.980-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/isaacs/csrf-lite/pull/1" xml:lang="en">https://github.com/isaacs/csrf-lite/pull/1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/94" xml:lang="en">https://nodesecurity.io/advisories/94</vuln:reference>
    </vuln:references>
    <vuln:summary>csrf-lite is a cross-site request forgery protection library for framework-less node sites. csrf-lite uses `===`, a fail first string comparison, instead of a time constant string comparison This enables an attacker to guess the secret in no more than (16*18)288 guesses, instead of the 16^18 guesses required were the timing attack not present.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10536">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:socket:engine.io-client:1.6.8::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:socket:engine.io-client:1.6.8::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10536</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.253-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:44.090-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-295"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/socketio/engine.io-client/commit/2c55b278a491bf45313ecc0825cf800e2f7ff5c1" xml:lang="en">https://github.com/socketio/engine.io-client/commit/2c55b278a491bf45313ecc0825cf800e2f7ff5c1</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/99" xml:lang="en">https://nodesecurity.io/advisories/99</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://www.cigital.com/blog/node-js-socket-io/" xml:lang="en">https://www.cigital.com/blog/node-js-socket-io/</vuln:reference>
    </vuln:references>
    <vuln:summary>engine.io-client is the client for engine.io, the implementation of a transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. The vulnerability is related to the way that node.js handles the `rejectUnauthorized` setting. If the value is something that evaluates to false, certificate verification will be disabled. This is problematic as engine.io-client 1.6.8 and earlier passes in an object for settings that includes the rejectUnauthorized property, whether it has been set or not. If the value has not been explicitly changed, it will be passed in as `null`, resulting in certificate verification being turned off.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10537">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:backbone_project:backbone:0.3.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:backbone_project:backbone:0.3.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10537</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.317-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:44.200-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>3.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/jashkenas/backbone/compare/0.3.3...0.5.0#diff-0d56d0d310de7ff18b3cef9c2f8f75dcL1008" xml:lang="en">https://github.com/jashkenas/backbone/compare/0.3.3...0.5.0#diff-0d56d0d310de7ff18b3cef9c2f8f75dcL1008</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/108" xml:lang="en">https://nodesecurity.io/advisories/108</vuln:reference>
    </vuln:references>
    <vuln:summary>backbone is a module that adds in structure to a JavaScript heavy application through key-value pairs and custom events connecting to your RESTful API through JSON There exists a potential Cross Site Scripting vulnerability in the `Model#Escape` function of backbone 0.3.3 and earlier, if a user is able to supply input. This is due to the regex that's replacing things to miss the conversion of things such as `&lt;` to `&lt;`.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10538">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.1.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.1.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.1.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.1.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.1.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.1.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.1.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.2.1-1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.2.2-1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.2.3-1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.2.3-2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.2.3-4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.2.3-5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.2.4-1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.2.4-2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.2.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.2.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.2.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.2.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.3.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.3.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.3.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.3.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.3.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.3.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.3.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.3.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.3.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.4.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.4.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.4.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.4.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.4.4-1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.4.4-2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.4.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.6.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.6.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.6.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.6.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.6.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.7.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.7.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.9.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.10.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.11.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.11.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.11.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cli_project:cli:0.11.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:8.0"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cli_project:cli:0.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.1.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.1.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.1.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.1.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.1.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.1.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.1.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.2.1-1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.2.2-1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.2.3-1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.2.3-2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.2.3-4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.2.3-5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.2.4-1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.2.4-2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.2.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.2.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.2.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.2.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.3.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.3.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.3.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.3.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.3.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.3.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.3.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.3.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.3.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.4.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.4.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.4.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.4.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.4.4-1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.4.4-2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.4.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.6.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.6.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.6.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.6.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.6.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.7.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.7.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.9.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.10.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.11.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.11.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.11.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cli_project:cli:0.11.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:8.0</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10538</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.363-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:44.310-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.9</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-362"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=809252" xml:lang="en">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=809252</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/node-js-libs/cli/issues/81" xml:lang="en">https://github.com/node-js-libs/cli/issues/81</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/95" xml:lang="en">https://nodesecurity.io/advisories/95</vuln:reference>
    </vuln:references>
    <vuln:summary>The package `node-cli` before 1.0.0 insecurely uses the lock_file and log_file. Both of these are temporary, but it allows the starting user to overwrite any file they have access to.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10539">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:negotiator_project:negotiator:0.6.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:negotiator_project:negotiator:0.6.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10539</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.407-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:44.480-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/106" xml:lang="en">https://nodesecurity.io/advisories/106</vuln:reference>
    </vuln:references>
    <vuln:summary>negotiator is an HTTP content negotiator for Node.js and is used by many modules and frameworks including Express and Koa. The header for "Accept-Language", when parsed by negotiator 0.6.0 and earlier is vulnerable to Regular Expression Denial of Service via a specially crafted string.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10540">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:minimatch_project:minimatch:3.0.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:minimatch_project:minimatch:3.0.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10540</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.457-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:44.607-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/118" xml:lang="en">https://nodesecurity.io/advisories/118</vuln:reference>
    </vuln:references>
    <vuln:summary>Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript `RegExp` objects. The primary function, `minimatch(path, pattern)` in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the `pattern` parameter.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10541">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:shell-quote_project:shell-quote:1.6.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:shell-quote_project:shell-quote:1.6.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10541</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.503-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:44.717-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/117" xml:lang="en">https://nodesecurity.io/advisories/117</vuln:reference>
    </vuln:references>
    <vuln:summary>The npm module "shell-quote" 1.6.0 and earlier cannot correctly escape ">" and "&lt;" operator used for redirection in shell. Applications that depend on shell-quote may also be vulnerable. A malicious user could perform code injection.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10542">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:ws_project:ws:1.1.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ws_project:ws:1.1.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10542</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.550-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:44.823-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/nodejs/node/issues/7388" xml:lang="en">https://github.com/nodejs/node/issues/7388</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/120" xml:lang="en">https://nodesecurity.io/advisories/120</vuln:reference>
    </vuln:references>
    <vuln:summary>ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a `ws` server, it is possible to crash the node process. This affects ws 1.1.0 and earlier.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10543">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:call_project:call:2.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:call_project:call:2.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:call_project:call:3.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:call_project:call:3.0.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:call_project:call:2.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:call_project:call:2.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:call_project:call:3.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:call_project:call:3.0.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10543</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.613-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:44.967-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/hapijs/hapi/issues/3228" xml:lang="en">https://github.com/hapijs/hapi/issues/3228</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/121" xml:lang="en">https://nodesecurity.io/advisories/121</vuln:reference>
    </vuln:references>
    <vuln:summary>call is an HTTP router that is primarily used by the hapi framework. There exists a bug in call versions 2.0.1-3.0.1 that does not validate empty parameters, which could result in invalid input bypassing the route validation rules.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10544">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:uws_project:uws:0.10.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:uws_project:uws:0.10.8::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:uws_project:uws:0.10.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:uws_project:uws:0.10.8::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10544</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.643-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:45.090-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-20"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/uWebSockets/uWebSockets/commit/37deefd01f0875e133ea967122e3a5e421b8fcd9" xml:lang="en">https://github.com/uWebSockets/uWebSockets/commit/37deefd01f0875e133ea967122e3a5e421b8fcd9</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/149" xml:lang="en">https://nodesecurity.io/advisories/149</vuln:reference>
    </vuln:references>
    <vuln:summary>uws is a WebSocket server library. By sending a 256mb websocket message to a uws server instance with permessage-deflate enabled, there is a possibility used compression will shrink said 256mb down to less than 16mb of websocket payload which passes the length check of 16mb payload. This data will then inflate up to 256mb and crash the node process by exceeding V8's maximum string size. This affects uws >=0.10.0 &lt;=0.10.8.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10546">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:pouchdb:pouchdb:6.0.4::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:pouchdb:pouchdb:6.0.4::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10546</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.690-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:45.230-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>10.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-94"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/143" xml:lang="en">https://nodesecurity.io/advisories/143</vuln:reference>
    </vuln:references>
    <vuln:summary>An arbitrary code injection vector was found in PouchDB 6.0.4 and lesser via the map/reduce functions used in PouchDB temporary views and design documents. The code execution engine for this branch is not properly sandboxed and may be used to run arbitrary JavaScript as well as system commands.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10547">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mozilla:nunjucks:2.4.2"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mozilla:nunjucks:2.4.2</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10547</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.737-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:45.357-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/matt-/nunjucks_test" xml:lang="en">https://github.com/matt-/nunjucks_test</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/mozilla/nunjucks/issues/835" xml:lang="en">https://github.com/mozilla/nunjucks/issues/835</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/147" xml:lang="en">https://nodesecurity.io/advisories/147</vuln:reference>
    </vuln:references>
    <vuln:summary>Nunjucks is a full featured templating engine for JavaScript. Versions 2.4.2 and lower have a cross site scripting (XSS) vulnerability in autoescape mode. In autoescape mode, all template vars should automatically be escaped. By using an array for the keys, such as `name[]=&lt;script>alert(1)&lt;/script>`, it is possible to bypass autoescaping and inject content into the DOM.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10548">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:reduce-css-calc_project:reduce-css-calc:1.2.4::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:reduce-css-calc_project:reduce-css-calc:1.2.4::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10548</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.783-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:45.480-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://gist.github.com/ChALkeR/415a41b561ebea9b341efbb40b802fc9" xml:lang="en">https://gist.github.com/ChALkeR/415a41b561ebea9b341efbb40b802fc9</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/144" xml:lang="en">https://nodesecurity.io/advisories/144</vuln:reference>
    </vuln:references>
    <vuln:summary>Arbitrary code execution is possible in reduce-css-calc node module &lt;=1.2.4 through crafted css. This makes cross sites scripting (XSS) possible on the client and arbitrary code injection possible on the server and user input is passed to the `calc` function.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10549">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sailsjs:sails:0.12.7::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sailsjs:sails:0.12.7::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10549</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.830-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:45.607-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>HIGH</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://sailsjs.org/documentation/concepts/security/cors" xml:lang="en">http://sailsjs.org/documentation/concepts/security/cors</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="http://sailsjs.org/documentation/reference/configuration/sails-config-cors" xml:lang="en">http://sailsjs.org/documentation/reference/configuration/sails-config-cors</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/148" xml:lang="en">https://nodesecurity.io/advisories/148</vuln:reference>
    </vuln:references>
    <vuln:summary>Sails is an MVC style framework for building realtime web applications. Version 0.12.7 and lower have an issue with the CORS configuration where the value of the origin header is reflected as the value for the Access-Control-Allow-Origin header. This would allow an attacker to make AJAX requests to vulnerable hosts through cross site scripting or a malicious HTML Document, effectively bypassing the Same Origin Policy. Note that this is only an issue when `allRoutes` is set to `true` and `origin` is set to `*` or left commented out in the sails CORS config file. The problem can be compounded when the cors `credentials` setting is not provided. At that point authenticated cross domain requests are possible.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10550">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sequelizejs:sequelize:3.16.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sequelizejs:sequelize:3.16.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10550</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.893-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:45.730-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/sequelize/sequelize/pull/5167/commits/f282d85e60e3df5e57ecdb82adccb4eaef404f03" xml:lang="en">https://github.com/sequelize/sequelize/pull/5167/commits/f282d85e60e3df5e57ecdb82adccb4eaef404f03</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/112" xml:lang="en">https://nodesecurity.io/advisories/112</vuln:reference>
    </vuln:references>
    <vuln:summary>sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS If user input goes into the `limit` or `order` parameters, a malicious user can put in their own SQL statements. This affects sequelize 3.16.0 and earlier.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10551">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:balderdash:waterline-sequel:0.5.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:balderdash:waterline-sequel:0.5.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10551</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:00.690-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:45.823-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/balderdashy/waterline/issues/1219#issuecomment-157294530" xml:lang="en">https://github.com/balderdashy/waterline/issues/1219#issuecomment-157294530</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/115" xml:lang="en">https://nodesecurity.io/advisories/115</vuln:reference>
    </vuln:references>
    <vuln:summary>waterline-sequel is a module that helps generate SQL statements for Waterline apps Any user input that goes into Waterline's `like`, `contains`, `startsWith`, or `endsWith` will end up in waterline-sequel with the potential for malicious code. A malicious user can input their own SQL statements in waterline-sequel 0.50 that will get executed and have full access to the database.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10552">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:infragistics:igniteui:0.0.5::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:infragistics:igniteui:0.0.5::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10552</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.923-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:45.950-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-254"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/116" xml:lang="en">https://nodesecurity.io/advisories/116</vuln:reference>
    </vuln:references>
    <vuln:summary>igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10553">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sequelizejs:sequelize:2.1.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sequelizejs:sequelize:2.1.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10553</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:01.970-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:46.060-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/sequelize/sequelize/blob/master/changelog.md#300" xml:lang="en">https://github.com/sequelize/sequelize/blob/master/changelog.md#300</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/109" xml:lang="en">https://nodesecurity.io/advisories/109</vuln:reference>
    </vuln:references>
    <vuln:summary>sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. A fix was pushed out that fixed potential SQL injection in sequelize 2.1.3 and earlier.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10554">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sequelizejs:sequelize:1.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sequelizejs:sequelize:1.7.0:alpha1:~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:sequelizejs:sequelize:1.7.0:alpha2:~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sequelizejs:sequelize:1.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:sequelizejs:sequelize:1.7.0:alpha1:~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:sequelizejs:sequelize:1.7.0:alpha2:~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10554</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:02.017-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:46.167-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/sequelize/sequelize/commit/c876192aa6ce1f67e22b26a4d175b8478615f42d" xml:lang="en">https://github.com/sequelize/sequelize/commit/c876192aa6ce1f67e22b26a4d175b8478615f42d</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/113" xml:lang="en">https://nodesecurity.io/advisories/113</vuln:reference>
    </vuln:references>
    <vuln:summary>sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. Before version 1.7.0-alpha3, sequelize defaulted SQLite to use MySQL backslash escaping, even though SQLite uses Postgres escaping.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10555">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:jwt-simple_project:jwt-simple:0.3.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:jwt-simple_project:jwt-simple:0.3.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10555</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:02.067-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:46.277-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/" xml:lang="en">https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/hokaccha/node-jwt-simple/pull/14" xml:lang="en">https://github.com/hokaccha/node-jwt-simple/pull/14</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/hokaccha/node-jwt-simple/pull/16" xml:lang="en">https://github.com/hokaccha/node-jwt-simple/pull/16</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/87" xml:lang="en">https://nodesecurity.io/advisories/87</vuln:reference>
    </vuln:references>
    <vuln:summary>Since "algorithm" isn't enforced in jwt.decode()in jwt-simple 0.3.0 and earlier, a malicious user could choose what algorithm is sent sent to the server. If the server is expecting RSA but is sent HMAC-SHA with RSA's public key, the server will think the public key is actually an HMAC private key. This could be used to forge any data an attacker wants.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10556">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sequelizejs:sequelize:3.19.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sequelizejs:sequelize:3.19.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10556</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:00.750-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:46.403-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-89"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/sequelize/sequelize/issues/5671" xml:lang="en">https://github.com/sequelize/sequelize/issues/5671</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/102" xml:lang="en">https://nodesecurity.io/advisories/102</vuln:reference>
    </vuln:references>
    <vuln:summary>sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS In Postgres, SQLite, and Microsoft SQL Server there is an issue where arrays are treated as strings and improperly escaped. This causes potential SQL injection in sequelize 3.19.3 and earlier, where a malicious user could put `["test", "'); DELETE TestTable WHERE Id = 1 --')"]` inside of ``` database.query('SELECT * FROM TestTable WHERE Name IN (:names)', { replacements: { names: directCopyOfUserInput } }); ``` and cause the SQL statement to become `SELECT Id FROM Table WHERE Name IN ('test', '\'); DELETE TestTable WHERE Id = 1 --')`. In Postgres, MSSQL, and SQLite, the backslash has no special meaning. This causes the the statement to delete whichever Id has a value of 1 in the TestTable table.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10557">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:0.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:0.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:0.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:0.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:0.2.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:1.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:1.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:1.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.0.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.0.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.0.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.0.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.0.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.0.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.1.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.3.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.3.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.3.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.3.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.3.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.3.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.3.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.3.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.4.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.4.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.5.0:-:~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.5.0:beta1:~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.7.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.8.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.8.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.9.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.9.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.9.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:appium:appium-chromedriver:2.9.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:appium:appium-chromedriver:0.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:0.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:0.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:0.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:0.2.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:1.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:1.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:1.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.0.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.0.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.0.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.0.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.0.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.0.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.1.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.3.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.3.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.3.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.3.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.3.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.3.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.3.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.3.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.4.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.4.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.5.0:-:~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.5.0:beta1:~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.7.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.8.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.8.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.9.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.9.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.9.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:appium:appium-chromedriver:2.9.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10557</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:02.113-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:46.527-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/162" xml:lang="en">https://nodesecurity.io/advisories/162</vuln:reference>
    </vuln:references>
    <vuln:summary>appium-chromedriver is a Node.js wrapper around Chromedriver. Versions below 2.9.4 download binary resources over HTTP, which leaves the module vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10558">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.14::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.15::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.16::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.17::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.18::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.19::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.20::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.21::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.22::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.23::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.24::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.25::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.26::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.27::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.28::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.29::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.30::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.31::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.32::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.33::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.34::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.35::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.36::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.37::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.38::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.39::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.40::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.41::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.42::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.43::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.44::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.45::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.46::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.47::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.48::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.49::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.50::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.51::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.52::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.53::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.54::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.55::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.56::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.57::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:1.0.58::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:2.0.0:-:~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:2.0.0:alpha1:~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:2.0.0:alpha2:~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:2.0.0:alpha3:~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:2.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:2.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:2.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:2.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:2.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:2.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:2.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:2.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:2.3.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:2.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:aerospike:aerospike:2.4.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.14::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.15::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.16::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.17::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.18::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.19::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.20::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.21::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.22::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.23::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.24::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.25::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.26::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.27::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.28::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.29::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.30::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.31::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.32::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.33::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.34::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.35::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.36::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.37::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.38::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.39::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.40::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.41::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.42::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.43::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.44::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.45::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.46::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.47::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.48::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.49::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.50::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.51::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.52::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.53::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.54::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.55::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.56::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.57::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:1.0.58::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:2.0.0:-:~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:2.0.0:alpha1:~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:2.0.0:alpha2:~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:2.0.0:alpha3:~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:2.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:2.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:2.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:2.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:2.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:2.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:2.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:2.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:2.3.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:2.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:aerospike:aerospike:2.4.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10558</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:00.797-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:46.653-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/167" xml:lang="en">https://nodesecurity.io/advisories/167</vuln:reference>
    </vuln:references>
    <vuln:summary>aerospike is an Aerospike add-on module for Node.js. aerospike versions below 2.4.2 download binary resources over HTTP, which leaves the module vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10559">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2016-10559</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:00.847-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:46.763-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/164" xml:lang="en">https://nodesecurity.io/advisories/164</vuln:reference>
    </vuln:references>
    <vuln:summary>selenium-download downloads the latest versions of the selenium standalone server and the chromedriver. selenium-download before 2.0.7 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10560">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2016-10560</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:02.157-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:46.997-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/170" xml:lang="en">https://nodesecurity.io/advisories/170</vuln:reference>
    </vuln:references>
    <vuln:summary>galenframework-cli is the node wrapper for the Galen Framework. galenframework-cli below 2.3.1 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10561">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:bitty_project:bitty:0.2.10::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:bitty_project:bitty:0.2.10::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10561</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:02.207-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:47.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>5.0</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-22"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/150" xml:lang="en">https://nodesecurity.io/advisories/150</vuln:reference>
    </vuln:references>
    <vuln:summary>Bitty is a development web server tool that functions similar to `python -m SimpleHTTPServer`. Version 0.2.10 has a directory traversal vulnerability that is exploitable via the URL path in GET requests.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10562">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:iedriver_project:iedriver:2.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:iedriver_project:iedriver:2.45.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:iedriver_project:iedriver:2.46.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:iedriver_project:iedriver:2.47.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:iedriver_project:iedriver:2.48.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:iedriver_project:iedriver:2.49.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:iedriver_project:iedriver:2.50.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:iedriver_project:iedriver:2.51.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:iedriver_project:iedriver:2.52.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:iedriver_project:iedriver:2.52.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:iedriver_project:iedriver:2.53.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:iedriver_project:iedriver:2.53.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:iedriver_project:iedriver:2.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:iedriver_project:iedriver:2.45.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:iedriver_project:iedriver:2.46.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:iedriver_project:iedriver:2.47.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:iedriver_project:iedriver:2.48.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:iedriver_project:iedriver:2.49.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:iedriver_project:iedriver:2.50.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:iedriver_project:iedriver:2.51.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:iedriver_project:iedriver:2.52.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:iedriver_project:iedriver:2.52.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:iedriver_project:iedriver:2.53.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:iedriver_project:iedriver:2.53.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10562</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:02.237-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:47.217-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/174" xml:lang="en">https://nodesecurity.io/advisories/174</vuln:reference>
    </vuln:references>
    <vuln:summary>iedriver is an NPM wrapper for Selenium IEDriver. iedriver versions below 3.0.0 download binary resources over HTTP, which leaves the module vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10563">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:ipfs:go-ipfs-dep:0.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ipfs:go-ipfs-dep:0.4.0-1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ipfs:go-ipfs-dep:0.4.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ipfs:go-ipfs-dep:0.4.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ipfs:go-ipfs-dep:0.4.2-1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ipfs:go-ipfs-dep:0.4.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ipfs:go-ipfs-dep:0.4.3-1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:ipfs:go-ipfs-dep:0.4.3-2::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ipfs:go-ipfs-dep:0.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ipfs:go-ipfs-dep:0.4.0-1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ipfs:go-ipfs-dep:0.4.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ipfs:go-ipfs-dep:0.4.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ipfs:go-ipfs-dep:0.4.2-1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ipfs:go-ipfs-dep:0.4.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ipfs:go-ipfs-dep:0.4.3-1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:ipfs:go-ipfs-dep:0.4.3-2::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10563</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:02.283-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:47.323-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/diasdavid/go-ipfs-dep/pull/12" xml:lang="en">https://github.com/diasdavid/go-ipfs-dep/pull/12</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/156" xml:lang="en">https://nodesecurity.io/advisories/156</vuln:reference>
    </vuln:references>
    <vuln:summary>During the installation process, the go-ipfs-deps module before 0.4.4 insecurely downloads resources over HTTP. This allows for a MITM attack to compromise the integrity of the resources used by this module and could allow for further compromise.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10564">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:apk-parser_project:apk-parser:0.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:apk-parser_project:apk-parser:0.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:apk-parser_project:apk-parser:0.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:apk-parser_project:apk-parser:0.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:apk-parser_project:apk-parser:0.0.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:apk-parser_project:apk-parser:0.0.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:apk-parser_project:apk-parser:0.0.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:apk-parser_project:apk-parser:0.0.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:apk-parser_project:apk-parser:0.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:apk-parser_project:apk-parser:0.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:apk-parser_project:apk-parser:0.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:apk-parser_project:apk-parser:0.1.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:apk-parser_project:apk-parser:0.1.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:apk-parser_project:apk-parser:0.1.5::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:apk-parser_project:apk-parser:0.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:apk-parser_project:apk-parser:0.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:apk-parser_project:apk-parser:0.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:apk-parser_project:apk-parser:0.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:apk-parser_project:apk-parser:0.0.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:apk-parser_project:apk-parser:0.0.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:apk-parser_project:apk-parser:0.0.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:apk-parser_project:apk-parser:0.0.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:apk-parser_project:apk-parser:0.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:apk-parser_project:apk-parser:0.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:apk-parser_project:apk-parser:0.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:apk-parser_project:apk-parser:0.1.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:apk-parser_project:apk-parser:0.1.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:apk-parser_project:apk-parser:0.1.5::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10564</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:02.330-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:47.433-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/195" xml:lang="en">https://nodesecurity.io/advisories/195</vuln:reference>
    </vuln:references>
    <vuln:summary>apk-parser is a tool to extract Android Manifest info from an APK file. apk-parser versions below 0.1.6 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10565">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:cnpmjs:operadriver:0.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:cnpmjs:operadriver:0.2.2::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cnpmjs:operadriver:0.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:cnpmjs:operadriver:0.2.2::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10565</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:02.377-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:47.667-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/196" xml:lang="en">https://nodesecurity.io/advisories/196</vuln:reference>
    </vuln:references>
    <vuln:summary>operadriver is a Opera Driver for Selenium. operadriver versions below 0.2.3 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10566">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2016-10566</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:00.877-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:47.777-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/204" xml:lang="en">https://nodesecurity.io/advisories/204</vuln:reference>
    </vuln:references>
    <vuln:summary>install-nw is a module which quickly and robustly installs and caches NW.js. install-nw versions below 1.1.5 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10567">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.0.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.0.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.1.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.1.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.3.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.4.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.4.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.6.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.6.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.6.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.6.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.6.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.6.5a::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.6.5b::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.6.5c::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.6.5d::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.6.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.6.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.6.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.6.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.7.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.7.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.7.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.14::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.15::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.16::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.17::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.18::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.19::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.20::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.21::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.22::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.23::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.24::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.25::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.26::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.27::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.28::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.29::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.30::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.31::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.32::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.33::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.34::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.35::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.8.36::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.9.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:1.9.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:2.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:2.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:2.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:2.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:2.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:2.0.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:2.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:2.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:2.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:2.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:2.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:2.2.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:2.2.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:product-monitor_project:product-monitor:2.2.4::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.0.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.0.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.1.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.1.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.3.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.4.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.4.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.6.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.6.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.6.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.6.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.6.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.6.5a::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.6.5b::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.6.5c::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.6.5d::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.6.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.6.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.6.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.6.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.7.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.7.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.7.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.14::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.15::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.16::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.17::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.18::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.19::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.20::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.21::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.22::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.23::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.24::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.25::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.26::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.27::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.28::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.29::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.30::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.31::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.32::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.33::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.34::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.35::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.8.36::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.9.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:1.9.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:2.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:2.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:2.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:2.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:2.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:2.0.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:2.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:2.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:2.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:2.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:2.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:2.2.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:2.2.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:product-monitor_project:product-monitor:2.2.4::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10567</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:00.923-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:47.887-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/171" xml:lang="en">https://nodesecurity.io/advisories/171</vuln:reference>
    </vuln:references>
    <vuln:summary>product-monitor is a HTML/JavaScript template for monitoring a product by encouraging product developers to gather all the information about the status of a product, including live monitoring, statistics, endpoints, and test results into one place. product-monitor versions below 2.2.5 download JavaScript resources over HTTP, which leaves the module vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested JavaScript file with an attacker controlled JavaScript file if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10568">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:geoip-lite-country_project:geoip-lite-country:1.0.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:geoip-lite-country_project:geoip-lite-country:1.0.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:geoip-lite-country_project:geoip-lite-country:1.0.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:geoip-lite-country_project:geoip-lite-country:1.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:geoip-lite-country_project:geoip-lite-country:1.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:geoip-lite-country_project:geoip-lite-country:1.1.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:geoip-lite-country_project:geoip-lite-country:1.0.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:geoip-lite-country_project:geoip-lite-country:1.0.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:geoip-lite-country_project:geoip-lite-country:1.0.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:geoip-lite-country_project:geoip-lite-country:1.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:geoip-lite-country_project:geoip-lite-country:1.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:geoip-lite-country_project:geoip-lite-country:1.1.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10568</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:00.970-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:47.997-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/183" xml:lang="en">https://nodesecurity.io/advisories/183</vuln:reference>
    </vuln:references>
    <vuln:summary>geoip-lite-country is a stripped down version of geoip-lite, supporting only country lookup. geoip-lite-country before 1.1.4 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10569">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:embedza_project:embedza:1.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:embedza_project:embedza:1.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:embedza_project:embedza:1.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:embedza_project:embedza:1.0.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:embedza_project:embedza:1.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:embedza_project:embedza:1.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:embedza_project:embedza:1.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:embedza_project:embedza:1.2.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:embedza_project:embedza:1.2.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:embedza_project:embedza:1.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:embedza_project:embedza:1.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:embedza_project:embedza:1.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:embedza_project:embedza:1.0.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:embedza_project:embedza:1.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:embedza_project:embedza:1.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:embedza_project:embedza:1.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:embedza_project:embedza:1.2.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:embedza_project:embedza:1.2.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10569</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:02.423-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:48.120-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/187" xml:lang="en">https://nodesecurity.io/advisories/187</vuln:reference>
    </vuln:references>
    <vuln:summary>embedza is a module to create HTML snippets/embeds from URLs using info from oEmbed, Open Graph, meta tags. embedza versions below 1.2.4 download JavaScript resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested JavaScript file with an attacker controlled JavaScript file if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10570">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2016-10570</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.017-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:48.310-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/189" xml:lang="en">https://nodesecurity.io/advisories/189</vuln:reference>
    </vuln:references>
    <vuln:summary>pngcrush-installer is an installer for Pngcrush. pngcrush-installer versions below 1.8.10 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10571">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:bkjs-wand_project:bkjs-wand:0.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:bkjs-wand_project:bkjs-wand:0.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:bkjs-wand_project:bkjs-wand:0.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:bkjs-wand_project:bkjs-wand:0.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:bkjs-wand_project:bkjs-wand:0.2.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:bkjs-wand_project:bkjs-wand:0.3.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:bkjs-wand_project:bkjs-wand:0.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:bkjs-wand_project:bkjs-wand:0.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:bkjs-wand_project:bkjs-wand:0.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:bkjs-wand_project:bkjs-wand:0.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:bkjs-wand_project:bkjs-wand:0.2.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:bkjs-wand_project:bkjs-wand:0.3.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10571</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:02.470-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:48.417-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/220" xml:lang="en">https://nodesecurity.io/advisories/220</vuln:reference>
    </vuln:references>
    <vuln:summary>bkjs-wand is imagemagick wand support for node.js and backendjs bkjs-wand versions lower than 0.3.2 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10572">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mongodb-instance_project:mongodb-instance:0.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:mongodb-instance_project:mongodb-instance:0.0.2::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mongodb-instance_project:mongodb-instance:0.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:mongodb-instance_project:mongodb-instance:0.0.2::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10572</vuln:cve-id>
    <vuln:published-datetime>2018-05-31T16:29:02.517-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:48.527-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/235" xml:lang="en">https://nodesecurity.io/advisories/235</vuln:reference>
    </vuln:references>
    <vuln:summary>mongodb-instance before 0.0.3 installs mongodb locally. mongodb-instance downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10573">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2016-10573</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.047-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:48.653-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/240" xml:lang="en">https://nodesecurity.io/advisories/240</vuln:reference>
    </vuln:references>
    <vuln:summary>baryton-saxophone is a module to install and launch Selenium Server for Mac, Linux and Windows. baryton-saxophone versions below 3.0.1 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10574">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:apk-parser3_project:apk-parser3:0.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:apk-parser3_project:apk-parser3:0.1.2::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:apk-parser3_project:apk-parser3:0.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:apk-parser3_project:apk-parser3:0.1.2::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10574</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:00.223-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:48.763-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/245" xml:lang="en">https://nodesecurity.io/advisories/245</vuln:reference>
    </vuln:references>
    <vuln:summary>apk-parser3 is a module to extract Android Manifest info from an APK file. apk-parser3 versions before 0.1.3 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10575">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2016-10575</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:00.270-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:48.903-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/251" xml:lang="en">https://nodesecurity.io/advisories/251</vuln:reference>
    </vuln:references>
    <vuln:summary>Kindlegen is a simple Node.js wrapper of the official kindlegen program. Kindlegen versions before 1.1.0 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10576">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:fuseki_project:fuseki:1.0.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:fuseki_project:fuseki:1.0.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10576</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:00.317-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:48.997-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/278" xml:lang="en">https://nodesecurity.io/advisories/278</vuln:reference>
    </vuln:references>
    <vuln:summary>Fuseki server wrapper and management API in fuseki before 1.0.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10577">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2016-10577</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.097-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:49.107-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/ibmdb/node-ibm_db/commit/d7e2d4b4cbeb6f067df8bba7d0b2ac5d40fcfc19#diff-315091eb1586966006e05ebc21cd2a94" xml:lang="en">https://github.com/ibmdb/node-ibm_db/commit/d7e2d4b4cbeb6f067df8bba7d0b2ac5d40fcfc19#diff-315091eb1586966006e05ebc21cd2a94</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/163" xml:lang="en">https://nodesecurity.io/advisories/163</vuln:reference>
    </vuln:references>
    <vuln:summary>ibm_db is an asynchronous/synchronous interface for node.js to IBM DB2 and IBM Informix. ibm_db before 1.0.2 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10578">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.0.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.1.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.1.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.1.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.1.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.1.3-1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.1.3-2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.1.3-3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.1.3-4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.1.3-5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.1.3-6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.1.3-7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.1.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.2.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.3.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.4.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.4.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.4.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.4.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.4.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.4.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.4.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.4.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.4.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.4.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.5.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.5.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.5.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.5.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:unicode_project:unicode:0.6.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:unicode_project:unicode:0.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.0.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.1.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.1.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.1.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.1.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.1.3-1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.1.3-2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.1.3-3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.1.3-4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.1.3-5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.1.3-6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.1.3-7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.1.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.2.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.3.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.4.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.4.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.4.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.4.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.4.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.4.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.4.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.4.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.4.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.4.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.5.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.5.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.5.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.5.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:unicode_project:unicode:0.6.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10578</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.157-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:49.217-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/161" xml:lang="en">https://nodesecurity.io/advisories/161</vuln:reference>
    </vuln:references>
    <vuln:summary>unicode loads unicode data downloaded from unicode.org into nodejs. Unicode before 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10579">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.0.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.0.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.2.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.3.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.6.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.8.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.8.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.9.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.9.1-0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.9.1-1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.10.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.10.0-1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.11.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.12.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.13.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.14.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.14.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.15.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.15.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.15.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.16.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.18.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.19.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.20.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.21.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.21.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.21.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.22.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.22.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.22.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.23.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.23.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.24.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.24.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.25.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.25.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.25.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.25.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:chromedriver_project:chromedriver:2.26.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.0.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.0.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.2.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.3.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.6.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.8.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.8.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.9.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.9.1-0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.9.1-1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.10.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.10.0-1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.11.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.12.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.13.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.14.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.14.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.15.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.15.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.15.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.16.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.18.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.19.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.20.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.21.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.21.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.21.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.22.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.22.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.22.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.23.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.23.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.24.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.24.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.25.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.25.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.25.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.25.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:chromedriver_project:chromedriver:2.26.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10579</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:00.380-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:49.310-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/160" xml:lang="en">https://nodesecurity.io/advisories/160</vuln:reference>
    </vuln:references>
    <vuln:summary>Chromedriver is an NPM wrapper for selenium ChromeDriver. Chromedriver before 2.26.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10580">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:nodewebkit_project:nodewebkit:0.11.2-1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:nodewebkit_project:nodewebkit:0.11.2-1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10580</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:00.427-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:49.433-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/173" xml:lang="en">https://nodesecurity.io/advisories/173</vuln:reference>
    </vuln:references>
    <vuln:summary>nodewebkit is an installer for node-webkit. nodewebkit downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled zip file if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10581">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:appgyver:steroids:4.1.27::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:appgyver:steroids:4.1.27::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10581</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:00.473-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:49.560-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/168" xml:lang="en">https://nodesecurity.io/advisories/168</vuln:reference>
    </vuln:references>
    <vuln:summary>Steroids is PhoneGap on Steroids, providing native UI elements, multiple WebViews and enhancements for better developer productivity. steroids downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested tarball with an attacker controlled tarball if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10582">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:closurecompiler_project:closurecompiler:1.6.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:closurecompiler_project:closurecompiler:1.6.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10582</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:00.503-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:49.667-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/169" xml:lang="en">https://nodesecurity.io/advisories/169</vuln:reference>
    </vuln:references>
    <vuln:summary>closurecompiler is a Closure Compiler for node.js. closurecompiler downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10584">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:dalekjs:dalekjs:0.0.11::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:dalekjs:dalekjs:0.0.11::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10584</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.207-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:49.793-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/181" xml:lang="en">https://nodesecurity.io/advisories/181</vuln:reference>
    </vuln:references>
    <vuln:summary>dalek-browser-chrome-canary provides Google Chrome bindings for DalekJS. dalek-browser-chrome-canary downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10585">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:libxl_project:libxl:0.3.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:libxl_project:libxl:0.3.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10585</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:00.597-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:49.887-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/178" xml:lang="en">https://nodesecurity.io/advisories/178</vuln:reference>
    </vuln:references>
    <vuln:summary>libxl provides Node bindings for the libxl library for reading and writing excel (XLS and XLSX) spreadsheets. libxl downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled zip file if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10586">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.8::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.9::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.10::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.11::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.12::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.13::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.14::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.15::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.16::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.17::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.19::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.20::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.21::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.22::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.23::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.24::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.25::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.26::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.27::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:macacajs:macaca-chromedriver:1.0.28::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.8::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.9::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.10::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.11::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.12::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.13::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.14::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.15::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.16::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.17::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.19::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.20::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.21::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.22::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.23::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.24::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.25::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.26::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.27::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:macacajs:macaca-chromedriver:1.0.28::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10586</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.267-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:49.997-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/180" xml:lang="en">https://nodesecurity.io/advisories/180</vuln:reference>
    </vuln:references>
    <vuln:summary>macaca-chromedriver is a Node.js wrapper for the selenium chromedriver. macaca-chromedriver before 1.0.29 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10587">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:wasdk_project:wasdk:1.0.54::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:wasdk_project:wasdk:1.0.54::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10587</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:00.647-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:50.107-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/179" xml:lang="en">https://nodesecurity.io/advisories/179</vuln:reference>
    </vuln:references>
    <vuln:summary>wasdk is a toolkit for creating WebAssembly modules. wasdk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10588">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.23.7::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.24.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.24.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.24.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.24.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.24.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.25.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.25.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.25.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.25.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.25.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.26.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.26.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.26.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.26.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.26.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.26.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.26.6::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.27.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.27.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.27.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.27.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.27.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.27.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.28.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.28.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.28.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.28.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.29.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.29.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.29.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.29.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.29.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.30.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.30.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.30.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.30.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.30.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.30.5::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.31.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.31.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.31.2::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.31.3::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.31.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:nwjs:nw:0.32.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:nwjs:nw:0.23.7::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.24.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.24.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.24.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.24.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.24.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.25.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.25.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.25.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.25.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.25.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.26.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.26.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.26.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.26.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.26.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.26.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.26.6::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.27.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.27.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.27.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.27.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.27.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.27.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.28.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.28.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.28.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.28.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.29.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.29.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.29.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.29.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.29.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.30.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.30.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.30.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.30.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.30.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.30.5::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.31.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.31.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.31.2::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.31.3::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.31.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:nwjs:nw:0.32.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10588</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:00.693-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:50.217-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/166" xml:lang="en">https://nodesecurity.io/advisories/166</vuln:reference>
    </vuln:references>
    <vuln:summary>nw is an installer for nw.js. nw downloads zipped resources over HTTP, It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10589">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:spunjs:selenium-binaries:0.10.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:spunjs:selenium-binaries:0.10.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10589</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.313-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:50.340-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/175" xml:lang="en">https://nodesecurity.io/advisories/175</vuln:reference>
    </vuln:references>
    <vuln:summary>selenium-binaries downloads Selenium related binaries for your OS. selenium-binaries downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10590">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:cue-sdk-node_project:cue-sdk-node:1.2.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cue-sdk-node_project:cue-sdk-node:1.2.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10590</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.360-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:50.450-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/190" xml:lang="en">https://nodesecurity.io/advisories/190</vuln:reference>
    </vuln:references>
    <vuln:summary>cue-sdk-node is a Corsair Cue SDK wrapper for node.js. cue-sdk-node downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled zip file if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10591">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:prince_project:prince:1.4.4::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:prince_project:prince:1.4.5::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:prince_project:prince:1.4.4::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:prince_project:prince:1.4.5::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10591</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.407-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:50.577-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/185" xml:lang="en">https://nodesecurity.io/advisories/185</vuln:reference>
    </vuln:references>
    <vuln:summary>Prince is a Node API for executing XML/HTML to PDF renderer PrinceXML via prince(1) CLI. prince downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested tarball with an attacker controlled tarball if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10592">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:jser-stat_project:jser-stat:4.0.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:jser-stat_project:jser-stat:4.0.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10592</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:00.723-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:50.683-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/jser/stat-js/blob/master/data/url-mapping.js" xml:lang="en">https://github.com/jser/stat-js/blob/master/data/url-mapping.js</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/188" xml:lang="en">https://nodesecurity.io/advisories/188</vuln:reference>
    </vuln:references>
    <vuln:summary>jser-stat is a JSer.info stat library. jser-stat downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10594">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:ipip_project:ipip:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ipip_project:ipip:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10594</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:00.770-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:50.887-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/184" xml:lang="en">https://nodesecurity.io/advisories/184</vuln:reference>
    </vuln:references>
    <vuln:summary>ipip is a Node.js module to query geolocation information for an IP or domain, based on database by ipip.net. ipip downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10595">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:node-sass_project:node-sass:1.0.18::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:node-sass_project:node-sass:1.0.18::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10595</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:00.817-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:51.013-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/198" xml:lang="en">https://nodesecurity.io/advisories/198</vuln:reference>
    </vuln:references>
    <vuln:summary>jdf-sass is a fork from node-sass, jdf use only. jdf-sass downloads executable resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested file with an attacker controlled file if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10596">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:imageoptim_project:imageoptim:0.5.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:imageoptim_project:imageoptim:0.5.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10596</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:00.880-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:51.153-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/194" xml:lang="en">https://nodesecurity.io/advisories/194</vuln:reference>
    </vuln:references>
    <vuln:summary>imageoptim is a Node.js wrapper for some images compression algorithms. imageoptim downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested tarball with an attacker controlled tarball if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10597">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:cobalt-cli_project:cobalt-cli:2.2.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cobalt-cli_project:cobalt-cli:2.2.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10597</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:00.927-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:51.277-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/197" xml:lang="en">https://nodesecurity.io/advisories/197</vuln:reference>
    </vuln:references>
    <vuln:summary>cobalt-cli downloads resources over HTTP, which leaves it vulnerable to MITM attacks.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10598">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:arrayfire-js_project:arrayfire-js:0.21.4::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:arrayfire-js_project:arrayfire-js:0.21.4::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10598</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:00.957-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:51.387-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>8.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>SINGLE_INSTANCE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/192" xml:lang="en">https://nodesecurity.io/advisories/192</vuln:reference>
    </vuln:references>
    <vuln:summary>arrayfire-js is a module for ArrayFire for the Node.js platform. arrayfire-js downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10599">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:node-sauce-connect_project:node-sauce-connect:0.1.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:node-sauce-connect_project:node-sauce-connect:0.1.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10599</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.003-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:51.513-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/186" xml:lang="en">https://nodesecurity.io/advisories/186</vuln:reference>
    </vuln:references>
    <vuln:summary>sauce-connect is a Node.js wrapper over the SauceLabs SauceConnect.jar program for establishing a secure tunnel for intranet testing. sauce-connect downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10600">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:webrtc:webrtc-native:1.4.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:webrtc:webrtc-native:1.4.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10600</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.050-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:51.623-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/176" xml:lang="en">https://nodesecurity.io/advisories/176</vuln:reference>
    </vuln:references>
    <vuln:summary>webrtc-native uses WebRTC from chromium project. webrtc-native downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10601">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:uxebu:webdrvr:2.43.0-1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:uxebu:webdrvr:2.43.0-1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10601</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.503-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:51.730-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/193" xml:lang="en">https://nodesecurity.io/advisories/193</vuln:reference>
    </vuln:references>
    <vuln:summary>webdrvr is a npm wrapper for Selenium Webdriver including Chromedriver / IEDriver / IOSDriver / Ghostdriver. webdrvr downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10602">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:haxe:haxe:5.0.10::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:haxe:haxe:5.0.10::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10602</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.097-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:51.840-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/177" xml:lang="en">https://nodesecurity.io/advisories/177</vuln:reference>
    </vuln:references>
    <vuln:summary>haxe is a cross-platform toolkit haxe downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled zip file if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10603">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:air-sdk_project:air-sdk:16.0.0-272-16::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:air-sdk_project:air-sdk:16.0.0-272-16::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10603</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.147-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:51.950-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/200" xml:lang="en">https://nodesecurity.io/advisories/200</vuln:reference>
    </vuln:references>
    <vuln:summary>air-sdk is a NPM wrapper for the Adobe AIR SDK. air-sdk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10604">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:dalekjs:dalekjs:0.0.11::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:dalekjs:dalekjs:0.0.11::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10604</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.207-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:52.043-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/199" xml:lang="en">https://nodesecurity.io/advisories/199</vuln:reference>
    </vuln:references>
    <vuln:summary>dalek-browser-chrome is Google Chrome bindings for DalekJS. dalek-browser-chrome downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10605">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:dalekjs:dalekjs:0.0.5::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:dalekjs:dalekjs:0.0.5::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10605</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.253-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:52.167-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/209" xml:lang="en">https://nodesecurity.io/advisories/209</vuln:reference>
    </vuln:references>
    <vuln:summary>dalek-browser-ie is Internet Explorer bindings for DalekJS. dalek-browser-ie downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10606">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:grunt-webdriver-qunit_project:grunt-webdriver-qunit:0.2.6::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:grunt-webdriver-qunit_project:grunt-webdriver-qunit:0.2.6::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10606</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.317-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:52.277-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/207" xml:lang="en">https://nodesecurity.io/advisories/207</vuln:reference>
    </vuln:references>
    <vuln:summary>grunt-webdriver-qunit is a grunt plugin to run qunit with webdriver in grunt grunt-webdriver-qunit downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10607">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:openframe-glslviewer_project:openframe-glslviewer:0.2.7::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:openframe-glslviewer_project:openframe-glslviewer:0.2.7::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10607</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.347-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:52.387-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/208" xml:lang="en">https://nodesecurity.io/advisories/208</vuln:reference>
    </vuln:references>
    <vuln:summary>openframe-glsviewer is a Openframe extension which adds support for shaders via glslViewer. openframe-glsviewer downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10608">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:getrobot:robot-js:2.0.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:getrobot:robot-js:2.0.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10608</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.397-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:52.480-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/201" xml:lang="en">https://nodesecurity.io/advisories/201</vuln:reference>
    </vuln:references>
    <vuln:summary>robot-js is a module for native system automation for node.js. robot-js downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10609">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="AND" negate="false">
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/a:chromedriver126_project:chromedriver126:1.0.15::~~~node.js~~"/>
        </cpe-lang:logical-test>
        <cpe-lang:logical-test operator="OR" negate="false">
          <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:-"/>
        </cpe-lang:logical-test>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:chromedriver126_project:chromedriver126:1.0.15::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10609</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.443-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:52.607-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/203" xml:lang="en">https://nodesecurity.io/advisories/203</vuln:reference>
    </vuln:references>
    <vuln:summary>chromedriver126 is chromedriver version 1.26 for linux OS. chromedriver126 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10610">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2016-10610</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.490-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:52.717-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/206" xml:lang="en">https://nodesecurity.io/advisories/206</vuln:reference>
    </vuln:references>
    <vuln:summary>unicode-json is a unicode lookup table. unicode-json before 2.0.0 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10611">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:strider-sauce_project:strider-sauce:0.6.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:strider-sauce_project:strider-sauce:0.6.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10611</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.547-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:52.827-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/202" xml:lang="en">https://nodesecurity.io/advisories/202</vuln:reference>
    </vuln:references>
    <vuln:summary>strider-sauce is Sauce Labs / Selenium support for Strider. strider-sauce downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an attacker controlled zip file if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10612">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:dalekjs:dalekjs:0.0.5::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:dalekjs:dalekjs:0.0.5::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10612</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.537-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:52.933-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/205" xml:lang="en">https://nodesecurity.io/advisories/205</vuln:reference>
    </vuln:references>
    <vuln:summary>dalek-browser-ie-canary is Internet Explorer bindings for DalekJS. dalek-browser-ie-canary downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10613">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:bionode:bionode-sra:1.0.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:bionode:bionode-sra:1.0.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10613</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.583-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:53.060-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/211" xml:lang="en">https://nodesecurity.io/advisories/211</vuln:reference>
    </vuln:references>
    <vuln:summary>bionode-sra is a Node.js wrapper for SRA Toolkit. bionode-sra downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10614">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:httpsync_project:httpsync:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:httpsync_project:httpsync:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10614</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.630-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:53.153-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/210" xml:lang="en">https://nodesecurity.io/advisories/210</vuln:reference>
    </vuln:references>
    <vuln:summary>httpsync is a port of libcurl to node.js. httpsync downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10615">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:curses_project:curses:0.0.10::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:curses_project:curses:0.0.10::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10615</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.677-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:53.263-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/215" xml:lang="en">https://nodesecurity.io/advisories/215</vuln:reference>
    </vuln:references>
    <vuln:summary>curses is bindings for the native curses library, a full featured console IO library. curses downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10616">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:openframe-image_project:openframe-image:0.2.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:openframe-image_project:openframe-image:0.2.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10616</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.723-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:53.420-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/218" xml:lang="en">https://nodesecurity.io/advisories/218</vuln:reference>
    </vuln:references>
    <vuln:summary>openframe-image is an Openframe extension which adds support for images via fbi. openframe-image downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10617">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:box2d-native_project:box2d-native:0.0.8::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:box2d-native_project:box2d-native:0.0.8::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10617</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.753-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:53.513-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/219" xml:lang="en">https://nodesecurity.io/advisories/219</vuln:reference>
    </vuln:references>
    <vuln:summary>box2d-native downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10618">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:node-browser_project:node-browser:0.0.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:node-browser_project:node-browser:0.0.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10618</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.817-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:53.623-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/214" xml:lang="en">https://nodesecurity.io/advisories/214</vuln:reference>
    </vuln:references>
    <vuln:summary>node-browser is a wrapper webdriver by nodejs. node-browser downloads resources over HTTP, which leaves it vulnerable to MITM attacks.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10619">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:pennyworth_project:pennyworth:1.0.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:pennyworth_project:pennyworth:1.0.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10619</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.863-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:53.730-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/213" xml:lang="en">https://nodesecurity.io/advisories/213</vuln:reference>
    </vuln:references>
    <vuln:summary>pennyworth is a natural language templating engine. pennyworth downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10620">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:atom-node-module-installer_project:atom-node-module-installer:0.9.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:atom-node-module-installer_project:atom-node-module-installer:0.9.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10620</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.897-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:53.840-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/216" xml:lang="en">https://nodesecurity.io/advisories/216</vuln:reference>
    </vuln:references>
    <vuln:summary>atom-node-module-installer installs node modules for atom-shell applications. atom-node-module-installer binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10621">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:fibjs_project:fibjs:0.1.8::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:fibjs_project:fibjs:0.1.8::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10621</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.943-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:53.950-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/217" xml:lang="en">https://nodesecurity.io/advisories/217</vuln:reference>
    </vuln:references>
    <vuln:summary>fibjs is a runtime for javascript applictions built on google v8 JS. fibjs downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10622">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2016-10622</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:01.990-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:54.077-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/212" xml:lang="en">https://nodesecurity.io/advisories/212</vuln:reference>
    </vuln:references>
    <vuln:summary>nodeschnaps is a NodeJS compatibility layer for Java (Rhino). nodeschnaps downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10623">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:macaca-chromedriver-zxa_project:macaca-chromedriver-zxa:0.1.9::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:macaca-chromedriver-zxa_project:macaca-chromedriver-zxa:0.1.9::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10623</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:02.037-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:54.183-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/221" xml:lang="en">https://nodesecurity.io/advisories/221</vuln:reference>
    </vuln:references>
    <vuln:summary>macaca-chromedriver-zxa is a Node.js wrapper for the selenium chromedriver. macaca-chromedriver-zxa downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10624">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:selenium-chromedriver_project:selenium-chromedriver:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:selenium-chromedriver_project:selenium-chromedriver:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10624</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:02.083-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:54.277-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/222" xml:lang="en">https://nodesecurity.io/advisories/222</vuln:reference>
    </vuln:references>
    <vuln:summary>selenium-chromedriver is a simple utility for downloading the Selenium Webdriver for Google Chrome selenium-chromedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10625">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2016-10625</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:02.147-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:54.387-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/230" xml:lang="en">https://nodesecurity.io/advisories/230</vuln:reference>
    </vuln:references>
    <vuln:summary>headless-browser-lite is a minimal npm installer for phantomjs and slimerjs with no external dependencies. headless-browser-lite downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10626">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mystem3_project:mystem3:1.0.7::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mystem3_project:mystem3:1.0.7::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10626</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:02.193-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:54.497-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/229" xml:lang="en">https://nodesecurity.io/advisories/229</vuln:reference>
    </vuln:references>
    <vuln:summary>mystem3 is a NodeJS wrapper for the Yandex MyStem 3. mystem3 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10627">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:scala-bin_project:scala-bin:0.3.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:scala-bin_project:scala-bin:0.3.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10627</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.610-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:54.637-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/227" xml:lang="en">https://nodesecurity.io/advisories/227</vuln:reference>
    </vuln:references>
    <vuln:summary>scala-bin is a binary wrapper for Scala. scala-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10628">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:selenium-wrapper_project:selenium-wrapper:0.0.9::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:selenium-wrapper_project:selenium-wrapper:0.0.9::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10628</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:02.223-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:54.730-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/224" xml:lang="en">https://nodesecurity.io/advisories/224</vuln:reference>
    </vuln:references>
    <vuln:summary>selenium-wrapper is a selenium server wrapper, including installation and chrome webdriver. selenium-wrapper downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10629">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:nw-with-arm_project:nw-with-arm:0.12.2::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:nw-with-arm_project:nw-with-arm:0.12.2::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10629</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:02.270-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:54.887-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/226" xml:lang="en">https://nodesecurity.io/advisories/226</vuln:reference>
    </vuln:references>
    <vuln:summary>nw-with-arm is a NW Installer including ARM-Build. nw-with-arm downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10630">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:install-g-test_project:install-g-test:2.0.12::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:install-g-test_project:install-g-test:2.0.12::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10630</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:02.317-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:54.980-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>NONE</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/228" xml:lang="en">https://nodesecurity.io/advisories/228</vuln:reference>
    </vuln:references>
    <vuln:summary>install-g-test downloads resources over HTTP, which leaves it vulnerable to MITM attacks.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10631">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:jvminstall_project:jvminstall:0.1.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:jvminstall_project:jvminstall:0.1.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10631</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:02.363-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:55.090-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/225" xml:lang="en">https://nodesecurity.io/advisories/225</vuln:reference>
    </vuln:references>
    <vuln:summary>jvminstall is a module for downloading and unpacking jvm to local system. jvminstall downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10632">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:apk-parser2_project:apk-parser2:0.1.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:apk-parser2_project:apk-parser2:0.1.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10632</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:02.410-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:55.200-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/223" xml:lang="en">https://nodesecurity.io/advisories/223</vuln:reference>
    </vuln:references>
    <vuln:summary>apk-parser2 is a module which extracts Android Manifest info from an APK file. apk-parser2 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10633">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:dwebp-bin_project:dwebp-bin:0.1.6::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:dwebp-bin_project:dwebp-bin:0.1.6::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10633</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:02.457-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:55.293-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/232" xml:lang="en">https://nodesecurity.io/advisories/232</vuln:reference>
    </vuln:references>
    <vuln:summary>dwebp-bin is a dwebp node.js wrapper that convert WebP into PNG. dwebp-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10634">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:scalajs-standalone-bin_project:scalajs-standalone-bin:0.4.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:scalajs-standalone-bin_project:scalajs-standalone-bin:0.4.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10634</vuln:cve-id>
    <vuln:published-datetime>2018-06-01T14:29:02.503-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:55.420-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/231" xml:lang="en">https://nodesecurity.io/advisories/231</vuln:reference>
    </vuln:references>
    <vuln:summary>scala-standalone-bin is a Binary wrapper for ScalaJS. scala-standalone-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10635">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false"/>
    </vuln:vulnerable-configuration>
    <vuln:cve-id>CVE-2016-10635</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.643-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:55.527-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/242" xml:lang="en">https://nodesecurity.io/advisories/242</vuln:reference>
    </vuln:references>
    <vuln:summary>broccoli-closure is a Closure compiler plugin for Broccoli. broccoli-closure before 1.3.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10636">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:grunt-ccompiler_project:grunt-ccompiler:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:grunt-ccompiler_project:grunt-ccompiler:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10636</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:00.313-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:55.637-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/239" xml:lang="en">https://nodesecurity.io/advisories/239</vuln:reference>
    </vuln:references>
    <vuln:summary>grunt-ccompiler is a Closure Compiler Grunt Plugin. grunt-ccompiler downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10637">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:haxe:haxe-dev:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:haxe:haxe-dev:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10637</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:00.360-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:55.777-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/237" xml:lang="en">https://nodesecurity.io/advisories/237</vuln:reference>
    </vuln:references>
    <vuln:summary>haxe-dev is a cross-platform toolkit. haxe-dev downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10638">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:js-given_project:js-given:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:js-given_project:js-given:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10638</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:00.423-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:55.873-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/241" xml:lang="en">https://nodesecurity.io/advisories/241</vuln:reference>
    </vuln:references>
    <vuln:summary>js-given is a JavaScript frontend to jgiven. js-given downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10639">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:redis-srvr_project:redis-srvr:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:redis-srvr_project:redis-srvr:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10639</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:00.453-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:55.997-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/238" xml:lang="en">https://nodesecurity.io/advisories/238</vuln:reference>
    </vuln:references>
    <vuln:summary>redis-srvr is a npm wrapper for redis-server. redis-srvr downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10640">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:geohey:node-thulac:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:geohey:node-thulac:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10640</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:00.517-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:56.090-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/236" xml:lang="en">https://nodesecurity.io/advisories/236</vuln:reference>
    </vuln:references>
    <vuln:summary>node-thulac is a node binding for thulac. node-thulac downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10641">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:node-bsdiff-android_project:node-bsdiff-android:0.1.5::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:node-bsdiff-android_project:node-bsdiff-android:0.1.5::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10641</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:00.563-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:56.217-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/234" xml:lang="en">https://nodesecurity.io/advisories/234</vuln:reference>
    </vuln:references>
    <vuln:summary>node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10642">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:cmake_project:cmake:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cmake_project:cmake:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10642</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:00.610-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:56.327-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/233" xml:lang="en">https://nodesecurity.io/advisories/233</vuln:reference>
    </vuln:references>
    <vuln:summary>cmake installs the cmake x86 linux binaries. cmake downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10643">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:jstestdriver_project:jstestdriver:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:jstestdriver_project:jstestdriver:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10643</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:00.657-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:56.480-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/244" xml:lang="en">https://nodesecurity.io/advisories/244</vuln:reference>
    </vuln:references>
    <vuln:summary>jstestdriver is a wrapper for Google's jstestdriver. jstestdriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10644">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:slimerjs-edge_project:slimerjs-edge:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:slimerjs-edge_project:slimerjs-edge:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10644</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:00.717-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:56.577-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/243" xml:lang="en">https://nodesecurity.io/advisories/243</vuln:reference>
    </vuln:references>
    <vuln:summary>slimerjs-edge is a npm wrapper for installing the bleeding edge version of slimerjs. slimerjs-edge downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10645">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:grunt-images_project:grunt-images:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:grunt-images_project:grunt-images:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10645</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:00.750-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:56.700-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/255" xml:lang="en">https://nodesecurity.io/advisories/255</vuln:reference>
    </vuln:references>
    <vuln:summary>grunt-images is a grunt plugin for processing images. grunt-images downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10646">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:resourcehacker_project:resourcehacker:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:resourcehacker_project:resourcehacker:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10646</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:00.813-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:56.827-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/254" xml:lang="en">https://nodesecurity.io/advisories/254</vuln:reference>
    </vuln:references>
    <vuln:summary>resourcehacker is a Node wrapper of Resource Hacker (windows executable resource editor). resourcehacker downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10647">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:node-air-sdk_project:node-air-sdk:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:node-air-sdk_project:node-air-sdk:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10647</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:00.860-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:56.933-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/250" xml:lang="en">https://nodesecurity.io/advisories/250</vuln:reference>
    </vuln:references>
    <vuln:summary>node-air-sdk is an AIR SDK for nodejs. node-air-sdk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10648">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:marionette-socket-host_project:marionette-socket-host:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:marionette-socket-host_project:marionette-socket-host:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10648</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:00.937-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:57.043-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/252" xml:lang="en">https://nodesecurity.io/advisories/252</vuln:reference>
    </vuln:references>
    <vuln:summary>marionette-socket-host is a marionette-js-runner host for sending actions over a socket. marionette-socket-host downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10649">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:frames-compiler_project:frames-compiler:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:frames-compiler_project:frames-compiler:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10649</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:00.983-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:57.153-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/247" xml:lang="en">https://nodesecurity.io/advisories/247</vuln:reference>
    </vuln:references>
    <vuln:summary>frames-compiler downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10650">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:shutterstock:ntfserver:0.0.18::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:shutterstock:ntfserver:0.0.18::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10650</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.690-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:57.247-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/253" xml:lang="en">https://nodesecurity.io/advisories/253</vuln:reference>
    </vuln:references>
    <vuln:summary>ntfserver is a Network Testing Framework Server. ntfserver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10651">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:webdriver-launcher_project:webdriver-launcher:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:webdriver-launcher_project:webdriver-launcher:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10651</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.063-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:57.357-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/246" xml:lang="en">https://nodesecurity.io/advisories/246</vuln:reference>
    </vuln:references>
    <vuln:summary>webdriver-launcher is a Node.js Selenium Webdriver Launcher. webdriver-launcher downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10652">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:prebuild-lwip_project:prebuild-lwip:0.0.4::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:prebuild-lwip_project:prebuild-lwip:0.0.4::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10652</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.110-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:57.467-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/248" xml:lang="en">https://nodesecurity.io/advisories/248</vuln:reference>
    </vuln:references>
    <vuln:summary>prebuild-lwip is a module for comprehensive, fast, and simple image processing and manipulation. prebuild-lwip downloads resources over HTTP, which leaves it vulnerable to MITM attacks.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10653">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:xd-testing_project:xd-testing:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:xd-testing_project:xd-testing:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10653</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.157-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:57.577-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/257" xml:lang="en">https://nodesecurity.io/advisories/257</vuln:reference>
    </vuln:references>
    <vuln:summary>xd-testing is a testing library for cross-device (XD) web applications. xd-testing downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10654">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:sfml_project:sfml:0.0.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:sfml_project:sfml:0.0.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10654</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.203-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:57.777-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/256" xml:lang="en">https://nodesecurity.io/advisories/256</vuln:reference>
    </vuln:references>
    <vuln:summary>sfml downloads resources over HTTP, which leaves it vulnerable to MITM attacks.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10655">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:clang-extra_project:clang-extra:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:clang-extra_project:clang-extra:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10655</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.250-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:57.887-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/265" xml:lang="en">https://nodesecurity.io/advisories/265</vuln:reference>
    </vuln:references>
    <vuln:summary>The clang-extra module installs LLVM's clang-extra tools. clang-extra downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10656">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:qbs_project:qbs:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:qbs_project:qbs:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10656</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.297-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:57.997-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/266" xml:lang="en">https://nodesecurity.io/advisories/266</vuln:reference>
    </vuln:references>
    <vuln:summary>qbs is a build tool that helps simplify the build process for developing projects across multiple platforms. qbs downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10657">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:co-cli-installer_project:co-cli-installer:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:co-cli-installer_project:co-cli-installer:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10657</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.343-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:58.090-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/268" xml:lang="en">https://nodesecurity.io/advisories/268</vuln:reference>
    </vuln:references>
    <vuln:summary>co-cli-installer downloads the co-cli module as part of the install process, but does so over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10658">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:native-opencv_project:native-opencv:3.0.0b::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:native-opencv_project:native-opencv:3.0.0b::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10658</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.737-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:58.200-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/263" xml:lang="en">https://nodesecurity.io/advisories/263</vuln:reference>
    </vuln:references>
    <vuln:summary>native-opencv is the OpenCV library installed via npm native-opencv downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10659">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:macchina:poco:1.7.7::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:macchina:poco:1.7.7::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10659</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.783-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:58.293-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/271" xml:lang="en">https://nodesecurity.io/advisories/271</vuln:reference>
    </vuln:references>
    <vuln:summary>poco - The POCO libraries, downloads source file resources used for compilation over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10660">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:fis-parser-sass-bin_project:fis-parser-sass-bin:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:fis-parser-sass-bin_project:fis-parser-sass-bin:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10660</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.390-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:58.433-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/269" xml:lang="en">https://nodesecurity.io/advisories/269</vuln:reference>
    </vuln:references>
    <vuln:summary>fis-parser-sass-bin a plugin for fis to compile sass using node-sass-binaries. fis-parser-sass-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10661">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:phantomjs-cheniu_project:phantomjs-cheniu:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:phantomjs-cheniu_project:phantomjs-cheniu:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10661</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.437-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:58.543-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/262" xml:lang="en">https://nodesecurity.io/advisories/262</vuln:reference>
    </vuln:references>
    <vuln:summary>phantomjs-cheniu is a Headless WebKit with JS API phantomjs-cheniu downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10662">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:tomita_project:tomita:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:tomita_project:tomita:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10662</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.483-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:58.653-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/267" xml:lang="en">https://nodesecurity.io/advisories/267</vuln:reference>
    </vuln:references>
    <vuln:summary>tomita is a node wrapper for Yandex Tomita Parser tomita downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10663">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:wixtoolset_project:wixtoolset:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:wixtoolset_project:wixtoolset:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10663</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.530-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:58.763-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/264" xml:lang="en">https://nodesecurity.io/advisories/264</vuln:reference>
    </vuln:references>
    <vuln:summary>wixtoolset is a Node module wrapper around the wixtoolset binaries wixtoolset downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10664">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mystem_project:mystem:-::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mystem_project:mystem:-::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10664</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.577-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:58.857-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/259" xml:lang="en">https://nodesecurity.io/advisories/259</vuln:reference>
    </vuln:references>
    <vuln:summary>mystem is a Node.js wrapper for MyStem morphology text analyzer by Yandex.ru mystem downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10665">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:herbivore_project:herbivore:0.0.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:herbivore_project:herbivore:0.0.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10665</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.627-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:58.967-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/samatt/Herbivore/commit/0a041defc3463e99948e5d2064aef54b2128c5a3" xml:lang="en">https://github.com/samatt/Herbivore/commit/0a041defc3463e99948e5d2064aef54b2128c5a3</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/258" xml:lang="en">https://nodesecurity.io/advisories/258</vuln:reference>
    </vuln:references>
    <vuln:summary>herbivore is a packet sniffing and crafting library. Built on libtins herbivore 0.0.3 and below download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10666">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:yandex:tomita-parser:0.0.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:yandex:tomita-parser:0.0.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10666</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.830-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:59.060-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/261" xml:lang="en">https://nodesecurity.io/advisories/261</vuln:reference>
    </vuln:references>
    <vuln:summary>tomita-parser is a Node wrapper for Yandex Tomita Parser tomita-parser downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10667">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:selenium-portal_project:selenium-portal:0.0.1-2::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:selenium-portal_project:selenium-portal:0.0.1-2::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10667</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.673-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:59.170-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/260" xml:lang="en">https://nodesecurity.io/advisories/260</vuln:reference>
    </vuln:references>
    <vuln:summary>selenium-portal is a Selenium Testing Framework selenium-portal downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10668">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:libsbml_project:libsbml:0.0.2::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:libsbml_project:libsbml:0.0.2::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10668</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.717-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:59.263-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/272" xml:lang="en">https://nodesecurity.io/advisories/272</vuln:reference>
    </vuln:references>
    <vuln:summary>libsbml is a module that installs Linux binaries for libSBML libsbml downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10669">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:soci_project:soci:0.0.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:soci_project:soci:0.0.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10669</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.750-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:59.373-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/270" xml:lang="en">https://nodesecurity.io/advisories/270</vuln:reference>
    </vuln:references>
    <vuln:summary>soci downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10670">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:windows-seleniumjar-mirror_project:windows-seleniumjar-mirror:2.52.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:windows-seleniumjar-mirror_project:windows-seleniumjar-mirror:2.52.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10670</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.797-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:59.480-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/281" xml:lang="en">https://nodesecurity.io/advisories/281</vuln:reference>
    </vuln:references>
    <vuln:summary>windows-seleniumjar-mirror downloads the Selenium Jar file windows-seleniumjar-mirror downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10671">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mystem-wrapper_project:mystem-wrapper:0.2.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mystem-wrapper_project:mystem-wrapper:0.2.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10671</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.843-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:59.590-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/280" xml:lang="en">https://nodesecurity.io/advisories/280</vuln:reference>
    </vuln:references>
    <vuln:summary>mystem-wrapper is a Yandex mystem app wrapper module. mystem-wrapper downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10672">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:cloudpub-redis_project:cloudpub-redis:2.4.5::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:cloudpub-redis_project:cloudpub-redis:2.4.5::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10672</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.890-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:59.730-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/282" xml:lang="en">https://nodesecurity.io/advisories/282</vuln:reference>
    </vuln:references>
    <vuln:summary>cloudpub-redis is a module for CloudPub: Redis Backend cloudpub-redis downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10673">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:ipip:ipip-coffee:1.0.9::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:ipip:ipip-coffee:1.0.9::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10673</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.923-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:59.840-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/279" xml:lang="en">https://nodesecurity.io/advisories/279</vuln:reference>
    </vuln:references>
    <vuln:summary>ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an application.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10674">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:limbus-buildgen_project:limbus-buildgen:0.1.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:limbus-buildgen_project:limbus-buildgen:0.1.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10674</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.877-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:16:59.950-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/276" xml:lang="en">https://nodesecurity.io/advisories/276</vuln:reference>
    </vuln:references>
    <vuln:summary>limbus-buildgen is a "build anywhere" build system. limbus-buildgen versions below 0.1.1 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10675">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:libsbmlsim_project:libsbmlsim:0.0.2::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:libsbmlsim_project:libsbmlsim:0.0.2::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10675</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:01.967-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:00.090-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/275" xml:lang="en">https://nodesecurity.io/advisories/275</vuln:reference>
    </vuln:references>
    <vuln:summary>libsbmlsim is a module that installs linux binaries for libsbmlsim libsbmlsim downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10676">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:rs-brightcove_project:rs-brightcove:0.0.2::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:rs-brightcove_project:rs-brightcove:0.0.2::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10676</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:02.017-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:00.200-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/273" xml:lang="en">https://nodesecurity.io/advisories/273</vuln:reference>
    </vuln:references>
    <vuln:summary>rs-brightcove is a wrapper around brightcove's web api rs-brightcove downloads source file resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10677">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:google-closure-tools-latest_project:google-closure-tools-latest:0.1.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:google-closure-tools-latest_project:google-closure-tools-latest:0.1.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10677</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:02.047-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:00.310-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/274" xml:lang="en">https://nodesecurity.io/advisories/274</vuln:reference>
    </vuln:references>
    <vuln:summary>google-closure-tools-latest is a Node.js module wrapper for downloading the latest version of the Google Closure tools google-closure-tools-latest downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10678">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:serc.js_project:serc.js:0.0.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:serc.js_project:serc.js:0.0.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10678</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:02.093-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:00.403-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/277" xml:lang="en">https://nodesecurity.io/advisories/277</vuln:reference>
    </vuln:references>
    <vuln:summary>serc.js is a Selenium RC process wrapper serc.js downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10679">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:selenium-standalone-painful_project:selenium-standalone-painful:2.39.0-2.7.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:selenium-standalone-painful_project:selenium-standalone-painful:2.39.0-2.7.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10679</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.940-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:00.513-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/284" xml:lang="en">https://nodesecurity.io/advisories/284</vuln:reference>
    </vuln:references>
    <vuln:summary>selenium-standalone-painful installs a start-selenium command line to start a standalone selenium server with chrome-driver. selenium-standalone-painful downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10680">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:adamvr-geoip-lite_project:adamvr-geoip-lite:1.2.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:adamvr-geoip-lite_project:adamvr-geoip-lite:1.2.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10680</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:01.970-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:00.623-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/283" xml:lang="en">https://nodesecurity.io/advisories/283</vuln:reference>
    </vuln:references>
    <vuln:summary>adamvr-geoip-lite is a light weight native JavaScript implementation of GeoIP API from MaxMind adamvr-geoip-lite downloads geoip resources over HTTP, which leaves it vulnerable to MITM attacks. This impacts the integrity and availability of this geoip data that may alter the decisions made by an application using this data.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10681">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:robotwebtools:roslibjs:0.18.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:robotwebtools:roslibjs:0.18.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10681</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:02.003-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:00.747-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/292" xml:lang="en">https://nodesecurity.io/advisories/292</vuln:reference>
    </vuln:references>
    <vuln:summary>roslib-socketio - The standard ROS Javascript Library fork for add support to socket.io roslib-socketio downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10682">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:massif_project:massif:0.0.1-1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:massif_project:massif:0.0.1-1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10682</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:02.047-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:00.857-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/290" xml:lang="en">https://nodesecurity.io/advisories/290</vuln:reference>
    </vuln:references>
    <vuln:summary>massif is a Phantomjs fork massif downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10683">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:hujiang:arcanist:0.0.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:hujiang:arcanist:0.0.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10683</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:02.140-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:00.967-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/286" xml:lang="en">https://nodesecurity.io/advisories/286</vuln:reference>
    </vuln:references>
    <vuln:summary>arcanist downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10684">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:healthcenter_project:healthcenter:3.0.3::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:healthcenter_project:healthcenter:3.0.3::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10684</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:02.173-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:01.077-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/288" xml:lang="en">https://nodesecurity.io/advisories/288</vuln:reference>
    </vuln:references>
    <vuln:summary>healthcenter - IBM Monitoring and Diagnostic Tools health Center agent healthcenter downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10685">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:pk-app-wonderbox_project:pk-app-wonderbox:1.0.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:pk-app-wonderbox_project:pk-app-wonderbox:1.0.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10685</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:02.217-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:01.200-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/289" xml:lang="en">https://nodesecurity.io/advisories/289</vuln:reference>
    </vuln:references>
    <vuln:summary>pk-app-wonderbox is an integration with wonderbox pk-app-wonderbox downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10686">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:fis-sass-all_project:fis-sass-all:0.2.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:fis-sass-all_project:fis-sass-all:0.2.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10686</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:02.280-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:01.293-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/287" xml:lang="en">https://nodesecurity.io/advisories/287</vuln:reference>
    </vuln:references>
    <vuln:summary>fis-sass-all is another libsass wrapper for node. fis-sass-all downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10687">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:windows-selenium-chromedriver_project:windows-selenium-chromedriver:0.1.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:windows-selenium-chromedriver_project:windows-selenium-chromedriver:0.1.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10687</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:02.313-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:01.420-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/285" xml:lang="en">https://nodesecurity.io/advisories/285</vuln:reference>
    </vuln:references>
    <vuln:summary>windows-selenium-chromedriver is a module that downloads the Selenium Jar file. windows-selenium-chromedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10688">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:haxe:haxe3:3.4.7::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:haxe:haxe3:3.4.7::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10688</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:02.360-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:01.547-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/294" xml:lang="en">https://nodesecurity.io/advisories/294</vuln:reference>
    </vuln:references>
    <vuln:summary>Haxe 3 : The Cross-Platform Toolkit (a fork from David Mouton's damoebius/haxe-npm) haxe3 downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10689">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:windows-iedriver_project:windows-iedriver:2.48.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:windows-iedriver_project:windows-iedriver:2.48.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10689</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:02.407-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:01.653-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/293" xml:lang="en">https://nodesecurity.io/advisories/293</vuln:reference>
    </vuln:references>
    <vuln:summary>The windows-iedriver module downloads fixed version of iedriverserver.exe windows-iedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10690">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:openframe-ascii-image_project:openframe-ascii-image:0.1.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:openframe-ascii-image_project:openframe-ascii-image:0.1.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10690</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:02.453-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:01.810-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/298" xml:lang="en">https://nodesecurity.io/advisories/298</vuln:reference>
    </vuln:references>
    <vuln:summary>openframe-ascii-image module is an openframe plugin which adds support for ascii images via fim. openframe-ascii-image downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10691">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:windows-seleniumjar_project:windows-seleniumjar:2.48.2::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:windows-seleniumjar_project:windows-seleniumjar:2.48.2::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10691</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:02.500-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:01.967-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/296" xml:lang="en">https://nodesecurity.io/advisories/296</vuln:reference>
    </vuln:references>
    <vuln:summary>windows-seleniumjar is a module that downloads the Selenium Jar file windows-seleniumjar downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10693">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:pm2-kafka_project:pm2-kafka:1.0.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:pm2-kafka_project:pm2-kafka:1.0.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10693</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:02.593-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:02.123-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/299" xml:lang="en">https://nodesecurity.io/advisories/299</vuln:reference>
    </vuln:references>
    <vuln:summary>pm2-kafka is a PM2 module that installs and runs a kafka server pm2-kafka downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10694">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:alto-saxophone_project:alto-saxophone:2.20.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:alto-saxophone_project:alto-saxophone:2.21.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:alto-saxophone_project:alto-saxophone:2.22.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:alto-saxophone_project:alto-saxophone:2.23.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:alto-saxophone_project:alto-saxophone:2.23.1::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:alto-saxophone_project:alto-saxophone:2.24.0::~~~node.js~~"/>
        <cpe-lang:fact-ref name="cpe:/a:alto-saxophone_project:alto-saxophone:2.25.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:alto-saxophone_project:alto-saxophone:2.20.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:alto-saxophone_project:alto-saxophone:2.21.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:alto-saxophone_project:alto-saxophone:2.22.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:alto-saxophone_project:alto-saxophone:2.23.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:alto-saxophone_project:alto-saxophone:2.23.1::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:alto-saxophone_project:alto-saxophone:2.24.0::~~~node.js~~</vuln:product>
      <vuln:product>cpe:/a:alto-saxophone_project:alto-saxophone:2.25.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10694</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T12:29:02.640-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:02.233-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/172" xml:lang="en">https://nodesecurity.io/advisories/172</vuln:reference>
    </vuln:references>
    <vuln:summary>alto-saxophone is a module to install and launch Chromedriver for Mac, Linux or Windows. alto-saxophone versions below 2.25.1 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10695">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mapbox:npm-test-sqlite3-trunk:4.0.1::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mapbox:npm-test-sqlite3-trunk:4.0.1::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10695</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T15:29:00.193-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:02.340-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/297" xml:lang="en">https://nodesecurity.io/advisories/297</vuln:reference>
    </vuln:references>
    <vuln:summary>The npm-test-sqlite3-trunk module provides asynchronous, non-blocking SQLite3 bindings. npm-test-sqlite3-trunk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10696">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:windows-latestchromedriver_project:windows-latestchromedriver:0.1.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:windows-latestchromedriver_project:windows-latestchromedriver:0.1.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10696</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T15:29:00.240-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:02.450-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/295" xml:lang="en">https://nodesecurity.io/advisories/295</vuln:reference>
    </vuln:references>
    <vuln:summary>windows-latestchromedriver downloads the latest version of chromedriver.exe. windows-latestchromedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10697">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:react-native-baidu-voice-synthesizer_project:react-native-baidu-voice-synthesizer:1.0.0::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:react-native-baidu-voice-synthesizer_project:react-native-baidu-voice-synthesizer:1.0.0::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10697</vuln:cve-id>
    <vuln:published-datetime>2018-06-04T15:29:00.287-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:02.560-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/302" xml:lang="en">https://nodesecurity.io/advisories/302</vuln:reference>
    </vuln:references>
    <vuln:summary>react-native-baidu-voice-synthesizer is a baidu voice speech synthesizer for react native. react-native-baidu-voice-synthesizer downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10698">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:mystem-fix_project:mystem-fix:0.0.5::~~~node.js~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:mystem-fix_project:mystem-fix:0.0.5::~~~node.js~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10698</vuln:cve-id>
    <vuln:published-datetime>2018-05-29T16:29:02.097-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-09T19:17:02.670-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>9.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>COMPLETE</cvss:confidentiality-impact>
        <cvss:integrity-impact>COMPLETE</cvss:integrity-impact>
        <cvss:availability-impact>COMPLETE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-310"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://nodesecurity.io/advisories/301" xml:lang="en">https://nodesecurity.io/advisories/301</vuln:reference>
    </vuln:references>
    <vuln:summary>mystem-fix is a node.js wrapper for MyStem morphology text analyzer by Yandex.ru mystem-fix downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10764">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:-"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:1.2.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:1.3.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.81"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.82"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.83"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.84"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.85"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.86"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.87"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.88"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.89"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.90"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.91"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.92"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.93"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.94"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.95"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.96"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.97"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.98"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.100"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.101"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.102"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.103"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.104"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.105"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.106"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.107"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.108"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.109"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.110"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.111"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.112"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.113"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.114"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.115"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.116"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.117"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.118"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.119"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.120"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.121"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.122"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.123"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.124"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.125"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.126"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.127"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.128"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.129"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.130"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.131"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.132"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.13:pre15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.15:pre16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.16:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.16:pre6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.17:pre14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.22:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.22:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.22:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.23:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.23:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.27:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.27:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.27:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.27:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.3:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.11:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.21:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.21:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.21:pre7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.22:pre10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.23:pre9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.29:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.29:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.30:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.30:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.31:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.32:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.32:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.34:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.34.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.34.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.35.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.1:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.2:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.4:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.5:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.6:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.6:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.6:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.7:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.7:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.7:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:final"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.10:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.10:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.10:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.81"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.82"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.83"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.84"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.85"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.86"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.87"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.88"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.89"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.90"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.91"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.92"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.93"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.94"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.95"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.96"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.97"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.98"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.100"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.101"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.1::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc1:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc2:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc3:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc4:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc5:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc6:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc7:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.1::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.2::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.3::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.4::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.5::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.81"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.82"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.83"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.84"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.85"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.86"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.87"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.88"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.89"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.90"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.91"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.92"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.93"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.94"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.95"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.96"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.97"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.98"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.100"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.101"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.102"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.103"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.104"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.105"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.106"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.107"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.108"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.109"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.110"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.111"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.112"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.0::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.1::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.2::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.3::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.4::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.5::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.6::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.7::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.8::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.9::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.10::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.11::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.0::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.1::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.2::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.3::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.4::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.5::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.6::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.7::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.8::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.9::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.81"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.82"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.83"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.84"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.85"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.86"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.87"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.88"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.89"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.90"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.91"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.92"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.93"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.94"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.95"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.96"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.97"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.98"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.100"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.101"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.102"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:-"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17.3::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.81"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.82"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.83"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.84"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.85"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.86"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.87"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.88"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.89"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.90"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.91"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.92"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.93"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.94"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.95"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.96"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.97"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.98"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.100"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.101"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.102"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.103"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.104"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.105"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.106"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.107"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.108"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.109"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.110"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.111"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.112"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.113"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.114"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.115"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.116"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.117"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.118"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.119"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.120"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.121"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.122"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.123"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.124"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.125"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.126"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.127"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.128"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.129"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.130"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.131"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.132"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.133"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.134"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.135"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.136"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.137"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.138"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.139"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.140"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.141"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.142"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.143"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.144"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.145"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.146"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.147"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.148"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.149"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.150"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.151"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.152"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.153"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.154"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.155"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.156"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.157"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.158"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.159"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.160"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.161"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.162"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.163"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.164"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.165"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.166"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.167"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.168"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.169"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.170"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.171"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.172"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.173"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.174"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.175"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.176"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.177"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.178"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.179"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.180"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.181"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.182"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.183"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.184"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.185"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.186"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.187"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.188"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.189"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.190"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.5:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.5:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.5.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.5.0:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.5.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.5.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.5.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.5.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.5.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.5.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.5.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.6.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.6.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.6.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.6.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.6.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.6.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.6.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.7.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.8.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.9:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.9:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.9:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.9:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.9:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.9:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.9:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.9:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.9.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.9.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.9.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.9.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.9.5"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:linux:linux_kernel:-</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:1.2.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:1.3.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.69</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.70</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.71</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.72</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.73</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.74</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.75</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.76</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.77</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.78</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.79</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.80</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.81</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.82</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.83</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.84</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.85</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.86</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.87</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.88</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.89</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.90</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.91</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.92</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.93</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.94</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.95</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.96</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.97</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.98</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.99</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.100</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.101</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.102</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.103</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.104</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.105</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.106</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.107</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.108</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.109</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.110</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.111</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.112</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.113</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.114</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.115</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.116</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.117</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.118</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.119</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.120</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.121</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.122</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.123</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.124</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.125</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.126</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.127</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.128</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.129</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.130</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.131</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.132</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.4:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.13:pre15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.15:pre16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.16:pre5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.16:pre6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.17:pre14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.22:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.22:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.22:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.23:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.23:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.24:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.24:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.24:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.24:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.27:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.27:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.27:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.27:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.3:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.11:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.21:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.21:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.21:pre7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.22:pre10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.23:pre9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27:pre5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.29:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.29:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.30:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.30:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.31:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.32:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.32:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.34:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.34.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.34.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.35.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.69</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.75</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.1:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.1:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.1:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.2:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.2:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.2:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.3:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.3:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.3:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.3:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.4:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.4:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.4:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.5:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.5:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.5:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.6:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.6:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.6:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.7:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.7:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.7:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9:final</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.10:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.10:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.10:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.69</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.70</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.71</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.72</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.73</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.74</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.75</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.76</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.77</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.78</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.79</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.80</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.81</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.82</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.83</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.84</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.85</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.86</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.87</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.88</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.89</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.90</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.91</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.92</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.93</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.94</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.95</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.96</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.97</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.98</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.99</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.100</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.101</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2::~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.1::~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.69</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.70</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.71</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.72</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.73</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.74</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.75</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.76</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.77</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.78</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.79</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.80</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4::~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc1:~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc2:~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc3:~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc4:~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc5:~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc6:~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc7:~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.1::~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.2::~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.3::~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.4::~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.5::~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.69</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.70</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.71</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.72</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.73</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.74</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.75</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.76</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.77</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.78</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.79</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.80</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.81</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.82</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.83</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.84</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.85</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.86</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.87</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.88</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.89</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.90</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.91</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.92</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.93</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.94</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.95</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.96</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.97</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.98</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.99</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.100</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.101</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.102</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.103</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.104</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.105</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.106</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.107</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.108</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.109</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.110</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.111</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.112</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.0::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.1::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.2::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.3::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.4::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.5::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.6::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.7::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.8::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.9::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.10::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.11::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.0::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.1::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.2::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.3::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.4::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.5::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.6::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.7::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.8::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.9::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.69</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.70</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.71</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.72</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.73</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.74</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.75</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.76</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.77</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.78</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.79</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.80</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.81</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.82</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.83</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.84</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.85</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.86</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.87</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.88</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.89</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.90</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.91</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.92</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.93</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.94</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.95</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.96</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.97</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.98</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.99</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.100</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.101</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.102</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:-</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.79</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.16.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.16.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.16.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.16.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.16.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.16.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.17.3::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.17.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.17.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.17.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.17.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.69</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.70</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.71</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.72</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.73</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.74</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.75</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.76</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.77</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.78</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.79</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.80</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.81</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.82</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.83</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.84</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.85</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.86</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.87</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.88</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.89</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.90</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.91</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.92</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.93</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.94</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.95</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.96</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.97</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.98</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.99</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.100</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.101</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.102</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.103</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.104</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.105</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.106</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.107</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.108</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.109</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.110</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.111</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.112</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.113</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.114</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.115</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.116</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.117</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.118</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.119</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.120</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.121</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.122</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.123</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.124</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.125</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.126</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.127</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.128</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.129</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.130</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.131</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.132</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.133</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.134</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.135</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.136</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.137</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.138</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.139</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.140</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.141</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.142</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.143</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.144</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.145</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.146</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.147</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.148</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.149</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.150</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.151</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.152</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.153</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.154</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.155</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.156</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.157</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.158</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.159</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.160</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.161</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.162</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.163</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.164</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.165</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.166</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.167</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.168</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.169</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.170</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.171</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.172</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.173</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.174</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.175</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.176</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.177</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.178</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.179</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.180</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.181</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.182</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.183</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.184</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.185</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.186</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.187</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.188</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.189</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.190</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.5:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.5:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.5.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.5.0:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.5.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.5.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.5.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.5.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.5.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.5.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.5.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.6.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.6.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.6.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.6.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.6.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.6.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.6.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.7.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.8.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.9:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.9:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.9:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.9:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.9:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.9:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.9:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.9:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.9.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.9.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.9.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.9.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.9.5</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10764</vuln:cve-id>
    <vuln:published-datetime>2019-07-27T18:15:11.480-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-08T17:15:10.113-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>7.5</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-119"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=193e87143c290ec16838f5368adc0e0bc94eb931" xml:lang="en">https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=193e87143c290ec16838f5368adc0e0bc94eb931</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://github.com/torvalds/linux/commit/193e87143c290ec16838f5368adc0e0bc94eb931" xml:lang="en">https://github.com/torvalds/linux/commit/193e87143c290ec16838f5368adc0e0bc94eb931</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6" xml:lang="en">https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.f5.com/csp/article/K24444495" xml:lang="en">https://support.f5.com/csp/article/K24444495</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.f5.com/csp/article/K24444495?utm_source=f5support&amp;amp;utm_medium=RSS" xml:lang="en">https://support.f5.com/csp/article/K24444495?utm_source=f5support&amp;amp;utm_medium=RSS</vuln:reference>
    </vuln:references>
    <vuln:summary>In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspi_setup_flash() function. There are CQSPI_MAX_CHIPSELECT elements in the ->f_pdata array so the ">" should be ">=" instead.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10873">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:1.0.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:2.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:2.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:2.1.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:2.1.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:2.1.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:2.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:2.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:2.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.7::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.8::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.9::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.9.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.9.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.9.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.9.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:4.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:4.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:4.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:4.3.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:4.3.2::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:1.0.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:2.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:2.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:2.1.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:2.1.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:2.1.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:2.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:2.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:2.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.7::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.8::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.9::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.9.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.9.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.9.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.9.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:4.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:4.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:4.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:4.3.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:4.3.2::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10873</vuln:cve-id>
    <vuln:published-datetime>2019-08-12T11:15:11.403-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-12T01:15:10.647-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.3</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-79"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/wp-database-backup/#developers" xml:lang="en">https://wordpress.org/plugins/wp-database-backup/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/9739" xml:lang="en">https://wpvulndb.com/vulnerabilities/9739</vuln:reference>
    </vuln:references>
    <vuln:summary>The wp-database-backup plugin before 4.3.3 for WordPress has XSS.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10874">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:1.0.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:2.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:2.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:2.1.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:2.1.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:2.1.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:2.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:2.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:2.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.0::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.5::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.6::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.7::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.8::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.9::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.9.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.9.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.9.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:3.9.4::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:4.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:4.2::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:4.3::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:4.3.1::~~~wordpress~~"/>
        <cpe-lang:fact-ref name="cpe:/a:wpseeds:wp_database_backup:4.3.2::~~~wordpress~~"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:1.0.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:2.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:2.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:2.1.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:2.1.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:2.1.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:2.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:2.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:2.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.0::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.5::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.6::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.7::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.8::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.9::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.9.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.9.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.9.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:3.9.4::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:4.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:4.2::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:4.3::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:4.3.1::~~~wordpress~~</vuln:product>
      <vuln:product>cpe:/a:wpseeds:wp_database_backup:4.3.2::~~~wordpress~~</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10874</vuln:cve-id>
    <vuln:published-datetime>2019-08-12T11:15:11.480-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-12T01:15:11.147-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>6.8</cvss:score>
        <cvss:access-vector>NETWORK</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-352"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wordpress.org/plugins/wp-database-backup/#developers" xml:lang="en">https://wordpress.org/plugins/wp-database-backup/#developers</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://wpvulndb.com/vulnerabilities/9739" xml:lang="en">https://wpvulndb.com/vulnerabilities/9739</vuln:reference>
    </vuln:references>
    <vuln:summary>The wp-database-backup plugin before 4.3.3 for WordPress has CSRF.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10894">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/a:xtrlock_project:xtrlock:2.10"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:debian:debian_linux:-"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/a:xtrlock_project:xtrlock:2.10</vuln:product>
      <vuln:product>cpe:/o:debian:debian_linux:-</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10894</vuln:cve-id>
    <vuln:published-datetime>2019-08-15T23:15:11.047-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-14T20:15:10.570-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>2.1</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>LOW</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>NONE</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>NONE</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-254"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://bugs.debian.org/830726" xml:lang="en">https://bugs.debian.org/830726</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>MLIST</vuln:source>
      <vuln:reference href="https://lists.debian.org/debian-lts-announce/2019/10/msg00019.html" xml:lang="en">[debian-lts-announce] 20191014 [SECURITY] [DLA 1959-1] xtrlock security update</vuln:reference>
    </vuln:references>
    <vuln:summary>xtrlock through 2.10 does not block multitouch events. Consequently, an attacker at a locked screen can send input to (and thus control) various programs such as Chromium via events such as pan scrolling, "pinch and zoom" gestures, or even regular mouse clicks (by depressing the touchpad once and then clicking with a different finger).</vuln:summary>
  </entry>
  <entry id="CVE-2016-10906">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:-"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:1.2.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:1.3.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.81"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.82"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.83"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.84"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.85"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.86"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.87"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.88"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.89"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.90"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.91"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.92"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.93"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.94"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.95"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.96"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.97"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.98"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.100"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.101"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.102"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.103"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.104"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.105"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.106"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.107"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.108"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.109"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.110"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.111"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.112"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.113"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.114"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.115"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.116"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.117"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.118"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.119"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.120"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.121"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.122"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.123"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.124"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.125"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.126"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.127"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.128"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.129"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.130"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.131"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.132"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.13:pre15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.15:pre16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.16:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.16:pre6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.17:pre14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.22:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.22:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.22:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.23:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.23:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.27:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.27:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.27:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.27:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.3:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.11:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.21:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.21:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.21:pre7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.22:pre10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.23:pre9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.29:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.29:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.30:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.30:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.31:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.32:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.32:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.34:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.34.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.34.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.35.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.1:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.2:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.4:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.5:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.6:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.6:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.6:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.7:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.7:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.7:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:final"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.10:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.10:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.10:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.81"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.82"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.83"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.84"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.85"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.86"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.87"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.88"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.89"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.90"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.91"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.92"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.93"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.94"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.95"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.96"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.97"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.98"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.100"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.101"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.1::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc1:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc2:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc3:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc4:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc5:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc6:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc7:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.1::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.2::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.3::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.4::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.5::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.81"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.82"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.83"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.84"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.85"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.86"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.87"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.88"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.89"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.90"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.91"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.92"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.93"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.94"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.95"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.96"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.97"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.98"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.100"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.101"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.102"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.103"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.104"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.105"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.106"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.107"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.108"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.109"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.110"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.111"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.112"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.0::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.1::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.2::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.3::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.4::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.5::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.6::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.7::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.8::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.9::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.10::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.11::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.0::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.1::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.2::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.3::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.4::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.5::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.6::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.7::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.8::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.9::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.81"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.82"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.83"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.84"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.85"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.86"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.87"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.88"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.89"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.90"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.91"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.92"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.93"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.94"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.95"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.96"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.97"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.98"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.100"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.101"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.102"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:-"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17.3::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.2.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.3.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.81"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.82"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.83"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.84"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.85"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.86"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.87"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.88"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.89"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.90"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.91"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.92"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.93"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.94"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.95"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.96"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.97"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.98"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.100"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.101"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.102"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.103"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.104"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.105"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.106"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.107"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.108"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.109"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.110"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.111"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.112"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.113"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.114"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.115"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.116"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.117"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.118"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.119"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.120"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.121"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.122"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.123"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.124"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.125"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.126"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.127"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.128"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.129"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.130"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.131"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.132"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.133"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.134"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.135"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.136"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.137"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.138"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.139"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.140"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.141"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.142"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.143"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.144"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.145"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.146"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.147"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.148"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.149"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.150"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.151"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.152"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.153"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.154"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.155"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.156"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.157"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.158"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.159"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.160"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.161"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.162"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.163"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.164"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.165"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.166"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.167"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.168"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.169"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.170"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.171"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.172"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.173"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.174"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.175"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.176"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.177"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.178"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.179"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.180"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.181"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.182"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.183"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.184"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.185"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.186"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.187"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.188"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.189"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.4.190"/>
      </cpe-lang:logical-test>
    </vuln:vulnerable-configuration>
    <vuln:vulnerable-software-list>
      <vuln:product>cpe:/o:linux:linux_kernel:-</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:1.2.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:1.3.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.0.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.69</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.70</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.71</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.72</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.73</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.74</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.75</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.76</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.77</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.78</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.79</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.80</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.81</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.82</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.83</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.84</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.85</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.86</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.87</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.88</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.89</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.90</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.91</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.92</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.93</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.94</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.95</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.96</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.97</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.98</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.99</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.100</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.101</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.102</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.103</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.104</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.105</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.106</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.107</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.108</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.109</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.110</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.111</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.112</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.113</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.114</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.115</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.116</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.117</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.118</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.119</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.120</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.121</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.122</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.123</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.124</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.125</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.126</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.127</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.128</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.129</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.130</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.131</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.1.132</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.4:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.13:pre15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.15:pre16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.16:pre5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.16:pre6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.17:pre14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.21:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.22:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.22:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.22:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.23:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.23:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.24:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.24:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.24:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.24:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.27:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.27:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.27:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.2.27:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.3.99:pre9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.0:test9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.3:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.11:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.18:pre9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.19:pre6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.21:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.21:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.21:pre7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.22:pre10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.23:pre9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27:pre3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27:pre4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.27:pre5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.29:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.29:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.30:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.30:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.31:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.32:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.32:pre2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33:pre1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.33.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.34:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.34.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.34.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.4.35.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.69</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.5.75</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.0:test9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.1:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.1:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.1:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.2:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.2:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.2:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.3:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.3:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.3:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.3:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.4:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.4:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.4:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.5:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.5:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.5:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.6:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.6:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.6:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.7:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.7:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.7:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.8.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9:final</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.9:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.10:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.10:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.10:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.11.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.12.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.13.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.14.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.15.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.16.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.17.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.18.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.19.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.20.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:git7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.21.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.22.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.23.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.24.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.25.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.26.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.27.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.28.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.29.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.30.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31:rc9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.31.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.32.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.33.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.34.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.35.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.36.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.37.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.38.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:2.6.39.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.69</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.70</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.71</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.72</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.73</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.74</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.75</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.76</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.77</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.78</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.79</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.80</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.81</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.82</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.83</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.84</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.85</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.86</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.87</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.88</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.89</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.90</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.91</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.92</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.93</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.94</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.95</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.96</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.97</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.98</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.99</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.100</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.0.101</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.1.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2::~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.1::~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.69</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.70</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.71</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.72</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.73</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.74</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.75</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.76</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.77</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.78</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.79</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.2.80</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.3.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4::~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc1:~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc2:~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc3:~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc4:~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc5:~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc6:~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4:rc7:~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.1::~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.2::~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.3::~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.4::~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.5::~~~~x86~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.69</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.70</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.71</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.72</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.73</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.74</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.75</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.76</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.77</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.78</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.79</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.80</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.81</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.82</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.83</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.84</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.85</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.86</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.87</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.88</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.89</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.90</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.91</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.92</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.93</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.94</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.95</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.96</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.97</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.98</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.99</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.100</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.101</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.102</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.103</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.104</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.105</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.106</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.107</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.108</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.109</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.110</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.111</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.4.112</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.5.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.6.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.7.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.8.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.0::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.1::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.2::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.3::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.4::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.5::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.6::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.7::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.8::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.9::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.10::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.9.11::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.0::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.1::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.2::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.3::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.4::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.5::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.6::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.7::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.8::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.9::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.69</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.70</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.71</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.72</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.73</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.74</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.75</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.76</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.77</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.78</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.79</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.80</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.81</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.82</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.83</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.84</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.85</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.86</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.87</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.88</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.89</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.90</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.91</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.92</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.93</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.94</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.95</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.96</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.97</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.98</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.99</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.100</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.101</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.10.102</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.11.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.12.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.13.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:-</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.14.79</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.15.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.16.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.16.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.16.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.16.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.16.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.16.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.17.3::~~~~arm64~</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.17.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.17.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.17.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.17.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.18.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:3.19.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.0.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.1.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.2.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3:rc1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3:rc2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3:rc3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3:rc4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3:rc5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3:rc6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3:rc7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.3.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4:rc8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.0</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.1</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.2</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.3</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.4</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.5</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.6</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.7</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.8</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.9</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.10</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.11</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.12</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.13</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.14</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.15</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.16</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.17</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.18</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.19</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.20</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.21</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.22</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.23</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.24</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.25</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.26</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.27</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.28</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.29</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.30</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.31</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.32</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.33</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.34</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.35</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.36</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.37</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.38</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.39</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.40</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.41</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.42</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.43</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.44</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.45</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.46</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.47</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.48</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.49</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.50</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.51</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.52</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.53</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.54</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.55</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.56</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.57</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.58</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.59</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.60</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.61</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.62</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.63</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.64</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.65</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.66</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.67</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.68</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.69</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.70</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.71</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.72</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.73</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.74</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.75</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.76</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.77</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.78</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.79</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.80</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.81</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.82</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.83</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.84</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.85</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.86</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.87</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.88</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.89</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.90</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.91</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.92</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.93</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.94</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.95</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.96</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.97</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.98</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.99</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.100</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.101</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.102</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.103</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.104</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.105</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.106</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.107</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.108</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.109</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.110</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.111</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.112</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.113</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.114</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.115</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.116</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.117</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.118</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.119</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.120</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.121</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.122</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.123</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.124</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.125</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.126</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.127</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.128</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.129</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.130</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.131</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.132</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.133</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.134</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.135</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.136</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.137</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.138</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.139</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.140</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.141</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.142</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.143</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.144</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.145</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.146</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.147</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.148</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.149</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.150</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.151</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.152</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.153</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.154</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.155</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.156</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.157</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.158</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.159</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.160</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.161</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.162</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.163</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.164</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.165</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.166</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.167</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.168</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.169</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.170</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.171</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.172</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.173</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.174</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.175</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.176</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.177</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.178</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.179</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.180</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.181</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.182</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.183</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.184</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.185</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.186</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.187</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.188</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.189</vuln:product>
      <vuln:product>cpe:/o:linux:linux_kernel:4.4.190</vuln:product>
    </vuln:vulnerable-software-list>
    <vuln:cve-id>CVE-2016-10906</vuln:cve-id>
    <vuln:published-datetime>2019-08-18T22:15:09.780-04:00</vuln:published-datetime>
    <vuln:last-modified-datetime>2019-10-15T17:15:09.657-04:00</vuln:last-modified-datetime>
    <vuln:cvss>
      <cvss:base_metrics>
        <cvss:score>4.4</cvss:score>
        <cvss:access-vector>LOCAL</cvss:access-vector>
        <cvss:access-complexity>MEDIUM</cvss:access-complexity>
        <cvss:authentication>NONE</cvss:authentication>
        <cvss:confidentiality-impact>PARTIAL</cvss:confidentiality-impact>
        <cvss:integrity-impact>PARTIAL</cvss:integrity-impact>
        <cvss:availability-impact>PARTIAL</cvss:availability-impact>
        <cvss:source>http://nvd.nist.gov</cvss:source>
      </cvss:base_metrics>
    </vuln:cvss>
    <vuln:cwe id="CWE-362"/>
    <vuln:cwe id="CWE-416"/>
    <vuln:references xml:lang="en" reference_type="VENDOR_ADVISORY">
      <vuln:source>MISC</vuln:source>
      <vuln:reference href="https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c278c253f3d992c6994d08aa0efb2b6806ca396f" xml:lang="en">https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c278c253f3d992c6994d08aa0efb2b6806ca396f</vuln:reference>
    </vuln:references>
    <vuln:references xml:lang="en" reference_type="UNKNOWN">
      <vuln:source>CONFIRM</vuln:source>
      <vuln:reference href="https://support.f5.com/csp/article/K01993501?utm_source=f5support&amp;amp;utm_medium=RSS" xml:lang="en">https://support.f5.com/csp/article/K01993501?utm_source=f5support&amp;amp;utm_medium=RSS</vuln:reference>
    </vuln:references>
    <vuln:summary>An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is caused by a race condition between the functions arc_emac_tx and arc_emac_tx_clean.</vuln:summary>
  </entry>
  <entry id="CVE-2016-10907">
    <vuln:vulnerable-configuration id="http://nvd.nist.gov/">
      <cpe-lang:logical-test operator="OR" negate="false">
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:-"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:1.2.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:1.3.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.0.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.81"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.82"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.83"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.84"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.85"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.86"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.87"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.88"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.89"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.90"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.91"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.92"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.93"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.94"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.95"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.96"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.97"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.98"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.100"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.101"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.102"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.103"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.104"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.105"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.106"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.107"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.108"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.109"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.110"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.111"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.112"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.113"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.114"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.115"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.116"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.117"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.118"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.119"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.120"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.121"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.122"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.123"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.124"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.125"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.126"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.127"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.128"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.129"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.130"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.131"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.1.132"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.13:pre15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.15:pre16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.16:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.16:pre6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.17:pre14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.21:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.22:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.22:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.22:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.23:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.23:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.24:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.27:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.27:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.27:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.2.27:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.3.99:pre9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.0:test9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.3:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.11:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.18:pre9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.19:pre6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.21:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.21:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.21:pre7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.22:pre10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.23:pre9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.27:pre5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.29:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.29:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.30:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.30:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.31:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.32:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.32:pre2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33:pre1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.33.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.34:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.34.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.34.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.4.35.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.5.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.0:test9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.1:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.2:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.2:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.3:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.4:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.5:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.5:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.5:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.6:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.6:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.6:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.7:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.7:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.7:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.8.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:final"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.9:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.10:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.10:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.10:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.11.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.12.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.13.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.14.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.15.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.16.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.17.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.18.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.19.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.20.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:git7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.21.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.22.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.23.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.24.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.25.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.26.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.27.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.28.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.29.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.30.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31:rc9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.31.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.32.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.33.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.34.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.35.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.36.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.37.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.38.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:2.6.39.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.81"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.82"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.83"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.84"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.85"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.86"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.87"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.88"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.89"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.90"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.91"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.92"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.93"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.94"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.95"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.96"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.97"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.98"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.100"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.0.101"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.1.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.1::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.2.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.3.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc1:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc2:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc3:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc4:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc5:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc6:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4:rc7:~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.1::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.2::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.3::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.4::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.5::~~~~x86~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.81"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.82"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.83"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.84"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.85"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.86"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.87"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.88"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.89"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.90"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.91"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.92"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.93"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.94"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.95"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.96"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.97"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.98"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.100"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.101"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.102"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.103"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.104"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.105"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.106"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.107"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.108"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.109"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.110"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.111"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.4.112"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.5.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.6.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.7.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.8.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.0::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.1::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.2::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.3::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.4::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.5::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.6::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.7::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.8::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.9::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.10::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.9.11::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.0::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.1::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.2::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.3::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.4::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.5::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.6::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.7::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.8::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.9::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.69"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.70"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.71"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.72"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.73"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.74"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.75"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.76"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.77"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.78"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.80"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.81"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.82"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.83"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.84"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.85"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.86"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.87"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.88"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.89"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.90"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.91"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.92"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.93"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.94"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.95"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.96"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.97"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.98"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.99"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.100"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.101"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.10.102"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.11.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.12.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.13.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:-"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.67"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.68"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.14.79"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.15.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.16.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17.3::~~~~arm64~"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.17.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.52"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.53"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.54"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.55"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.56"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.57"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.58"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.59"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.60"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.61"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.62"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.63"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.64"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.65"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.18.66"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:3.19.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.0.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1:rc8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.0"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.1"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.2"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.3"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.4"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.5"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.6"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.7"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.8"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.9"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.10"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.11"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.12"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.13"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.14"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.15"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.16"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.17"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.18"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.19"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.20"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.21"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.22"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.23"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.24"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.25"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.26"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.27"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.28"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.29"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.30"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.31"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.32"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.33"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.34"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.35"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.36"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.37"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.38"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.39"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.40"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.41"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.42"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.43"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.44"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.45"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.46"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.47"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.48"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.49"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.50"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.51"/>
        <cpe-lang:fact-ref name="cpe:/o:linux:linux_kernel:4.1.52"/>
        <cpe-lang:fact-ref na