Updated descriptions to include vendor/product information

2016/6xxx/CVE-2016-6543.json

@@ -42,7 +42,7 @@
       "description_data": [
          {
             "lang": "eng",
-            "value": "A captured MAC/device ID can be registered under multiple user accounts allowing access to getgps GPS data, which can allow unauthenticated parties to track the device."
+            "value": "A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data, which can allow unauthenticated parties to track the device."
          }
       ]
    },

2016/6xxx/CVE-2016-6547.json

@@ -42,7 +42,7 @@
       "description_data": [
          {
             "lang": "eng",
-            "value": "The Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file."
+            "value": "The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file."
          }
       ]
    },

2016/6xxx/CVE-2016-6548.json

@@ -42,7 +42,7 @@
       "description_data": [
          {
             "lang": "eng",
-            "value": "The Nut mobile app makes requests via HTTP instead of HTTPS. These requests contain the user's authenticated session token with the URL. An attacker can capture these requests and reuse the session token to gain full access the user's account."
+            "value": "The Zizai Tech Nut mobile app makes requests via HTTP instead of HTTPS. These requests contain the user's authenticated session token with the URL. An attacker can capture these requests and reuse the session token to gain full access the user's account."
          }
       ]
    },

2016/6xxx/CVE-2016-6549.json

@@ -42,7 +42,7 @@
       "description_data": [
          {
             "lang": "eng",
-            "value": "The Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute."
+            "value": "The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute."
          }
       ]
    },

2016/6xxx/CVE-2016-6557.json

@@ -37,7 +37,7 @@
       "description_data": [
          {
             "lang": "eng",
-            "value": "The RP-AC52 web interface does not sufficiently verify whether a valid request was intentionally provided by the user. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request."
+            "value": "The ASUS RP-AC52 web interface does not sufficiently verify whether a valid request was intentionally provided by the user. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request."
          }
       ]
    },

2016/6xxx/CVE-2016-6558.json

@@ -37,7 +37,7 @@
       "description_data": [
          {
             "lang": "eng",
-            "value": "A command injection vulnerability exists in apply.cgi on the RP-AC52 web interface specifically in the action_script parameter. The action_script parameter specifies a script to be executed if the action_mode parameter does not contain a valid state. If the input provided by action_script does not match one of the hard coded options, then it will be executed as the argument of either a system() or an eval() call allowing arbitrary commands to be executed."
+            "value": "A command injection vulnerability exists in apply.cgi on the The ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, web interface specifically in the action_script parameter. The action_script parameter specifies a script to be executed if the action_mode parameter does not contain a valid state. If the input provided by action_script does not match one of the hard coded options, then it will be executed as the argument of either a system() or an eval() call allowing arbitrary commands to be executed."
          }
       ]
    },

2016/6xxx/CVE-2016-6559.json

@@ -37,7 +37,7 @@
       "description_data": [
          {
             "lang": "eng",
-            "value": "Improper bounds checking of the obuf variable in the link_ntoa() function in linkaddr.c may allow an attacker to read or write from memory.\nThe full impact and severity depends on the method of exploit and how the library is used by applications. According to analysis by FreeBSD developers, it is very unlikely that applications exist that utilize link_ntoa() in an exploitable manner, and the CERT/CC is not aware of any proof of concept. A blog post describes the functionality of link_ntoa() and points out that none of the base utilities use this function in an exploitable manner. For more information, please see FreeBSD Security Advisory SA-16:37."
+            "value": "Improper bounds checking of the obuf variable in the link_ntoa() function in linkaddr.c of the BSD libc library may allow an attacker to read or write from memory.\nThe full impact and severity depends on the method of exploit and how the library is used by applications. According to analysis by FreeBSD developers, it is very unlikely that applications exist that utilize link_ntoa() in an exploitable manner, and the CERT/CC is not aware of any proof of concept. A blog post describes the functionality of link_ntoa() and points out that none of the base utilities use this function in an exploitable manner. For more information, please see FreeBSD Security Advisory SA-16:37."
          }
       ]
    },

2016/6xxx/CVE-2016-6563.json

@@ -124,7 +124,7 @@
       "description_data": [
          {
             "lang": "eng",
-            "value": "Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L."
+            "value": "Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L."
          }
       ]
    },

2016/6xxx/CVE-2016-6566.json

@@ -37,7 +37,7 @@
       "description_data": [
          {
             "lang": "eng",
-            "value": "The valueAsString parameter inside the JSON payload contained by the ucLogin_txtLoginId_ClientStat POST parameter is not properly validated. An unauthenticated remote attacker may be able to modify the POST request and insert a SQL query which may then be executed by the backend server. eTRAKiT 3.2.1.17 was tested, but other versions may also be vulnerable."
+            "value": "The valueAsString parameter inside the JSON payload contained by the ucLogin_txtLoginId_ClientStat POST parameter of the Sungard eTRAKiT3 software version 3.2.1.17 is not properly validated. An unauthenticated remote attacker may be able to modify the POST request and insert a SQL query which may then be executed by the backend server. eTRAKiT 3.2.1.17 was tested, but other versions may also be vulnerable."
          }
       ]
    },

2016/9xxx/CVE-2016-9482.json

@@ -43,7 +43,7 @@
       "description_data": [
          {
             "lang": "eng",
-            "value": "A remote unauthenticated user may bypass authentication to access the administrator panel by navigating directly to /admin.php?mod=admin&func=panel"
+            "value": "Code generated by PHP FormMail Generator may allow a remote unauthenticated user to bypass authentication in the to access the administrator panel by navigating directly to /admin.php?mod=admin&func=panel"
          }
       ]
    },

2016/9xxx/CVE-2016-9483.json

@@ -43,7 +43,7 @@
       "description_data": [
          {
             "lang": "eng",
-            "value": "The generated PHP form code deserializes untrusted input as part of the phpfmg_filman_download() function. A remote unauthenticated attacker may be able to use this vulnerability to inject PHP code, or along with CVE-2016-9484 to perform local file inclusion attacks and obtain files from the server."
+            "value": "The PHP form code generated by PHP FormMail Generator deserializes untrusted input as part of the phpfmg_filman_download() function. A remote unauthenticated attacker may be able to use this vulnerability to inject PHP code, or along with CVE-2016-9484 to perform local file inclusion attacks and obtain files from the server."
          }
       ]
    },