Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2016-1859
The WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-352'}, {'name': 'APPLE-SA-2016-05-16-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00005.html'}, {'name': '1035888', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035888'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/137229/WebKitGTK-Code-Execution-Denial-Of-Service-Memory-Corruption.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206565'}, {'name': '20160530 WebKitGTK+ Security Advisory WSA-2016-0004', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/538522/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1860
Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app, a different vulnerability than CVE-2016-1862.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1861
The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1846.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '39930', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39930/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.chromium.org/p/project-zero/issues/detail?id=724'}]
CVE State: PUBLISHED
Explain CVE-2016-1862
Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app, a different vulnerability than CVE-2016-1860.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1863
The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4582 and CVE-2016-4653.
Affected Products: n/a
References: [{'name': '1036344', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036344'}, {'name': '40652', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/40652/'}, {'name': 'APPLE-SA-2016-07-18-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html'}, {'name': 'APPLE-SA-2016-07-18-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html'}, {'name': 'APPLE-SA-2016-07-18-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html'}, {'name': '91828', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/91828'}, {'name': 'APPLE-SA-2016-07-18-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206905'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206903'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206902'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206904'}]
CVE State: PUBLISHED
Explain CVE-2016-1864
The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which allows remote attackers to obtain sensitive information via a crafted URL.
Affected Products: n/a
References: [{'name': '1036344', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036344'}, {'name': 'APPLE-SA-2016-03-21-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206171'}, {'name': '91358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/91358'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1865
The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors.
Affected Products: n/a
References: [{'name': '1036344', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036344'}, {'name': 'APPLE-SA-2016-07-18-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html'}, {'name': 'APPLE-SA-2016-07-18-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html'}, {'name': 'APPLE-SA-2016-07-18-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html'}, {'name': '91828', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/91828'}, {'name': 'APPLE-SA-2016-07-18-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206905'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206903'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206902'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206904'}]
CVE State: PUBLISHED
Explain CVE-2016-1866
Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://docs.saltstack.com/en/latest/topics/releases/2015.8.4.html'}, {'name': 'openSUSE-SU-2016:0694', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-03/msg00034.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1867
The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image.
Affected Products: n/a
References: [{'name': '81488', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81488'}, {'name': 'DSA-3785', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2017/dsa-3785'}, {'name': "[oss-security] 20160113 Out-of-bounds Read in the JasPer's jpc_pi_nextcprl() function", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/13/2'}, {'name': 'RHSA-2017:1208', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:1208'}, {'name': "[oss-security] 20160113 Re: Out-of-bounds Read in the JasPer's jpc_pi_nextcprl() function", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/13/6'}]
CVE State: PUBLISHED
Explain CVE-2016-1876
The backend service process in Lenovo Solution Center (aka LSC) before 3.3.0002 allows local users to gain SYSTEM privileges via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.lenovo.com/us/en/product_security/len_4326'}]
CVE State: PUBLISHED
Explain CVE-2016-1879
The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote attackers to cause a denial of service (assertion failure or NULL pointer dereference and kernel panic) via a crafted ICMPv6 packet.
Affected Products: n/a
References: [{'name': '39305', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39305/'}, {'name': 'FreeBSD-SA-16:01', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-16:01.sctp.asc'}, {'name': '1034673', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034673'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/135369/FreeBSD-SCTP-ICMPv6-Denial-Of-Service.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1880
The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to read portions of kernel memory and potentially gain privilege via unspecified vectors, related to "handling of Linux futex robust lists."
Affected Products: n/a
References: [{'name': '1034675', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034675'}, {'name': 'FreeBSD-SA-16:03', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-16:03.linux.asc'}]
CVE State: PUBLISHED
Explain CVE-2016-1881
The kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to cause a denial of service (crash) or potentially gain privilege via a crafted Linux compatibility layer setgroups system call.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html'}, {'name': '1034676', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034676'}, {'name': 'FreeBSD-SA-16:04', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-16:04.linux.asc'}]
CVE State: PUBLISHED
Explain CVE-2016-1882
FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow remote attackers to cause a denial of service (kernel crash) via vectors related to creating a TCP connection with the TCP_MD5SIG and TCP_NOOPT socket options.
Affected Products: n/a
References: [{'name': '1034677', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034677'}, {'name': 'FreeBSD-SA-16:05', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://security.FreeBSD.org/advisories/FreeBSD-SA-16:05.tcp.asc'}]
CVE State: PUBLISHED
Explain CVE-2016-1883
The issetugid system call in the Linux compatibility layer in FreeBSD 9.3, 10.1, and 10.2 allows local users to gain privilege via unspecified vectors.
Affected Products: n/a
References: [{'name': '1034872', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034872'}, {'name': 'FreeBSD-SA-16:10', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-16:10.linux.asc'}]
CVE State: PUBLISHED
Explain CVE-2016-1885
Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1 before p31, and 10.2 before p14 allows local users to cause a denial of service (kernel panic) via an i386_set_ldt system call, which triggers a heap-based buffer overflow.
Affected Products: n/a
References: [{'name': '39570', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39570/'}, {'name': 'FreeBSD-SA-16:15', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://security.FreeBSD.org/advisories/FreeBSD-SA-16:15.sysarch.asc'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/advisories/freebsd-kernel-amd64setldt-heap-overflow'}, {'name': '20160316 [CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Mar/56'}, {'name': '20160317 Re: [CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Mar/67'}, {'name': '1035309', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035309'}, {'name': '20160316 Re: [FD] [CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537813/100/0/threaded'}, {'name': '20160316 [CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537812/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/136276/FreeBSD-Kernel-amd64_set_ldt-Heap-Overflow.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1886
Integer signedness error in the genkbd_commonioctl function in sys/dev/kbd/kbd.c in FreeBSD 9.3 before p42, 10.1 before p34, 10.2 before p17, and 10.3 before p3 allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory overwrite and kernel crash), or gain privileges via a negative value in the flen structure member in the arg argument in a SETFKEY ioctl call, which triggers a "two way heap and stack overflow."
Affected Products: n/a
References: [{'name': '1035905', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035905'}, {'name': '90734', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90734'}, {'name': 'FreeBSD-SA-16:18', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-16:18.atkbd.asc'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.FreeBSD.org/patches/SA-16:18/atkbd.patch'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cturt.github.io/SETFKEY.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1887
Integer signedness error in the sockargs function in sys/kern/uipc_syscalls.c in FreeBSD 10.1 before p34, 10.2 before p17, and 10.3 before p3 allows local users to cause a denial of service (memory overwrite and kernel panic) or gain privileges via a negative buflen argument, which triggers a heap-based buffer overflow.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://cturt.github.io/sendmsg.html'}, {'name': 'FreeBSD-SA-16:19', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://security.FreeBSD.org/advisories/FreeBSD-SA-16:19.sendmsg.asc'}, {'name': '1035906', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035906'}]
CVE State: PUBLISHED
Explain CVE-2016-1888
The telnetd service in FreeBSD 9.3, 10.1, 10.2, 10.3, and 11.0 allows remote attackers to inject arguments to login and bypass authentication via vectors involving a "sequence of memory allocation failures."
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-16:36', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-16:36.telnetd.asc'}, {'name': '1037399', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037399'}]
CVE State: PUBLISHED
Explain CVE-2016-1889
Integer overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, and 11.0 when configured with a large amount of guest memory, allows local users to gain privilege via a crafted device descriptor.
Affected Products: n/a
References: [{'name': '1037400', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037400'}, {'name': 'FreeBSD-SA-16:38', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-16:38.bhyve.asc'}]
CVE State: PUBLISHED
Explain CVE-2016-1894
NetApp OnCommand Workflow Automation before 3.1P2 allows remote attackers to bypass authentication via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20160310-0001/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.netapp.com/support/s/article/cve-2016-1894-authentication-bypass-vulnerability-in-oncommand-workflow-automation'}]
CVE State: PUBLISHED
Explain CVE-2016-1895
NetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to cause a denial of service via vectors related to unsafe user input string handling.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.netapp.com/support/s/article/NTAP-20170831-0003'}]
CVE State: PUBLISHED
Explain CVE-2016-1896
Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.lexmark.com/index?page=content&id=TE745'}]
CVE State: PUBLISHED
Explain CVE-2016-1897
FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://security.stackexchange.com/questions/110644'}, {'name': 'openSUSE-SU-2016:0243', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00034.html'}, {'name': '1034932', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034932'}, {'name': 'GLSA-201705-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201705-08'}, {'name': '80501', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/80501'}, {'name': 'USN-2944-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2944-1'}, {'name': '[oss-security] 20160114 Re: Fwd: FFmpeg: stealing local files with HLS+concat', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/14/1'}, {'name': 'SSA:2016-034-02', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.529036'}, {'name': 'DSA-3506', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3506'}, {'tags': ['x_refsource_MISC'], 'url': 'http://habrahabr.ru/company/mailru/blog/274855'}, {'name': 'GLSA-201606-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201606-09'}, {'name': 'VU#772447', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'https://www.kb.cert.org/vuls/id/772447'}]
CVE State: PUBLISHED
Explain CVE-2016-1898
FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains an arbitrary line of a local file.
Affected Products: n/a
References: [{'name': 'openSUSE-SU-2016:0243', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00034.html'}, {'name': '1034932', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034932'}, {'name': 'GLSA-201705-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201705-08'}, {'name': '80501', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/80501'}, {'name': 'USN-2944-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2944-1'}, {'name': '[oss-security] 20160114 Re: Fwd: FFmpeg: stealing local files with HLS+concat', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/14/1'}, {'name': 'SSA:2016-034-02', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.529036'}, {'name': 'DSA-3506', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3506'}, {'tags': ['x_refsource_MISC'], 'url': 'http://habrahabr.ru/company/mailru/blog/274855'}, {'name': 'GLSA-201606-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201606-09'}, {'name': 'VU#772447', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'https://www.kb.cert.org/vuls/id/772447'}]
CVE State: PUBLISHED
Explain CVE-2016-1899
CRLF injection vulnerability in the ui-blob handler in CGit before 0.12 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks via CRLF sequences in the mimetype parameter, as demonstrated by a request to blob/cgit.c.
Affected Products: n/a
References: [{'name': '[oss-security] 20160114 CVE Request: CGit - Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/14/3'}, {'name': 'openSUSE-SU-2016:0218', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-01/msg00084.html'}, {'name': '[CGit] 20160114 [ANNOUNCE] CGIT v0.12 Released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.zx2c4.com/pipermail/cgit/2016-January/002817.html'}, {'name': '[CGit] 20160113 XSS in cgit', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.zx2c4.com/pipermail/cgit/2016-January/002790.html'}, {'name': 'FEDORA-2016-e5a5fb196f', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176198.html'}, {'name': 'openSUSE-SU-2016:0196', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-01/msg00067.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.zx2c4.com/cgit/commit/?id=1c581a072651524f3b0d91f33e22a42c4166dd96'}, {'name': '[oss-security] 20160114 Re: CVE Request: CGit - Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/14/6'}, {'name': 'DSA-3545', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3545'}, {'name': 'FEDORA-2016-215b507409', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176167.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1900
CRLF injection vulnerability in the cgit_print_http_headers function in ui-shared.c in CGit before 0.12 allows remote attackers with permission to write to a repository to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks via newline characters in a filename.
Affected Products: n/a
References: [{'name': '[oss-security] 20160114 CVE Request: CGit - Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/14/3'}, {'name': 'openSUSE-SU-2016:0218', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-01/msg00084.html'}, {'name': '[CGit] 20160114 [ANNOUNCE] CGIT v0.12 Released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.zx2c4.com/pipermail/cgit/2016-January/002817.html'}, {'name': '[CGit] 20160113 XSS in cgit', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.zx2c4.com/pipermail/cgit/2016-January/002790.html'}, {'name': 'FEDORA-2016-e5a5fb196f', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176198.html'}, {'name': 'openSUSE-SU-2016:0196', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-01/msg00067.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.zx2c4.com/cgit/commit/?id=513b3863d999f91b47d7e9f26710390db55f9463'}, {'name': '[oss-security] 20160114 Re: CVE Request: CGit - Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/14/6'}, {'name': 'DSA-3545', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3545'}, {'name': 'FEDORA-2016-215b507409', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176167.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1901
Integer overflow in the authenticate_post function in CGit before 0.12 allows remote attackers to have unspecified impact via a large value in the Content-Length HTTP header, which triggers a buffer overflow.
Affected Products: n/a
References: [{'name': '[oss-security] 20160114 CVE Request: CGit - Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/14/3'}, {'name': 'openSUSE-SU-2016:0218', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-01/msg00084.html'}, {'name': '[CGit] 20160114 [ANNOUNCE] CGIT v0.12 Released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.zx2c4.com/pipermail/cgit/2016-January/002817.html'}, {'name': 'FEDORA-2016-e5a5fb196f', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176198.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.zx2c4.com/cgit/commit/?id=4458abf64172a62b92810c2293450106e6dfc763'}, {'name': 'openSUSE-SU-2016:0196', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-01/msg00067.html'}, {'name': '[oss-security] 20160114 Re: CVE Request: CGit - Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/14/6'}, {'name': 'DSA-3545', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3545'}, {'name': 'FEDORA-2016-215b507409', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176167.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1902
The nextBytes function in the SecureRandom class in Symfony before 2.3.37, 2.6.x before 2.6.13, and 2.7.x before 2.7.9 does not properly generate random numbers when used with PHP 5.x without the paragonie/random_compat library and the openssl_random_pseudo_bytes function fails, which makes it easier for attackers to defeat cryptographic protection mechanisms via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://symfony.com/blog/cve-2016-1902-securerandom-s-fallback-not-secure-when-openssl-fails'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/symfony/symfony/pull/17359'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.landaire.net/blog/cve-2016-1902-symfony-securerandom/'}, {'name': 'DSA-3588', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3588'}]
CVE State: PUBLISHED
Explain CVE-2016-1903
The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a large bgd_color argument to the imagerotate function.
Affected Products: n/a
References: [{'name': 'USN-2952-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2952-1'}, {'name': '79916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/79916'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/ChangeLog-7.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.php.net/bug.php?id=70976'}, {'name': 'openSUSE-SU-2016:0251', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-01/msg00099.html'}, {'name': 'RHSA-2016:2750', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2750.html'}, {'name': 'USN-2952-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2952-2'}, {'name': 'SSA:2016-034-04', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.461720'}, {'name': '[oss-security] 20160115 [CVE Request] Multiple PHP issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/14/8'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/ChangeLog-5.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731'}, {'name': 'openSUSE-SU-2016:0366', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-02/msg00037.html'}, {'name': '1034608', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034608'}]
CVE State: PUBLISHED
Explain CVE-2016-1904
Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a long string to the (1) php_escape_shell_cmd or (2) php_escape_shell_arg function, leading to a heap-based buffer overflow.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/ChangeLog-7.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/php/php-src/commit/2871c70efaaaa0f102557a17c727fd4d5204dd4b'}, {'name': '[oss-security] 20160115 [CVE Request] Multiple PHP issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/14/8'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.php.net/bug.php?id=71270'}, {'name': '1034608', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034608'}]
CVE State: PUBLISHED
Explain CVE-2016-1905
The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/kubernetes/kubernetes/issues/19479'}, {'name': 'RHSA-2016:0070', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:0070'}]
CVE State: PUBLISHED
Explain CVE-2016-1906
Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/openshift/origin/issues/6556'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/openshift/origin/pull/6576'}, {'name': 'RHSA-2016:0070', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:0070'}, {'name': 'RHSA-2016:0351', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:0351'}]
CVE State: PUBLISHED
Explain CVE-2016-1907
The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic.
Affected Products: n/a
References: [{'name': '81293', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/81293'}, {'name': 'FEDORA-2016-4556904561', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680'}, {'name': 'FEDORA-2016-c330264861', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html'}, {'url': 'http://www.openssh.com/txt/release-7.1p2'}, {'name': 'FEDORA-2016-2e89eba0c1', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa109'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388'}, {'url': 'https://anongit.mindrot.org/openssh.git/commit/?id=2fecfd486bdba9f51b3a789277bb0733ca36e1c0'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED
Explain CVE-2016-1908
The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.
Affected Products: n/a
References: [{'url': 'http://www.openssh.com/txt/release-7.2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html'}, {'url': 'https://anongit.mindrot.org/openssh.git/commit/?id=ed4ce82dbfa8a3a3c8ea6fa0db113c71e234416c'}, {'name': '[oss-security] 20160115 Re: Qualys Security Advisory - Roaming through the OpenSSH client: CVE-2016-0777 and CVE-2016-0778', 'tags': ['mailing-list'], 'url': 'http://openwall.com/lists/oss-security/2016/01/15/13'}, {'name': '1034705', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1034705'}, {'name': 'RHSA-2016:0741', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0741.html'}, {'name': 'GLSA-201612-18', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201612-18'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1298741'}, {'name': '[debian-lts-announce] 20180910 [SECURITY] [DLA 1500-1] openssh security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html'}, {'name': '84427', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/84427'}, {'name': 'RHSA-2016:0465', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0465.html'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED
Explain CVE-2016-1909
Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0.8; and FortiOS 4.1.x before 4.1.11, 4.2.x before 4.2.16, 4.3.x before 4.3.17 and 5.0.x before 5.0.8 have a hardcoded passphrase for the Fortimanager_Access account, which allows remote attackers to obtain administrative access via an SSH session.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.fortinet.com/post/brief-statement-regarding-issues-found-with-fortios'}, {'name': '20160111 SSH Backdoor for FortiGate OS Version 4.x up to 5.0.7', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Jan/26'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/135225/FortiGate-OS-5.0.7-SSH-Backdoor.html'}, {'name': '1034663', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034663'}, {'tags': ['x_refsource_MISC'], 'url': 'https://twitter.com/esizkur/status/686842135501508608'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.fortiguard.com/advisory/multiple-products-ssh-undocumented-login-vulnerability'}, {'name': '39224', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39224/'}]
CVE State: PUBLISHED
Explain CVE-2016-1910
The User Management Engine (UME) in SAP NetWeaver 7.4 allows attackers to decrypt unspecified data via unknown vectors, aka SAP Security Note 2191290.
Affected Products: n/a
References: [{'name': '20160416 [ERPSCAN-16-003] SAP NetWeaver 7.4 - cryptographic issues', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Apr/60'}, {'name': '80920', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/80920'}, {'tags': ['x_refsource_MISC'], 'url': 'https://erpscan.io/advisories/erpscan-16-003-sap-netweaver-7-4-cryptographic-issues/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://erpscan.io/press-center/blog/sap-security-notes-january-2016-review/'}, {'name': '43495', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43495/'}]
CVE State: PUBLISHED
Explain CVE-2016-1911
Multiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver 7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) Runtime Workbench (RWB) or (2) Pmitest servlet in the Process Monitoring Infrastructure (PMI), aka SAP Security Notes 2206793 and 2234918.
Affected Products: n/a
References: [{'name': '20160420 [ERPSCAN-16-004] SAP NetWeaver 7.4 (Pmitest servlet) - XSS vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Apr/64'}, {'name': '20160415 [ERPSCAN-16-001] SAP NetWeaver 7.4 - XSS vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Apr/58'}, {'tags': ['x_refsource_MISC'], 'url': 'https://erpscan.io/advisories/erpscan-16-004-sap-netweaver-7-4-pmitest-servlet-xss/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://erpscan.io/advisories/erpscan-16-001-xss-sap-netweaver-7-4-mdt-servlet/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://erpscan.io/press-center/blog/sap-security-notes-january-2016-review/'}]
CVE State: PUBLISHED
Explain CVE-2016-1912
Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.8.3 allow remote authenticated users to inject arbitrary web script or HTML via the (1) lastname, (2) firstname, (3) email, (4) job, or (5) signature parameter to htdocs/user/card.php.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://twitter.com/MickaelDorigny/status/684456187870457857'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.information-security.fr/xss-dolibarr-version-3-8-3/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/135201/Dolibarr-3.8.3-Cross-Site-Scripting.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/GPCsolutions/dolibarr/commit/0d3181324c816bdf664ca5e1548dfe8eb05c54f8'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/Dolibarr/dolibarr/issues/4341'}]
CVE State: PUBLISHED
Explain CVE-2016-1913
Multiple cross-site scripting (XSS) vulnerabilities in the Redhen module 7.x-1.x before 7.x-1.11 for Drupal allow remote authenticated users with certain access to inject arbitrary web script or HTML via unspecified vectors, related to (1) individual contacts, (2) notes, or (3) engagement scores.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.drupal.org/node/2649780'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.drupal.org/node/2649800'}]
CVE State: PUBLISHED
Explain CVE-2016-1914
Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to execute arbitrary SQL commands via the imageName parameter to (1) mydevice/client/image, (2) admin/client/image, (3) myapps/client/image, (4) ssam/client/image, or (5) all/client/image.
Affected Products: n/a
References: [{'name': '1035095', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035095'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security-assessment.com/files/documents/advisory/Blackberry%20BES12%20Self-Service%20Multiple%20Vulnerabilities.pdf'}, {'name': '39481', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39481/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.blackberry.com/kb/articleDetail?articleNumber=000038033'}, {'name': '20160222 BlackBerry Enterprise Service 12 Self-Service - SQLi and Reflected XSS', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Feb/95'}]
CVE State: PUBLISHED
Explain CVE-2016-1915
Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to inject arbitrary web script or HTML via the locale parameter to (1) mydevice/index.jsp or (2) mydevice/loggedOut.jsp.
Affected Products: n/a
References: [{'name': '1035095', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035095'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security-assessment.com/files/documents/advisory/Blackberry%20BES12%20Self-Service%20Multiple%20Vulnerabilities.pdf'}, {'name': '39481', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39481/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.blackberry.com/kb/articleDetail?articleNumber=000038033'}, {'name': '20160222 BlackBerry Enterprise Service 12 Self-Service - SQLi and Reflected XSS', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Feb/95'}]
CVE State: PUBLISHED
Explain CVE-2016-1916
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic administrative access to create a crafted policy, leading to improper rendering on a certain Export IT screen.
Affected Products: n/a
References: [{'name': '1035568', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035568'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.blackberry.com/btsc/KB38117'}]
CVE State: PUBLISHED
Explain CVE-2016-1917
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1918.
Affected Products: n/a
References: [{'name': '1035568', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035568'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.blackberry.com/btsc/KB38118'}]
CVE State: PUBLISHED
Explain CVE-2016-1918
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1917.
Affected Products: n/a
References: [{'name': '1035568', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035568'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.blackberry.com/btsc/KB38118'}]
CVE State: PUBLISHED
Explain CVE-2016-1919
Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/135303/Samsung-KNOX-1.0-Weak-eCryptFS-Key-Generation.html'}, {'name': '20160116 [CVE-2016-1919] Weak eCryptFS Key generation from user password on KNOX 1.0 / Android 4.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537319/100/0/threaded'}, {'name': '20160116 Subject: [CVE-2016-1919] Weak eCryptFS Key generation from user password on KNOX 1.0 / Android 4.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://lists.openwall.net/bugtraq/2016/01/17/2'}, {'name': '20160119 Re: [CVE-2016-1919] Weak eCryptFS Key generation from user password on KNOX 1.0 / Android 4.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537340/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2016-1920
Samsung KNOX 1.0.0 uses the shared certificate on Android, which allows local users to conduct man-in-the-middle attacks as demonstrated by installing a certificate and running a VPN service.
Affected Products: n/a
References: [{'name': '20160119 Re: [CVE-2016-1920] VPN Man-in-the-Middle due to shared certificate store on KNOX 1.0 / Android 4.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537339/100/0/threaded'}, {'name': '20160116 [CVE-2016-1920] VPN Man-in-the-Middle due to shared certificate store on KNOX 1.0 / Android 4.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537318/100/0/threaded'}]
CVE State: PUBLISHED