Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
announce/2016-03/msg00091.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1246054 - http://www.mozilla.org/security/announce/2016/mfsa2016-31.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - http://www.debian.org/security/2016/dsa-3520 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg000
7-1 - http://www.debian.org/security/2016/dsa-3520 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - http://www.debian.org/security/2016/dsa-3510 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://www.ubuntu.com/usn/USN-2934-1 - http://hg.mozilla.org/releases/mozilla-release/rev/f0d2911a9a4e - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1967 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:49.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-
itional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://www.ubuntu.com/usn/USN-2917-1 - http://www.mozilla.org/security/announce/2016/mfsa2016-29.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - https://security.gentoo.org/glsa/201605-06 - http://www.ubuntu.com/usn/USN-2917-2 - https://bugzilla.mozilla.org/show_bug.cgi?id=1246956 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1968 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:49.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted data with brotli compression. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://www.mozilla.org/security/announce/2016/mfsa2016-30.html - http://www.ubuntu.com/usn/USN-2917-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1246742 - http://lists.opensuse.o
- http://www.ubuntu.com/usn/USN-2917-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1246742 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - https://security.gentoo.org/glsa/201605-06 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1969 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:49.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted Graphite smart font. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1242322 - http://www.securitytracker.com/id/1035215 - https://security.gentoo.org/glsa/201605-06 - http://www.mozilla.org/security/announce/2016/m
itytracker.com/id/1035215 - https://security.gentoo.org/glsa/201605-06 - http://www.mozilla.org/security/announce/2016/mfsa2016-38.html
CVE ID: CVE-2016-1970 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:50.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84220 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://www.mozilla.org/security/announce/2016/mfsa2016-32.html - http://lists.opensuse.o
nnounce/2016-03/msg00029.html - http://www.mozilla.org/security/announce/2016/mfsa2016-32.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1216837 - http://www.securitytracker.com/id/1035215 - https://security.gentoo.org/glsa/201605-06
CVE ID: CVE-2016-1971 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:49.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows omits an unspecified status check, which might allow remote attackers to cause a denial of service (memory corruption) or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84220 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://www.mozilla.org/security/announce/2016/mfsa2016-32.html - ht
g/opensuse-security-announce/2016-03/msg00029.html - http://www.mozilla.org/security/announce/2016/mfsa2016-32.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1217663 - http://www.securitytracker.com/id/1035215 - https://security.gentoo.org/glsa/201605-06
CVE ID: CVE-2016-1972 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:50.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in libvpx in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1218124 - http://www.securityfocus.com/bid/84220 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://www.mozilla.org/security/announce/2016/mfsa2016-32.html - http://lists.opensuse.or
nounce/2016-03/msg00029.html - http://www.mozilla.org/security/announce/2016/mfsa2016-32.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - https://security.gentoo.org/glsa/201605-06
CVE ID: CVE-2016-1973 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:49.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the GetStaticInstance function in the WebRTC implementation in Mozilla Firefox before 45.0 might allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://www.ubuntu.com/usn/USN-2917-1 - http://www.mozilla.org/securit
opensuse-security-announce/2016-03/msg00029.html - http://www.ubuntu.com/usn/USN-2917-1 - http://www.mozilla.org/security/announce/2016/mfsa2016-33.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - https://security.gentoo.org/glsa/201605-06 - https://bugzilla.mozilla.org/show_bug.cgi?id=1219339 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1974 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:49.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via crafted Unicode data in an HTML, XML, or SVG document. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://www.mozilla.org/security/announce/2016/mfsa2016-34.html - h
rg/opensuse-security-announce/2016-03/msg00091.html - http://www.mozilla.org/security/announce/2016/mfsa2016-34.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-291
08.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - http://www.debian.org/security/2016/dsa-3520 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1228103 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - http://www.debian.org/security/2016/dsa-3510 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://www.ubuntu.com/usn/US
suse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://www.ubuntu.com/usn/USN-2934-1 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1975 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:49.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1230768 - http://www.securityfocus.com/bid/84220 - http://hg.mozilla.org/releases/mozilla-release/rev/bafc86c12e63 - http://lists.opensuse.o
.securityfocus.com/bid/84220 - http://hg.mozilla.org/releases/mozilla-release/rev/bafc86c12e63 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://www.mozilla.org/security/announce/2016/mfsa2016-32.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - https://security.gentoo.org/glsa/201605-06
CVE ID: CVE-2016-1976 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:50.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84220 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://www.mozilla.org/security/announce/2016/mfsa2016-32.html - https://bugzilla.mozilla.org/
e/2016-03/msg00029.html - http://www.mozilla.org/security/announce/2016/mfsa2016-32.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1176340 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - https://security.gentoo.org/glsa/201605-06
CVE ID: CVE-2016-1977 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:50.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted Graphite smart font. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://www.securityfocus.com/bid/84222 - http://lists.opensuse.org/opensuse-security-announce/
e/2016-03/msg00091.html - http://www.securityfocus.com/bid/84222 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1
y-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1248876 - http://www.ubuntu.com/usn/USN-2927-1 - http://www.debian.org/security/2016/dsa-3520 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - http://www.debian.org/security/2016/dsa-3510 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.mozilla.org/security/announce/2016/mfsa2016-37.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gent
cker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://www.debian.org/security/2016/dsa-3515 - http://www.ubuntu.com/usn/USN-2934-1 - https://security.gentoo.org/glsa/201701-63 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-1978 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:50.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact by making an SSL (1) DHE or (2) ECDHE handshake at a time of high memory consumption. Additional Analyst Notes: - CVE Program Container: References: - https://bto.bluecoat.com/security-advisory/sa124 - http://www.oracle.com/technetwork/topics/security/ovmbulletin
nces: - https://bto.bluecoat.com/security-advisory/sa124 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.debian.org/security/2016/dsa-3688 - http://rhn.redhat.com/errata/RHSA-2016-0684.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.mozilla.org/security/announce/2016/mfsa2016-15.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://rhn.redhat.com/errata/RHSA-2016-0685.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - http://www.securityfocus.
-2016-0685.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - http://www.securityfocus.com/bid/84275 - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21_release_notes - http://www.ubuntu.com/usn/USN-2973-1 - http://rhn.redhat.com/errata/RHSA-2016-0591.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - http://www.securitytracker.com/id/1035258 - http://www.securityfocus.com/bid/91787 - https://bugzilla.mozilla.org/show_bug.cgi?id=1209546 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06
CVE ID: CVE-2016-1979 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:17:50.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before 45.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted key data with DER encoding. Additional Analyst Notes: - CVE Program Container: References: - https://bto.bluecoat.com/security-advisory/sa124 - http://www.securityfocus.com/bid/84221 - http://www.oracle.com/technetwork/topics/security/ovmbul
urity-advisory/sa124 - http://www.securityfocus.com/bid/84221 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.debian.org/security/2016/dsa-3688 - http://www.debian.org/security/2016/dsa-3576 - https://bugzilla.mozilla.org/show_bug.cgi?id=1185033 - http://rhn.redhat.com/errata/RHSA-2016-0684.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://rhn.redhat.com/errata/RHSA-2016-0685.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/
use.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.1_release_notes - http://www.mozilla.org/security/announce/2016/mfsa2016-36.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.ubuntu.com/usn/USN-2973-1 - http://rhn.redhat.com/errata/RHSA-2016-0591.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-
nnounce/2016-03/msg00031.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - https://security.gentoo.org/glsa/201605-06
CVE ID: CVE-2016-1981 State: PUBLISHED Published: 2016-12-29T22:00:00 Last Updated: 2024-08-05T23:17:50.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the initial receive/transmit descriptor head (TDH/RDH) is set outside the allocated descriptor buffer. A privileged user inside guest could use this flaw to crash the QEMU instance resulting in DoS. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg03454.html - https
otes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg03454.html - https://security.gentoo.org/glsa/201604-01 - http://www.debian.org/security/2016/dsa-3469 - http://www.debian.org/security/2016/dsa-3470 - http://www.openwall.com/lists/oss-security/2016/01/19/10 - https://bugzilla.redhat.com/show_bug.cgi?id=1298570 - http://www.openwall.com/lists/oss-security/2016/01/22/1 - http://rhn.redhat.com/errata/RHSA-2016-2585.html - http://www.debian.org/security/2016/dsa-3471 - http://www.securityfocus.com/bid/81549
CVE ID: CVE-2016-1982 State: PUBLISHED Published: 2016-01-27T20:00:00 Last Updated: 2024-08-05T23:17:50.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via crafted chunk-encoded content. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3460 - http://www.openwall.com/lists/oss-security/2016/01/22/3 - http://www.openwall.com/lists/oss-security/2016/01/21/4 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176492.html - http://lists.fedoraproj
/01/21/4 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176492.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176475.html - http://www.privoxy.org/announce.txt
CVE ID: CVE-2016-1983 State: PUBLISHED Published: 2016-01-27T20:00:00 Last Updated: 2024-08-05T23:17:49.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via an empty HTTP Host header. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3460 - http://www.openwall.com/lists/oss-security/2016/01/22/3 - http://www.openwall.com/lists/oss-security/2016/01/21/4 - http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/parsers.c?r1=1.302&r2=1.303 - http://lists.fedoraproject.org/pipermail/packa
a.cvs.sourceforge.net/viewvc/ijbswa/current/parsers.c?r1=1.302&r2=1.303 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176492.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176475.html - http://www.privoxy.org/announce.txt
CVE ID: CVE-2016-1984 State: PUBLISHED Published: 2016-01-22T11:00:00 Last Updated: 2024-08-05T23:17:50.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2016-01-20 has a hardcoded password for the 1MB@tMaN account, which makes it easier for remote attackers to obtain access via a (1) SSH or (2) HTTP session, a different vulnerability than CVE-2015-8362. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/992624 - https://ics-cert.us-cert.gov/advisories/ICSA-16-049-02 - http://seclists.org/fulldisclosure/2016/Jan/63 - https://www.sec-consult.com/fxdata/seccon
v/advisories/ICSA-16-049-02 - http://seclists.org/fulldisclosure/2016/Jan/63 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20160121-0_AMX_Deliberately_hidden_backdoor_account_v10.txt - http://www.amx.com/techcenter/firmware.asp?Category=Hot%20Fix%20Files - http://blog.sec-consult.com/2016/01/deliberately-hidden-backdoor-account-in.html - http://www.amx.com/techcenter/NXSecurityBrief/