Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-6256 State: PUBLISHED Published: 2017-05-25T19:00:00 Last Updated: 2024-08-06T01:22:20.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE) attacks via crafted XML data in a request to B1iXcellerator/exec/soap/vP.001sap0003.in_WCSX/com.sap.b1i.vplatform.runtime/INB_WS_CALL_SYNC_XPT/INB_WS_CALL_SYNC_XPT.ipo/proc, aka SAP Security Note 2378065. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/142597/SAP-Business-One-For-Android-1.2.3-XML-Injection.html - https://www.exploit-db.com/exploits/42036/ - http://www.securityfo
P-Business-One-For-Android-1.2.3-XML-Injection.html - https://www.exploit-db.com/exploits/42036/ - http://www.securityfocus.com/bid/98590
CVE ID: CVE-2016-6257 State: PUBLISHED Published: 2016-08-02T14:00:00 Last Updated: 2024-08-06T01:22:20.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM600 and Ultraslim Wireless mice, does not enforce incrementing AES counters, which allows remote attackers to inject encrypted keyboard input into the system by leveraging proximity to the dongle, aka a "KeyJack injection attack." Additional Analyst Notes: - CVE Program Container: References: - https://www.bastille.net/research/vulnerabilities/keyjack - https://support.lenovo.com/product_sec
tainer: References: - https://www.bastille.net/research/vulnerabilities/keyjack - https://support.lenovo.com/product_security/len_7267 - http://www.securityfocus.com/bid/92179 - https://github.com/BastilleResearch/keyjack/blob/master/doc/advisories/bastille-13.lenovo-ultraslim.public.txt
CVE ID: CVE-2016-6258 State: PUBLISHED Published: 2016-08-02T16:00:00 Last Updated: 2024-08-06T01:22:20.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://xenbits.xen.org/xsa/advisory-182.html - http://xenbits.xen.org/xsa/xsa182-4.6.patch - http://support.citrix.com/article/CTX214954 - https://security.gentoo.org/glsa/201611-09 - http
g/xsa/xsa182-4.6.patch - http://support.citrix.com/article/CTX214954 - https://security.gentoo.org/glsa/201611-09 - http://xenbits.xen.org/xsa/xsa182-unstable.patch - http://xenbits.xen.org/xsa/xsa182-4.5.patch - http://www.debian.org/security/2016/dsa-3633 - http://www.securitytracker.com/id/1036446 - http://www.securityfocus.com/bid/92131
CVE ID: CVE-2016-6259 State: PUBLISHED Published: 2016-08-02T16:00:00 Last Updated: 2024-08-06T01:22:20.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92130 - http://support.citrix.com/article/CTX214954 - http://www.securitytracker.com/id/1036447 - http://xenbits.xen.org/xsa/xsa183-unstable.patch - http://xenbits.xen.
954 - http://www.securitytracker.com/id/1036447 - http://xenbits.xen.org/xsa/xsa183-unstable.patch - http://xenbits.xen.org/xsa/advisory-183.html - http://xenbits.xen.org/xsa/xsa183-4.6.patch
CVE ID: CVE-2016-6261 State: PUBLISHED Published: 2016-09-07T20:00:00 Last Updated: 2024-08-06T01:22:20.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: The idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via 64 bytes of input. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/21/4 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html - http://www.openwall.com/lists/oss-security/2016/07/20/6 - http://www.securityfocus.com/bid/92070 - http://www.debian.org/security/2016/dsa-3658 - http://git.s
rity/2016/07/20/6 - http://www.securityfocus.com/bid/92070 - http://www.debian.org/security/2016/dsa-3658 - http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=f20ce1128fb7f4d33297eee307dddaf0f92ac72d - https://lists.gnu.org/archive/html/help-libidn/2016-07/msg00009.html - http://www.ubuntu.com/usn/USN-3068-1 - https://lists.gnu.org/archive/html/help-libidn/2015-07/msg00016.html - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2016-6262 State: PUBLISHED Published: 2016-09-07T20:00:00 Last Updated: 2024-08-06T01:22:20.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/21/4 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html - http://www.openwall.com/lists/oss-security/2016/07/20/6 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html - http:/
openwall.com/lists/oss-security/2016/07/20/6 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html - http://www.securityfocus.com/bid/92070 - https://lists.gnu.org/archive/html/help-libidn/2016-07/msg00009.html - http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=5e3cb9c7b5bf0ce665b9d68f5ddf095af5c9ba60 - http://www.ubuntu.com/usn/USN-3068-1 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2016-6263 State: PUBLISHED Published: 2016-09-07T20:00:00 Last Updated: 2024-08-06T01:22:20.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted UTF-8 data. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/21/4 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html - http://www.openwall.com/lists/oss-security/2016/07/20/6 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html - http://www.securit
/lists/oss-security/2016/07/20/6 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html - http://www.securityfocus.com/bid/92070 - http://www.debian.org/security/2016/dsa-3658 - https://lists.gnu.org/archive/html/help-libidn/2016-07/msg00009.html - http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=1fbee57ef3c72db2206dd87e4162108b2f425555 - http://www.ubuntu.com/usn/USN-3068-1 - https://security.gentoo.org/glsa/201908-06 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apach
ps://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2016-6264 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-08-06T01:22:20.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service (crash) via a negative length value to the memset function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/06/29/3 - http://www.securityfocus.com/bid/91492 - http://www.openwall.com/lists/oss-security/2016/07/21/2 - http://www.openwall.com/lists/oss-security/2016/07/21/6 - http://mailman.uclibc-ng.org/pipermai
-security/2016/07/21/2 - http://www.openwall.com/lists/oss-security/2016/07/21/6 - http://mailman.uclibc-ng.org/pipermail/devel/2016-May/000890.html - http://mailman.uclibc-ng.org/pipermail/devel/2016-July/001067.html
CVE ID: CVE-2016-6265 State: PUBLISHED Published: 2016-09-22T15:00:00 Last Updated: 2024-08-06T01:22:20.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the pdf_load_xref function in pdf/pdf-xref.c in MuPDF allows remote attackers to cause a denial of service (crash) via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://git.ghostscript.com/?p=mupdf.git%3Bh=fa1936405b6a84e5c9bb440912c23d532772f958 - http://www.debian.org/security/2016/dsa-3655 - http://www.securityfocus.com/bid/92071 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00007.html - http://bugs.ghostscript.com/show_bug.cgi?id=696941 - h
ttp://lists.opensuse.org/opensuse-updates/2016-08/msg00007.html - http://bugs.ghostscript.com/show_bug.cgi?id=696941 - https://security.gentoo.org/glsa/201702-12 - http://www.openwall.com/lists/oss-security/2016/07/21/7
CVE ID: CVE-2016-6266 State: PUBLISHED Published: 2017-01-30T22:00:00 Last Updated: 2024-08-06T01:22:20.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: ccca_ajaxhandler.php in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) host or (2) apikey parameter in a register action, (3) enable parameter in a save_stting action, or (4) host or (5) apikey parameter in a test_connection action. Additional Analyst Notes: - CVE Program Container: References: - https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps
Notes: - CVE Program Container: References: - https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps/ - https://success.trendmicro.com/solution/1114913
CVE ID: CVE-2016-6267 State: PUBLISHED Published: 2017-01-30T22:00:00 Last Updated: 2024-08-06T01:22:20.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: SnmpUtils in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) spare_Community, (2) spare_AllowGroupIP, or (3) spare_AllowGroupNetmask parameter to admin_notification.php. Additional Analyst Notes: - CVE Program Container: References: - https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps/ - https://success.trendmicro.com/solution/1114913
CVE ID: CVE-2016-6268 State: PUBLISHED Published: 2017-01-30T22:00:00 Last Updated: 2024-08-06T01:22:20.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows local webserv users to execute arbitrary code with root privileges via a Trojan horse .war file in the Solr webapps directory. Additional Analyst Notes: - CVE Program Container: References: - https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps/ - https://success.trendmicro.com/solution/1114913
CVE ID: CVE-2016-6269 State: PUBLISHED Published: 2017-01-30T22:00:00 Last Updated: 2024-08-06T01:22:20.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allow remote attackers to read and delete arbitrary files via the tmpfname parameter to (1) log_mgt_adhocquery_ajaxhandler.php, (2) log_mgt_ajaxhandler.php, (3) log_mgt_ajaxhandler.php or (4) tf parameter to wcs_bwlists_handler.php. Additional Analyst Notes: - CVE Program Container: References: - https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps/ - h
s: - CVE Program Container: References: - https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps/ - https://success.trendmicro.com/solution/1114913
CVE ID: CVE-2016-6270 State: PUBLISHED Published: 2017-01-30T22:00:00 Last Updated: 2024-08-06T01:22:20.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: The handle_certificate function in /vmi/manager/engine/management/commands/apns_worker.py in Trend Micro Virtual Mobile Infrastructure before 5.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the password to api/v1/cfg/oauth/save_identify_pfx/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95884 - https://success.trendmicro.com/solution/1115411 - https://qkaiser.github.io/pentesting/trendmicro/2016/10/08/trendmicro-vmi/
CVE ID: CVE-2016-6271 State: PUBLISHED Published: 2017-01-18T22:00:00 Last Updated: 2024-08-06T01:22:20.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows man-in-the-middle attackers to conduct spoofing attacks by leveraging a missing HVI check on DHPart2 packet reception. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95928 - https://github.com/BelledonneCommunications/bzrtp/commit/bbb1e6e2f467ee4bd7b9a8c800e4f07343d7d99b - https://github.com/gteissier/CVE-2016-6271
CVE ID: CVE-2016-6272 State: PUBLISHED Published: 2018-02-20T15:00:00 Last Updated: 2024-08-06T01:22:20.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing static display strings, such as field labels, via the topic parameter to help.asp. NOTE: this was originally reported as a SQL injection vulnerability, but this may be inaccurate. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44098/ - http://packetstormsecurity.com/files/146418/EPIC-MyChart-SQL-Injection.html
CVE ID: CVE-2016-6273 State: PUBLISHED Published: 2016-10-07T14:00:00 Last Updated: 2024-08-06T01:22:20.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) before 2015 SP5 and 2016 before R1 SP1, as used by Citrix License Server for Windows before 11.14.0.1 and Citrix License Server VPX before 11.14.0.1, allows remote attackers to cause a denial of service (crash) via a type 2F packet with a '01 19' opcode. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2016-29 - http://www.securitytracker.com/id/1037008 - http://support.citrix.com/article/
nable.com/security/research/tra-2016-29 - http://www.securitytracker.com/id/1037008 - http://support.citrix.com/article/CTX217430 - http://www.securityfocus.com/bid/93450
CVE ID: CVE-2016-6276 State: PUBLISHED Published: 2016-09-26T14:00:00 Last Updated: 2024-08-06T01:22:20.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Linux Virtual Delivery Agent (aka VDA, formerly Linux Virtual Desktop) before 1.4.0 allows local users to gain root privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93000 - http://support.citrix.com/article/CTX216628
CVE ID: CVE-2016-6277 State: PUBLISHED Published: 2016-12-14T16:00:00.000Z Last Updated: 2025-10-21T23:55:47.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/4088
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/40889/ - https://www.exploit-db.com/exploits/41598/ - http://kb.netgear.com/000036386/CVE-2016-582384 - http://www.sj-vs.net/a-temporary-fix-for-cert-vu582384-cwe-77-on-netgear-r7000-and-r6400-routers/ - https://www.kb.cert.org/vuls/id/582384 - http://www.securityfocus.com/bid/94819 - https://kalypto.org/research/netgear-vulnerability-expanded/ - http://packetstormsecurity.com/files/155712/Netgear-R6400-Remote-Code-Execution.html
CVE ID: CVE-2016-6283 State: PUBLISHED Published: 2017-01-18T22:00:00 Last Updated: 2024-08-06T01:22:20.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95288 - http://packetstormsecurity.com/files/140363/Atlassian-Confluence-5.9.12-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2017/Jan/12 - http://seclists.org/fulldisclosure/2017/Jan/3 - https://www.exploit-db.
http://seclists.org/fulldisclosure/2017/Jan/12 - http://seclists.org/fulldisclosure/2017/Jan/3 - https://www.exploit-db.com/exploits/40989/
CVE ID: CVE-2016-6285 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T01:22:20.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in includes/decorators/global-translations.jsp in Atlassian JIRA before 7.2.2 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jan/41 - http://www.securityfocus.com/bid/95913 - https://jira.atlassian.com/browse/JRA-61888?src=confmacro&_ga=1.139403892.63283854.1485351777 - https://confluence.atlassian.com/adminjira/jira-platform-releases/jira-7-
onfmacro&_ga=1.139403892.63283854.1485351777 - https://confluence.atlassian.com/adminjira/jira-platform-releases/jira-7-2-x-platform-release-notes#JIRA7.2.xplatformreleasenotes-7-2-2 - http://packetstormsecurity.com/files/140548/Atlassian-Jira-7.1.7-Cross-Site-Scripting.html
CVE ID: CVE-2016-6286 State: PUBLISHED Published: 2017-01-10T15:00:00 Last Updated: 2024-08-06T01:22:20.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTP_PROXY environment variable, which would allow attackers to direct CGI programs which use this environment variable to use an attacker-specified HTTP proxy server (also known as a "httpoxy" attack). This affects all versions of spiffy-cgi-handlers before 0.5. Additional Analyst Notes: - CVE Program Container: References: - http://lists.gnu.org/archive/html/chicken-announce/2016-07/msg00000.html - http://www.securityfocus.com/bid/92105
CVE ID: CVE-2016-6287 State: PUBLISHED Published: 2017-01-10T15:00:00 Last Updated: 2024-08-06T01:22:20.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "http-client" egg always used a HTTP_PROXY environment variable to determine whether HTTP traffic should be routed via a proxy, even when running as a CGI process. Under several web servers this would mean a user-supplied "Proxy" header could allow an attacker to direct all HTTP requests through a proxy (also known as a "httpoxy" attack). This affects all versions of http-client before 0.10. Additional Analyst Notes: - CVE Program Container: References: - http://lists.gnu.org/archive/html/chicken-announce/2016-07/msg00000.
alyst Notes: - CVE Program Container: References: - http://lists.gnu.org/archive/html/chicken-announce/2016-07/msg00000.html - http://www.securityfocus.com/bid/92105
CVE ID: CVE-2016-6288 State: PUBLISHED Published: 2016-07-25T14:00:00 Last Updated: 2024-08-06T01:22:20.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: The php_url_parse_ex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via vectors involving the smart_str data type. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://www.securityfocus.com/bid/92111 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - https://bugs.php.net/70480 - http://php.net/ChangeLog-5.php - http
- http://rhn.redhat.com/errata/RHSA-2016-2750.html - https://bugs.php.net/70480 - http://php.net/ChangeLog-5.php - http://www.securitytracker.com/id/1036430 - http://openwall.com/lists/oss-security/2016/07/24/2 - https://support.apple.com/HT207170 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=629e4da7cc8b174acdeab84969cbfc606a019b31
CVE ID: CVE-2016-6289 State: PUBLISHED Published: 2016-07-25T14:00:00 Last Updated: 2024-08-06T01:22:20.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted extract operation on a ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - https://security.gentoo.org/glsa/201611-22 - http://rhn.redhat.com/errata/RHS
security-announce/2016/Sep/msg00006.html - https://security.gentoo.org/glsa/201611-22 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://fortiguard.com/advisory/fortinet-discovers-php-stack-based-buffer-overflow-vulnerabilities - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0218acb7e756a469099c4ccfb22bce6c2bd1ef87 - http://php.net/ChangeLog-5.php - http://www.securitytracker.com/id/1036430 - http://www.securityfocus.com/bid/92074 - http://www.debian.org/security/2016/dsa-3631 - http://php.net/ChangeLog-7.php - http://openwall.com/lists/oss-security/2016/07/24/2 - https://support.apple.com/HT207170 - https://bugs.php.net/72513
CVE ID: CVE-2016-6290 State: PUBLISHED Published: 2016-07-25T14:00:00 Last Updated: 2024-08-06T01:22:20.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly maintain a certain hash data structure, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors related to session deserialization. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/72562 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - https://security.gentoo.org/glsa/201611-22 - http://r
ists.apple.com/archives/security-announce/2016/Sep/msg00006.html - https://security.gentoo.org/glsa/201611-22 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://php.net/ChangeLog-5.php - http://www.securitytracker.com/id/1036430 - http://www.debian.org/security/2016/dsa-3631 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=3798eb6fd5dddb211b01d41495072fd9858d4e32 - http://php.net/ChangeLog-7.php - http://openwall.com/lists/oss-security/2016/07/24/2 - https://support.apple.com/HT207170 - http://www.securityfocus.com/bid/92097