Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
-03 - https://lists.x.org/archives/xorg-announce/2016-October/002720.html - http://www.openwall.com/lists/oss-security/2016/10/04/4 - https://cgit.freedesktop.org/xorg/lib/libXv/commit/?id=d9da580b46a28ab497de2e94fdc7b9ff953dab17 - http://www.openwall.com/lists/oss-security/2016/10/04/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AE2VJOFA3EZA566RERQB54TFY56FROZR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3IA7BLB4C3JOYVU6UASGUJQJKUF6TO7E/
CVE ID: CVE-2016-5408 State: PUBLISHED Published: 2016-08-10T14:00:00 Last Updated: 2024-08-06T01:00:59.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package before 3.1.23-16.el6_8.6 in Red Hat Enterprise Linux 6 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-4051. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://rhn.redhat.com/errata/RHSA-2016-1573.html
CVE ID: CVE-2016-5409 State: PUBLISHED Published: 2017-04-20T17:00:00 Last Updated: 2024-08-06T01:01:00.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat OpenShift Enterprise 2 does not include the HTTPOnly flag in a Set-Cookie header for the GEARID cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1366461 - http://www.securityfocus.com/bid/97988
CVE ID: CVE-2016-5410 State: PUBLISHED Published: 2017-04-19T14:00:00 Last Updated: 2024-08-06T01:01:00.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) addEntry, (4) removeEntry, or (5) setEntries D-Bus API method. Additional Analyst Notes: - CVE Program Container: References: - http://www.firewalld.org/2016/08/firewalld-0-4-3-3-release - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBJMYLGRVKIPJEI3VZJ4WQZT7FBQ5BKO/ - https://lists.fedoraproject.org/arc
ckage-announce%40lists.fedoraproject.org/message/ZBJMYLGRVKIPJEI3VZJ4WQZT7FBQ5BKO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPM3GUQRU2KPRXDEQLAMCDQEAIARJSBT/ - http://www.securityfocus.com/bid/92481 - https://bugzilla.redhat.com/show_bug.cgi?id=1360135 - https://security.gentoo.org/glsa/201701-70 - http://rhn.redhat.com/errata/RHSA-2016-2597.html - http://www.openwall.com/lists/oss-security/2016/08/16/3
CVE ID: CVE-2016-5411 State: PUBLISHED Published: 2017-06-13T16:00:00 Last Updated: 2024-08-06T01:00:59.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: /var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer (QCI) before 1.0 GA is created world readable and contains the root password of the deployed system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1366412 - http://www.securityfocus.com/bid/92669
CVE ID: CVE-2016-5412 State: PUBLISHED Published: 2016-08-06T20:00:00 Last Updated: 2024-08-06T01:00:59.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/powerpc/kvm/book3s_hv_rmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms, when CONFIG_KVM_BOOK3S_64_HV is enabled, allows guest OS users to cause a denial of service (host OS infinite loop) by making a H_CEDE hypercall during the existence of a suspended transaction. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1349916 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f024ee098476a3e620232e4a78cfac505f121245 - http://w
//git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f024ee098476a3e620232e4a78cfac505f121245 - http://www.openwall.com/lists/oss-security/2016/07/28/2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=93d17397e4e2182fdaad503e2f9da46202c0f1c3 - http://rhn.redhat.com/errata/RHSA-2016-2574.html - https://github.com/torvalds/linux/commit/93d17397e4e2182fdaad503e2f9da46202c0f1c3 - https://github.com/torvalds/linux/commit/f024ee098476a3e620232e4a78cfac505f121245
CVE ID: CVE-2016-5413 State: REJECTED Published: 2022-07-28T16:45:54 Last Updated: 2022-07-28T16:45:54 Description: No description available.
CVE ID: CVE-2016-5414 State: PUBLISHED Published: 2017-06-27T20:00:00 Last Updated: 2024-08-06T01:00:59.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/attachment.cgi?id=1184610 - https://bugzilla.redhat.com/show_bug.cgi?id=1360757
CVE ID: CVE-2016-5415 State: REJECTED Published: 2022-07-28T16:46:34 Last Updated: 2022-07-28T16:46:34 Description: No description available.
CVE ID: CVE-2016-5416 State: PUBLISHED Published: 2017-06-08T19:00:00 Last Updated: 2024-08-06T01:01:00.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: 389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to read the default Access Control Instructions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99097 - http://rhn.redhat.com/errata/RHSA-2016-2594.html - https://bugzilla.redhat.com/show_bug.cgi?id=1349540 - http://rhn.redhat.com/errata/RHSA
com/errata/RHSA-2016-2594.html - https://bugzilla.redhat.com/show_bug.cgi?id=1349540 - http://rhn.redhat.com/errata/RHSA-2016-2765.html
CVE ID: CVE-2016-5417 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-06T01:00:59.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the __res_vinit function in the IPv6 name server management code in libresolv in GNU C Library (aka glibc or libc6) before 2.24 allows remote attackers to cause a denial of service (memory consumption) by leveraging partial initialization of internal resolver data structures. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=19257 - http://www.securityfocus.com/bid/92257 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commitdiff%3Bh=2212c1420
http://www.securityfocus.com/bid/92257 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commitdiff%3Bh=2212c1420c92a33b0e0bd9a34938c9814a56c0f7 - http://www.openwall.com/lists/oss-security/2016/08/02/5 - https://www.sourceware.org/ml/libc-alpha/2016-08/msg00212.html
CVE ID: CVE-2016-5418 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T01:00:59.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1362601 - https://access.redhat.com/errata/RHSA-2016:1852 - https://access.redhat.com/errata/RHSA-2016:1853 - https://github.com/libarchive/libarchive/commit/dfd6b54ce33960e420fb206d8872fb759b577ad9 - http://rhn.redhat.co
6:1853 - https://github.com/libarchive/libarchive/commit/dfd6b54ce33960e420fb206d8872fb759b577ad9 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://gist.github.com/anonymous/e48209b03f1dd9625a992717e7b89c4f - https://github.com/libarchive/libarchive/issues/746 - http://rhn.redhat.com/errata/RHSA-2016-1850.html - https://security.gentoo.org/glsa/201701-03 - http://www.securityfocus.com/bid/93165 - http://www.openwall.com/lists/oss-security/2016/08/09/2
CVE ID: CVE-2016-5419 State: PUBLISHED Published: 2016-08-10T14:00:00 Last Updated: 2024-08-06T01:01:00.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2575.html - http://www.securityfocus.com/bid/92319 - http://www.securityfocus.com/bid/92292 - https://curl.haxx.se/docs/adv_20160803A.html - https://access.redhat.com/errata/RHSA-2018:3558 - https://source.android.com/security/bullet
e/docs/adv_20160803A.html - https://access.redhat.com/errata/RHSA-2018:3558 - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securitytracker.com/id/1038341 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.563059 - http://www.debian.org/security/2016/dsa-3638 - http://www.securitytracker.com/id/1036538 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00011.html - https://www.tenable.com/security/tns-2016-18 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLPXQQKURBQFM4XM6645VRPTOE2AWG33/ - http://
project.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLPXQQKURBQFM4XM6645VRPTOE2AWG33/ - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3GQH4V3XAQ5Z53AMQRDEC3C3UHTW7QR/ - http://rhn.redhat.com/errata/RHSA-2016-2957.html - https://security.gentoo.org/glsa/201701-47 - http://www.ubuntu.com/usn/USN-3048-1
CVE ID: CVE-2016-5420 State: PUBLISHED Published: 2016-08-10T14:00:00 Last Updated: 2024-08-06T01:01:00.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2575.html - https://access.redhat.com/errata/RHSA-2018:3558 - http://www.securityfocus.com/bid/92309 - https://source.android.com/security/bulletin/2016-
.com/errata/RHSA-2018:3558 - http://www.securityfocus.com/bid/92309 - https://source.android.com/security/bulletin/2016-12-01.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.563059 - http://www.securitytracker.com/id/1036739 - http://www.debian.org/security/2016/dsa-3638 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00011.html - https://www.tenable.com/security/tns-2016-18 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html - http://www.securitytracker.com/id/1036537 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLPXQQKURBQFM4XM6645VRPTOE2AWG33/ - http://www.orac
org/archives/list/package-announce%40lists.fedoraproject.org/message/GLPXQQKURBQFM4XM6645VRPTOE2AWG33/ - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://curl.haxx.se/docs/adv_20160803B.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3GQH4V3XAQ5Z53AMQRDEC3C3UHTW7QR/ - http://rhn.redhat.com/errata/RHSA-2016-2957.html - https://security.gentoo.org/glsa/201701-47 - http://www.ubuntu.com/usn/USN-3048-1
CVE ID: CVE-2016-5421 State: PUBLISHED Published: 2016-08-10T14:00:00 Last Updated: 2024-08-06T01:01:00.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3558 - https://source.android.com/security/bulletin/2016-12-01.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.563059 - http://www.securityfocus.com/bid/92306 - http://www.debian.org/security/2016/dsa-
y&y=2016&m=slackware-security.563059 - http://www.securityfocus.com/bid/92306 - http://www.debian.org/security/2016/dsa-3638 - https://curl.haxx.se/docs/adv_20160803C.html - http://lists.opensuse.org/opensuse-updates/2016-09/msg00011.html - https://www.tenable.com/security/tns-2016-18 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html - http://www.securitytracker.com/id/1036536 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLPXQQKURBQFM4XM6645VRPTOE2AWG33/ - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/m
ory/cpuoct2018-4428296.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3GQH4V3XAQ5Z53AMQRDEC3C3UHTW7QR/ - https://security.gentoo.org/glsa/201701-47 - http://www.ubuntu.com/usn/USN-3048-1
CVE ID: CVE-2016-5422 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:00:59.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web console in Red Hat JBoss Operations Network (JON) before 3.3.7 does not properly authorize requests to add users with the super user role, which allows remote authenticated users to gain admin privileges via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-1785.html - http://www.securityfocus.com/bid/92722
CVE ID: CVE-2016-5423 State: PUBLISHED Published: 2016-12-09T23:00:00 Last Updated: 2024-08-06T01:00:59.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service (NULL pointer dereference and server crash), obtain sensitive memory information, or possibly execute arbitrary code via (1) a CASE expression within the test value subexpression of another CASE or (2) inlining of an SQL function that implements the equality operator used for a CASE expression involving values of different types. Additional Analyst Notes: -
ements the equality operator used for a CASE expression involving values of different types. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-1781.html - https://www.postgresql.org/docs/current/static/release-9-4-9.html - http://www.securitytracker.com/id/1036617 - http://rhn.redhat.com/errata/RHSA-2016-1821.html - http://www.debian.org/security/2016/dsa-3646 - http://www.securityfocus.com/bid/92433 - https://security.gentoo.org/glsa/201701-33 - https://access.redhat.com/errata/RHSA-2017:2425 - https://www.postgresql.org/docs/current/static/release-9-5-4.html - https://www.postgresql.org/docs/current/static/release-9-3-14.html - https://
g/docs/current/static/release-9-5-4.html - https://www.postgresql.org/docs/current/static/release-9-3-14.html - https://www.postgresql.org/about/news/1688/ - https://www.postgresql.org/docs/current/static/release-9-2-18.html - http://rhn.redhat.com/errata/RHSA-2016-2606.html - http://rhn.redhat.com/errata/RHSA-2016-1820.html - https://www.postgresql.org/docs/current/static/release-9-1-23.html - https://bugzilla.redhat.com/show_bug.cgi?id=1364001
CVE ID: CVE-2016-5424 State: PUBLISHED Published: 2016-12-09T23:00:00 Last Updated: 2024-08-06T01:00:59.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) " (double quote), (2) \ (backslash), (3) carriage return, or (4) newline character in a (a) database or (b) role name that is mishandled during an administrative operation. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-1781.html - https://www.postg
alyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-1781.html - https://www.postgresql.org/docs/current/static/release-9-4-9.html - http://www.securitytracker.com/id/1036617 - http://rhn.redhat.com/errata/RHSA-2016-1821.html - http://www.debian.org/security/2016/dsa-3646 - https://security.gentoo.org/glsa/201701-33 - https://access.redhat.com/errata/RHSA-2017:2425 - https://www.postgresql.org/docs/current/static/release-9-5-4.html - https://www.postgresql.org/docs/current/static/release-9-3-14.html - https://www.postgresql.org/about/news/1688/ - https://www.postgresql.org/docs/current/static/release-9-2-18.html - http://www.securityfocus.com/bid/92435 -
ws/1688/ - https://www.postgresql.org/docs/current/static/release-9-2-18.html - http://www.securityfocus.com/bid/92435 - http://rhn.redhat.com/errata/RHSA-2016-2606.html - http://rhn.redhat.com/errata/RHSA-2016-1820.html - https://www.postgresql.org/docs/current/static/release-9-1-23.html
CVE ID: CVE-2016-5425 State: PUBLISHED Published: 2016-10-13T14:00:00 Last Updated: 2024-08-06T01:00:59.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036979 - http://www.securityfocus.com/bid/93472 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://packetsto
s.com/bid/93472 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://packetstormsecurity.com/files/139041/Apache-Tomcat-8-7-6-Privilege-Escalation.html - http://legalhackers.com/advisories/Tomcat-RedHat-Pkgs-Root-PrivEsc-Exploit-CVE-2016-5425.html - http://www.openwall.com/lists/oss-security/2016/10/10/2 - http://rhn.redhat.com/errata/RHSA-2016-2046.html - https://www.exploit-db.com/exploits/40488/ - https://lists.apache.org/thread.html/6b414817c2b0bf351138911c8c922ec5dd577ebc0b9a7f42d705752d%40%3Cissues.activemq.apache.org%3E - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVE ID: CVE-2016-5426 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T01:00:59.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerDNS (aka pdns) Authoritative Server before 3.4.10 allows remote attackers to cause a denial of service (backend CPU consumption) via a long qname. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PowerDNS/pdns/commit/881b5b03a590198d03008e4200dd00cc537712f3 - http://www.securitytracker.com/id/1036761 - http://www.debian.org/security/2016/dsa-3664 - http://www.securityfocus.com/bid/92917 - http://www.openwall.com/lists/oss-security/2016/09/09/3 - https://doc.powerdns.com/md/security/power
cus.com/bid/92917 - http://www.openwall.com/lists/oss-security/2016/09/09/3 - https://doc.powerdns.com/md/security/powerdns-advisory-2016-01/
CVE ID: CVE-2016-5427 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T01:01:00.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerDNS (aka pdns) Authoritative Server before 3.4.10 does not properly handle a . (dot) inside labels, which allows remote attackers to cause a denial of service (backend CPU consumption) via a crafted DNS query. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PowerDNS/pdns/commit/881b5b03a590198d03008e4200dd00cc537712f3 - http://www.securitytracker.com/id/1036761 - http://www.debian.org/security/2016/dsa-3664 - http://www.securityfocus.com/bid/92917 - http://www.openwall.com/lists/oss-sec
//www.debian.org/security/2016/dsa-3664 - http://www.securityfocus.com/bid/92917 - http://www.openwall.com/lists/oss-security/2016/09/09/3 - https://doc.powerdns.com/md/security/powerdns-advisory-2016-01/
CVE ID: CVE-2016-5428 State: REJECTED Published: 2022-07-28T16:47:08 Last Updated: 2022-07-28T16:47:08 Description: No description available.
CVE ID: CVE-2016-5429 State: PUBLISHED Published: 2016-09-03T20:00:00 Last Updated: 2024-08-06T01:01:00.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: jose-php before 2.2.1 does not use constant-time operations for HMAC comparison, which makes it easier for remote attackers to obtain sensitive information via a timing attack, related to JWE.php and JWS.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92743 - https://github.com/nov/jose-php/commit/f03b986b4439e20b0fd635109b48afe96cf0099b#diff-37b0d289d6375ba4a7740401950ccdd6R287 - https://github.com/nov/jose-php/commit/1cce55e27adf0274193eb1cd74b927a398a3df4b#diff-2a982d82
5ba4a7740401950ccdd6R287 - https://github.com/nov/jose-php/commit/1cce55e27adf0274193eb1cd74b927a398a3df4b#diff-2a982d82ef0f673fd0ba2beba0e18420R138
CVE ID: CVE-2016-5430 State: PUBLISHED Published: 2016-09-03T20:00:00 Last Updated: 2024-08-06T01:00:59.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RSA 1.5 algorithm implementation in the JOSE_JWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack (MMA). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92741 - https://github.com/nov/jose-php/commit/f03b986b4439e20b0fd635109b48afe96cf0099b#diff-37b0d289d6375ba4a7740401950ccdd6R199
CVE ID: CVE-2016-5431 State: PUBLISHED Published: 2019-08-07T15:13:47 Last Updated: 2024-08-06T01:01:00.112Z Vendors: n/a Products: jose-php Problem Types: CWE-327 Description: The PHP JOSE Library by Gree Inc. before version 2.2.1 is vulnerable to key confusion/algorithm substitution in the JWS component resulting in bypassing the signature verification via crafted tokens. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nov/jose-php/commit/1cce55e27adf0274193eb1cd74b927a398a3df4b
CVE ID: CVE-2016-5432 State: PUBLISHED Published: 2016-10-03T18:00:00 Last Updated: 2024-08-06T01:01:00.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization (RHEV) Engine 4.0 allows local users to obtain sensitive database provisioning information by reading log files. Additional Analyst Notes: - CVE Program Container: References: - https://gerrit.ovirt.org/#/q/I40c88ad48f8f7c2b8e06802137870b0c198b5129 - http://rhn.redhat.com/errata/RHSA-2016-1967.html - https://bugzilla.redhat.com/show_bug.cgi?id=1371428 - http://www.securityfocus.com/bid/92694
CVE ID: CVE-2016-5433 State: PUBLISHED Published: 2016-06-17T15:00:00 Last Updated: 2024-08-06T01:00:59.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX213998