Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-7329 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7330 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7331 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7332 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7333 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7334 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7335 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7336 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7337 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7338 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7339 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7340 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7341 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7342 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7343 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7344 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7345 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7346 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7347 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7348 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7349 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7350 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7351 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7352 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7353 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7354 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7355 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7356 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7357 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7358 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7359 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7360 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7361 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7362 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7363 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7364 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7365 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7366 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7367 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7381 State: PUBLISHED Published: 2016-11-08T20:37:00 Last Updated: 2024-08-06T01:57:46.951Z Vendors: n/a Products: Quadro, NVS, and GeForce (all versions) Problem Types: Buffer Overflow Description: For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where a user input to index an array is not bounds checked, leading to denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94172 - https://support.lenovo.com/us/en/s
otes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94172 - https://support.lenovo.com/us/en/solutions/LEN-10822 - http://nvidia.custhelp.com/app/answers/detail/a_id/4247
CVE ID: CVE-2016-7382 State: PUBLISHED Published: 2016-11-08T20:37:00 Last Updated: 2024-08-06T01:57:47.082Z Vendors: n/a Products: Quadro, NVS, GeForce, and Tesla (all versions) Problem Types: Incorrect Access Control Description: For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-10822 - http://www.securityfoc
es: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-10822 - http://www.securityfocus.com/bid/94177 - http://nvidia.custhelp.com/app/answers/detail/a_id/4246 - http://nvidia.custhelp.com/app/answers/detail/a_id/4247
CVE ID: CVE-2016-7383 State: PUBLISHED Published: 2016-11-08T20:37:00 Last Updated: 2024-08-06T01:57:47.499Z Vendors: n/a Products: Quadro, NVS, and GeForce (all versions) Problem Types: Buffer Overflow Description: For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in a memory mapping API in the kernel mode layer (nvlddmkm.sys) handler, leading to denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94172 - https://support.lenovo.com/us/en/solutions/LEN-10822 - http://nvidia.custhelp.com/app/
www.securityfocus.com/bid/94172 - https://support.lenovo.com/us/en/solutions/LEN-10822 - http://nvidia.custhelp.com/app/answers/detail/a_id/4247
CVE ID: CVE-2016-7384 State: PUBLISHED Published: 2016-11-08T20:37:00 Last Updated: 2024-08-06T01:57:47.460Z Vendors: n/a Products: Quadro, NVS, and GeForce (all versions) Problem Types: Buffer Overflow Description: For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) where unchecked input/output lengths in UVMLiteController Device IO Control handling may lead to denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-10822 - https://www.exploit
Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-10822 - https://www.exploit-db.com/exploits/40655/ - http://nvidia.custhelp.com/app/answers/detail/a_id/4247 - http://www.securityfocus.com/bid/93983
CVE ID: CVE-2016-7385 State: PUBLISHED Published: 2016-11-08T20:37:00 Last Updated: 2024-08-06T01:57:47.379Z Vendors: n/a Products: Quadro, NVS, and GeForce (all versions) Problem Types: Buffer Overflow Description: For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x700010d where a value passed from a user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://suppo
ce or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-10822 - https://www.exploit-db.com/exploits/40657/ - http://www.securityfocus.com/bid/93981 - http://nvidia.custhelp.com/app/answers/detail/a_id/4247
CVE ID: CVE-2016-7386 State: PUBLISHED Published: 2016-11-08T20:37:00 Last Updated: 2024-08-06T01:57:47.463Z Vendors: n/a Products: Quadro, NVS, and GeForce (all versions) Problem Types: Other or Unknown, Information Leak Description: For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70000D4 which may lead to leaking of kernel memory contents to user space through an uninitialized buffer. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-10822 - http://nvidia.cus
t Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-10822 - http://nvidia.custhelp.com/app/answers/detail/a_id/4247 - http://www.securityfocus.com/bid/93982 - https://www.exploit-db.com/exploits/40656/
CVE ID: CVE-2016-7387 State: PUBLISHED Published: 2016-11-08T20:37:00 Last Updated: 2024-08-06T01:57:47.379Z Vendors: n/a Products: Quadro, NVS, and GeForce (all versions) Problem Types: Buffer Overflow Description: For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x600000D where a value passed from a user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.e
ce or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40659/ - https://support.lenovo.com/us/en/solutions/LEN-10822 - http://www.securityfocus.com/bid/93985 - http://nvidia.custhelp.com/app/answers/detail/a_id/4247
CVE ID: CVE-2016-7388 State: PUBLISHED Published: 2016-11-08T20:37:00 Last Updated: 2024-08-06T01:57:47.468Z Vendors: n/a Products: Quadro, NVS, and GeForce (all versions) Problem Types: Other or Unknown, Kernel null pointer dereference Description: For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94172 - https://suppor
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94172 - https://support.lenovo.com/us/en/solutions/LEN-10822 - http://nvidia.custhelp.com/app/answers/detail/a_id/4247
CVE ID: CVE-2016-7389 State: PUBLISHED Published: 2016-11-08T20:37:00 Last Updated: 2024-08-06T01:57:47.369Z Vendors: n/a Products: Quadro, NVS, GeForce, and Tesla (all versions) Problem Types: Incorrect Access Control Description: For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver on Linux R304 before 304.132, R340 before 340.98, R367 before 367.55, R361_93 before 361.93.03, and R370 before 370.28 contains a vulnerability in the kernel mode layer (nvidia.ko) handler for mmap() where improper input validation may allow users to gain access to arbitrary physical memory, leading to an escalation of privileges. Additional Analyst Notes: - CVE Program Container: R
arbitrary physical memory, leading to an escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94177 - http://nvidia.custhelp.com/app/answers/detail/a_id/4246
CVE ID: CVE-2016-7390 State: PUBLISHED Published: 2016-11-08T20:37:00 Last Updated: 2024-08-06T01:57:47.430Z Vendors: n/a Products: Quadro, NVS, and GeForce (all versions) Problem Types: Buffer Overflow Description: For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x7000194 where a value passed from a user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.e
ce or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40658/ - https://support.lenovo.com/us/en/solutions/LEN-10822 - http://www.securityfocus.com/bid/93984 - http://nvidia.custhelp.com/app/answers/detail/a_id/4247
CVE ID: CVE-2016-7391 State: PUBLISHED Published: 2016-11-08T20:37:00 Last Updated: 2024-08-06T01:57:47.504Z Vendors: n/a Products: Quadro, NVS, and GeForce (all versions) Problem Types: Buffer Overflow Description: For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x100010b where a missing array bounds check can allow a user to write to kernel memory, leading to denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/
privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-10822 - http://nvidia.custhelp.com/app/answers/detail/a_id/4247 - http://www.securityfocus.com/bid/93987 - https://www.exploit-db.com/exploits/40661/
CVE ID: CVE-2016-7392 State: PUBLISHED Published: 2017-02-15T21:00:00 Last Updated: 2024-08-06T01:57:47.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the pstoedit_suffix_table_init function in output-pstoedit.c in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted bmp image file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201708-09 - https://blogs.gentoo.org/ago/2016/09/10/autotrace-heap-based-buffer-overflow-in-pstoedit_suffix_table_init-output-pstoedit-c/ - http://www.openwall.com/lists/oss-security/2016/09/10/3 - http://www.securityf
it_suffix_table_init-output-pstoedit-c/ - http://www.openwall.com/lists/oss-security/2016/09/10/3 - http://www.securityfocus.com/bid/92907 - https://bugzilla.redhat.com/show_bug.cgi?id=1375255 - http://www.openwall.com/lists/oss-security/2016/09/12/7
CVE ID: CVE-2016-7393 State: PUBLISHED Published: 2017-02-15T21:00:00 Last Updated: 2024-08-06T01:57:47.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the aac_sync function in aac_parser.c in Libav before 11.5 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://git.libav.org/?p=libav.git%3Ba=commit%3Bh=fb1473080223a634b8ac2cca48a632d037a0a69d - http://www.openwall.com/lists/oss-security/2016/09/10/5 - https://blogs.gentoo.org/ago/2016/08/20/libav-stack-based-buffer-overflow-in-aac_sync-aac_parser-c/ - http://www.securityfocus.com/b
s.gentoo.org/ago/2016/08/20/libav-stack-based-buffer-overflow-in-aac_sync-aac_parser-c/ - http://www.securityfocus.com/bid/92902
CVE ID: CVE-2016-7394 State: PUBLISHED Published: 2018-02-06T16:00:00 Last Updated: 2024-08-06T01:57:47.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: tiki wiki cms groupware <=15.2 has a xss vulnerability, allow attackers steal user's cookie. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/tikiwiki/code/59653/
CVE ID: CVE-2016-7395 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T01:57:47.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: SkPath.cpp in Skia, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, does not properly validate the return values of ChopMonoAtY calls, which allows remote attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via crafted graphics data. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/613918 - http://www.debian.org/security/2016/dsa-3667 - https://googlechromerelease
ner: References: - https://crbug.com/613918 - http://www.debian.org/security/2016/dsa-3667 - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://www.securityfocus.com/bid/92717 - https://codereview.chromium.org/2006143009
CVE ID: CVE-2016-7397 State: PUBLISHED Published: 2016-10-03T16:00:00 Last Updated: 2024-08-06T01:57:47.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the SMTP user settings in the notifications configuration tab. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036931 - http://www.securityfocus.com/bid/93266 - http://www.securityfocus.com/archive/1/539518/100/0/threaded
CVE ID: CVE-2016-7398 State: PUBLISHED Published: 2019-09-06T18:46:53 Last Updated: 2024-08-06T01:57:47.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlier as well as 2.6.0beta2 (PHP 5) and earlier allows attackers to crash PHP and possibly execute arbitrary code via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=73055 - https://github.com/m6w6/ext-http/commit/17137d4ab1ce81a2cee0fae842340a344ef3da83 - https://bugs.php.net/bug.php?id=73055&edit=1 - https://lists.debian
tp/commit/17137d4ab1ce81a2cee0fae842340a344ef3da83 - https://bugs.php.net/bug.php?id=73055&edit=1 - https://lists.debian.org/debian-lts-announce/2019/09/msg00022.html
CVE ID: CVE-2016-7399 State: PUBLISHED Published: 2017-01-04T21:00:00 Last Updated: 2024-08-06T01:57:47.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense. Additional Analyst Notes: - CVE Program Container: References: - http://www.sec-1.com/blog/2016/veritas-netbackup-appliance-unauthenticated-remote-command-execution - http://www.securityfocus.com/bid/94384 - https://www.veritas.com/support/en_US/article.000116055 - http
mand-execution - http://www.securityfocus.com/bid/94384 - https://www.veritas.com/support/en_US/article.000116055 - http://www.securitytracker.com/id/1037555 - https://www.veritas.com/content/support/en_US/security/VTS16-002.html
CVE ID: CVE-2016-7400 State: PUBLISHED Published: 2017-02-07T15:00:00 Last Updated: 2024-08-06T01:57:47.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Exponent CMS before 2.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an activate_address address controller action, (2) title parameter in a show blog controller action, or (3) content_id parameter in a showComments expComment controller action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.0 - http://www.openwall.com/lists/oss-security/2016/09/18/2 - https://www.e
m/exponentcms/exponent-cms/releases/tag/v2.4.0 - http://www.openwall.com/lists/oss-security/2016/09/18/2 - https://www.exploit-db.com/exploits/40412/ - https://exponentcms.lighthouseapp.com/projects/61783/changesets/e916702a91a6342bbab483a2be2ba2f11dca3aa3 - https://github.com/exponentcms/exponent-cms/commit/e916702a91a6342bbab483a2be2ba2f11dca3aa3 - http://www.openwall.com/lists/oss-security/2016/09/18/10 - http://www.securityfocus.com/bid/93041
CVE ID: CVE-2016-7401 State: PUBLISHED Published: 2016-10-03T18:00:00 Last Updated: 2024-08-06T01:57:47.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3678 - http://rhn.redhat.com/errata/RHSA-2016-2040.html - http://rhn.redhat.com/errata/RHSA-2016-2043.html - http://www.securitytracker.com/id/1036899 - http://rhn.redhat.com/errata/RHSA-2016-2041.html - https
SA-2016-2043.html - http://www.securitytracker.com/id/1036899 - http://rhn.redhat.com/errata/RHSA-2016-2041.html - https://www.djangoproject.com/weblog/2016/sep/26/security-releases/ - http://rhn.redhat.com/errata/RHSA-2016-2042.html - http://www.ubuntu.com/usn/USN-3089-1 - http://www.securityfocus.com/bid/93182 - http://rhn.redhat.com/errata/RHSA-2016-2038.html - http://rhn.redhat.com/errata/RHSA-2016-2039.html
CVE ID: CVE-2016-7402 State: PUBLISHED Published: 2016-11-03T10:00:00 Last Updated: 2024-08-06T01:57:47.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa (system administrator) via dbcc import_sproc SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-017/?fid=8409 - http://www.securityfocus.com/bid/92950