Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ty.gentoo.org/glsa/201707-07 - http://www.securityfocus.com/bid/94224 - https://bugzilla.redhat.com/show_bug.cgi?id=1393882 - https://access.redhat.com/errata/RHSA-2017:1208 - https://github.com/mdadams/jasper/commit/634ce8e8a5accc0fa05dd2c20d42b4749d4b2735 - https://usn.ubuntu.com/3693-1/ - https://blogs.gentoo.org/ago/2016/11/07/jasper-use-after-free-in-jas_realloc-jas_malloc-c
CVE ID: CVE-2016-9263 State: PUBLISHED Published: 2017-10-12T16:00:00 Last Updated: 2024-08-06T02:42:11.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress through 4.8.2, when domain-based flashmediaelement.swf sandboxing is not used, allows remote attackers to conduct cross-domain Flash injection (XSF) attacks by leveraging code contained within the wp-includes/js/mediaelement/flashmediaelement.swf file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101294 - https://opnsec.com/2017/10/cve-2016-9263-unpatched-xsf-vulnerability-in-wordpress/
CVE ID: CVE-2016-9264 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:42:11.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94251 - http://www.openwall.com/lists/oss-security/2016/11/10/9 - https://blogs.gentoo.org/ago/2016/11/07/libming-listmp3-global-buffer-overflow-in-printmp3headers-listmp3-c/
CVE ID: CVE-2016-9265 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:42:11.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: The printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp3 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94252 - http://www.openwall.com/lists/oss-security/2016/11/10/10 - https://blogs.gentoo.org/ago/2016/11/09/libming-listmp3-divide-by-zero-in-printmp3headers-list
CVE ID: CVE-2016-9266 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:42:11.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/11/10/11 - https://blogs.gentoo.org/ago/2016/11/09/libming-listmp3-left-shift-in-listmp3-c - http://www.securityfocus.com/bid/94254
CVE ID: CVE-2016-9268 State: PUBLISHED Published: 2016-11-10T20:00:00 Last Updated: 2024-08-06T02:42:11.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticated super-administrators to execute arbitrary code by uploading a theme file with an zip extension, and then accessing it via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://dev.dotclear.org/2.0/ticket/2214 - http://www.securityfocus.com/bid/94246 - http://dev.dotclear.org/2.0/changeset/445e9ff79a1fa81033591761d6a340e219d159b2
CVE ID: CVE-2016-9269 State: PUBLISHED Published: 2017-02-21T07:46:00 Last Updated: 2024-08-06T02:42:11.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated, remote users with least privileges to run arbitrary commands on the system as root via Patch Update functionality. This was resolved in Version 6.5 CP 1737. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96252 - https://success.trendmicro.com/solution/1116672 - http://www.security
rences: - http://www.securityfocus.com/bid/96252 - https://success.trendmicro.com/solution/1116672 - http://www.securitytracker.com/id/1037849
CVE ID: CVE-2016-9271 State: PUBLISHED Published: 2019-11-26T15:32:01 Last Updated: 2024-08-06T02:42:11.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudera Manager 5.7.x before 5.7.6, 5.8.x before 5.8.4, and 5.9.x before 5.9.1 allows XSS in the help search feature. Additional Analyst Notes: - CVE Program Container: References: - https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb_210
CVE ID: CVE-2016-9272 State: PUBLISHED Published: 2016-11-11T11:00:00 Last Updated: 2024-08-06T02:42:11.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://exponentcms.lighthouseapp.com/projects/61783/tickets/1395-blind-sql-injection-vulnerability-in-exponent-cms-240-5 - http://www.securityfocus.com/bid/94261 - https://github.com/exponentcms/exponent-cms/commit/fffb2038de4c603931b785a4c3ec69cfd06181ba - https://exponentcms.lighthouseapp.co
thub.com/exponentcms/exponent-cms/commit/fffb2038de4c603931b785a4c3ec69cfd06181ba - https://exponentcms.lighthouseapp.com/projects/61783/tickets/1394-blind-sql-injection-vulnerability-in-exponent-cms-240-4
CVE ID: CVE-2016-9273 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T02:42:11.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF_STRIPCHOP mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/11/09/20 - http://www.openwall.com/lists/oss-security/2016/11/11/6 - https://security.gentoo.org/glsa/201701-16 - http://www.securityfocus.com/bid/94271 - http://bugzilla.maptools.org/show_bug.cgi?id=2587 - http://www.debian.org/security/2017/
w.securityfocus.com/bid/94271 - http://bugzilla.maptools.org/show_bug.cgi?id=2587 - http://www.debian.org/security/2017/dsa-3762
CVE ID: CVE-2016-9274 State: PUBLISHED Published: 2016-11-11T17:00:00 Last Updated: 2024-08-06T02:42:11.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Git 1.x for Windows allows local users to gain privileges via a Trojan horse git.exe file in the current working directory. NOTE: 2.x is unaffected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94289 - https://github.com/git-for-windows/git/issues/944 - https://www.youtube.com/watch?v=S7jOLv0sul0
CVE ID: CVE-2016-9275 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:42:11.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the _dwarf_skim_forms function in libdwarf/dwarf_macro5.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read). Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/11/11/7 - https://bugzilla.redhat.com/show_bug.cgi?id=1394802 - https://blogs.gentoo.org/ago/2016/11/07/libdwarf-heap-based-buffer-overflow-in-_dwarf_skim_forms-dwarf_macro5-c - https://sourceforge.net/p/libdwarf/code/ci/583f883
warf-heap-based-buffer-overflow-in-_dwarf_skim_forms-dwarf_macro5-c - https://sourceforge.net/p/libdwarf/code/ci/583f8834083b5ef834c497f5b47797e16101a9a6/ - http://www.securityfocus.com/bid/94284
CVE ID: CVE-2016-9276 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:42:11.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dwarf_get_aranges_list function in dwarf_arrange.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read). Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/11/11/9 - https://bugzilla.redhat.com/show_bug.cgi?id=1394804 - https://sourceforge.net/p/libdwarf/code/ci/583f8834083b5ef834c497f5b47797e16101a9a6/ - http://www.securityfocus.com/bid/94284 - https://blogs.gentoo.org/ago/2016/11/07/libdwarf-heap-based-buffer-ov
01a9a6/ - http://www.securityfocus.com/bid/94284 - https://blogs.gentoo.org/ago/2016/11/07/libdwarf-heap-based-buffer-overflow-in-dwarf_get_aranges_list-dwarf_arange-c
CVE ID: CVE-2016-9277 State: PUBLISHED Published: 2016-11-11T19:00:00 Last Updated: 2024-08-06T02:42:11.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Samsung Note devices allows attackers to cause a denial of service (UI restart) via vectors involving APIs and an activity that computes an out-of-bounds array index, aka SVE-2016-6906. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94292 - http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016
CVE ID: CVE-2016-9278 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T02:42:11.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows local users to cause a denial of service (kernel panic) via a crafted ioctl command. The Samsung ID is SVE-2016-6736. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/11/11/11 - http://www.openwall.com/lists/oss-security/2016/11/09/3 - http://www.securityfocus.com/bid/94283 - http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016
CVE ID: CVE-2016-9279 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T02:42:11.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows attackers to obtain sensitive information via unspecified vectors. The Samsung ID is SVE-2016-6853. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/11/11/11 - http://www.openwall.com/lists/oss-security/2016/11/09/3 - http://www.securityfocus.com/bid/94283 - http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016
CVE ID: CVE-2016-9282 State: PUBLISHED Published: 2016-11-11T22:00:00 Last Updated: 2024-08-06T02:42:11.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the search_string parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/exponentcms/exponent-cms/commit/e83721a5b9fcc88e1141a8fb29c3d1bd522257c1 - http://www.securityfocus.com/bid/94296 - http://www.securitytracker.com/id/1037281
CVE ID: CVE-2016-9283 State: PUBLISHED Published: 2016-11-11T22:00:00 Last Updated: 2024-08-06T02:42:11.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSearch/id/ and a trailing string, related to a "sef URL" issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/exponentcms/exponent-cms/commit/559792be727f4e731bfcb3935f5beec7749e9ce9 - http://www.securityfocus.com/bid/94296 - http://www.securitytracker.com/id/1037281
CVE ID: CVE-2016-9284 State: PUBLISHED Published: 2016-11-11T22:00:00 Last Updated: 2024-08-06T02:42:11.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: getUsersByJSON in framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0 allows remote attackers to read user information via users/getUsersByJSON/sort/ and a trailing string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/exponentcms/exponent-cms/commit/e7b6856ac384bf2b8ea7761a1e46d6e4186d36f4 - http://www.securityfocus.com/bid/94296 - http://www.securitytracker.com/id/1037281
CVE ID: CVE-2016-9285 State: PUBLISHED Published: 2016-11-11T22:00:00 Last Updated: 2024-08-06T02:42:11.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: framework/modules/addressbook/controllers/addressController.php in Exponent CMS v2.4.0 allows remote attackers to read user information via a modified id number, as demonstrated by address/edit/id/1, related to an "addresses, countries, and regions" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94296 - http://www.securitytracker.com/id/1037281 - https://github.com/exponentcms/exponent-cms/commit/9eeed1e82fb9e6d0d41e7dd10672df48045a9b59
CVE ID: CVE-2016-9286 State: PUBLISHED Published: 2016-11-11T22:00:00 Last Updated: 2024-08-06T02:42:11.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0patch1 does not properly restrict access to user records, which allows remote attackers to read address information, as demonstrated by an address/show/id/1 URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94296 - http://www.securitytracker.com/id/1037281 - https://github.com/exponentcms/exponent-cms/commit/e38aae66c785f08f3907aa121378caf71ca5f2d7
CVE ID: CVE-2016-9287 State: PUBLISHED Published: 2016-11-15T11:00:00 Last Updated: 2024-08-06T02:42:11.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: In /framework/modules/notfound/controllers/notfoundController.php of Exponent CMS 2.4.0 patch1, untrusted input is passed into getSearchResults. The method getSearchResults is defined in the search model with the parameter '$term' used directly in SQL. Impact is a SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94322 - https://github.com/exponentcms/exponent-cms/commit/4327ea96b3de89440693e06d03038121aa1fdcea
CVE ID: CVE-2016-9288 State: PUBLISHED Published: 2016-11-11T23:00:00 Last Updated: 2024-08-06T02:42:11.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: In framework/modules/navigation/controllers/navigationController.php in Exponent CMS v2.4.0 or older, the parameter "target" of function "DragnDropReRank" is directly used without any filtration which caused SQL injection. The payload can be used like this: /navigation/DragnDropReRank/target/1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037280 - https://github.com/exponentcms/exponent-cms/commit/2ddffb2e7eafe4830e3483a4b437873022c461ba - http://www.securityfocus.com/bid/
/github.com/exponentcms/exponent-cms/commit/2ddffb2e7eafe4830e3483a4b437873022c461ba - http://www.securityfocus.com/bid/94296
CVE ID: CVE-2016-9294 State: PUBLISHED Published: 2016-11-12T00:00:00 Last Updated: 2024-08-06T02:42:11.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artifex Software, Inc. MuJS before 5008105780c0b0182ea6eda83ad5598f225be3ee allows context-dependent attackers to conduct "denial of service (application crash)" attacks by using the "malformed labeled break/continue in JavaScript" approach, related to a "NULL pointer dereference" issue affecting the jscompile.c component. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.ghostscript.com/show_bug.cgi?id=697172 - http://www.securityfocus.com/bid/94293 - http://git.ghostscript.com/?p=mujs.git%3Ba=commi
t.com/show_bug.cgi?id=697172 - http://www.securityfocus.com/bid/94293 - http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=5008105780c0b0182ea6eda83ad5598f225be3ee
CVE ID: CVE-2016-9296 State: PUBLISHED Published: 2016-11-12T02:19:00 Last Updated: 2024-08-06T02:42:11.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: A null pointer dereference bug affects the 16.02 and many old versions of p7zip. A lack of null pointer check for the variable folders.PackPositions in function CInArchive::ReadAndDecodePackedStreams in CPP/7zip/Archive/7z/7zIn.cpp, as used in the 7z.so library and in 7z applications, will cause a crash and a denial of service when decoding malformed 7z files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94294 - https://sourceforge.net/p/p7zip/bugs/185/ - https://sourceforge
: References: - http://www.securityfocus.com/bid/94294 - https://sourceforge.net/p/p7zip/bugs/185/ - https://sourceforge.net/p/p7zip/discussion/383043/thread/648d34db/ - https://github.com/yangke/7zip-null-pointer-dereference
CVE ID: CVE-2016-9297 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T02:42:11.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII tag values. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-16 - http://www.openwall.com/lists/oss-security/2016/11/12/2 - http://bugzilla.maptools.org/show_bug.cgi?id=2590 - http://www.openwall.com/lists/oss-security/2016/11/14/7 - http://www.debian.org/security/2017/dsa-3762 - http://www.sec
http://www.openwall.com/lists/oss-security/2016/11/14/7 - http://www.debian.org/security/2017/dsa-3762 - http://www.securityfocus.com/bid/94419
CVE ID: CVE-2016-9298 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-08-06T02:50:36.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap overflow in the WaveletDenoiseImage function in MagickCore/fx.c in ImageMagick before 6.9.6-4 and 7.x before 7.0.3-6 allows remote attackers to cause a denial of service (crash) via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/3cbfb163cff9e5b8cdeace8312e9bfee810ed02b - https://github.com/ImageMagick/ImageMagick/issues/296 - http://www.securityfocus.com/bid/94310 - https://security.gentoo.org/glsa/201702-09 - http://www.openwall.com/list
296 - http://www.securityfocus.com/bid/94310 - https://security.gentoo.org/glsa/201702-09 - http://www.openwall.com/lists/oss-security/2016/11/14/10 - http://www.openwall.com/lists/oss-security/2016/11/13/1
CVE ID: CVE-2016-9299 State: PUBLISHED Published: 2017-01-12T23:00:00 Last Updated: 2024-08-06T02:50:36.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44642/ - http://www.openwall.com/lists/oss-security/2016/11/12/4 - http://www.securityfocus.com/bid/94281 - https://groups.google.com/forum/#%21original/jenkinsci-advisories/-fc-w9tNEJE/LZ7EOS0fBgAJ - https://lists.fedorapro
1 - https://groups.google.com/forum/#%21original/jenkinsci-advisories/-fc-w9tNEJE/LZ7EOS0fBgAJ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZW2KUKYLNLVDB7STLHLYALCUFLEGCRM6/ - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-11-16 - https://groups.google.com/forum/#%21original/jenkinsci-advisories/-fc-w9tNEJE/GRvEzWoJBgAJ - http://www.slideshare.net/codewhitesec/java-deserialization-vulnerabilities-the-forgotten-bug-class-deepsec-edition - https://www.cloudbees.com/jenkins-security-advisory-2016-11-16 - http://www.openwall.com/lists/oss-security/2016/11/14/9
CVE ID: CVE-2016-9300 State: REJECTED Published: 2016-12-06T18:00:00 Last Updated: 2016-12-06T18:57:01 Description: No description available.
CVE ID: CVE-2016-9301 State: REJECTED Published: 2016-12-06T18:00:00 Last Updated: 2016-12-06T18:57:01 Description: No description available.
CVE ID: CVE-2016-9302 State: REJECTED Published: 2016-12-06T18:00:00 Last Updated: 2016-12-06T18:57:01 Description: No description available.
CVE ID: CVE-2016-9303 State: PUBLISHED Published: 2017-01-25T19:00:00 Last Updated: 2024-08-06T02:50:36.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code or cause an infinite loop condition when reading or converting malformed FBX format files. Additional Analyst Notes: - CVE Program Container: References: - http://www.autodesk.com/trust/security-advisories/adsk-sa-2016-01 - http://www.securityfocus.com/bid/95805
CVE ID: CVE-2016-9304 State: PUBLISHED Published: 2017-01-25T19:00:00 Last Updated: 2024-08-06T02:50:36.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed DFX format files. Additional Analyst Notes: - CVE Program Container: References: - http://www.autodesk.com/trust/security-advisories/adsk-sa-2016-01 - http://www.securityfocus.com/bid/95799
CVE ID: CVE-2016-9305 State: PUBLISHED Published: 2017-01-25T19:00:00 Last Updated: 2024-08-06T02:50:36.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper handling in the Autodesk FBX-SDK before 2017.1 of type mismatches and previously deleted objects related to reading and converting malformed FBX format files can allow attackers to gain access to uninitialized pointers. Additional Analyst Notes: - CVE Program Container: References: - http://www.autodesk.com/trust/security-advisories/adsk-sa-2016-01 - http://www.securityfocus.com/bid/95803
CVE ID: CVE-2016-9306 State: PUBLISHED Published: 2017-01-25T19:00:00 Last Updated: 2024-08-06T02:50:36.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed DAE format files. Additional Analyst Notes: - CVE Program Container: References: - http://www.autodesk.com/trust/security-advisories/adsk-sa-2016-01 - http://www.securityfocus.com/bid/95807
CVE ID: CVE-2016-9307 State: PUBLISHED Published: 2017-01-25T19:00:00 Last Updated: 2024-08-06T02:50:36.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed 3DS format files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95802 - http://www.autodesk.com/trust/security-advisories/adsk-sa-2016-01
CVE ID: CVE-2016-9310 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T02:50:37.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us - http://support.ntp.org/bin/view/Main/NtpBug3118 - https://usn.ubuntu.com/3707-2/ - http://www.securityfocus.com/bid/94452 - http://rhn.redhat.com/errata/RHSA-2017-0252.html - http://support.ntp.org/bin/view/Main/Sec