Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-9440 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-08-06T02:50:38.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/blob/master/ChangeLog - https://github.com/tats/w3m/issues/22 - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9441 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-10-15T17:15:24.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/issues/24 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9442 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-08-06T02:50:38.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause memory corruption in certain conditions via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/commit/d43527cfa0dbb3ccefec4a6f7b32c1434739aa29 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9443 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-08-06T02:50:38.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tats/w3m/issues/28 - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9444 State: PUBLISHED Published: 2017-01-12T06:06:00 Last Updated: 2024-08-06T02:50:38.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95393 - http://www.securitytracker.com/id/1037582 - https://security.gentoo.org/glsa/201708-01 - https://kb.isc.org/article/AA-01441/74/CVE-2016-9444 - https://security.netapp.com/advisory/ntap-20180926-000
01708-01 - https://kb.isc.org/article/AA-01441/74/CVE-2016-9444 - https://security.netapp.com/advisory/ntap-20180926-0005/ - http://www.debian.org/security/2017/dsa-3758 - https://access.redhat.com/errata/RHSA-2017:1583 - http://rhn.redhat.com/errata/RHSA-2017-0062.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05381687
CVE ID: CVE-2016-9445 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T02:50:38.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service (crash) via large width and height values, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0021.html - https://bugzilla.gnome.org/show_bug.cgi?id=774533 - http://www.securityfocus.com/bid/94421 - http://www.openwall.com/lists/oss-security/2016/11/18/13 - http://rhn.redhat.com/errata/RHSA-2017-0018.html - https://cgit.freedesktop.org/
.com/lists/oss-security/2016/11/18/13 - http://rhn.redhat.com/errata/RHSA-2017-0018.html - https://cgit.freedesktop.org/gstreamer/gst-plugins-bad/commit/gst/vmnc/vmncdec.c?id=4cb1bcf1422bbcd79c0f683edb7ee85e3f7a31fe - http://www.openwall.com/lists/oss-security/2016/11/18/12 - http://rhn.redhat.com/errata/RHSA-2016-2974.html - https://scarybeastsecurity.blogspot.de/2016/11/0day-poc-risky-design-decisions-in.html - https://security.gentoo.org/glsa/201705-10
CVE ID: CVE-2016-9446 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T02:50:38.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=774533 - http://www.openwall.com/lists/oss-security/2016/11/18/13 - http://www.securityfocus.com/bid/94423 - https://access.redhat.com/errata/RHSA-2017:2060 - https://cgit.freede
1/18/13 - http://www.securityfocus.com/bid/94423 - https://access.redhat.com/errata/RHSA-2017:2060 - https://cgit.freedesktop.org/gstreamer/gst-plugins-bad/commit/gst/vmnc/vmncdec.c?id=4cb1bcf1422bbcd79c0f683edb7ee85e3f7a31fe - http://www.openwall.com/lists/oss-security/2016/11/18/12 - https://scarybeastsecurity.blogspot.de/2016/11/0day-poc-risky-design-decisions-in.html - https://security.gentoo.org/glsa/201705-10 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UM7IXFGHV66KNWGWG6ZBDNKXD2UJL2VQ/
CVE ID: CVE-2016-9447 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T02:50:38.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/11/18/13 - http://rhn.redhat.com/errata/RHSA-2017-0018.html - http://www.openwall.com/lists/oss-security/2016/11/18/12 - http://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-compromising-linux-desktop.html - h
-security/2016/11/18/12 - http://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-compromising-linux-desktop.html - http://www.securityfocus.com/bid/94427 - http://rhn.redhat.com/errata/RHSA-2016-2974.html - https://security.gentoo.org/glsa/201705-10
CVE ID: CVE-2016-9448 State: PUBLISHED Published: 2017-01-27T17:00:00 Last Updated: 2024-08-06T02:50:38.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII to values that access 0-byte arrays. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9297. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html - https://security.gentoo.org/glsa/201701-16 - http://www.securityfocu
/opensuse-security-announce/2016-12/msg00017.html - https://security.gentoo.org/glsa/201701-16 - http://www.securityfocus.com/bid/94420 - http://www.openwall.com/lists/oss-security/2016/11/18/15 - http://bugzilla.maptools.org/show_bug.cgi?id=2593 - http://www.debian.org/security/2017/dsa-3762
CVE ID: CVE-2016-9449 State: PUBLISHED Published: 2016-11-25T18:00:00 Last Updated: 2024-08-06T02:50:38.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: The taxonomy module in Drupal 7.x before 7.52 and 8.x before 8.2.3 might allow remote authenticated users to obtain sensitive information about taxonomy terms by leveraging inconsistent naming of access query tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3718 - http://www.securityfocus.com/bid/94367 - https://www.drupal.org/SA-CORE-2016-005
CVE ID: CVE-2016-9450 State: PUBLISHED Published: 2016-11-25T18:00:00 Last Updated: 2024-08-06T02:50:38.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks by leveraging failure to specify a correct cache context. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94367 - https://www.drupal.org/SA-CORE-2016-005
CVE ID: CVE-2016-9451 State: PUBLISHED Published: 2016-11-25T18:00:00 Last Updated: 2024-08-06T02:50:38.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Confirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduct open redirect attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3718 - http://www.securityfocus.com/bid/94367 - https://www.drupal.org/SA-CORE-2016-005
CVE ID: CVE-2016-9452 State: PUBLISHED Published: 2016-11-25T18:00:00 Last Updated: 2024-08-06T02:50:38.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The transliterate mechanism in Drupal 8.x before 8.2.3 allows remote attackers to cause a denial of service via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94367 - https://www.drupal.org/SA-CORE-2016-005
CVE ID: CVE-2016-9453 State: PUBLISHED Published: 2017-01-27T17:00:00 Last Updated: 2024-08-06T02:50:38.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a TIFFTAG_JPEGTABLES of length one. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94406 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html - http://www.openwall.com/lists/oss-security/2016/11/19/1 - http://bugzilla.maptools.org/show_bug.cgi?id=2579 - https://s
http://www.openwall.com/lists/oss-security/2016/11/19/1 - http://bugzilla.maptools.org/show_bug.cgi?id=2579 - https://security.gentoo.org/glsa/201701-16 - http://www.debian.org/security/2017/dsa-3762
CVE ID: CVE-2016-9454 State: PUBLISHED Published: 2017-03-28T02:46:00 Last Updated: 2024-08-06T02:50:38.507Z Vendors: n/a Products: Revive Adserver All versions before 3.2.3 Problem Types: CWE-79 Description: Revive Adserver before 3.2.3 suffers from Persistent XSS. A vector for persistent XSS attacks via the Revive Adserver user interface exists, requiring a trusted (non-admin) account. The banner image URL for external banners wasn't properly escaped when displayed in most of the banner related pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/83964 - https://www.revive-adserver.com/security/revive-sa-2016-001/ - https://github.com/rev
/www.securityfocus.com/bid/83964 - https://www.revive-adserver.com/security/revive-sa-2016-001/ - https://github.com/revive-adserver/revive-adserver/commit/f6880330a8e11e804663f132867e9eb9b1f94e83
CVE ID: CVE-2016-9455 State: PUBLISHED Published: 2017-03-28T02:46:00 Last Updated: 2024-08-06T02:50:38.479Z Vendors: n/a Products: Revive Adserver All versions before 3.2.3 Problem Types: CWE-352 Description: Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). A number of scripts in Revive Adserver's user interface are vulnerable to CSRF attacks: `www/admin/banner-acl.php`, `www/admin/banner-activate.php`, `www/admin/banner-advanced.php`, `www/admin/banner-modify.php`, `www/admin/banner-swf.php`, `www/admin/banner-zone.php`, `www/admin/tracker-modify.php`. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/97123 - https://
fy.php`. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/97123 - https://github.com/revive-adserver/revive-adserver/commit/65a9c8119b4bc7493fd957e1a8d6f6f731298b45 - http://www.securityfocus.com/bid/83964 - https://www.revive-adserver.com/security/revive-sa-2016-001/
CVE ID: CVE-2016-9456 State: PUBLISHED Published: 2017-03-28T02:46:00 Last Updated: 2024-08-06T02:50:38.423Z Vendors: n/a Products: Revive Adserver All versions before 3.2.3 Problem Types: CWE-352 Description: Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). The Revive Adserver team conducted a security audit of the admin interface scripts in order to identify and fix other potential CSRF vulnerabilities. Over 20+ such issues were fixed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/83964 - https://github.com/revive-adserver/revive-adserver/commit/e563ca61e4f3b7210cb61f53284adaa8aef4a49a - https://www.revive-adse
s://github.com/revive-adserver/revive-adserver/commit/e563ca61e4f3b7210cb61f53284adaa8aef4a49a - https://www.revive-adserver.com/security/revive-sa-2016-001/
CVE ID: CVE-2016-9457 State: PUBLISHED Published: 2017-03-28T02:46:00 Last Updated: 2024-08-06T02:50:38.590Z Vendors: n/a Products: Revive Adserver All versions before 3.2.3 Problem Types: CWE-79 Description: Revive Adserver before 3.2.3 suffers from Reflected XSS. `www/admin/stats.php` is vulnerable to reflected XSS attacks via multiple parameters that are not properly sanitised or escaped when displayed, such as setPerPage, pageId, bannerid, period_start, period_end, and possibly others. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/revive-adserver/revive-adserver/commit/ecbe822b48ef4ff61c2c6357c0c94199a81946f4 - http://www.securityfocus.com/bid/83964
evive-adserver/revive-adserver/commit/ecbe822b48ef4ff61c2c6357c0c94199a81946f4 - http://www.securityfocus.com/bid/83964 - https://www.revive-adserver.com/security/revive-sa-2016-001/ - https://hackerone.com/reports/107879
CVE ID: CVE-2016-9458 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9459 State: PUBLISHED Published: 2017-03-28T02:46:00 Last Updated: 2024-08-06T02:50:38.563Z Vendors: n/a Products: Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 Problem Types: CWE-209 Description: Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution vulnerability potentially leading to a local XSS. The download log functionality in the admin screen is delivering the log in JSON format to the end-user. The file was delivered with an attachment disposition forcing the browser to download the document. However, Firefox running on Microsoft Windows would offer the user to open the data
e browser to download the document. However, Firefox running on Microsoft Windows would offer the user to open the data in the browser as an HTML document. Thus any injected data in the log would be executed. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.org/security/advisory?id=oc-sa-2016-012 - https://github.com/owncloud/core/commit/b7fa2c5dc945b40bc6ed0a9a0e47c282ebf043e1 - https://github.com/owncloud/core/commit/044ee072a647636b1a17c89265c7233b35371335 - https://hackerone.com/reports/146278 - https://github.com/owncloud/core/commit/efa35d621dc7ff975468e636a5d1c153511296dc - https://nextcloud.com/security/advisory/?id=nc-sa-2016-002 - https://github.com
a35d621dc7ff975468e636a5d1c153511296dc - https://nextcloud.com/security/advisory/?id=nc-sa-2016-002 - https://github.com/nextcloud/server/commit/94975af6db1551c2d23136c2ea22866a5b416070 - http://www.securityfocus.com/bid/97284
CVE ID: CVE-2016-9460 State: PUBLISHED Published: 2017-03-28T02:46:00 Last Updated: 2024-08-06T02:50:38.345Z Vendors: n/a Products: Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 Problem Types: CWE-451 Description: Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a content-spoofing attack in the files app. The location bar in the files app was not verifying the passed parameters. An attacker could craft an invalid link to a fake directory structure and use this to display an attacker-controlled error message to the user. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/repor
error message to the user. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/145463 - https://github.com/nextcloud/server/commit/8aa0832bd449c44ec300da4189bd8ed4e036140c - https://owncloud.org/security/advisory/?id=oc-sa-2016-013 - https://nextcloud.com/security/advisory/?id=nc-sa-2016-003 - http://www.securityfocus.com/bid/97282 - https://github.com/nextcloud/server/commit/dea8e29289a1b99d5e889627c2e377887f4f2983 - https://github.com/owncloud/core/commit/c92c234059f8b1dc7d53122985ec0d398895a2cf - https://github.com/nextcloud/server/commit/2da43e3751576bbc838f238a09955c4dcdebee8e
CVE ID: CVE-2016-9461 State: PUBLISHED Published: 2017-03-28T02:46:00 Last Updated: 2024-08-06T02:50:38.345Z Vendors: n/a Products: Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 Problem Types: CWE-275 Description: Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions. The WebDAV endpoint was not properly checking the permission on a WebDAV COPY action. This allowed an authenticated attacker with access to a read-only share to put new files in there. It was not possible to modify existing files. Additional Analyst Notes: - CVE Program Container: References: - htt
here. It was not possible to modify existing files. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.org/security/advisory/?id=oc-sa-2016-014 - https://nextcloud.com/security/advisory/?id=nc-sa-2016-004 - http://www.securityfocus.com/bid/97276 - https://github.com/owncloud/core/commit/acbbadb71ceee7f01da347f7dcd519beda78cc47 - https://github.com/owncloud/core/commit/c0a4b7b3f38ad2eaf506484b3b92ec678cb021c9 - https://github.com/owncloud/core/commit/121a3304a0c37ccda0e1b63ddc528cba9121a36e - https://github.com/owncloud/core/commit/0622e635d97cb17c5e1363e370bb8268cc3d2547 - https://hackerone.com/reports/145950 - https://github.com/nextcloud/server/commit/3491400
b17c5e1363e370bb8268cc3d2547 - https://hackerone.com/reports/145950 - https://github.com/nextcloud/server/commit/3491400261c1454a9a30d3ec96969573330120cc
CVE ID: CVE-2016-9462 State: PUBLISHED Published: 2017-03-28T02:46:00 Last Updated: 2024-08-06T02:50:38.584Z Vendors: n/a Products: Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 Problem Types: CWE-275 Description: Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore privileges when restoring a file. The restore capability of Nextcloud/ownCloud was not verifying whether a user has only read-only access to a share. Thus a user with read-only access was able to restore old versions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextcloud/server/commit/1208953ba1d4
Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextcloud/server/commit/1208953ba1d4d55a18a639846bbcdd66a2d5bc5e - https://github.com/owncloud/core/commit/c93eca49c32428ece03dd67042772d5fa62c8d6e - https://owncloud.org/security/advisory/?id=oc-sa-2016-015 - https://github.com/owncloud/core/commit/3b056fa68ce502ceb0db9b446dab3b9e7b10dd13 - https://github.com/owncloud/core/commit/d31720b6f1e8c8dfeb5e8805ab35ad7c8000b2f1 - http://www.securityfocus.com/bid/97285 - https://hackerone.com/reports/146067 - https://github.com/owncloud/core/commit/23383080731d092e079986464a8c4c9ffcb79f4c - https://nextcloud.com/security/advisory/?id=nc-sa-2016-005
CVE ID: CVE-2016-9463 State: PUBLISHED Published: 2017-03-28T02:46:00 Last Updated: 2024-08-06T02:50:38.584Z Vendors: n/a Products: Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9 Problem Types: CWE-303 Description: Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9 suffer from SMB User Authentication Bypass. Nextcloud/ownCloud include an optional and not by default enabled SMB authentication component that allows authenticating users against an SMB server. This backend is implemented in a way that tries to connect to a SMB server and if that succeeded consider the user logge
This backend is implemented in a way that tries to connect to a SMB server and if that succeeded consider the user logged-in. The backend did not properly take into account SMB servers that have any kind of anonymous auth configured. This is the default on SMB servers nowadays and allows an unauthenticated attacker to gain access to an account without valid credentials. Note: The SMB backend is disabled by default and requires manual configuration in the Nextcloud/ownCloud config file. If you have not configured the SMB backend then you're not affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextcloud/apps/commit/b85ace6840b8
. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextcloud/apps/commit/b85ace6840b8a6704641086bc3b8eb8e81cb2274 - https://github.com/owncloud/apps/commit/16cbccfc946c8711721fa684d78135ca1fb64791 - https://rhinosecuritylabs.com/2016/10/operation-ownedcloud-exploitation-post-exploitation-persistence/ - https://github.com/owncloud/apps/commit/5d47e7b52646cf79edadd78ce10c754290cbb732 - https://github.com/owncloud/apps/commit/a0e07b7ddd5a5fd850a6e07f8457d05b76a300b3 - https://hackerone.com/reports/148151 - https://github.com/nextcloud/apps/commit/decb91fd31f4ffab191cbf09ce4e5c55c67a4087 - https://owncloud.org/security/advisory/?id=oc-sa-2016-017 - https://next
mmit/decb91fd31f4ffab191cbf09ce4e5c55c67a4087 - https://owncloud.org/security/advisory/?id=oc-sa-2016-017 - https://nextcloud.com/security/advisory/?id=nc-sa-2016-006
CVE ID: CVE-2016-9464 State: PUBLISHED Published: 2017-03-28T02:46:00 Last Updated: 2024-08-06T02:50:38.553Z Vendors: n/a Products: Nextcloud Server Nextcloud Server before 9.0.54 and 10.0.0 Problem Types: CWE-285 Description: Nextcloud Server before 9.0.54 and 10.0.0 suffers from an improper authorization check on removing shares. The Sharing Backend as implemented in Nextcloud does differentiate between shares to users and groups. In case of a received group share, users should be able to unshare the file to themselves but not to the whole group. The previous API implementation simply unshared the file to all users in the group. Additional Analyst Notes: - CVE Program Container: References
tation simply unshared the file to all users in the group. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextcloud/server/commit/7289cb5ec0b812992ab0dfb889744b94bc0994f0 - https://github.com/nextcloud/server/commit/3387e5d00fcf6b2ea6b285a091e5743f545e7202 - https://github.com/nextcloud/server/commit/a5471b4a3e3f30e99e4de39c97c0c3b3c2f1618f - https://github.com/nextcloud/server/commit/e2c4f4f9aa11bc92e8f2212cce73841b922187e8 - http://www.securityfocus.com/bid/97287 - https://nextcloud.com/security/advisory/?id=nc-sa-2016-007 - https://hackerone.com/reports/153905