Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-6590 State: PUBLISHED Published: 2020-01-08T15:43:33 Last Updated: 2024-08-06T01:36:28.532Z Vendors: Symantec Products: IT Management Suite, Ghost Solution Suite, Symantec Endpoint Virtualization, Encryption Desktop Problem Types: untrusted search path Description: A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec Encryption Desktop 10.x prior to 10.4.1, which could let a local malicious user execute arbitrary code. Additional Analyst N
yption Desktop 10.x prior to 10.4.1, which could let a local malicious user execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94279 - http://www.securitytracker.com/id/1037302 - https://support.symantec.com/us/en/article.symsa1385.html
CVE ID: CVE-2016-6591 State: PUBLISHED Published: 2020-01-08T15:23:00 Last Updated: 2024-08-06T01:36:28.656Z Vendors: Symantec Products: Norton App Lock Problem Types: Local Security Bypass Vulnerability Description: A security bypass vulnerability exists in Symantec Norton App Lock 1.0.3.186 and earlier if application pinning is enabled, which could let a local malicious user bypass security restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94343 - https://support.symantec.com/us/en/article.symsa1386.html
CVE ID: CVE-2016-6592 State: PUBLISHED Published: 2020-01-14T20:50:23 Last Updated: 2024-08-06T01:36:28.503Z Vendors: Symantec Products: Norton Download Manager Problem Types: Other Description: A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a specially crafted DLL file that, when placed on the target user's system, will cause the Norton Download Manager component to load the remote user's DLL instead of the intended DLL and execute arbitrary code when the Norton Download Manager component is run by the target user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94695 - http://ww
ser. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94695 - http://www.securityfocus.com/bid/95444 - http://www.securitytracker.com/id/1037622 - http://www.securitytracker.com/id/1037623 - http://www.securitytracker.com/id/1037624 - https://support.symantec.com/us/en/article.SYMSA1394.html
CVE ID: CVE-2016-6593 State: PUBLISHED Published: 2020-01-08T15:02:07 Last Updated: 2024-08-06T01:36:28.442Z Vendors: Symantec Products: VIP Access Desktop Problem Types: untrusted search path Description: A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let local malicious users execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/140098/Symantec-VIP-Access-Arbitrary-DLL-Execution.html - http://www.securityfocus.com/bid/94731 - http://www.securityfocus.com/archive/1/539889/100/0/threaded - https://support.symantec.com/us/en/article.s
/bid/94731 - http://www.securityfocus.com/archive/1/539889/100/0/threaded - https://support.symantec.com/us/en/article.symsa1388.html
CVE ID: CVE-2016-6594 State: PUBLISHED Published: 2017-06-08T20:00:00 Last Updated: 2024-08-06T01:36:28.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blue Coat Advanced Secure Gateway 6.6, CacheFlow 3.4, ProxySG 6.5 and 6.6 allows remote attackers to bypass blocked requests, user authentication, and payload scanning. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91404 - https://bto.bluecoat.com/security-advisory/sa130
CVE ID: CVE-2016-6595 State: PUBLISHED Published: 2017-01-04T20:00:00 Last Updated: 2024-08-06T01:36:28.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SwarmKit toolkit 1.12.0 for Docker allows remote authenticated users to cause a denial of service (prevention of cluster joins) via a long sequence of join and quit actions. NOTE: the vendor disputes this issue, stating that this sequence is not "removing the state that is left by old nodes. At some point the manager obviously stops being able to accept new nodes, since it runs out of memory. Given that both for Docker swarm and for Docker Swarmkit nodes are *required* to provide a secret token (it's actually the only mode
oth for Docker swarm and for Docker Swarmkit nodes are *required* to provide a secret token (it's actually the only mode of operation), this means that no adversary can simply join nodes and exhaust manager resources. We can't do anything about a manager running out of memory and not being able to add new legitimate nodes to the system. This is merely a resource provisioning issue, and definitely not a CVE worthy vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/02/8 - http://www.openwall.com/lists/oss-security/2016/08/04/1 - http://www.securityfocus.com/bid/92195 - http://www.securitytracker.com/id/1036548 - ht
ists/oss-security/2016/08/04/1 - http://www.securityfocus.com/bid/92195 - http://www.securitytracker.com/id/1036548 - http://www.openwall.com/lists/oss-security/2016/09/02/1
CVE ID: CVE-2016-6597 State: PUBLISHED Published: 2016-08-10T14:00:00 Last Updated: 2024-08-06T01:36:28.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary web-resources from the backend mail system via a request for the resource, aka an Open Reverse Proxy vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92351 - https://www.pallas.com/advisories/sophos_eas_open_reverse_proxy_vulnerability - http://packetstormsecurity.com/files/138210/Sophos-Mobile-Control-3.5.0.3-Open-Reverse-Proxy.html
_proxy_vulnerability - http://packetstormsecurity.com/files/138210/Sophos-Mobile-Control-3.5.0.3-Open-Reverse-Proxy.html - http://www.securityfocus.com/archive/1/539126/100/0/threaded
CVE ID: CVE-2016-6598 State: PUBLISHED Published: 2018-01-30T20:00:00 Last Updated: 2024-08-06T01:36:28.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010. This service contains a method that allows uploading a file to an arbitrary path on the machine that is running Track-It!. This can be used to upload a file to the web root and achieve code execution as NETWORK SERVICE or SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Jan/92 - https://github.com/pedrib/PoC/blob/master/advisories/bmc
References: - http://seclists.org/fulldisclosure/2018/Jan/92 - https://github.com/pedrib/PoC/blob/master/advisories/bmc-track-it-11.4.txt - https://communities.bmc.com/community/bmcdn/bmc_track-it/blog/2016/01/04/track-it-security-advisory-24-dec-2015 - http://packetstormsecurity.com/files/146110/BMC-Track-It-11.4-Code-Execution-Information-Disclosure.html
CVE ID: CVE-2016-6599 State: PUBLISHED Published: 2018-01-30T20:00:00 Last Updated: 2024-08-06T01:36:28.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService) on port 9010. This service contains a method that can be used to retrieve a configuration file that contains the application database name, username and password as well as the domain administrator username and password. These are encrypted with a fixed key and IV ("NumaraIT") using the DES algorithm. The domain administrator username and password can only be obtained if the Self-Service component is enabled
algorithm. The domain administrator username and password can only be obtained if the Self-Service component is enabled, which is the most common scenario in enterprise deployments. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Jan/92 - https://github.com/pedrib/PoC/blob/master/advisories/bmc-track-it-11.4.txt - https://communities.bmc.com/community/bmcdn/bmc_track-it/blog/2016/01/04/track-it-security-advisory-24-dec-2015 - http://packetstormsecurity.com/files/146110/BMC-Track-It-11.4-Code-Execution-Information-Disclosure.html
CVE ID: CVE-2016-6600 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T01:36:28.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to upload and execute arbitrary JSP files via a .. (dot dot) in the fileName parameter to servlets/FileUploadServlet. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Aug/54 - https://forums.webnms.com/topic/recent-vulnerabilities-in-webnms-and-how-to-protect-the-server-against-them - http://www.securityfocus.com/bid/92402 - https://www.explo
lities-in-webnms-and-how-to-protect-the-server-against-them - http://www.securityfocus.com/bid/92402 - https://www.exploit-db.com/exploits/40229/ - http://www.securityfocus.com/archive/1/539159/100/0/threaded - http://packetstormsecurity.com/files/138244/WebNMS-Framework-5.2-SP1-Traversal-Weak-Obfuscation-User-Impersonation.html - https://blogs.securiteam.com/index.php/archives/2712 - https://github.com/pedrib/PoC/blob/master/advisories/webnms-5.2-sp1-pwn.txt
CVE ID: CVE-2016-6601 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T01:36:29.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the file download functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to read arbitrary files via a .. (dot dot) in the fileName parameter to servlets/FetchFile. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Aug/54 - https://forums.webnms.com/topic/recent-vulnerabilities-in-webnms-and-how-to-protect-the-server-against-them - http://www.securityfocus.com/bid/92402 - http://www.rapid7.com/db/modules/auxiliar
-to-protect-the-server-against-them - http://www.securityfocus.com/bid/92402 - http://www.rapid7.com/db/modules/auxiliary/admin/http/webnms_file_download - https://www.exploit-db.com/exploits/40229/ - http://www.securityfocus.com/archive/1/539159/100/0/threaded - http://www.rapid7.com/db/modules/auxiliary/admin/http/webnms_cred_disclosure - http://packetstormsecurity.com/files/138244/WebNMS-Framework-5.2-SP1-Traversal-Weak-Obfuscation-User-Impersonation.html - https://blogs.securiteam.com/index.php/archives/2712 - https://github.com/pedrib/PoC/blob/master/advisories/webnms-5.2-sp1-pwn.txt
CVE ID: CVE-2016-6602 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T01:36:28.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependent attackers to obtain cleartext passwords by leveraging access to WEB-INF/conf/securitydbData.xml. NOTE: this issue can be combined with CVE-2016-6601 for a remote exploit. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Aug/54 - https://forums.webnms.com/topic/recent-vulnerabilities-in-webnms-and-how-to-protect-the-server-against-them - http://www.secu
://forums.webnms.com/topic/recent-vulnerabilities-in-webnms-and-how-to-protect-the-server-against-them - http://www.securityfocus.com/bid/92402 - https://www.exploit-db.com/exploits/40229/ - http://www.securityfocus.com/archive/1/539159/100/0/threaded - http://www.rapid7.com/db/modules/auxiliary/admin/http/webnms_cred_disclosure - http://packetstormsecurity.com/files/138244/WebNMS-Framework-5.2-SP1-Traversal-Weak-Obfuscation-User-Impersonation.html - https://blogs.securiteam.com/index.php/archives/2712 - https://github.com/pedrib/PoC/blob/master/advisories/webnms-5.2-sp1-pwn.txt
CVE ID: CVE-2016-6603 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T01:36:28.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Aug/54 - https://forums.webnms.com/topic/recent-vulnerabilities-in-webnms-and-how-to-protect-the-server-against-them - http://www.securityfocus.com/bid/92402 - https://www.exploit-db.com/exploits/40229/ - http://www.securityfocus.com/archive/1/539159/100/0/threaded - http://pac
- https://www.exploit-db.com/exploits/40229/ - http://www.securityfocus.com/archive/1/539159/100/0/threaded - http://packetstormsecurity.com/files/138244/WebNMS-Framework-5.2-SP1-Traversal-Weak-Obfuscation-User-Impersonation.html - https://blogs.securiteam.com/index.php/archives/2712 - https://github.com/pedrib/PoC/blob/master/advisories/webnms-5.2-sp1-pwn.txt
CVE ID: CVE-2016-6604 State: PUBLISHED Published: 2017-01-30T22:00:00 Last Updated: 2024-08-06T01:36:28.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: NULL pointer dereference in Samsung Exynos fimg2d driver for Android L(5.0/5.1) and M(6.0) allows attackers to have unspecified impact via unknown vectors. The Samsung ID is SVE-2016-6382. Additional Analyst Notes: - CVE Program Container: References: - http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016 - http://www.openwall.com/lists/oss-security/2016/08/18/10 - http://www.openwall.com/lists/oss-security/2016/08/05/3
CVE ID: CVE-2016-6605 State: PUBLISHED Published: 2017-04-10T14:00:00 Last Updated: 2024-08-06T01:36:28.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_all_product_issues.html#tsb_174
CVE ID: CVE-2016-6606 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T01:36:28.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in cookie encryption in phpMyAdmin. The decryption of the username/password is vulnerable to a padding oracle attack. This can allow an attacker who has access to a user's browser cookie file to decrypt the username and password. Furthermore, the same initialization vector (IV) is used to hash the username and password stored in the phpMyAdmin cookie. If a user has the same password as their username, an attacker who examines the browser cookie can see that they are the same - but the attacker can not d
their username, an attacker who examines the browser cookie can see that they are the same - but the attacker can not directly decode these values from the cookie as it is still hashed. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-29 - http://www.securityfocus.com/bid/94114 - https://security.gentoo.org/glsa/201701-32 - https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html
CVE ID: CVE-2016-6607 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T01:36:28.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS issues were discovered in phpMyAdmin. This affects Zoom search (specially crafted column content can be used to trigger an XSS attack); GIS editor (certain fields in the graphical GIS editor are not properly escaped and can be used to trigger an XSS attack); Relation view; the following Transformations: Formatted, Imagelink, JPEG: Upload, RegexValidation, JPEG inline, PNG inline, and transformation wrapper; XML export; MediaWiki export; Designer; When the MySQL server is running with a specially-crafted log_bin directive;
r; XML export; MediaWiki export; Designer; When the MySQL server is running with a specially-crafted log_bin directive; Database tab; Replication feature; and Database search. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93257 - https://www.phpmyadmin.net/security/PMASA-2016-30 - https://security.gentoo.org/glsa/201701-32 - https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html
CVE ID: CVE-2016-6608 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T01:36:28.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions (prior to 4.6.4) are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-31 - http://www.securityfocus.com/bid/93258 - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-6609 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T01:36:29.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94112 - https://www.phpmyadmin.net/security/PMASA-2016-32 - https://lists.debian.org/debian-lts-announce/2018/07/msg00006.html - https://security.gentoo.org
ecurity/PMASA-2016-32 - https://lists.debian.org/debian-lts-announce/2018/07/msg00006.html - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-6610 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T01:36:28.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a particular error in the export mechanism to discover the full path of phpMyAdmin on the disk. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-33 - http://www.securityfocus.com/bid/94118 - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-6611 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T01:36:29.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-34 - http://www.securityfocus.com/bid/94117 - https://security.gentoo.org/glsa/201701-32 - https://lists.debian.org/debian-lts
ttp://www.securityfocus.com/bid/94117 - https://security.gentoo.org/glsa/201701-32 - https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html
CVE ID: CVE-2016-6612 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T01:36:29.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-35 - http://www.securityfocus.com/bid/94113 - https://security.gentoo.org/glsa/201701-32 - https://lists.debian.org/debian-lts-announce/2019/06/m
ocus.com/bid/94113 - https://security.gentoo.org/glsa/201701-32 - https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html
CVE ID: CVE-2016-6613 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T01:36:28.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. A user can specially craft a symlink on disk, to a file which phpMyAdmin is permitted to read but the user is not, which phpMyAdmin will then expose to the user. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-36 - http://www.securityfocus.com/bid/94115 - https://security.gentoo.org/glsa/201701-32 - h
min.net/security/PMASA-2016-36 - http://www.securityfocus.com/bid/94115 - https://security.gentoo.org/glsa/201701-32 - https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html
CVE ID: CVE-2016-6614 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T01:36:28.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin involving the %u username replacement functionality of the SaveDir and UploadDir features. When the username substitution is configured, a specially-crafted user name can be used to circumvent restrictions to traverse the file system. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-37 - https://lists.d
nalyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-37 - https://lists.debian.org/debian-lts-announce/2018/07/msg00006.html - http://www.securityfocus.com/bid/94366 - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-6615 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T01:36:28.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS issues were discovered in phpMyAdmin. This affects navigation pane and database/table hiding feature (a specially-crafted database name can be used to trigger an XSS attack); the "Tracking" feature (a specially-crafted query can be used to trigger an XSS attack); and GIS visualization feature. All 4.6.x versions (prior to 4.6.4) and 4.4.x versions (prior to 4.4.15.8) are affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95041 - https://lists.debian.org/debian-lts-an
: - CVE Program Container: References: - http://www.securityfocus.com/bid/95041 - https://lists.debian.org/debian-lts-announce/2018/07/msg00006.html - https://www.phpmyadmin.net/security/PMASA-2016-38 - https://security.gentoo.org/glsa/201701-32