Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/40064/ - https://bugzilla.redhat.com/show_bug.cgi?id=1343666 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://git.savannah.gnu.org/cgit/wget.git/commit/?id=e996e322ffd42aaa051602da182d03178d0f13e1 - http://rhn.redhat.com/errata/RHSA-2016-2587.html - http://www.securitytracker.com/id/1036133 - http://www.ubuntu.com/usn/USN-3012-1 - http://www.securityfocus.com/bid/91530 - https://security.paloaltonetworks.com/CVE-2016-4971 - http://packetstormsecurity.com/files/162395/GNU-wget-Arbitrary-File-Upload-Code-Execution.html
CVE ID: CVE-2016-4972 State: PUBLISHED Published: 2016-09-26T16:00:00 Last Updated: 2024-08-06T00:46:40.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), and python-muranoclient before 0.7.3 (liberty) and 0.8.x before 0.8.5 (mitaka) improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files, which allows remote attackers to create arbitrary Python objects and execute arbitrary code via crafted extended YAML tags in UI definitions in packages. Additional Analyst Notes: - CVE Program Container: References: - https:
xtended YAML tags in UI definitions in packages. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/python-muranoclient/+bug/1586078 - http://www.openwall.com/lists/oss-security/2016/06/23/8 - https://bugs.launchpad.net/murano/+bug/1586079
CVE ID: CVE-2016-4973 State: PUBLISHED Published: 2017-06-07T20:00:00 Last Updated: 2024-08-06T00:46:39.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1324759 - http://www.securityfocus.com/bid/92530 - http://www.openwall.com/lists/oss-security/2016/08/17/6
CVE ID: CVE-2016-4974 State: PUBLISHED Published: 2016-07-13T15:00:00 Last Updated: 2024-08-06T00:46:39.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS (AMQP 1.0) before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and execute arbitrary code by leveraging a crafted serialized object in a JMS ObjectMessage that is handled by the getObject function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91537 - http://www.securityfocus.com/archive/
s: - CVE Program Container: References: - http://www.securityfocus.com/bid/91537 - http://www.securityfocus.com/archive/1/538813/100/0/threaded - https://issues.apache.org/jira/browse/QPIDJMS-188 - http://www.securitytracker.com/id/1036239 - http://qpid.apache.org/components/jms/security-0-x.html - http://packetstormsecurity.com/files/137749/Apache-Qpid-Untrusted-Input-Deserialization.html - http://qpid.apache.org/components/jms/security.html
CVE ID: CVE-2016-4975 State: PUBLISHED Published: 2018-08-14T13:00:00Z Last Updated: 2024-09-16T19:47:03.346Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: (undefined) Description: Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the "Location" or other outbound header key or value. Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23). Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31). Additional Analyst Notes: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabiliti
.2.31). Additional Analyst Notes: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_22.html#CVE-2016-4975 - https://security.netapp.com/advisory/ntap-20180926-0006/ - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us - http://www.securityfocus.com/bid/105093 - https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-4975 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread
/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd
e.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e7
690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://l
pache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2016-4976 State: PUBLISHED Published: 2017-03-29T20:00:00 Last Updated: 2024-08-06T00:46:39.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Ambari 2.x before 2.4.0 includes KDC administrator passwords on the kadmin command line, which allows local users to obtain sensitive information via a process listing. Additional Analyst Notes: - CVE Program Container: References: - https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.4.0 - http://www.securityfocus.com/bid/97229
CVE ID: CVE-2016-4977 State: PUBLISHED Published: 2017-05-25T17:00:00 Last Updated: 2024-08-06T00:46:39.945Z Vendors: Pivotal Products: Spring Security OAuth Problem Types: Remote Code Execution Description: When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the crafting of the value for response_type. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2016-4977 - https://lists.apache.org/thread.html/37d7e820fc65a768de3e096e98382d5529a52a039f093
//pivotal.io/security/cve-2016-4977 - https://lists.apache.org/thread.html/37d7e820fc65a768de3e096e98382d5529a52a039f093e59357d0bc0%40%3Cdev.fineract.apache.org%3E - https://lists.apache.org/thread.html/0841d849c23418c473ccb9183cbf41a317cb0476e44be48022ce3488%40%3Cdev.fineract.apache.org%3E - http://www.openwall.com/lists/oss-security/2019/10/16/1 - https://lists.apache.org/thread.html/5e6dd946635bbcc9e1f2591599ad0fab54f2dc3714196af3b17893f2%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/96c017115069408cec5e82ce1e6293facab398011f6db7e1befbe274%40%3Cdev.fineract.apache.org%3E
CVE ID: CVE-2016-4978 State: PUBLISHED Published: 2016-09-27T15:00:00 Last Updated: 2024-08-06T00:46:40.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Artemis broker to deserialize arbitrary objects and execute arbitrary code by leveraging gadget classes being present on the Artemis classpath. Additional Analyst Notes: - CVE Program Container: References: - https://www.blackhat.com/docs/us-16/materials/us-16-Kaiser-Pwning-Y
nalyst Notes: - CVE Program Container: References: - https://www.blackhat.com/docs/us-16/materials/us-16-Kaiser-Pwning-Your-Java-Messaging-With-Deserialization-Vulnerabilities.pdf - http://www.securityfocus.com/bid/93142 - https://access.redhat.com/errata/RHSA-2018:1448 - https://access.redhat.com/errata/RHSA-2017:1836 - https://access.redhat.com/errata/RHSA-2017:1835 - https://access.redhat.com/errata/RHSA-2018:1449 - https://access.redhat.com/errata/RHSA-2018:1450 - https://access.redhat.com/errata/RHSA-2017:3458 - https://access.redhat.com/errata/RHSA-2017:1837 - https://access.redhat.com/errata/RHSA-2017:1834 - http://mail-archives.apache.org/mod_mbox/activemq-users/201609.mbox/%3CCAH6wp
/access.redhat.com/errata/RHSA-2017:1834 - http://mail-archives.apache.org/mod_mbox/activemq-users/201609.mbox/%3CCAH6wpnqzeNtpykT7emtDU1-GV7AvjFP5-YroWcCC4UZyQEFvtA%40mail.gmail.com%3E - https://access.redhat.com/errata/RHSA-2018:1451 - https://access.redhat.com/errata/RHSA-2017:3455 - https://access.redhat.com/errata/RHSA-2017:3456 - https://access.redhat.com/errata/RHSA-2017:3454 - https://access.redhat.com/errata/RHSA-2018:1447 - https://lists.apache.org/thread.html/7260bd0955c12aac5bd892039d3356ba3aa0ff4caaf2aa4fd4fe84a2%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/d4ffbc6a43a915324a394b2913ceb7d07bc352f2d08caa19df0aff02%40%3Cissues.activemq.apache.org%3E -
ts.apache.org/thread.html/d4ffbc6a43a915324a394b2913ceb7d07bc352f2d08caa19df0aff02%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/rc96ad63f148f784c84ea7f0a178c84a8985c6afccabbcd9847a82088%40%3Ccommits.activemq.apache.org%3E - https://lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d%40%3Ccommits.activemq.apache.org%3E
CVE ID: CVE-2016-4979 State: PUBLISHED Published: 2016-07-06T14:00:00 Last Updated: 2024-08-06T00:46:39.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the "SSLVerifyClient require" directive for HTTP/2 request authorization, which allows remote attackers to bypass intended access restrictions by leveraging the ability to send multiple requests over a single connection and aborting a renegotiation. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1420 - http://httpd.apache.org/security/vulnerabilities_24.h
r: References: - https://access.redhat.com/errata/RHSA-2016:1420 - http://httpd.apache.org/security/vulnerabilities_24.html - https://security.gentoo.org/glsa/201610-02 - http://seclists.org/fulldisclosure/2016/Jul/11 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.apache.org/dist/httpd/CHANGES_2.4 - http://www.securityfocus.com/bid/91566 - http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html - http://www.securitytracker.com/id/1036225 - http://www.openwall.com/lists/oss-security/2016/07/05/5 - https://github.com/apache/httpd/commit/2d0e4eff04ea963128a41faaef21f987272e05a2 - http://packetstormsecurity.com/files/137771/Apach
hub.com/apache/httpd/commit/2d0e4eff04ea963128a41faaef21f987272e05a2 - http://packetstormsecurity.com/files/137771/Apache-2.4.20-X509-Authentication-Bypass.html - https://security.netapp.com/advisory/ntap-20180601-0001/ - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccv
d.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d
ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2016-4980 State: PUBLISHED Published: 2019-11-27T15:55:20 Last Updated: 2024-08-06T00:46:39.929Z Vendors: xguest Products: xguest Problem Types: insecure password creation Description: A password generation weakness exists in xquest through 2016-06-13. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1346016 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-4980 - https://access.redhat.com/security/cve/cve-2016-4980 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVW2QJFNZUZYBN4M4YUE7S2NZBWWMGES/
CVE ID: CVE-2016-4981 State: REJECTED Published: 2022-07-29T15:27:14 Last Updated: 2022-07-29T15:27:14 Description: No description available.
CVE ID: CVE-2016-4982 State: PUBLISHED Published: 2017-07-14T20:00:00 Last Updated: 2024-08-06T00:46:39.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: authd sets weak permissions for /etc/ident.key, which allows local users to obtain the key by leveraging a race condition between the creation of the key, and the chmod to protect it. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1346051
CVE ID: CVE-2016-4983 State: PUBLISHED Published: 2019-11-05T21:45:36 Last Updated: 2024-08-06T00:46:39.893Z Vendors: Fedora Products: dovecot22 Problem Types: Other Description: A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=984639 - https://bugzilla.redhat.com/show_bug.cgi?id=1346055 - http://lists.opensuse.org/opensuse-updates/2016-11/msg00096.html
CVE ID: CVE-2016-4984 State: PUBLISHED Published: 2017-07-14T20:00:00 Last Updated: 2024-08-06T00:46:40.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: /usr/libexec/openldap/generate-server-cert.sh in openldap-servers sets weak permissions for the TLS certificate, which allows local users to obtain the TLS certificate by leveraging a race condition between the creation of the certificate, and the chmod to protect it. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1346120
CVE ID: CVE-2016-4985 State: PUBLISHED Published: 2016-07-12T19:00:00 Last Updated: 2024-08-06T00:46:39.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the v1/drivers/$DRIVER_NAME/vendor_passthru resource. Additional Analyst Notes: - CVE Program Container: References: - https://review.openstack.org/332197 - https://bugs.launchpad.net/ironic/+bug/1572796 - http://www.openwall.com/list
s: - https://review.openstack.org/332197 - https://bugs.launchpad.net/ironic/+bug/1572796 - http://www.openwall.com/lists/oss-security/2016/06/21/6 - https://review.openstack.org/332195 - https://access.redhat.com/errata/RHSA-2016:1378 - https://access.redhat.com/errata/RHSA-2016:1377 - https://review.openstack.org/332196
CVE ID: CVE-2016-4986 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T00:46:40.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the TAP plugin before 1.25 in Jenkins allows remote attackers to read arbitrary files via an unspecified parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-06-20
CVE ID: CVE-2016-4987 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T00:46:40.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Image Gallery plugin before 1.4 in Jenkins allows remote attackers to list arbitrary directories and read arbitrary files via unspecified form fields. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-06-20
CVE ID: CVE-2016-4988 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T00:46:40.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-06-20
CVE ID: CVE-2016-4989 State: PUBLISHED Published: 2017-04-11T18:00:00 Last Updated: 2024-08-06T00:46:40.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by (1) triggering an SELinux denial with a crafted file name, which is handled by the _set_tpath function in audit_data.py or via a crafted (2) local_id or (3) analysis_id field in a crafted XML document to the run_fix function in SetroubleshootFixit.py, related to the subprocess.check_output and commands.getstatusoutput functions, a different vulnerability than CVE-2016-4445. Additional Analyst Notes: - CVE Pr
and commands.getstatusoutput functions, a different vulnerability than CVE-2016-4445. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1346461 - https://rhn.redhat.com/errata/RHSA-2016-1267.html - https://github.com/fedora-selinux/setroubleshoot/commit/e69378d7e82a503534d29c5939fa219341e8f2ad - http://seclists.org/oss-sec/2016/q2/574 - https://access.redhat.com/errata/RHSA-2016:1293 - http://securitytracker.com/id/1036144 - https://github.com/fedora-selinux/setroubleshoot/commit/dda55aa50db95a25f0d919c3a0d5871827cdc40f
CVE ID: CVE-2016-4990 State: REJECTED Published: 2016-10-04T14:00:00 Last Updated: 2016-10-04T14:57:02 Description: No description available.
CVE ID: CVE-2016-4991 State: PUBLISHED Published: 2022-07-28T16:33:45 Last Updated: 2024-08-06T00:46:40.201Z Vendors: n/a Products: nodepdf Problem Types: CWE-77 Description: Input passed to the Pdf() function is shell escaped and passed to child_process.exec() during PDF rendering. However, the shell escape does not properly encode all special characters, namely, semicolon and curly braces. This can be abused to achieve command execution. This problem affects nodepdf 1.3.0. Additional Analyst Notes: - CVE Program Container: References: - https://lf.lc/cve/cve-2016-4991/
CVE ID: CVE-2016-4992 State: PUBLISHED Published: 2017-06-08T19:00:00 Last Updated: 2024-08-06T00:46:40.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: 389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to infer the existence of RDN component objects. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1347760 - http://rhn.redhat.com/errata/RHSA-2016-2594.html - http://rhn.redhat.com/errata/RHSA-2016-2765.html - https://github.com/389d
//rhn.redhat.com/errata/RHSA-2016-2594.html - http://rhn.redhat.com/errata/RHSA-2016-2765.html - https://github.com/389ds/389-ds-base/commit/0b932d4b926d46ac5060f02617330dc444e06da1
CVE ID: CVE-2016-4993 State: PUBLISHED Published: 2016-09-26T14:00:00 Last Updated: 2024-08-06T00:46:40.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the Undertow web server in WildFly 10.0.0, as used in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-1841.html - http://www.securityfocus.com/bid/92894 - https://access.redhat.com/errata/RHSA-2017:3458 - http://www.securitytracker.com/id/1036758 -
urityfocus.com/bid/92894 - https://access.redhat.com/errata/RHSA-2017:3458 - http://www.securitytracker.com/id/1036758 - http://rhn.redhat.com/errata/RHSA-2016-1838.html - https://access.redhat.com/errata/RHSA-2017:3455 - https://access.redhat.com/errata/RHSA-2017:3456 - https://bugzilla.redhat.com/show_bug.cgi?id=1344321 - https://access.redhat.com/errata/RHSA-2017:3454 - http://rhn.redhat.com/errata/RHSA-2016-1839.html - http://rhn.redhat.com/errata/RHSA-2016-1840.html