Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-8368 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:31.217Z Vendors: n/a Products: Mitsubishi Electric MELSEC-Q Series Ethernet Interface Module Problem Types: Mitsubishi Electric MELSEC-Q Series Ethernet Interface Module Unrestricted Externally Accessible Lock Description: An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. The affected Ethernet interface module is connected to a MELSEC-Q PLC, which may allow a remote attacker to connect to the PLC via Port 5002/TCP and cause a denial of service, requiring the PL
hich may allow a remote attacker to connect to the PLC via Port 5002/TCP and cause a denial of service, requiring the PLC to be reset to resume operation. This is caused by an Unrestricted Externally Accessible Lock. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-336-03 - http://www.securityfocus.com/bid/94632
CVE ID: CVE-2016-8369 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:31.133Z Vendors: n/a Products: Lynxspring JENEsys BAS Bridge 1.1.8 and older Problem Types: Lynxspring JENEsys BAS Bridge csrf Description: An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request (CROSS-SITE REQUEST FORGERY). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94344 - https://ics-cert.us-cert.gov/advisories/ICSA-16-320-01
CVE ID: CVE-2016-8370 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:30.810Z Vendors: n/a Products: Mitsubishi Electric MELSEC-Q Series Ethernet Interface Module Problem Types: Mitsubishi Electric MELSEC-Q Series Ethernet Interface Module weak encryption Description: An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. Weakly encrypted passwords are transmitted to a MELSEC-Q PLC. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-336-03 - http://www.securityfocus.com/bid
ogram Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-336-03 - http://www.securityfocus.com/bid/94632
CVE ID: CVE-2016-8371 State: PUBLISHED Published: 2018-04-05T16:00:00Z Last Updated: 2024-09-16T19:20:38.716Z Vendors: Phoenix Contact Products: Phoenix Contact ILC PLCs Problem Types: CWE-592 Description: The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-313-01 - https://www.exploit-db.com/exploits/45590/ - http://www.securityfocus.com/bid/94163
CVE ID: CVE-2016-8372 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:31.089Z Vendors: n/a Products: Moxa ioLogik E1200 Series before 3.12 Problem Types: Moxa ioLogik E1200 Series password Description: An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E1212, firmware Version V2.4 and prior, ioLogik E1213, firmware Version V2.5 and prior, ioLogik E1214, firmware Version V2.4 and prior, ioLogik E1240, firmware Version V2.3 and prior, ioLogik E1241, firmware Version V2.4 and prior, ioLogik E1242, firmware Version V2.4 and prior, ioLogik E1260, firmware Version V2.4 and prior, ioL
sion V2.4 and prior, ioLogik E1242, firmware Version V2.4 and prior, ioLogik E1260, firmware Version V2.4 and prior, ioLogik E1262, firmware Version V2.4 and prior, ioLogik E2210, firmware versions prior to V3.13, ioLogik E2212, firmware versions prior to V3.14, ioLogik E2214, firmware versions prior to V3.12, ioLogik E2240, firmware versions prior to V3.12, ioLogik E2242, firmware versions prior to V3.12, ioLogik E2260, firmware versions prior to V3.13, and ioLogik E2262, firmware versions prior to V3.12. A password is transmitted in a format that is not sufficiently secure. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-
e. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-05 - http://www.securityfocus.com/bid/93550
CVE ID: CVE-2016-8374 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:30.941Z Vendors: n/a Products: Schneider Electric Magelis HMI Problem Types: Schneider Electric Magelis HMI Resource Consumption Description: An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU Universal Panel, all versions, Magelis STO5xx and STU Small panels, all versions, Magelis XBT GH Advanced Hand-held Panels, all versions, Magelis XBT GK Advanced Touchscreen Panels with Keyboard, all versions, Magelis XBT GT Advanced Touchscreen Panels, all versions, and Magelis XBT GTW Advanced Open Touchscreen Panels (Windows XPe).
s XBT GT Advanced Touchscreen Panels, all versions, and Magelis XBT GTW Advanced Open Touchscreen Panels (Windows XPe). An attacker may be able to disrupt a targeted web server, resulting in a denial of service because of UNCONTROLLED RESOURCE CONSUMPTION. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-308-02 - http://www.securityfocus.com/bid/94093
CVE ID: CVE-2016-8375 State: PUBLISHED Published: 2017-02-13T22:00:00 Last Updated: 2024-08-06T02:20:31.231Z Vendors: n/a Products: BD Alaris 8015 through 9.7 and 8000 Problem Types: BD Alaris 8000/8015 Insufficiently Protected Credentials Vulnerabilities Description: An issue was discovered in Becton, Dickinson and Company (BD) Alaris 8015 Point of Care (PC) unit, Version 9.5 and prior versions, and Version 9.7, and 8000 PC unit. An unauthorized user with physical access to an affected Alaris PC unit may be able to obtain unencrypted wireless network authentication credentials and other sensitive technical data by disassembling the PC unit and accessing the device's flash memory. The Alaris
ials and other sensitive technical data by disassembling the PC unit and accessing the device's flash memory. The Alaris 8015 PC unit, Version 9.7, and the 8000 PC unit store wireless network authentication credentials and other sensitive technical data on internal flash memory. Accessing the internal flash memory of the affected device would require special tools to extract data and carrying out this attack at a healthcare facility would increase the likelihood of detection. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-17-017-01 - http://www.securityfocus.com/bid/96113 - https://ics-cert.us-cert.gov/advisories/ICSMA-17-017-02
CVE ID: CVE-2016-8376 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:30.994Z Vendors: n/a Products: Kabona AB WDC Vulnerabilities prior to Version 3.4.0 Problem Types: Kabona AB WDC open redirect Description: An issue was discovered in Kabona AB WebDatorCentral (WDC) application prior to Version 3.4.0. This non-validated redirect/non-validated forward (OPEN REDIRECT) allows chaining with authenticated vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93547 - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-07
CVE ID: CVE-2016-8377 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:31.102Z Vendors: n/a Products: Fatek Automation PLC WinProladder 3.11 Build 14701 Problem Types: Fatek Automation PLC WinProladder Stack-Based Buffer Overflow Vulnerability Description: An issue was discovered in Fatek Automation PLC WinProladder Version 3.11 Build 14701. A stack-based buffer overflow vulnerability exists when the software application connects to a malicious server, resulting in a stack buffer overflow. This causes an exploitable Structured Exception Handler (SEH) overwrite condition that may allow remote code execution. Additional Analyst Notes: - CVE Program Container: Refe
(SEH) overwrite condition that may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94938 - https://www.exploit-db.com/exploits/42700/ - https://ics-cert.us-cert.gov/advisories/ICSA-16-350-01
CVE ID: CVE-2016-8378 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:31.122Z Vendors: n/a Products: Lynxspring JENEsys BAS Bridge 1.1.8 and older Problem Types: Lynxspring JENEsys BAS Bridge lacks sufficient safeguards Description: An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application's database lacks sufficient safeguards for protecting credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94344 - https://ics-cert.us-cert.gov/advisories/ICSA-16-320-01
CVE ID: CVE-2016-8379 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:20:31.113Z Vendors: n/a Products: Moxa ioLogik E1200 Series before 3.12 Problem Types: Moxa ioLogik E1200 Series password Description: An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E1212, firmware Version V2.4 and prior, ioLogik E1213, firmware Version V2.5 and prior, ioLogik E1214, firmware Version V2.4 and prior, ioLogik E1240, firmware Version V2.3 and prior, ioLogik E1241, firmware Version V2.4 and prior, ioLogik E1242, firmware Version V2.4 and prior, ioLogik E1260, firmware Version V2.4 and prior, ioL
sion V2.4 and prior, ioLogik E1242, firmware Version V2.4 and prior, ioLogik E1260, firmware Version V2.4 and prior, ioLogik E1262, firmware Version V2.4 and prior, ioLogik E2210, firmware versions prior to V3.13, ioLogik E2212, firmware versions prior to V3.14, ioLogik E2214, firmware versions prior to V3.12, ioLogik E2240, firmware versions prior to V3.12, ioLogik E2242, firmware versions prior to V3.12, ioLogik E2260, firmware versions prior to V3.13, and ioLogik E2262, firmware versions prior to V3.12. Users are restricted to using short passwords. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-05 - http://www.security
tes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-05 - http://www.securityfocus.com/bid/93550
CVE ID: CVE-2016-8380 State: PUBLISHED Published: 2018-04-05T16:00:00Z Last Updated: 2024-09-16T22:56:53.125Z Vendors: Phoenix Contact Products: Phoenix Contact ILC PLCs Problem Types: CWE-767 Description: The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-313-01 - https://www.exploit-db.com/exploits/45590/ - http://www.securityfocus.com/bid/94163
CVE ID: CVE-2016-8381 State: REJECTED Published: 2019-10-30T15:36:42 Last Updated: 2019-10-30T15:36:42 Description: No description available.
CVE ID: CVE-2016-8382 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T19:00:24.562Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Antenna House Products: AntennaHouse Problem Types: remote code execution Description: An exploitable heap corruption vulnerability exists in the Doc_SetSummary functionality of AntennaHouse DMC HTMLFilter. A specially crafted doc file can cause a heap corruption resulting in arbitrary code execution. An attacker can send a malicious doc file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-02
lyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0207
CVE ID: CVE-2016-8383 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T17:14:07.603Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Antenna House Products: AntennaHouse Problem Types: arbitrary code execution Description: An exploitable heap corruption vulnerability exists in the Doc_GetFontTable functionality of AntennaHouse DMC HTMLFilter. A specially crafted doc file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious doc file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TA
itional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0208
CVE ID: CVE-2016-8384 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T18:09:08.264Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Antenna House Products: AntennaHouse Problem Types: heap overflow Description: An exploitable heap corruption vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0209
CVE ID: CVE-2016-8385 State: PUBLISHED Published: 2017-02-27T21:00:00 Last Updated: 2024-08-06T02:20:31.184Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Iceni Products: Argus Problem Types: PDF Code Execution Description: An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF to XML a stack variable will be left uninitialized which will later be used to fetch a length that is used in a copy operation. In most cases this will allow an aggressor to write outside the bounds of a stack buffer which is used to contain colors. This can lead to code execut
an aggressor to write outside the bounds of a stack buffer which is used to contain colors. This can lead to code execution under the context of the account running the tool. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96472 - http://www.talosintelligence.com/reports/TALOS-2016-0210/
CVE ID: CVE-2016-8386 State: PUBLISHED Published: 2017-02-27T21:00:00 Last Updated: 2024-08-06T02:20:31.075Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Iceni Products: Argus Problem Types: PDF Code Execution Description: An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the tool will attempt to use a size out of the font to search through a linked list of buffers to return. Due to a signedness issue, a buffer smaller than the requested size will be returned. Later when the tool tries to populate this buffer, the overflow will occur which can lead to code execution under t
ned. Later when the tool tries to populate this buffer, the overflow will occur which can lead to code execution under the context of the user running the tool. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96472 - http://www.talosintelligence.com/reports/TALOS-2016-0211/
CVE ID: CVE-2016-8387 State: PUBLISHED Published: 2017-02-27T21:00:00 Last Updated: 2024-08-06T02:20:31.165Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Iceni Products: Argus Problem Types: Buffer Overflow Description: An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF with an object encoded w/ multiple encoding types terminating with an LZW encoded type, an overflow may occur due to a lack of bounds checking by the LZW decoder. This can lead to code execution under the context of the account of the user running it. Additional Analyst Notes: - CVE Program Container: References: - http://www.security
the account of the user running it. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96468 - http://www.talosintelligence.com/reports/TALOS-2016-0212/
CVE ID: CVE-2016-8388 State: PUBLISHED Published: 2017-02-28T15:00:00 Last Updated: 2024-08-06T02:20:31.172Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Iceni Products: Argus Problem Types: Heap Overwrite Description: An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust an index within the specific font object and use it to write the font's name to a single object within an array of objects. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96472 - http://www.talosintelligence.com/reports/TALOS-2016-0213/
CVE ID: CVE-2016-8389 State: PUBLISHED Published: 2017-02-28T15:00:00 Last Updated: 2024-08-06T02:20:31.264Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Iceni Products: Argus Problem Types: Integer Overflow Description: An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt to convert each character from a font into a polygon and then attempt to rasterize these shapes. As the application attempts to iterate through the rows and initializing the polygon shape in the buffer, it will write outside of the bounds of said buffer. This can lead to code execution under the contex
hape in the buffer, it will write outside of the bounds of said buffer. This can lead to code execution under the context of the account running it. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96469 - http://www.talosintelligence.com/reports/TALOS-2016-0214/
CVE ID: CVE-2016-8390 State: PUBLISHED Published: 2018-06-04T19:00:00Z Last Updated: 2024-09-16T18:19:03.280Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Hopper Problem Types: remote code execution Description: An exploitable out of bounds write vulnerability exists in the parsing of ELF Section Headers of Hopper Disassembler 3.11.20. A specially crafted ELF file can cause attacker controlled pointer arithmetic resulting in a partially controlled out of bounds write. An attacker can craft an ELF file with specific section headers to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.secur
headers to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93801 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0222
CVE ID: CVE-2016-8391 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T02:20:31.145Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31253255. References: QC-CR#1072166. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://
CVE ID: CVE-2016-8392 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T02:20:31.196Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31385862. References: QC-CR#1073136. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://
CVE ID: CVE-2016-8393 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T02:20:31.231Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31911920. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/94682
CVE ID: CVE-2016-8394 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T02:20:31.195Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31913197. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/94682
CVE ID: CVE-2016-8395 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T02:20:31.221Z Vendors: Google Inc. Products: Android Problem Types: Denial of service Description: A denial of service vulnerability in the NVIDIA camera driver could enable an attacker to cause a local permanent denial of service, which may require reflashing the operating system to repair the device. This issue is rated as High due to the possibility of local permanent denial of service. Product: Android. Versions: Kernel-3.10. Android ID: A-31403040. References: N-CVE-2016-8395. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-
. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/94710 - http://nvidia.custhelp.com/app/answers/detail/a_id/4561
CVE ID: CVE-2016-8396 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T02:20:31.172Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/A. Android ID: A-31249105. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/94712
CVE ID: CVE-2016-8397 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T02:20:31.091Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10. Android ID: A-31385953. References: N-CVE-2016-8397. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94714 - https://source.android.com/sec