Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-4005 State: PUBLISHED Published: 2016-06-13T14:00:00 Last Updated: 2024-08-06T00:17:31.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Huawei Hilink App application before 3.19.2 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/86536 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160419-01-wear-en
CVE ID: CVE-2016-4006 State: PUBLISHED Published: 2016-04-25T10:00:00 Last Updated: 2024-08-06T00:17:29.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/proto.c in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not limit the protocol-tree depth, which allows remote attackers to cause a denial of service (stack memory consumption and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035685 - http://www.debian.org/security/2016/dsa-3585 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8dc9551e1d56290e6f7f02cc38b77e1d211fd4a5 - http://www.oracle.co
reshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8dc9551e1d56290e6f7f02cc38b77e1d211fd4a5 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12268 - http://www.wireshark.org/security/wnpa-sec-2016-25.html
CVE ID: CVE-2016-4007 State: PUBLISHED Published: 2016-04-13T14:00:00 Last Updated: 2024-08-06T00:17:29.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the obs-service-extract_file package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with "illegal options." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00019.html - https://build.opensuse.org/request/show/
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00019.html - https://build.opensuse.org/request/show/361096 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00049.html
CVE ID: CVE-2016-4008 State: PUBLISHED Published: 2016-05-05T18:00:00 Last Updated: 2024-08-06T00:17:30.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a denial of service (infinite recursion) via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201703-05 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182299.html - http://git.savannah.gnu.org/gitweb/?p=libtasn1.git%3Ba=commit%3Bh=a6e0a0b58f5cdaf4e9beca5bce69c0980
-April/182299.html - http://git.savannah.gnu.org/gitweb/?p=libtasn1.git%3Ba=commit%3Bh=a6e0a0b58f5cdaf4e9beca5bce69c09808cbb625 - http://www.ubuntu.com/usn/USN-2957-2 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182907.html - http://lists.opensuse.org/opensuse-updates/2016-06/msg00047.html - https://lists.gnu.org/archive/html/help-libtasn1/2016-04/msg00009.html - http://git.savannah.gnu.org/gitweb/?p=libtasn1.git%3Ba=commit%3Bh=f435825c0f527a8e52e6ffbc3ad0bc60531d537e - http://www.debian.org/security/2016/dsa-3568 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00097.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183221.html - ht
se-updates/2016-06/msg00097.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183221.html - http://www.ubuntu.com/usn/USN-2957-1 - http://www.openwall.com/lists/oss-security/2016/04/11/3
CVE ID: CVE-2016-4009 State: PUBLISHED Published: 2016-04-13T16:00:00 Last Updated: 2024-08-06T00:17:30.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-52 - https://github.com/python-pillow/Pillow/pull/1714 - https://github.com/python-pillow/Pillow/commit/4e0d9b0b9740d258ade40cce248c93777362ac1e - http://www.securityfocus.com/bid/86064 -
thub.com/python-pillow/Pillow/commit/4e0d9b0b9740d258ade40cce248c93777362ac1e - http://www.securityfocus.com/bid/86064 - https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst
CVE ID: CVE-2016-4010 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T00:17:30.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted serialized shopping cart data. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/137121/Magento-Unauthenticated-Arbitrary-File-Write.html - http://netanelrub.in/2016/05/17/magento-unauthenticated-remote-code-execution/ - https://magento.com/security/patches/magento-206-security-update - https://www.exploit-db.com/exploits/39838/ - https
- https://magento.com/security/patches/magento-206-security-update - https://www.exploit-db.com/exploits/39838/ - https://packetstormsecurity.com/files/137312/Magento-2.0.6-Unserialize-Remote-Code-Execution.html
CVE ID: CVE-2016-4014 State: PUBLISHED Published: 2016-04-14T14:00:00 Last Updated: 2024-08-06T00:17:30.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote attackers to cause a denial of service (system hang) via a crafted DTD in an XML request to uddi/api/replication, aka SAP Security Note 2254389. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/press-center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/ - http://seclists.org/fulldisclosure/2016/Jul/45 - https://erpscan.io/advisories/erpscan-16-020-sap-netweaver-java-ud
6/ - http://seclists.org/fulldisclosure/2016/Jul/45 - https://erpscan.io/advisories/erpscan-16-020-sap-netweaver-java-uddi-component-xxe-vulnerability/ - http://packetstormsecurity.com/files/137919/SAP-NetWeaver-AS-JAVA-7.4-XXE-Injection.html
CVE ID: CVE-2016-4015 State: PUBLISHED Published: 2016-04-14T14:00:00 Last Updated: 2024-08-06T00:17:30.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka SAP Security Note 2258784. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/press-center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/ - https://erpscan.io/advisories/erpscan-16-019-sap-netweaver-enqueue-server-dos-vulnerability/
CVE ID: CVE-2016-4016 State: PUBLISHED Published: 2016-04-14T14:00:00 Last Updated: 2024-08-06T00:17:30.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) 15 allows remote attackers to inject arbitrary web script or HTML via the title parameter to webdynpro/resources/sap.com/xapps~xmii~ui~admin~navigation/NavigationApplication, aka SAP Security Note 2201295. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/press-center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/ - https://erpscan.io/advisories/erpscan-16-02
center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/ - https://erpscan.io/advisories/erpscan-16-021-sap-mii-reflected-xss-vulnerability/ - http://seclists.org/fulldisclosure/2016/Jul/46 - http://packetstormsecurity.com/files/137920/SAP-xMII-15-Cross-Site-Scripting.html
CVE ID: CVE-2016-4017 State: PUBLISHED Published: 2016-04-14T14:00:00 Last Updated: 2024-08-06T00:17:30.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data Provisioning Agent (aka DP Agent) in SAP HANA allows remote attackers to cause a denial of service (process crash) via unspecified vectors, aka SAP Security Note 2262710. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/press-center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/
CVE ID: CVE-2016-4018 State: PUBLISHED Published: 2016-04-14T14:00:00 Last Updated: 2024-08-06T00:17:29.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data Provisioning Agent (aka DP Agent) in SAP HANA does not properly restrict access to service functionality, which allows remote attackers to obtain sensitive information, gain privileges, and conduct unspecified other attacks via unspecified vectors, aka SAP Security Note 2262742. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/press-center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/
CVE ID: CVE-2016-4019 State: PUBLISHED Published: 2017-01-18T22:00:00 Last Updated: 2024-08-06T00:17:29.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 104477. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95922 - https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.0 - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE ID: CVE-2016-4020 State: PUBLISHED Published: 2016-05-25T15:00:00 Last Updated: 2024-08-06T00:17:30.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR). Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=691a02e2ce0c413236a78dee6f2651c937b09fb0 - https://bugzilla.redhat.com/show_bug.cgi?id=1313686 - https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg01106.html - http://
zilla.redhat.com/show_bug.cgi?id=1313686 - https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg01106.html - http://www.securityfocus.com/bid/86067 - https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg01118.html - https://access.redhat.com/errata/RHSA-2017:2392 - https://security.gentoo.org/glsa/201609-01 - http://www.ubuntu.com/usn/USN-2974-1 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - https://access.redhat.com/errata/RHSA-2017:2408 - https://access.redhat.com/errata/RHSA-2017:1856
CVE ID: CVE-2016-4021 State: PUBLISHED Published: 2016-05-26T14:00:00 Last Updated: 2024-08-06T00:17:29.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_binary function in buffer.c in pgpdump before 0.30 allows context-dependent attackers to cause a denial of service (infinite loop and CPU consumption) via crafted input, as demonstrated by the \xa3\x03 string. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/Apr/99 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2016-030.txt - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184689.html - http://lists.fedoraproject.org/pipermail
ttp://lists.fedoraproject.org/pipermail/package-announce/2016-May/184689.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183750.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184617.html - https://github.com/kazu-yamamoto/pgpdump/pull/16
CVE ID: CVE-2016-4024 State: PUBLISHED Published: 2016-05-13T16:00:00 Last Updated: 2024-08-06T00:17:30.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in imlib2 before 1.4.9 on 32-bit platforms allows remote attackers to execute arbitrary code via large dimensions in an image, which triggers an out-of-bounds heap memory write operation. Additional Analyst Notes: - CVE Program Container: References: - https://git.enlightenment.org/legacy/imlib2.git/commit/?id=7eba2e4c8ac0e20838947f10f29d0efe1add8227 - https://sourceforge.net/p/enlightenment/mailman/message/35055012/ - https://security.gentoo.org/glsa/201611-12 - http://www.debian.org/security/2016/dsa-3555 -
mailman/message/35055012/ - https://security.gentoo.org/glsa/201611-12 - http://www.debian.org/security/2016/dsa-3555 - http://www.securitytracker.com/id/1035573 - http://www.securityfocus.com/bid/86073 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00076.html
CVE ID: CVE-2016-4025 State: PUBLISHED Published: 2016-11-03T10:00:00 Last Updated: 2024-08-06T00:17:29.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, Endpoint Protection Suite Plus v8.x.x, File Server Security v8.x.x, and Email Server Security v8.x.x allow attackers to bypass the DeepScreen feature via a DeviceIoControl call. Additional Analyst Notes: - CVE Program Container: References: - https://labs.nettitude.com/blog/escaping-avast-sandbox-using-single-io
yst Notes: - CVE Program Container: References: - https://labs.nettitude.com/blog/escaping-avast-sandbox-using-single-ioctl-cve-2016-4025/
CVE ID: CVE-2016-4026 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T00:17:30.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The content sanitizer component has an issue with filtering malicious content in case invalid HTML code is provided. In such cases the filter will output a unsanitized representation of the content. Malicious script code can be executed within a user's context. This can lead to session hijacking or triggering unwanted actions via the web interface (sending mail, deleting data etc.). Attackers can use this issue for filter evasion to inject script code lat
interface (sending mail, deleting data etc.). Attackers can use this issue for filter evasion to inject script code later on. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036157 - http://www.securityfocus.com/archive/1/538732/100/0/threaded
CVE ID: CVE-2016-4027 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T00:17:30.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev10. App Suite frontend offers to control whether a user wants to store cookies that exceed the session duration. This functionality is useful when logging in from clients with reduced privileges or shared environments. However the setting was incorrectly recognized and cookies were stored regardless of this setting when the login was performed using a non-interactive login method. In case the setting was enforced by middleware configuration or the user went t
ed using a non-interactive login method. In case the setting was enforced by middleware configuration or the user went through the interactive login page, the workflow was correct. Cookies with authentication information may become available to other users on shared environments. In case the user did not properly log out from the session, third parties with access to the same client can access a user's account. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036157 - http://packetstormsecurity.com/files/137599/Open-Xchange-App-Suite-7.8.1-Information-Disclosure.html - http://www.securityfocus.com/archive/1/538732/100/0/threaded
CVE ID: CVE-2016-4028 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T00:17:30.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8. OX Guard uses an authentication token to identify and transfer guest users' credentials. The OX Guard API acts as a padding oracle by responding with different error codes depending on whether the provided token matches the encryption padding. In combination with AES-CBC, this allows attackers to guess the correct padding. Attackers may run brute-forcing attacks on the content of the guest authentication token and discover user credentials. For a practical att
rute-forcing attacks on the content of the guest authentication token and discover user credentials. For a practical attack vector, the guest users needs to have logged in, the content of the guest user's "OxReaderID" cookie and the value of the "auth" parameter needs to be known to the attacker. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036154 - http://www.securityfocus.com/archive/1/538732/100/0/threaded
CVE ID: CVE-2016-4029 State: PUBLISHED Published: 2016-08-07T16:00:00 Last Updated: 2024-08-06T00:17:30.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 4.5 does not consider octal and hexadecimal IP address formats when determining an intranet address, which allows remote attackers to bypass an intended SSRF protection mechanism via a crafted address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036594 - https://wpvulndb.com/vulnerabilities/8473 - http://codex.wordpress.org/Version_4.5 - http://www.debian.org/security/2016/dsa-3681 - https://core.trac.wordpress.org/query?status=closed&milestone=4.5
CVE ID: CVE-2016-4030 State: PUBLISHED Published: 2017-04-13T16:00:00 Last Updated: 2024-08-06T00:17:30.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices have unintended availability of the modem in USB configuration number 2 within the secure lockscreen state, allowing an attacker to make phone calls, send text messages, or issue commands, aka SVE-2016-5301. Additional Analyst Notes: - CVE Program Container: References: - https://github.
, or issue commands, aka SVE-2016-5301. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004 - http://www.securityfocus.com/bid/97701
CVE ID: CVE-2016-4031 State: PUBLISHED Published: 2017-04-13T16:00:00 Last Updated: 2024-08-06T00:17:30.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices allow attackers to send AT commands by plugging the device into a Linux host, aka SVE-2016-5301. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004 - http://www.securityfocus.com/bid/97703
CVE ID: CVE-2016-4032 State: PUBLISHED Published: 2017-04-13T16:00:00 Last Updated: 2024-08-06T00:17:29.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices do not block AT+USBDEBUG and AT+WIFIVALUE, which allows attackers to modify Android settings by leveraging AT access, aka SVE-2016-5301. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004 - http:/
Program Container: References: - https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004 - http://www.securityfocus.com/bid/97650
CVE ID: CVE-2016-4036 State: PUBLISHED Published: 2016-04-18T14:00:00 Last Updated: 2024-08-06T00:17:30.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: The quagga package before 0.99.23-2.6.1 in openSUSE and SUSE Linux Enterprise Server 11 SP 1 uses weak permissions for /etc/quagga, which allows local users to obtain sensitive information by reading files in the directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/87324 - https://bugzilla.suse.com/show_bug.cgi?id=770619 - http://lists.opensuse.org/opensuse-updates/2016-04/msg00040.html - http://www.debian.org/security/2016/dsa-3654
CVE ID: CVE-2016-4037 State: PUBLISHED Published: 2016-05-23T19:00:00 Last Updated: 2024-08-06T00:17:30.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular split isochronous transfer descriptor (siTD) list, a related issue to CVE-2015-8558. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/04/18/3 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=1ae3f2f178087711f9591350abad133525ba93f2 - http://lists.fedoraproject.org/pipermail/package-announc
u.git%3Ba=commit%3Bh=1ae3f2f178087711f9591350abad133525ba93f2 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184209.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183275.html - https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg02691.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183350.html - http://www.ubuntu.com/usn/USN-2974-1 - http://www.securityfocus.com/bid/86283 - https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg02734.html - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - http://www.openwall.com/lists/oss-security/2016/04/18/6
CVE ID: CVE-2016-4038 State: PUBLISHED Published: 2017-02-01T15:00:00 Last Updated: 2024-08-06T00:17:31.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the msm_sensor_config function in kernel/SM-G9008V_CHN_KK_Opensource/Kernel/drivers/media/platform/msm/camera_v2/sensor/msm_sensor.c in Samsung devices with Android KK(4.4) or L and an APQ8084, MSM8974, or MSM8974pro chipset allows local users to have unspecified impact via the gpio_config.gpio_name value. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/04/17/2 - http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2016 - http://www.openw
l.com/lists/oss-security/2016/04/17/2 - http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2016 - http://www.openwall.com/lists/oss-security/2016/04/18/8
CVE ID: CVE-2016-4040 State: PUBLISHED Published: 2016-04-19T14:00:00Z Last Updated: 2024-09-16T16:33:58.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbitrary SQL commands via the orderby parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dotCMS/core/issues/8840 - http://dotcms.com/security/SI-36 - https://github.com/dotCMS/core/commit/bc4db5d71dc67015572f8e4c6fdf87e29b854d02