Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
onal Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/94703
CVE ID: CVE-2016-6770 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:37.715Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access system functions beyond its access level. This issue is rated as Moderate because it is a local bypass of restrictions on a constrained process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0. Android ID: A-30202228. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus
Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/94702
CVE ID: CVE-2016-6771 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:37.906Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its access level. This issue is rated as Moderate because it is a local bypass of restrictions on a constrained process. Product: Android. Versions: 6.0, 6.0.1, 7.0. Android ID: A-31566390. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94706 - https://source.android.com/security/bulletin/2016-12-01.html
CVE ID: CVE-2016-6772 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:37.891Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0. Android ID: A-31856351. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=958 - http://www.securityfocus.com/bid/9
tainer: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=958 - http://www.securityfocus.com/bid/94701 - https://source.android.com/security/bulletin/2016-12-01.html - https://www.exploit-db.com/exploits/40945/
CVE ID: CVE-2016-6773 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:37.977Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0. Android ID: A-30481714. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/
ontainer: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/94707
CVE ID: CVE-2016-6774 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:37.862Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: An information disclosure vulnerability in Package Manager could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: 7.0. Android ID: A-31251489. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.co
gram Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/94705
CVE ID: CVE-2016-6775 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:37.909Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31222873. References: N-CVE-2016-6775. Additional Analyst Notes: - CVE Program Container: References: - http://
id ID: A-31222873. References: N-CVE-2016-6775. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94674 - https://source.android.com/security/bulletin/2016-12-01.html - http://nvidia.custhelp.com/app/answers/detail/a_id/4561
CVE ID: CVE-2016-6776 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:37.977Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31680980. References: N-CVE-2016-6776. Additional Analyst Notes: - CVE Program Container: References: - http://
id ID: A-31680980. References: N-CVE-2016-6776. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94674 - https://source.android.com/security/bulletin/2016-12-01.html - http://nvidia.custhelp.com/app/answers/detail/a_id/4561
CVE ID: CVE-2016-6777 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:37.764Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31910462. References: N-CVE-2016-6777. Additional Analyst Notes: - CVE Program Container: References: - http://
id ID: A-31910462. References: N-CVE-2016-6777. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94674 - https://source.android.com/security/bulletin/2016-12-01.html - http://nvidia.custhelp.com/app/answers/detail/a_id/4561
CVE ID: CVE-2016-6778 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:37.668Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31384646. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/94675
CVE ID: CVE-2016-6779 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:37.986Z Vendors: n/a Products: Android Kernel-3.10 Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31386004. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/94675
CVE ID: CVE-2016-6780 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:38.320Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31251496. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/94675
CVE ID: CVE-2016-6781 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:37.890Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31095175. References: MT-ALPS02943455. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus
Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/94683
CVE ID: CVE-2016-6782 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:38.035Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31224389. References: MT-ALPS02943506. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus
CVE ID: CVE-2016-6783 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:37.782Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31350044. References: MT-ALPS02943437. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid
Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/94683
CVE ID: CVE-2016-6784 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:37.871Z Vendors: n/a Products: Android Android-N/A Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31350755. References: MT-ALPS02961424. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com
ram Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/94683
CVE ID: CVE-2016-6785 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:37.915Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31748056. References: MT-ALPS02961400. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus
CVE ID: CVE-2016-6786 State: PUBLISHED Published: 2016-12-28T07:42:00 Last Updated: 2024-08-06T01:43:37.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain privileges via a crafted application, aka Android internal bug 30955111. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f63a8daa5812afef4f06c962351687e1ff9ccb2b - https://github.com/torvalds/linux/commit/f63a8daa5812afef4f06c962351687e1ff9ccb2b - https://bugzilla.redhat.com/show_bu
https://github.com/torvalds/linux/commit/f63a8daa5812afef4f06c962351687e1ff9ccb2b - https://bugzilla.redhat.com/show_bug.cgi?id=1403842 - http://www.securityfocus.com/bid/94679 - http://www.debian.org/security/2017/dsa-3791 - http://source.android.com/security/bulletin/2016-12-01.html
CVE ID: CVE-2016-6787 State: PUBLISHED Published: 2016-12-28T07:42:00 Last Updated: 2024-08-06T01:43:37.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain privileges via a crafted application, aka Android internal bug 31095224. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f63a8daa5812afef4f06c962351687e1ff9ccb2b - https://github.com/torvalds/linux/commit/f63a8daa5812afef4f06c962351687e1ff9ccb2b - https://bugzilla.redhat.com/show_bu
CVE ID: CVE-2016-6788 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:37.891Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the MediaTek I2C driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31224428. References: MT-ALPS02943467. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com
ram Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/94687
CVE ID: CVE-2016-6789 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:38.034Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: Kernel-3.18. Android ID: A-31251973. References: N-CVE-2016-6789. Additional Analyst Notes: - CVE Program Container:
ns: Kernel-3.18. Android ID: A-31251973. References: N-CVE-2016-6789. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94678 - https://source.android.com/security/bulletin/2016-12-01.html - http://nvidia.custhelp.com/app/answers/detail/a_id/4561
CVE ID: CVE-2016-6790 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:37.666Z Vendors: n/a Products: Android Kernel-3.18 Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: Kernel-3.18. Android ID: A-31251628. References: N-CVE-2016-6790. Additional Analyst Notes: - CVE Program Contai
rsions: Kernel-3.18. Android ID: A-31251628. References: N-CVE-2016-6790. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94678 - https://source.android.com/security/bulletin/2016-12-01.html
CVE ID: CVE-2016-6791 State: PUBLISHED Published: 2017-01-12T15:00:00 Last Updated: 2024-08-06T01:43:37.928Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31252384. References: QC-CR#1071809. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://
yst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - http://www.securityfocus.com/bid/94681
CVE ID: CVE-2016-6793 State: PUBLISHED Published: 2017-07-14T20:00:00 Last Updated: 2024-08-06T01:43:37.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DiskFileItem class in Apache Wicket 6.x before 6.25.0 and 1.5.x before 1.5.17 allows remote attackers to cause a denial of service (infinite loop) and write to, move, and delete files with the permissions of DiskFileItem, and if running on a Java VM before 1.3.1, execute arbitrary code via a crafted serialized Java object. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037541 - http://www.securityfocus.com/archive/1/539975/100/0/threaded - http://www.openwall.com/lists/o
ytracker.com/id/1037541 - http://www.securityfocus.com/archive/1/539975/100/0/threaded - http://www.openwall.com/lists/oss-security/2016/12/31/1 - https://wicket.apache.org/news/2016/12/31/cve-2016-6793.html - http://www.securityfocus.com/bid/95168 - https://www.tenable.com/security/research/tra-2016-23
CVE ID: CVE-2016-6794 State: PUBLISHED Published: 2017-08-10T16:00:00Z Last Updated: 2024-09-17T04:24:06.893Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Information Disclosure Description: When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70, 6.0.0 to 6.0.45 the system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible. Additional Analyst Notes: - CVE Program
ypass the SecurityManager and read system properties that should not be visible. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/09d2f2c65ac4ff5da42f15dc2b0f78b655e50f1a42e8a9784134a9eb%40%3Cannounce.tomcat.apache.org%3E - https://access.redhat.com/errata/RHSA-2017:2247 - http://rhn.redhat.com/errata/RHSA-2017-0457.html - https://access.redhat.com/errata/RHSA-2017:0455 - http://www.securitytracker.com/id/1037143 - http://www.debian.org/security/2016/dsa-3720 - http://www.securityfocus.com/bid/93943 - https://access.redhat.com/errata/RHSA-2017:0456 - https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0
t.com/errata/RHSA-2017:0456 - https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/888
5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache
E - https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E - https://usn.ubuntu.com/4557-1/ - https://security.netapp.com/ad
d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E - https://usn.ubuntu.com/4557-1/ - https://security.netapp.com/advisory/ntap-20180605-0001/ - https://www.oracle.com/security-alerts/cpuoct2021.html
CVE ID: CVE-2016-6795 State: PUBLISHED Published: 2017-09-20T17:00:00Z Last Updated: 2024-09-17T02:33:08.731Z Vendors: Apache Software Foundation Products: Apache Struts Problem Types: Possible path traversal in the Convention plugin Description: In the Convention plugin in Apache Struts 2.3.x before 2.3.31, and 2.5.x before 2.5.5, it is possible to prepare a special URL which will be used for path traversal and execution of arbitrary code on server side. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93773 - https://struts.apache.org/docs/s2-042.html - https://security.netapp.com/advisory/ntap-20180629-0003/