Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-3163 State: PUBLISHED Published: 2016-04-12T15:00:00 Last Updated: 2024-08-05T23:47:58.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML-RPC system in Drupal 6.x before 6.38 and 7.x before 7.43 might make it easier for remote attackers to conduct brute-force attacks via a large number of calls made at once to the same method. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/02/24/19 - http://www.openwall.com/lists/oss-security/2016/03/15/10 - http://www.debian.org/security/2016/dsa-3498 - https://www.drupal.org/SA-CORE-2016-001
CVE ID: CVE-2016-3164 State: PUBLISHED Published: 2016-04-12T15:00:00 Last Updated: 2024-08-05T23:47:57.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might allow remote attackers to conduct open redirect attacks by leveraging (1) custom code or (2) a form shown on a 404 error page, related to path manipulation. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/02/24/19 - http://www.openwall.com/lists/oss-security/2016/03/15/10 - http://www.debian.org/security/2016/dsa-3498 - https://www.drupal.org/SA-CORE-2016-001
CVE ID: CVE-2016-3165 State: PUBLISHED Published: 2016-04-12T15:00:00 Last Updated: 2024-08-05T23:47:57.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Form API in Drupal 6.x before 6.38 ignores access restrictions on submit buttons, which might allow remote attackers to bypass intended access restrictions by leveraging permission to submit a form with a button that has "#access" set to FALSE in the server-side form definition. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/02/24/19 - http://www.openwall.com/lists/oss-security/2016/03/15/10 - http://www.debian.org/security/2016/dsa-3498 - https://www.drupal
://www.openwall.com/lists/oss-security/2016/03/15/10 - http://www.debian.org/security/2016/dsa-3498 - https://www.drupal.org/SA-CORE-2016-001
CVE ID: CVE-2016-3166 State: PUBLISHED Published: 2016-04-12T15:00:00 Last Updated: 2024-08-05T23:47:58.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the drupal_set_header function in Drupal 6.x before 6.38, when used with PHP before 5.1.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by leveraging a module that allows user-submitted data to appear in HTTP headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/02/24/19 - http://www.openwall.com/lists/oss-security/2016/03/15/10 - http://www.debian.org/security/2016/dsa-349
y/2016/02/24/19 - http://www.openwall.com/lists/oss-security/2016/03/15/10 - http://www.debian.org/security/2016/dsa-3498 - https://www.drupal.org/SA-CORE-2016-001
CVE ID: CVE-2016-3167 State: PUBLISHED Published: 2016-04-12T15:00:00 Last Updated: 2024-08-05T23:47:58.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the drupal_goto function in Drupal 6.x before 6.38, when used with PHP before 5.4.7, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a double-encoded URL in the "destination" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/02/24/19 - http://www.openwall.com/lists/oss-security/2016/03/15/10 - http://www.debian.org/security/2016/dsa-3498 - https://www.drupal.org/SA-CORE-2016
om/lists/oss-security/2016/03/15/10 - http://www.debian.org/security/2016/dsa-3498 - https://www.drupal.org/SA-CORE-2016-001
CVE ID: CVE-2016-3168 State: PUBLISHED Published: 2016-04-12T15:00:00 Last Updated: 2024-08-05T23:47:57.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a "reflected file download vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/02/24/19 - http://www.openwall.com/lists/oss-security/2016/03/15/10 - http://www.debian.org/security/2016/dsa-3498 - https://www.drupal.org/SA-CORE-2
l.com/lists/oss-security/2016/03/15/10 - http://www.debian.org/security/2016/dsa-3498 - https://www.drupal.org/SA-CORE-2016-001
CVE ID: CVE-2016-3169 State: PUBLISHED Published: 2016-04-12T15:00:00 Last Updated: 2024-08-05T23:47:57.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows remote attackers to gain privileges by leveraging contributed or custom code that calls the user_save function with an explicit category and loads all roles into the array. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/02/24/19 - http://www.openwall.com/lists/oss-security/2016/03/15/10 - http://www.debian.org/security/2016/dsa-3498 - https://www.drupal.org/SA-CORE-2016-001
CVE ID: CVE-2016-3170 State: PUBLISHED Published: 2016-04-12T15:00:00 Last Updated: 2024-08-05T23:47:57.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "have you forgotten your password" links in the User module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allow remote attackers to obtain sensitive username information by leveraging a configuration that permits using an email address to login and a module that permits logging in. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/02/24/19 - http://www.openwall.com/lists/oss-security/2016/03/15/10 - http://www.debian.org/security/2016/dsa-3498 - https://www.dr
http://www.openwall.com/lists/oss-security/2016/03/15/10 - http://www.debian.org/security/2016/dsa-3498 - https://www.drupal.org/SA-CORE-2016-001
CVE ID: CVE-2016-3171 State: PUBLISHED Published: 2016-04-12T15:00:00 Last Updated: 2024-08-05T23:47:57.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data truncation. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/02/24/19 - http://www.openwall.com/lists/oss-security/2016/03/15/10 - http://www.debian.org/security/2016/dsa-3498 - https://www.drupal.org/SA-CORE-2016-001
CVE ID: CVE-2016-3172 State: PUBLISHED Published: 2016-04-12T16:00:00 Last Updated: 2024-08-05T23:47:57.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parent_id parameter in an item_edit action. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201607-05 - http://www.openwall.com/lists/oss-security/2016/03/10/13 - http://www.securityfocus.com/bid/84324 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00074.html - http://bugs.cacti.net/view.php?id=2667 - http://www.openwall.com/li
pensuse.org/opensuse-updates/2016-05/msg00074.html - http://bugs.cacti.net/view.php?id=2667 - http://www.openwall.com/lists/oss-security/2016/03/15/11
CVE ID: CVE-2016-3173 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-05T23:47:58.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The aria-label parameter of tiles at the Portal can be used to inject script code. Those labels use the name of the file (e.g. an image) which gets displayed at the portal application. Using script code at the file name leads to script execution. Malicious script code can be executed within a user's context. This can lead to session hijacking or triggering unwanted actions via the web interface (sending mail, deleting data etc.). Users actively need to add
king or triggering unwanted actions via the web interface (sending mail, deleting data etc.). Users actively need to add a file to the portal to enable this attack. In case of shared files however, a internal attacker may modify a previously embedded file to carry a malicious file name. Furthermore this vulnerability can be used to persistently execute code that got injected by a temporary script execution vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/137187/Open-Xchange-OX-AppSuite-7.8.0-XSS-Open-Redirect.html - http://www.securityfocus.com/archive/1/538481/100/0/threaded
CVE ID: CVE-2016-3174 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-05T23:47:58.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The "defer" servlet offers to redirect a client to a specified URL. Since some checks were missing, arbitrary URLs could be provided as redirection target. Users can be tricked to follow a link to a trustworthy domain but end up at an unexpected service later on. This vulnerability can be used to prepare and enhance phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/137187/Open-Xchange-OX
tional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/137187/Open-Xchange-OX-AppSuite-7.8.0-XSS-Open-Redirect.html - http://www.securityfocus.com/archive/1/538481/100/0/threaded
CVE ID: CVE-2016-3176 State: PUBLISHED Published: 2017-01-31T19:00:00 Last Updated: 2024-08-05T23:47:58.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient. Additional Analyst Notes: - CVE Program Container: References: - https://docs.saltstack.com/en/latest/topics/releases/2015.8.8.html - https://docs.saltstack.com/en/latest/topics/releases/2015.5.10.html
CVE ID: CVE-2016-3177 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-05T23:47:58.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/giflib/bugs/83/ - http://www.openwall.com/lists/oss-security/2016/03/16/12
CVE ID: CVE-2016-3178 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T23:47:58.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service (out-of-bounds memory access and daemon crash) via vectors involving a negative length value. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/03/16/13 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816759 - http://speirofr.appspot.com/files/advisory/SPADV-2016-02.md - https://github.com/miniupnp/miniupnp/commit/b238cade9a173c6f751a34acf8ccff
appspot.com/files/advisory/SPADV-2016-02.md - https://github.com/miniupnp/miniupnp/commit/b238cade9a173c6f751a34acf8ccff838a62aa47
CVE ID: CVE-2016-3179 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T23:47:59.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service (invalid free and daemon crash) via vectors related to error handling. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/03/16/13 - https://github.com/miniupnp/miniupnp/commit/140ee8d2204b383279f854802b27bdb41c1d5d1a - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816759 - http://speirofr.appspot.com/files/advisory/SPADV-2016-02.md
CVE ID: CVE-2016-3180 State: PUBLISHED Published: 2017-02-07T17:00:00 Last Updated: 2024-08-05T23:47:58.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor Browser Launcher (aka torbrowser-launcher) before 0.2.4, during the initial run, allows man-in-the-middle attackers to bypass the PGP signature verification and execute arbitrary code via a Trojan horse tar file and a signature file with the valid tarball and signature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/micahflee/torbrowser-launcher/issues/229 - http://www.securityfocus.com/bid/96140
CVE ID: CVE-2016-3181 State: REJECTED Published: 2020-02-20T00:02:59 Last Updated: 2020-03-09T17:39:41 Description: No description available.
CVE ID: CVE-2016-3182 State: PUBLISHED Published: 2020-02-20T00:03:03 Last Updated: 2024-08-05T23:47:58.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service (memory corruption) via a crafted jpeg 2000 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/27/1 - http://www.openwall.com/lists/oss-security/2016/03/16/16 - https://bugzilla.redhat.com/show_bug.cgi?id=1317826 - https://github.com/uclouvain/openjpeg/issues/725
CVE ID: CVE-2016-3183 State: PUBLISHED Published: 2017-02-03T16:00:00 Last Updated: 2024-08-05T23:47:59.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sycc422_t_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted jpeg2000 file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-26 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FFMOZOF2EI6N2CR23EQ5EATWLQKBMHW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HPMDEUIMHTLKMHELDL4
/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HPMDEUIMHTLKMHELDL4F4HZ7X4Y34JEB/ - http://www.openwall.com/lists/oss-security/2016/03/16/17 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BJM23YERMEC6LCTWBUH7LZURGSLZDFDH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DFRD35RIPRCGZA5DKAKHZ62LMP2A5UT7/ - https://www.oracle.com/security-alerts/cpujul2020.html - https://bugzilla.redhat.com/show_bug.cgi?id=1317821 - https://github.com/uclouvain/openjpeg/issues/726 - https://github.com/uclouvain/openjpeg/commit/15f081c89650dccee4aa4ae66f614c3
/github.com/uclouvain/openjpeg/issues/726 - https://github.com/uclouvain/openjpeg/commit/15f081c89650dccee4aa4ae66f614c3fdb268767
CVE ID: CVE-2016-3185 State: PUBLISHED Published: 2016-05-16T10:00:00 Last Updated: 2024-08-05T23:47:58.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (type confusion and application crash) via crafted serialized _cookies data, related to the SoapClient::__call method in ext/soap/soap.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=71610 - http://www.ubuntu.com/usn/USN-2952-1 - h
- CVE Program Container: References: - https://bugs.php.net/bug.php?id=71610 - http://www.ubuntu.com/usn/USN-2952-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html - http://www.ubuntu.com/usn/USN-2952-2 - http://php.net/ChangeLog-5.php - http://www.securityfocus.com/bid/84307 - https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=eaf4e77190d402ea014207e9a7d5da1a4f3727ba - http://php.net/ChangeLog-7.php - https://bugs.php.net/bug.php?id=70081 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.h
ensuse-security-announce/2016-04/msg00057.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html
CVE ID: CVE-2016-3186 State: PUBLISHED Published: 2016-04-19T14:00:00 Last Updated: 2024-08-05T23:47:58.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1319503 - http://lists.opensuse.org/opensuse-updates/2016-04/msg00064.html - https://usn.ubuntu.com/3606-1/ - https://security.gentoo.org/glsa/201701-16 - http://www.securitytracker.com/id/1035442 - http://lists.opensuse.org/opensuse-updates/2016-04
ntoo.org/glsa/201701-16 - http://www.securitytracker.com/id/1035442 - http://lists.opensuse.org/opensuse-updates/2016-04/msg00075.html - https://access.redhat.com/errata/RHSA-2019:2053
CVE ID: CVE-2016-3187 State: PUBLISHED Published: 2016-04-08T14:00:00 Last Updated: 2024-08-05T23:47:58.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Prepopulate module 7.x-2.x before 7.x-2.1 for Drupal allows remote attackers to modify the REQUEST superglobal array, and consequently have unspecified impact, via a base64-encoded pp parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2679215 - https://www.drupal.org/node/2679503 - http://cgit.drupalcode.org/prepopulate/commit/prepopulate.module?id=16cdb63cc3b256dd785e029ec17f92ddf80cc443
CVE ID: CVE-2016-3188 State: PUBLISHED Published: 2016-04-08T14:00:00 Last Updated: 2024-08-05T23:47:58.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _prepopulate_request_walk function in the Prepopulate module 7.x-2.x before 7.x-2.1 for Drupal allows remote attackers to modify the (1) actions, (2) container, (3) token, (4) password, (5) password_confirm, (6) text_format, or (7) markup field type, and consequently have unspecified impact, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2679215 - https://www.drupal.org/node/2679503 - http://cgit.drupalcode.org/prepopulate/commit/prepopulate.module?id=1
de/2679215 - https://www.drupal.org/node/2679503 - http://cgit.drupalcode.org/prepopulate/commit/prepopulate.module?id=16cdb63cc3b256dd785e029ec17f92ddf80cc443
CVE ID: CVE-2016-3189 State: PUBLISHED Published: 2016-06-30T17:00:00.000Z Last Updated: 2025-06-09T16:01:46.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.openwall.com/lists/oss-security/2016/06/20/1 - http://www.securitytracker.com/id/1036132 - http://www.securityfocus.com/bid/91297 - https://security.gentoo.org/glsa/201708-08 - https://lists.debian.org/debian-lts-announ
ww.securityfocus.com/bid/91297 - https://security.gentoo.org/glsa/201708-08 - https://lists.debian.org/debian-lts-announce/2019/06/msg00021.html - https://usn.ubuntu.com/4038-2/ - https://usn.ubuntu.com/4038-1/ - https://seclists.org/bugtraq/2019/Jul/22 - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:18.bzip2.asc - https://seclists.org/bugtraq/2019/Aug/4 - https://lists.apache.org/thread.html/redf17d8ad16140733b25ca402ae825d6dfa9b85f73d9fb3fd0c75d73%40%3Cdev.kafka.apache.org%3E - https://lists.apache.org/thread.html/r481cda41fefb03e04c51484ed14421d812e5ce9e0972edff10f37260%40%3Cjira.kafka.apache.org%3E - https://lists.apache.org/thread.html/r6e3962fc9f6a79851f70cffdec5759065969cec9c6
0f37260%40%3Cjira.kafka.apache.org%3E - https://lists.apache.org/thread.html/r6e3962fc9f6a79851f70cffdec5759065969cec9c6708b964464b301%40%3Cjira.kafka.apache.org%3E - https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3E - https://lists.apache.org/thread.html/r19b4a70ac52093115fd71d773a7a4f579599e6275a13cfcf6252c3e3%40%3Cjira.kafka.apache.org%3E - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://bugzilla.redhat.com/show_bug.cgi?id=1319648 - http://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.
hat.com/show_bug.cgi?id=1319648 - http://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html - http://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html - https://lists.apache.org/thread.html/rffebcbeaace56ff1fed7916700d2f414ca1366386fb1293e99b3e31e%40%3Cjira.kafka.apache.org%3E - https://lists.apache.org/thread.html/r5f80cf3ade5bb73410643e885fe6b7bf9f0222daf3533e42c7ae240c%40%3Cjira.kafka.apache.org%3E - https://lists.apache.org/thread.html/r4ad2ea01354e394b7fa8c78a184b7e1634d51be9bc0e9e4d7e6c9305%40%3Cjira.kafka.apache.org%3E - https://lists.apache.org/thread.html/r1dc4c9b3bd559301bdb1557245f78b8910146efb1ee534b774c5f6
Cjira.kafka.apache.org%3E - https://lists.apache.org/thread.html/r1dc4c9b3bd559301bdb1557245f78b8910146efb1ee534b774c5f6af%40%3Cdev.kafka.apache.org%3E - https://lists.apache.org/thread.html/r5f7ac2bd631ccb12ced65b71ff11f94e76d05b22000795e4a7b61203%40%3Cjira.kafka.apache.org%3E
CVE ID: CVE-2016-3190 State: PUBLISHED Published: 2016-04-21T14:00:00 Last Updated: 2024-08-05T23:47:58.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1318977 - https://cgit.freedesktop.org/cairo/patch/src/cairo-image-compositor.c?id=5c82d91a5e15d29b1489dcb413b24ee7fdf59934 - http://lists.opensuse.org/opensuse-updates/2016-04/msg00029.html - https://mail
82d91a5e15d29b1489dcb413b24ee7fdf59934 - http://lists.opensuse.org/opensuse-updates/2016-04/msg00029.html - https://mail.gnome.org/archives/gnome-announce-list/2015-March/msg00047.html
CVE ID: CVE-2016-3191 State: PUBLISHED Published: 2016-03-17T23:00:00 Last Updated: 2024-08-05T23:47:58.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: The compile_branch function in pcre_compile.c in PCRE 8.x before 8.39 and pcre2_compile.c in PCRE2 before 10.22 mishandles patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-3542. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfoc