Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-7937 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-06T02:13:21.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_print(). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2016-7938 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-06T02:13:21.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1_print_frame(). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2016-7939 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-06T02:13:21.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2016-7940 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-06T02:13:21.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2016-7942 State: PUBLISHED Published: 2016-12-13T20:00:00 Last Updated: 2024-08-06T02:13:21.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, which triggers out-of-bounds read operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036945 - https://usn.ubuntu.com/3758-2/ - https://security.gentoo.org/glsa/201704-03 - http://www.securityfocus.com/bid/93363 - https://lists.x.org/archives/xorg-announce/2016-October/002720.html - http://www.openwall.com/lists/oss-securit
/93363 - https://lists.x.org/archives/xorg-announce/2016-October/002720.html - http://www.openwall.com/lists/oss-security/2016/10/04/4 - http://www.openwall.com/lists/oss-security/2016/10/04/2 - https://usn.ubuntu.com/3758-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GMCVDXMFPXR7QGMKDG22WPPJCXH2X3L7/ - https://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=8ea762f94f4c942d898fdeb590a1630c83235c17
CVE ID: CVE-2016-7943 State: PUBLISHED Published: 2016-12-13T20:00:00 Last Updated: 2024-08-06T02:13:21.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger out-of-bounds write operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036945 - https://usn.ubuntu.com/3758-2/ - https://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=8c29f1607a31dac0911e45a0dd3d74173822b3c9 - https://security.gentoo.org/glsa/201704-03 - https://lists.x.org/archives/xorg-announce/2016-October/002720
173822b3c9 - https://security.gentoo.org/glsa/201704-03 - https://lists.x.org/archives/xorg-announce/2016-October/002720.html - http://www.openwall.com/lists/oss-security/2016/10/04/4 - http://www.openwall.com/lists/oss-security/2016/10/04/2 - http://www.securityfocus.com/bid/93362 - https://usn.ubuntu.com/3758-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GMCVDXMFPXR7QGMKDG22WPPJCXH2X3L7/
CVE ID: CVE-2016-7944 State: PUBLISHED Published: 2016-12-13T20:00:00 Last Updated: 2024-08-06T02:13:21.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and get out of sync. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036945 - http://www.securityfocus.com/bid/93361 - https://security.gentoo.org/glsa/201704-03 - https://lists.x.org/archives/xorg-announce/2016-October/002720.html - https://lists.fedoraproject.org/archives/list/packa
ttps://lists.x.org/archives/xorg-announce/2016-October/002720.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GE43MDCRGS4R7MRRZNVSLREHRLU5OHCV/ - http://www.openwall.com/lists/oss-security/2016/10/04/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4CE6VJWBMOWLSCH4OP4TAEPIA7NP53ON/ - http://www.openwall.com/lists/oss-security/2016/10/04/2 - https://cgit.freedesktop.org/xorg/lib/libXfixes/commit/?id=61c1039ee23a2d1de712843bed3480654d7ef42e
CVE ID: CVE-2016-7945 State: PUBLISHED Published: 2016-12-13T20:00:00 Last Updated: 2024-08-06T02:13:21.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via vectors involving length fields. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3NTWIWSQ575GREBVAOUQUIMDL5CDVGP/ - http://www.securitytracker.com/id/1036945 - https://security.gentoo.org/glsa/201704-03 - https://cgit.freedesktop.org/xorg/lib/libXi/commit/?id
ker.com/id/1036945 - https://security.gentoo.org/glsa/201704-03 - https://cgit.freedesktop.org/xorg/lib/libXi/commit/?id=19a9cd607de73947fcfb104682f203ffe4e1f4e5 - https://lists.x.org/archives/xorg-announce/2016-October/002720.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVTZ2XLPKLASQUIQA2GMKKAUOQIUMM7I/ - http://www.openwall.com/lists/oss-security/2016/10/04/4 - http://www.openwall.com/lists/oss-security/2016/10/04/2 - http://www.securityfocus.com/bid/93364
CVE ID: CVE-2016-7946 State: PUBLISHED Published: 2016-12-13T20:00:00 Last Updated: 2024-08-06T02:13:21.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3NTWIWSQ575GREBVAOUQUIMDL5CDVGP/ - http://www.securitytracker.com/id/1036945 - https://security.gentoo.org/glsa/201704-03 - https://cgit.freedesktop.org/xorg/lib/libXi/commit/?id=19a9cd607de73947fcfb104682f203ffe4e1f4e5 - https://lists.x.
-03 - https://cgit.freedesktop.org/xorg/lib/libXi/commit/?id=19a9cd607de73947fcfb104682f203ffe4e1f4e5 - https://lists.x.org/archives/xorg-announce/2016-October/002720.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVTZ2XLPKLASQUIQA2GMKKAUOQIUMM7I/ - http://www.openwall.com/lists/oss-security/2016/10/04/4 - http://www.securityfocus.com/bid/93374 - http://www.openwall.com/lists/oss-security/2016/10/04/2
CVE ID: CVE-2016-7947 State: PUBLISHED Published: 2016-12-13T20:00:00 Last Updated: 2024-08-06T02:13:21.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036945 - https://cgit.freedesktop.org/xorg/lib/libXrandr/commit/?id=a0df3e1c7728205e5c7650b2e6dce684139254a6 - https://security.gentoo.org/glsa/201704-03 - https://lists.x.org/archives/xorg-announce/2016-October/002720.html - http://www.openwall.com/lists/oss-security/2016/10/04/4 -
lists.x.org/archives/xorg-announce/2016-October/002720.html - http://www.openwall.com/lists/oss-security/2016/10/04/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/74FFOHWYIKQZTJLRJWDMJ4W3WYBELUUG/ - http://www.securityfocus.com/bid/93365 - http://www.openwall.com/lists/oss-security/2016/10/04/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y7662OZWCSTLRPKS6R3E4Y4M26BSVAAM/
CVE ID: CVE-2016-7948 State: PUBLISHED Published: 2016-12-13T20:00:00 Last Updated: 2024-08-06T02:13:21.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036945 - https://cgit.freedesktop.org/xorg/lib/libXrandr/commit/?id=a0df3e1c7728205e5c7650b2e6dce684139254a6 - https://security.gentoo.org/glsa/201704-03 - https://lists.x.org/archives/xorg-announce/2016-October/002720.html - http://www.openwall.com/lists/oss-security/2016/10/04/4 - https://list
archives/xorg-announce/2016-October/002720.html - http://www.openwall.com/lists/oss-security/2016/10/04/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/74FFOHWYIKQZTJLRJWDMJ4W3WYBELUUG/ - http://www.openwall.com/lists/oss-security/2016/10/04/2 - http://www.securityfocus.com/bid/93373 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y7662OZWCSTLRPKS6R3E4Y4M26BSVAAM/
CVE ID: CVE-2016-7949 State: PUBLISHED Published: 2016-12-13T20:00:00 Last Updated: 2024-08-06T02:13:21.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXrender before 0.9.10 allow remote X servers to trigger out-of-bounds write operations via vectors involving length fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036945 - https://security.gentoo.org/glsa/201704-03 - https://cgit.freedesktop.org/xorg/lib/libXrender/commit/?id=9362c7ddd1af3b168953d0737877bc52d79c94f4 - https://lists.x.org/archives/xorg-announce/2016-Oct
lib/libXrender/commit/?id=9362c7ddd1af3b168953d0737877bc52d79c94f4 - https://lists.x.org/archives/xorg-announce/2016-October/002720.html - http://www.securityfocus.com/bid/93366 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZHUT5YOSWVMBJNWZGUQNZRBFIZKRM4A6/ - http://www.openwall.com/lists/oss-security/2016/10/04/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WCKZFMZ76APAVMIRCUKKHEB4GAS7ZUP/ - http://www.openwall.com/lists/oss-security/2016/10/04/2
CVE ID: CVE-2016-7950 State: PUBLISHED Published: 2016-12-13T20:00:00 Last Updated: 2024-08-06T02:13:21.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to trigger out-of-bounds write operations via vectors involving filter name lengths. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036945 - https://security.gentoo.org/glsa/201704-03 - https://lists.x.org/archives/xorg-announce/2016-October/002720.html - https://cgit.freedesktop.org/xorg/lib/libXrender/commit/?id=8fad00b0b647ee662ce4737ca15be033b7a21714 - https://lists.fedoraproject.o
.freedesktop.org/xorg/lib/libXrender/commit/?id=8fad00b0b647ee662ce4737ca15be033b7a21714 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZHUT5YOSWVMBJNWZGUQNZRBFIZKRM4A6/ - http://www.openwall.com/lists/oss-security/2016/10/04/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WCKZFMZ76APAVMIRCUKKHEB4GAS7ZUP/ - http://www.securityfocus.com/bid/93369 - http://www.openwall.com/lists/oss-security/2016/10/04/2
CVE ID: CVE-2016-7951 State: PUBLISHED Published: 2016-12-13T20:00:00 Last Updated: 2024-08-06T02:13:21.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in X.org libXtst before 1.2.3 allow remote X servers to trigger out-of-bounds memory access operations by leveraging the lack of range checks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036945 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFLHX7WNEUXXDAGR324T35L5P6RRR7GE/ - https://cgit.freedesktop.org/xorg/lib/libXtst/commit/?id=9556ad67af3129ec4a7a4f4b54a0d59701beeae3 - https://lists.x.org/
https://cgit.freedesktop.org/xorg/lib/libXtst/commit/?id=9556ad67af3129ec4a7a4f4b54a0d59701beeae3 - https://lists.x.org/archives/xorg-announce/2016-October/002720.html - http://www.openwall.com/lists/oss-security/2016/10/04/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVEUZRHYY3AJEKMFQ4DS7DX3Y2AICFP7/ - http://www.openwall.com/lists/oss-security/2016/10/04/2 - http://www.securityfocus.com/bid/93370
CVE ID: CVE-2016-7952 State: PUBLISHED Published: 2016-12-13T20:00:00 Last Updated: 2024-08-06T02:13:21.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service (infinite loop) via a reply in the (1) XRecordStartOfData, (2) XRecordEndOfData, or (3) XRecordClientDied category without a client sequence and with attached data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036945 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFLHX7WNEUXXDAGR324T35L5P6RRR7GE/ - http://www.securityfocus.com/bid/93375 - http
unce%40lists.fedoraproject.org/message/AFLHX7WNEUXXDAGR324T35L5P6RRR7GE/ - http://www.securityfocus.com/bid/93375 - https://cgit.freedesktop.org/xorg/lib/libXtst/commit/?id=9556ad67af3129ec4a7a4f4b54a0d59701beeae3 - https://lists.x.org/archives/xorg-announce/2016-October/002720.html - http://www.openwall.com/lists/oss-security/2016/10/04/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVEUZRHYY3AJEKMFQ4DS7DX3Y2AICFP7/ - http://www.openwall.com/lists/oss-security/2016/10/04/2
CVE ID: CVE-2016-7953 State: PUBLISHED Published: 2016-12-13T20:00:00 Last Updated: 2024-08-06T02:13:21.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer underflow in X.org libXvMC before 1.0.10 allows remote X servers to have unspecified impact via an empty string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036945 - https://security.gentoo.org/glsa/201704-03 - http://www.securityfocus.com/bid/93371 - https://lists.x.org/archives/xorg-announce/2016-October/002720.html - http://www.openwall.com/lists/oss-security/2016/10/04/4 - http://www.openwall.com/lists/oss-security/2016/10/04/2 - https://lists.fedoraproject.org
ts/oss-security/2016/10/04/4 - http://www.openwall.com/lists/oss-security/2016/10/04/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLZ3CBE3LKTSHIQYM6RKZYJ5PJ5IGTYG/ - https://cgit.freedesktop.org/xorg/lib/libXvMC/commit/?id=2cd95e7da8367cccdcdd5c9b160012d1dec5cbdb - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M4SI52ZOHOK6524DI2TOW4DX6HPKNFNB/
CVE ID: CVE-2016-7954 State: PUBLISHED Published: 2016-12-22T22:00:00 Last Updated: 2024-08-06T02:13:21.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: this might overlap CVE-2013-0334. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93423 - https://github.com/bundler/bundler/issues/5062 - http://collectiveidea.com/blog/archives/2016/10/06/bundlers-multiple-source-security-vulnerability/ - https://bugzilla.redhat.com/show_bug.cgi?id=1381951 - http://www.openwall.com/lists/os
-source-security-vulnerability/ - https://bugzilla.redhat.com/show_bug.cgi?id=1381951 - http://www.openwall.com/lists/oss-security/2016/10/05/3 - http://www.openwall.com/lists/oss-security/2016/10/04/7 - http://www.openwall.com/lists/oss-security/2016/10/04/5 - https://github.com/bundler/bundler/issues/5051
CVE ID: CVE-2016-7955 State: PUBLISHED Published: 2017-03-15T16:00:00 Last Updated: 2024-08-06T02:13:21.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5.3.1 allows remote attackers to bypass authentication and consequently obtain sensitive information, modify the application, or execute arbitrary code as root via an "AV Report Scheduler" HTTP User-Agent header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540224/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-16-517/ - https://www.al
rityfocus.com/archive/1/540224/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-16-517/ - https://www.alienvault.com/forums/discussion/7765/alienvault-v5-3-1-hotfix
CVE ID: CVE-2016-7957 State: PUBLISHED Published: 2017-04-12T10:00:00 Last Updated: 2024-08-06T02:13:21.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-btl2cap.c by avoiding use of a seven-byte memcmp for potentially shorter strings. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=355b56b1c6c545072ac0c1225730b526c6749f0a - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12825 - http://www.securityfocus.com/bid/97597 - ht
30b526c6749f0a - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12825 - http://www.securityfocus.com/bid/97597 - https://www.wireshark.org/security/wnpa-sec-2016-56.html
CVE ID: CVE-2016-7958 State: PUBLISHED Published: 2017-04-12T10:00:00 Last Updated: 2024-08-06T02:13:21.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/CMakeLists.txt by registering this dissector. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=67597cb2457fb843fa97d3f2c87b82dad6f0de07 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12945 - https://www.wireshark.org/security/wnpa-sec-2016-57.html - http://www.securityfocus.com/bid/93463
CVE ID: CVE-2016-7959 State: PUBLISHED Published: 2016-10-13T10:00:00 Last Updated: 2024-08-06T02:13:21.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC STEP 7 (TIA Portal) before 14 improperly stores pre-shared key data in TIA project files, which makes it easier for local users to obtain sensitive information by leveraging access to a file and conducting a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-03 - http://www.securityfocus.com/bid/93551 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-869766.pdf
CVE ID: CVE-2016-7960 State: PUBLISHED Published: 2016-10-13T10:00:00 Last Updated: 2024-08-06T02:13:21.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC STEP 7 (TIA Portal) before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local users to obtain sensitive configuration information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-287-03 - http://www.securityfocus.com/bid/93551 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-869766.pdf
CVE ID: CVE-2016-7964 State: PUBLISHED Published: 2016-10-31T10:00:00 Last Updated: 2024-08-06T02:13:21.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a and older, when media file fetching is enabled, has no way to restrict access to private networks. This allows users to scan ports of internal networks via SSRF, such as 10.0.0.1/8, 172.16.0.0/12, and 192.168.0.0/16. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94245 - https://github.com/splitbrain/dokuwiki/issues/1708
CVE ID: CVE-2016-7965 State: PUBLISHED Published: 2016-10-31T10:00:00 Last Updated: 2024-08-06T02:13:21.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: DokuWiki 2016-06-26a and older uses $_SERVER[HTTP_HOST] instead of the baseurl setting as part of the password-reset URL. This can lead to phishing attacks. (A remote unauthenticated attacker can change the URL's hostname via the HTTP Host header.) The vulnerability can be triggered only if the Host header is not part of the web server routing process (e.g., if several domains are served by the same web server). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94237 - https://gi
r). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94237 - https://github.com/splitbrain/dokuwiki/issues/1709
CVE ID: CVE-2016-7966 State: PUBLISHED Published: 2016-12-23T22:00:00 Last Updated: 2024-08-06T02:13:21.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer. Due to the parser used on the URL it was not possible to include the equal sign (=) or a space into the injected HTML, which greatly reduces the available HTML functionality. Although it is possible to include an HTML comment indicator to hide content. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93360 - http://www.openwall.com/lists/oss-security/2016/10/
am Container: References: - http://www.securityfocus.com/bid/93360 - http://www.openwall.com/lists/oss-security/2016/10/05/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QNMM5TVPTJQFPJ3YDF4DPXDFW3GQLWLY/ - http://lists.opensuse.org/opensuse-updates/2016-10/msg00065.html - http://www.debian.org/security/2016/dsa-3697