Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Notes: - CVE Program Container: References: - https://www.joomla.org/announcements/release-news/5693-joomla-3-6-5-released.html - https://www.exploit-db.com/exploits/41157/ - http://www.securityfocus.com/bid/94893
CVE ID: CVE-2016-9839 State: PUBLISHED Published: 2016-12-08T08:08:00 Last Updated: 2024-08-06T02:59:03.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mapserver/mapserver/pull/5356 - http://www.securityfocus.com/bid/94856
CVE ID: CVE-2016-9840 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T02:59:03.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1221 - https://access.redhat.com/errata/RHSA-2017:1220 - https://access.redhat.com/errata/RHSA-2017:3047 - http://www.openwall.com/lists/oss-security/2016/12/05/21 - http://www.securityfocus.com/bid/95131 - https://access.redhat.com/errata/RHSA-2017:3046 - http://lists.opensuse.org/opensu
p://www.securityfocus.com/bid/95131 - https://access.redhat.com/errata/RHSA-2017:3046 - http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html - https://security.gentoo.org/glsa/201701-56 - http://www.securitytracker.com/id/1039427 - https://access.redhat.com/errata/RHSA-2017:1222 - http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html - https://access.redhat.com/errata/RHSA-2017:3453 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html - https://access.redhat.com/errata/RHSA-2017:2999 - https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html - https://usn.ubuntu.com/4246-1/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html - h
/msg00027.html - https://usn.ubuntu.com/4246-1/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html - https://usn.ubuntu.com/4292-1/ - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://www.oracle.com/security-alerts/cpujul2020.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://support.apple.com/HT208144 - https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0 - https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib - https://bugzilla.redhat.com/show_bug.cgi?id=1402345 - https://support.apple.com/HT208113 - https://support.apple.com/HT208112 - https://support.apple.c
w_bug.cgi?id=1402345 - https://support.apple.com/HT208113 - https://support.apple.com/HT208112 - https://support.apple.com/HT208115 - https://wiki.mozilla.org/images/0/09/Zlib-report.pdf - https://security.gentoo.org/glsa/202007-54
CVE ID: CVE-2016-9841 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T02:59:03.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1221 - https://access.redhat.com/errata/RHSA-2017:1220 - https://access.redhat.com/errata/RHSA-2017:3047 - http://www.openwall.com/lists/oss-security/2016/12/05/21 - http://www.securityfocus.com/bid/95131 - https://access.redhat.com/errata/RHSA-2017:3046 - http://lists.opensuse.org/opensus
://www.securityfocus.com/bid/95131 - https://access.redhat.com/errata/RHSA-2017:3046 - http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html - http://www.securitytracker.com/id/1039596 - https://security.gentoo.org/glsa/201701-56 - http://www.securitytracker.com/id/1039427 - https://access.redhat.com/errata/RHSA-2017:1222 - http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html - https://access.redhat.com/errata/RHSA-2017:3453 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html - https://access.redhat.com/errata/RHSA-2017:2999 - https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html - https://usn.ubuntu.com/4246-1/ - https://lists.debian.org/de
ists.debian.org/debian-lts-announce/2019/03/msg00027.html - https://usn.ubuntu.com/4246-1/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html - https://usn.ubuntu.com/4292-1/ - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://www.oracle.com/security-alerts/cpujul2020.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://support.apple.com/HT208144 - https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib - https://support.apple.com/HT208113 - https://support.apple.com/HT208112 - https://support.apple.com/HT208115 -
d#zlib - https://support.apple.com/HT208113 - https://support.apple.com/HT208112 - https://support.apple.com/HT208115 - https://wiki.mozilla.org/images/0/09/Zlib-report.pdf - https://bugzilla.redhat.com/show_bug.cgi?id=1402346 - https://github.com/madler/zlib/commit/9aaec95e82117c1cb0f9624264c3618fc380cecb - https://security.netapp.com/advisory/ntap-20171019-0001/ - https://security.gentoo.org/glsa/202007-54
CVE ID: CVE-2016-9842 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T02:59:03.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1221 - https://access.redhat.com/errata/RHSA-2017:1220 - https://access.redhat.com/errata/RHSA-2017:3047 - http://www.openwall.com/lists/oss-security/2016/12/05/21 - http://www.securityfocus.com/bid/95131 - https://access.redhat.com/errata/RHSA-2017
m/lists/oss-security/2016/12/05/21 - http://www.securityfocus.com/bid/95131 - https://access.redhat.com/errata/RHSA-2017:3046 - http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html - https://security.gentoo.org/glsa/201701-56 - http://www.securitytracker.com/id/1039427 - https://access.redhat.com/errata/RHSA-2017:1222 - http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html - https://access.redhat.com/errata/RHSA-2017:3453 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html - https://access.redhat.com/errata/RHSA-2017:2999 - https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html - https://usn.ubuntu.com/4246-1/ - https://lists.debian.org/debia
s.debian.org/debian-lts-announce/2019/03/msg00027.html - https://usn.ubuntu.com/4246-1/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html - https://usn.ubuntu.com/4292-1/ - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://www.oracle.com/security-alerts/cpujul2020.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://support.apple.com/HT208144 - https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib - https://support.apple.com/HT208113 - https://support.apple.com/HT208112 - https://support.apple.com/HT208115 - https://wiki.mozilla.org/images/0/09/Zlib-report.pdf - https://bugzilla.redhat.co
- https://support.apple.com/HT208115 - https://wiki.mozilla.org/images/0/09/Zlib-report.pdf - https://bugzilla.redhat.com/show_bug.cgi?id=1402348 - https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958 - https://security.gentoo.org/glsa/202007-54
CVE ID: CVE-2016-9843 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T02:59:03.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1221 - https://access.redhat.com/errata/RHSA-2017:1220 - https://access.redhat.com/errata/RHSA-2017:3047 - http://www.openwall.com/lists/oss-security/2016/12/05/21 - http://www.securityfocus.com/bid/95131 - http://www.securitytracker.com/id/1041888 - https://
s-security/2016/12/05/21 - http://www.securityfocus.com/bid/95131 - http://www.securitytracker.com/id/1041888 - https://access.redhat.com/errata/RHSA-2017:3046 - http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html - https://security.gentoo.org/glsa/201701-56 - http://www.securitytracker.com/id/1039427 - https://access.redhat.com/errata/RHSA-2017:1222 - http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html - https://access.redhat.com/errata/RHSA-2017:3453 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html - https://access.redhat.com/errata/RHSA-2017:2999 - https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html - https://usn.ubuntu.com/4246-1
rata/RHSA-2017:2999 - https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html - https://usn.ubuntu.com/4246-1/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html - https://usn.ubuntu.com/4292-1/ - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://www.oracle.com/security-alerts/cpujul2020.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://support.apple.com/HT208144 - https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib - https://support.apple.com/HT208113 - https://support.apple.com/HT208112 - https:
OSS/Secure_Open_Source/Completed#zlib - https://support.apple.com/HT208113 - https://support.apple.com/HT208112 - https://support.apple.com/HT208115 - https://wiki.mozilla.org/images/0/09/Zlib-report.pdf - https://github.com/madler/zlib/commit/d1d577490c15a0c6862473d7576352a9f18ef811 - https://bugzilla.redhat.com/show_bug.cgi?id=1402351 - https://security.netapp.com/advisory/ntap-20181018-0002/ - https://security.gentoo.org/glsa/202007-54
CVE ID: CVE-2016-9844 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T02:59:03.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the zi_short function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via a large compression method value in the central directory file header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94728 - https://bugs.launchpad.net/ubuntu/+source/unzip/+bug/1643750 - http://www.openwall.com/lists/oss-security/2016/12/05/19 - http://www.openwall.com/lists/oss-security/2016/12/05/13 - http://www.openwall.com/lists/oss
ss-security/2016/12/05/19 - http://www.openwall.com/lists/oss-security/2016/12/05/13 - http://www.openwall.com/lists/oss-security/2016/12/05/20
CVE ID: CVE-2016-9845 State: PUBLISHED Published: 2016-12-29T22:00:00 Last Updated: 2024-08-06T02:59:03.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_GET_CAPSET_INFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/05/22 - https://lists.nongnu.org/archive/html/qemu-devel/2016-11/msg00019.html - https://security.gentoo.org/glsa/201701-49 - http://ww
/lists.nongnu.org/archive/html/qemu-devel/2016-11/msg00019.html - https://security.gentoo.org/glsa/201701-49 - http://www.securityfocus.com/bid/94763 - http://www.openwall.com/lists/oss-security/2016/12/05/15
CVE ID: CVE-2016-9846 State: PUBLISHED Published: 2016-12-29T22:00:00 Last Updated: 2024-08-06T02:59:03.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue. It could occur while updating the cursor data in update_cursor_data_virgl. A guest user/process could use this flaw to leak host memory bytes, resulting in DoS for a host. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/05/23 - http://www.openwall.com/lists/oss-security/2016/12/05/18 - https://security.gentoo.org/glsa/201701-49 - https://lists.g
http://www.openwall.com/lists/oss-security/2016/12/05/18 - https://security.gentoo.org/glsa/201701-49 - https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg00029.html - http://www.securityfocus.com/bid/94765
CVE ID: CVE-2016-9847 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T02:59:03.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. When the user does not specify a blowfish_secret key for encrypting cookies, phpMyAdmin generates one at runtime. A vulnerability was reported where the way this value is created uses a weak algorithm. This could allow an attacker to determine the user's blowfish_secret and potentially decrypt their cookies. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected. Additional Analyst Notes: - CVE Program Container: Refer
.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-58 - http://www.securityfocus.com/bid/94524 - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-9848 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T02:59:03.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. phpinfo (phpinfo.php) shows PHP information including values of HttpOnly cookies. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-59 - http://www.securityfocus.com/bid/94523 - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-9849 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T02:59:03.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction ($cfg['Servers'][$i]['AllowRoot']) and deny rules for username by using Null Byte in the username. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94521 - https://www.phpmyadmin.net/security/PMASA-2016-60 - https://security.gentoo.org/glsa/201701-32 - https://lists.deb
521 - https://www.phpmyadmin.net/security/PMASA-2016-60 - https://security.gentoo.org/glsa/201701-32 - https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html
CVE ID: CVE-2016-9850 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T02:59:03.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. Username matching for the allow/deny rules may result in wrong matches and detection of the username in the rule due to non-constant execution time. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-61 - http://www.securityfocus.com/bid/94529 - https://security.gentoo.org/glsa/201701-32 - https://lists.
ity/PMASA-2016-61 - http://www.securityfocus.com/bid/94529 - https://security.gentoo.org/glsa/201701-32 - https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html
CVE ID: CVE-2016-9851 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T02:59:03.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to bypass the logout timeout. All 4.6.x versions (prior to 4.6.5), and 4.4.x versions (prior to 4.4.15.9) are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-62 - https://security.gentoo.org/glsa/201701-32 - http://www.securityfocus.com/bid/94534
CVE ID: CVE-2016-9852 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T02:59:03.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the export functionality, the errors containing the full path of the directory of phpMyAdmin are written to the export file. All 4.6.x versions (prior to 4.6.5), and 4.4.x versions (prior to 4.4.15.9) are affected. This CVE is for the curl wra
. All 4.6.x versions (prior to 4.6.5), and 4.4.x versions (prior to 4.4.15.9) are affected. This CVE is for the curl wrapper issue. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-63 - http://www.securityfocus.com/bid/94527 - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-9853 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T02:59:03.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the export functionality, the errors containing the full path of the directory of phpMyAdmin are written to the export file. All 4.6.x versions (prior to 4.6.5), and 4.4.x versions (prior to 4.4.15.9) are affected. This CVE is for the fopen wr
. All 4.6.x versions (prior to 4.6.5), and 4.4.x versions (prior to 4.4.15.9) are affected. This CVE is for the fopen wrapper issue. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-63 - http://www.securityfocus.com/bid/94527 - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-9854 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T02:59:03.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the export functionality, the errors containing the full path of the directory of phpMyAdmin are written to the export file. All 4.6.x versions (prior to 4.6.5), and 4.4.x versions (prior to 4.4.15.9) are affected. This CVE is for the json_dec
. All 4.6.x versions (prior to 4.6.5), and 4.4.x versions (prior to 4.4.15.9) are affected. This CVE is for the json_decode issue. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-63 - http://www.securityfocus.com/bid/94527 - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-9855 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T02:59:03.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the export functionality, the errors containing the full path of the directory of phpMyAdmin are written to the export file. All 4.6.x versions (prior to 4.6.5), and 4.4.x versions (prior to 4.4.15.9) are affected. This CVE is for the PMA_shut
. All 4.6.x versions (prior to 4.6.5), and 4.4.x versions (prior to 4.4.15.9) are affected. This CVE is for the PMA_shutdownDuringExport issue. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-63 - http://www.securityfocus.com/bid/94527 - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-9856 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T02:59:03.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in phpMyAdmin because of an improper fix for CVE-2016-2559 in PMASA-2016-10. This issue is resolved by using a copy of a hash to avoid a race condition. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94530 - https://www.phpmyadmin.net/security/PMASA-2016-64 - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-9857 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T02:59:03.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. XSS is possible because of a weakness in a regular expression used in some JavaScript processing. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94530 - https://www.phpmyadmin.net/security/PMASA-2016-64 - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-9858 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T02:59:03.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to initiate a denial of service attack in saved searches feature. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94525 - https://security.gentoo.org/glsa/201701-32 - https://www.phpmyadmin.net/security/PMASA-2016-65
CVE ID: CVE-2016-9859 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T02:59:03.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to initiate a denial of service attack in import feature. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94525 - https://security.gentoo.org/glsa/201701-32 - https://www.phpmyadmin.net/security/PMASA-2016-65
CVE ID: CVE-2016-9860 State: PUBLISHED Published: 2016-12-11T02:00:00 Last Updated: 2024-08-06T02:59:03.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phpMyAdmin. An unauthenticated user can execute a denial of service attack when phpMyAdmin is running with $cfg['AllowArbitraryServer']=true. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94525 - https://security.gentoo.org/glsa/201701-32 - https://www.phpmyadmin.net/security/PMASA-2016-65