Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-7871 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.371Z Vendors: n/a Products: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier Problem Types: Memory Corruption Description: Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Worker class. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154 - https://securi
16-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154 - https://security.gentoo.org/glsa/201701-17 - http://www.securitytracker.com/id/1037442 - http://www.securityfocus.com/bid/94866 - http://rhn.redhat.com/errata/RHSA-2016-2947.html - https://helpx.adobe.com/security/products/flash-player/apsb16-39.html - http://www.zerodayinitiative.com/advisories/ZDI-16-627 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html
CVE ID: CVE-2016-7872 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.355Z Vendors: n/a Products: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier Problem Types: Use After Free Description: Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClip class related to objects at multiple presentation levels. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/
lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154 - https://security.gentoo.org/glsa/201701-17 - http://www.securityfocus.com/bid/94873 - http://www.securitytracker.com/id/1037442 - http://rhn.redhat.com/errata/RHSA-2016-2947.html - https://helpx.adobe.com/security/products/flash-player/apsb16-39.html - http://www.zerodayinitiative.com/advisories/ZDI-16-626 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html
CVE ID: CVE-2016-7873 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.276Z Vendors: n/a Products: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier Problem Types: Memory Corruption Description: Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the PSDK class related to ad policy functionality method. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/security
ensuse.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154 - https://security.gentoo.org/glsa/201701-17 - http://www.securitytracker.com/id/1037442 - http://www.securityfocus.com/bid/94866 - http://rhn.redhat.com/errata/RHSA-2016-2947.html - https://helpx.adobe.com/security/products/flash-player/apsb16-39.html - http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html
CVE ID: CVE-2016-7874 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.512Z Vendors: n/a Products: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier Problem Types: Memory Corruption Description: Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the NetConnection class when handling the proxy types. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybul
use.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154 - https://security.gentoo.org/glsa/201701-17 - http://www.securitytracker.com/id/1037442 - http://www.securityfocus.com/bid/94866 - http://rhn.redhat.com/errata/RHSA-2016-2947.html - https://helpx.adobe.com/security/products/flash-player/apsb16-39.html - http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html
CVE ID: CVE-2016-7875 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.310Z Vendors: n/a Products: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier Problem Types: Integer Overflow Description: Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow vulnerability in the BitmapData class. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154 - https://secu
2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154 - https://security.gentoo.org/glsa/201701-17 - http://www.zerodayinitiative.com/advisories/ZDI-16-621 - http://www.securitytracker.com/id/1037442 - http://www.securityfocus.com/bid/94866 - http://rhn.redhat.com/errata/RHSA-2016-2947.html - https://helpx.adobe.com/security/products/flash-player/apsb16-39.html - http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html
CVE ID: CVE-2016-7876 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.276Z Vendors: n/a Products: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier Problem Types: Memory Corruption Description: Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Clipboard class related to data handling functionality. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securi
opensuse.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154 - https://security.gentoo.org/glsa/201701-17 - http://www.securitytracker.com/id/1037442 - http://www.securityfocus.com/bid/94866 - http://rhn.redhat.com/errata/RHSA-2016-2947.html - https://helpx.adobe.com/security/products/flash-player/apsb16-39.html - http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html
CVE ID: CVE-2016-7877 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.262Z Vendors: n/a Products: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier Problem Types: Use After Free Description: Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the Action Message Format serialization (AFM0). Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/m
use-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154 - https://security.gentoo.org/glsa/201701-17 - http://www.securityfocus.com/bid/94873 - http://www.securitytracker.com/id/1037442 - http://rhn.redhat.com/errata/RHSA-2016-2947.html - https://helpx.adobe.com/security/products/flash-player/apsb16-39.html - http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html
CVE ID: CVE-2016-7878 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.356Z Vendors: n/a Products: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier Problem Types: Use After Free Description: Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the PSDK's MediaPlayer class. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-620 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/se
6-620 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154 - https://security.gentoo.org/glsa/201701-17 - http://www.securityfocus.com/bid/94873 - http://www.securitytracker.com/id/1037442 - http://rhn.redhat.com/errata/RHSA-2016-2947.html - https://helpx.adobe.com/security/products/flash-player/apsb16-39.html - http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html
CVE ID: CVE-2016-7879 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.463Z Vendors: n/a Products: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier Problem Types: Use After Free Description: Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the NetConnection class when handling an attached script object. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-619 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html -
odayinitiative.com/advisories/ZDI-16-619 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154 - https://security.gentoo.org/glsa/201701-17 - http://www.securityfocus.com/bid/94873 - http://www.securitytracker.com/id/1037442 - http://rhn.redhat.com/errata/RHSA-2016-2947.html - https://helpx.adobe.com/security/products/flash-player/apsb16-39.html - http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html
CVE ID: CVE-2016-7880 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.318Z Vendors: n/a Products: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier Problem Types: Use After Free Description: Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability when setting the length property of an array object. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016
nsuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154 - https://security.gentoo.org/glsa/201701-17 - http://www.securityfocus.com/bid/94873 - http://www.securitytracker.com/id/1037442 - http://rhn.redhat.com/errata/RHSA-2016-2947.html - https://helpx.adobe.com/security/products/flash-player/apsb16-39.html - http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html
CVE ID: CVE-2016-7881 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.464Z Vendors: n/a Products: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier Problem Types: Use After Free Description: Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClip class when handling conversion to an object. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulle
e.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154 - https://security.gentoo.org/glsa/201701-17 - http://www.securityfocus.com/bid/94873 - http://www.securitytracker.com/id/1037442 - http://rhn.redhat.com/errata/RHSA-2016-2947.html - https://helpx.adobe.com/security/products/flash-player/apsb16-39.html - http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html
CVE ID: CVE-2016-7882 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.466Z Vendors: n/a Products: Adobe Experience Manager 6.2 and earlier Problem Types: Cross Site Scripting Description: Adobe Experience Manager versions 6.2 and earlier have an input validation issue in the WCMDebug filter that could be used in cross-site scripting attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037464 - http://www.securityfocus.com/bid/94869 - https://helpx.adobe.com/security/products/experience-manager/apsb16-42.html
CVE ID: CVE-2016-7883 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.521Z Vendors: n/a Products: Adobe Experience Manager 6.2 Problem Types: Cross Site Scripting Description: Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037464 - http://www.securityfocus.com/bid/94869 - https://helpx.adobe.com/security/products/experience-manager/apsb16-42.html
CVE ID: CVE-2016-7884 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.473Z Vendors: n/a Products: Adobe Experience Manager 6.1 and earlier Problem Types: Cross Site Scripting Description: Adobe Experience Manager versions 6.1 and earlier have an input validation issue in the DAM create assets that could be used in cross-site scripting attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037464 - http://www.securityfocus.com/bid/94869 - https://helpx.adobe.com/security/products/experience-manager/apsb16-42.html
CVE ID: CVE-2016-7885 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.491Z Vendors: n/a Products: Adobe Experience Manager 6.2 and earlier Problem Types: Cross Site Request Frogery Description: Adobe Experience Manager versions 6.2 and earlier have a vulnerability that could be used in Cross-Site Request Forgery attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037464 - http://www.securityfocus.com/bid/94876 - https://helpx.adobe.com/security/products/experience-manager/apsb16-42.html
CVE ID: CVE-2016-7886 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.522Z Vendors: n/a Products: Adobe InDesign 11.4.1 and earlier, InDesign Server 11.0.0 and earlier Problem Types: Memory Corruption Description: Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/indesign/apsb16-43.html - http://www.securityfocus.com/bid/94868 - http://www.securitytracker.com/id/1037467
CVE ID: CVE-2016-7887 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.484Z Vendors: n/a Products: Adobe ColdFusion Builder 2016 update 2 and earlier, 3.0.3 and earlier Problem Types: Weak Encryption Description: Adobe ColdFusion Builder versions 2016 update 2 and earlier, 3.0.3 and earlier have an important vulnerability that could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/coldfusion/apsb16-44.html - http://www.securitytracker.com/id/1037443 - http://www.securityfocus.com/bid/94874
CVE ID: CVE-2016-7888 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.482Z Vendors: n/a Products: Adobe Digital Editions 4.5.2 and earlier Problem Types: Memory Leak Description: Adobe Digital Editions versions 4.5.2 and earlier has an important vulnerability that could lead to memory address leak. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/Digital-Editions/apsb16-45.html - http://www.securityfocus.com/bid/94880 - http://www.zerodayinitiative.com/advisories/ZDI-16-636 - http://www.securitytracker.com/id/1037466
CVE ID: CVE-2016-7889 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.524Z Vendors: n/a Products: Adobe Digital Editions 4.5.2 and earlier Problem Types: Code Injection Description: Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/Digital-Editions/apsb16-45.html - http://www.securityfocus.com/bid/94879 - http://www.securitytracker.com/id/1037466
CVE ID: CVE-2016-7890 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.487Z Vendors: n/a Products: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier Problem Types: Security Bypass Description: Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of the same origin policy. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154 - https://security.gentoo.org/glsa/201701-17 - http://www.securitytrack
security-updates/securitybulletins/2016/ms16-154 - https://security.gentoo.org/glsa/201701-17 - http://www.securitytracker.com/id/1037442 - http://rhn.redhat.com/errata/RHSA-2016-2947.html - https://helpx.adobe.com/security/products/flash-player/apsb16-39.html - http://www.securityfocus.com/bid/94870 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html
CVE ID: CVE-2016-7891 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T02:13:20.511Z Vendors: n/a Products: Adobe RoboHelp 2015.0.3 and earlier, RoboHelp 11 and earlier Problem Types: Cross Site Scripting Description: Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used in cross-site scripting attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94878 - https://helpx.adobe.com/security/products/robohelp/apsb16-46.html - http://www.securitytracker.com/id/1037456
CVE ID: CVE-2016-7892 State: PUBLISHED Published: 2016-12-15T06:31:00.000Z Last Updated: 2025-10-21T23:55:47.528Z Vendors: n/a Products: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier Problem Types: Use After Free Description: Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/201
ensuse-security-announce/2016-12/msg00064.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154 - https://security.gentoo.org/glsa/201701-17 - http://www.securitytracker.com/id/1037442 - http://rhn.redhat.com/errata/RHSA-2016-2947.html - https://helpx.adobe.com/security/products/flash-player/apsb16-39.html - http://www.securityfocus.com/bid/94877 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html
CVE ID: CVE-2016-7893 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7894 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7895 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7896 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7897 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7898 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7899 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7900 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7901 State: REJECTED Published: 2016-10-07T17:00:00 Last Updated: 2016-10-07T16:57:01 Description: No description available.
CVE ID: CVE-2016-7902 State: PUBLISHED Published: 2017-01-04T21:00:00 Last Updated: 2024-08-06T02:13:20.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the fileUnzip->unzip method in Dotclear before 2.10.3 allows remote authenticated users with permissions to manage media items to execute arbitrary code by uploading a ZIP file containing a file with a crafted extension, as demonstrated by .php.txt or .php%20. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/05/6 - https://dotclear.org/blog/post/2016/11/01/Dotclear-2.10.3 - https://hg.dotclear.org/dotclear/rev/a9db771a5
016/10/05/6 - https://dotclear.org/blog/post/2016/11/01/Dotclear-2.10.3 - https://hg.dotclear.org/dotclear/rev/a9db771a5a70 - http://www.securityfocus.com/bid/93440
CVE ID: CVE-2016-7903 State: PUBLISHED Published: 2017-01-04T21:00:00 Last Updated: 2024-08-06T02:13:20.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header. Additional Analyst Notes: - CVE Program Container: References: - https://dotclear.org/blog/post/2016/11/01/Dotclear-2.10.3 - https://hg.dotclear.org/dotclear/rev/bb06343f4247 - http://www.securityfocus.com/bid/93439 - http://www.openwall.com/lists/oss-security/2016/10/05/5
CVE ID: CVE-2016-7904 State: PUBLISHED Published: 2017-01-16T06:00:00 Last Updated: 2024-08-06T02:13:20.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in CMS Made Simple before 2.1.6 allows remote attackers to hijack the authentication of administrators for requests that create accounts via an admin/adduser.php request. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/16/1 - http://www.securityfocus.com/bid/95453 - http://dev.cmsmadesimple.org/project/changelog/5392