Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-3707 State: PUBLISHED Published: 2016-06-27T10:00:00 Last Updated: 2024-08-06T00:03:34.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before 3.10.0-327.22.1 in Red Hat Enterprise Linux for Real Time 7 and other products, allows remote attackers to execute SysRq commands via crafted ICMP Echo Request packets, as demonstrated by a brute-force attack to discover a cookie, or an attack that occurs after reading the local icmp_echo_sysrq file. Additional Analyst Notes: - CVE Program Container: References: - https://access.r
eading the local icmp_echo_sysrq file. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1341 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - https://access.redhat.com/errata/RHSA-2016:1301 - http://www.openwall.com/lists/oss-security/2016/05/17/1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - https://bugzilla.redhat.com/show_bug.cgi?id=1327484 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE ID: CVE-2016-3708 State: PUBLISHED Published: 2016-06-08T17:00:00 Last Updated: 2024-08-06T00:03:34.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a namespace that would normally be isolated from pods in other namespaces, allows remote authenticated users to access network resources on restricted pods via an s2i build with a builder image that (1) contains ONBUILD commands or (2) does not contain a tar binary. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1094
CVE ID: CVE-2016-3709 State: PUBLISHED Published: 2022-07-28T16:52:17.000Z Last Updated: 2025-11-04T16:09:07.299Z Vendors: n/a Products: libxml2 Problem Types: CWE-79 Description: Possible cross-site scripting vulnerability in libxml after commit 960f0e2. Additional Analyst Notes: - CVE Program Container: References: - https://mail.gnome.org/archives/xml/2018-January/msg00010.html
CVE ID: CVE-2016-3710 State: PUBLISHED Published: 2016-05-11T21:00:00 Last Updated: 2024-08-06T00:03:34.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-179.html - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://rhn.redhat.com/errata/RHSA-2016-0999.html - http://www.securityfocus
s/security/ovmbulletinjul2016-3090546.html - http://rhn.redhat.com/errata/RHSA-2016-0999.html - http://www.securityfocus.com/bid/90316 - http://rhn.redhat.com/errata/RHSA-2016-0725.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://rhn.redhat.com/errata/RHSA-2016-1000.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://support.citrix.com/article/CTX212736 - http://rhn.redhat.com/errata/RHSA-2016-1002.html - http://rhn.redhat.com/errata/RHSA-2016-1001.html - http://rhn.redhat.com/errata/RHSA-2016-0997.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164862 -
/errata/RHSA-2016-0997.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164862 - http://www.securitytracker.com/id/1035794 - http://rhn.redhat.com/errata/RHSA-2016-1943.html - http://rhn.redhat.com/errata/RHSA-2016-1019.html - http://www.ubuntu.com/usn/USN-2974-1 - http://www.openwall.com/lists/oss-security/2016/05/09/3 - http://rhn.redhat.com/errata/RHSA-2016-0724.html - https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg01197.html - https://access.redhat.com/errata/RHSA-2016:1224 - http://www.debian.org/security/2016/dsa-3573
CVE ID: CVE-2016-3711 State: PUBLISHED Published: 2016-06-08T17:00:00 Last Updated: 2024-08-06T00:03:34.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of a pod by reading the "OPENSHIFT_[namespace]_SERVERID" cookie. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1064 - https://github.com/openshift/origin/pull/8334
CVE ID: CVE-2016-3712 State: PUBLISHED Published: 2016-05-11T21:00:00 Last Updated: 2024-08-06T00:03:34.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-179.html - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://rhn.redhat.com/errata/RHSA-2017-0621.html - http://support.citrix.com/article/CTX212736 - https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg
2017-0621.html - http://support.citrix.com/article/CTX212736 - https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg01196.html - http://www.openwall.com/lists/oss-security/2016/05/09/4 - http://www.securitytracker.com/id/1035794 - http://www.ubuntu.com/usn/USN-2974-1 - http://rhn.redhat.com/errata/RHSA-2016-2585.html - http://www.debian.org/security/2016/dsa-3573 - http://www.securityfocus.com/bid/90314
CVE ID: CVE-2016-3713 State: PUBLISHED Published: 2016-06-27T10:00:00 Last Updated: 2024-08-06T00:03:34.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: The msr_mtrr_valid function in arch/x86/kvm/mtrr.c in the Linux kernel before 4.6.1 supports MSR 0x2f8, which allows guest OS users to read or write to the kvm_arch_vcpu data structure, and consequently obtain sensitive information or cause a denial of service (system crash), via a crafted ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.1 - https://github.com/torvalds/linux/commit/9842df62004f366b9fed2423e24df10542ee0dc5 - http://www.openwal
ChangeLog-4.6.1 - https://github.com/torvalds/linux/commit/9842df62004f366b9fed2423e24df10542ee0dc5 - http://www.openwall.com/lists/oss-security/2016/05/16/2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9842df62004f366b9fed2423e24df10542ee0dc5 - https://bugzilla.redhat.com/show_bug.cgi?id=1332139
CVE ID: CVE-2016-3714 State: PUBLISHED Published: 2016-05-05T18:00:00.000Z Last Updated: 2025-10-21T23:55:53.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/vulnerabilities/2296071 - http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog - http://li
96071 - http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html - http://www.securitytracker.com/id/1035742 - https://imagetragick.com/ - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588 - http://www.openwall.com/lists/oss-security/2016/05/03/13 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html - http://www.ubuntu.com/usn/USN-2990-1 - http://lists.opensuse.org/ope
/opensuse-security-announce/2016-05/msg00051.html - http://www.ubuntu.com/usn/USN-2990-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html - http://www.securityfocus.com/archive/1/538378/100/0/threaded - https://www.exploit-db.com/exploits/39767/ - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html - http://www.rapid7.com/db/modules/exploit/unix/fileformat/imagemagick_delegate - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.openwall.com/lists/oss-security/2016/05/03/18 - http://www.debian.org/security/2016/dsa-3746 - https://security.gentoo.org/glsa/201611-21 - http://lists.opensuse.org/opensuse-
www.debian.org/security/2016/dsa-3746 - https://security.gentoo.org/glsa/201611-21 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568 - https://www.imagemagick.org/script/changelog.php - https://www.exploit-db.com/exploits/39791/ - http://www.debian.org/security/2016/dsa-3580 - http://www.securityfocus.com/bid/89848 - http://rhn.redhat.com/errata/RHSA-2016-0726.html - https://bugzilla.redhat.com/show_bug.cgi?id=1332492 - https://www.kb.cert.org/vuls/id/250519 - http://packetstormsecurity.com/files/152364/ImageTragick-ImageMagick-Proof-Of-Concepts.html
CVE ID: CVE-2016-3715 State: PUBLISHED Published: 2016-05-05T18:00:00.000Z Last Updated: 2025-10-21T23:55:52.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://www.imagemagick.or
.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html - http://www.ubuntu.com/usn/USN-2990-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html - http://www.securityfocus.com/archive/1/538378/100/0/threaded - https://www.exploit-db.com/exploits/39767/ - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.openwall.com/lists/oss-security/2016/05/03/18 - http://www.debi
opics/security/bulletinjul2016-3090568.html - http://www.openwall.com/lists/oss-security/2016/05/03/18 - http://www.debian.org/security/2016/dsa-3746 - https://security.gentoo.org/glsa/201611-21 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568 - https://www.imagemagick.org/script/changelog.php - http://www.debian.org/security/2016/dsa-3580 - http://rhn.redhat.com/errata/RHSA-2016-0726.html - http://www.securityfocus.com/bid/89852
CVE ID: CVE-2016-3716 State: PUBLISHED Published: 2016-05-05T18:00:00 Last Updated: 2024-08-06T00:03:34.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t
ork/topics/security/linuxbulletinapr2016-2952096.html - https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588 - http://www.ubuntu.com/usn/USN-2990-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html - http://www.securityfocus.com/archive/1/538378/100/0/threaded - https://www.exploit-db.com/exploits/39767/ - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.openwall.com/lists/oss-security/2016/05/03/18 - https://security.gentoo.org/glsa/201611-21 - http://lists.ope
http://www.openwall.com/lists/oss-security/2016/05/03/18 - https://security.gentoo.org/glsa/201611-21 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568 - https://www.imagemagick.org/script/changelog.php - http://www.debian.org/security/2016/dsa-3580 - http://rhn.redhat.com/errata/RHSA-2016-0726.html
CVE ID: CVE-2016-3717 State: PUBLISHED Published: 2016-05-05T18:00:00 Last Updated: 2024-08-06T00:03:34.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://www.imagemagick.org/discourse-server/viewtopic.php?f=4
twork/topics/security/linuxbulletinapr2016-2952096.html - https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html - http://www.ubuntu.com/usn/USN-2990-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html - http://www.securityfocus.com/archive/1/538378/100/0/threaded - https://www.exploit-db.com/exploits/39767/ - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.openwall.com/lists/oss-securit
tp://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.openwall.com/lists/oss-security/2016/05/03/18 - https://security.gentoo.org/glsa/201611-21 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568 - https://www.imagemagick.org/script/changelog.php - http://www.debian.org/security/2016/dsa-3580 - http://rhn.redhat.com/errata/RHSA-2016-0726.html
CVE ID: CVE-2016-3718 State: PUBLISHED Published: 2016-05-05T18:00:00.000Z Last Updated: 2025-10-21T23:55:52.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-29
suse-security-announce/2016-05/msg00028.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html - http://www.ubuntu.com/usn/USN-2990-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html - http://www.securityfocus.com/archive/1/538378/100/0/threaded - https://www.exploit-db.com/exploits/39767/ - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - http://www.oracle.com/technetwork/topics/securi
l - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.openwall.com/lists/oss-security/2016/05/03/18 - https://security.gentoo.org/glsa/201611-21 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568 - https://www.imagemagick.org/script/changelog.php - http://www.debian.org/security/2016/dsa-3580 - http://rhn.redhat.com/errata/RHSA-2016-0726.html
CVE ID: CVE-2016-3719 State: REJECTED Published: 2016-05-17T15:00:00 Last Updated: 2016-05-17T14:57:01 Description: No description available.
CVE ID: CVE-2016-3720 State: PUBLISHED Published: 2016-06-10T15:00:00 Last Updated: 2024-08-06T00:03:34.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184561.html
CVE ID: CVE-2016-3721 State: PUBLISHED Published: 2016-05-17T00:00:00 Last Updated: 2024-08-06T00:03:34.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables. Additional Analyst Notes: - ADP Container: - CVE Program Container: References: - https://www.cloudbees.com/jenkins-security-advisory-2016-05-11 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11 - https://wiki.jenkins-ci.org/display/JENKINS/Plugins+affected+by+fix+for+SECURITY-170 - https://access.redhat.com/errata/RHSA-2016
iki.jenkins-ci.org/display/JENKINS/Plugins+affected+by+fix+for+SECURITY-170 - https://access.redhat.com/errata/RHSA-2016:1206 - http://rhn.redhat.com/errata/RHSA-2016-1773.html - http://www.openwall.com/lists/oss-security/2024/05/02/3
CVE ID: CVE-2016-3722 State: PUBLISHED Published: 2016-05-17T14:00:00 Last Updated: 2024-08-06T00:03:34.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with multiple accounts to cause a denial of service (unable to login) by editing the "full name." Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudbees.com/jenkins-security-advisory-2016-05-11 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11 - https://access.redhat.com/errata/RHSA-2016:1206 - http://rhn.redhat.com/errata/RHSA-2016-1773.html
CVE ID: CVE-2016-3723 State: PUBLISHED Published: 2016-05-17T14:00:00 Last Updated: 2024-08-06T00:03:34.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with read access to obtain sensitive plugin installation information by leveraging missing permissions checks in unspecified XML/JSON API endpoints. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudbees.com/jenkins-security-advisory-2016-05-11 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11 - https://access.redhat.com/errata/RHSA-2016:1206 - http://rhn.redhat.com/errata/RHSA-2016-1773.
ity+Advisory+2016-05-11 - https://access.redhat.com/errata/RHSA-2016:1206 - http://rhn.redhat.com/errata/RHSA-2016-1773.html
CVE ID: CVE-2016-3724 State: PUBLISHED Published: 2016-05-17T14:00:00 Last Updated: 2024-08-06T00:03:34.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password information by reading a job configuration. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudbees.com/jenkins-security-advisory-2016-05-11 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11 - https://access.redhat.com/errata/RHSA-2016:1206 - http://rhn.redhat.com/errata/RHSA-2016-1773.html
CVE ID: CVE-2016-3725 State: PUBLISHED Published: 2016-05-17T14:00:00 Last Updated: 2024-08-06T00:03:34.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service (service disruption). Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudbees.com/jenkins-security-advisory-2016-05-11 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11 - https://access.redhat.com/errata/RHSA-2016:120
ki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11 - https://access.redhat.com/errata/RHSA-2016:1206 - http://rhn.redhat.com/errata/RHSA-2016-1773.html
CVE ID: CVE-2016-3726 State: PUBLISHED Published: 2016-05-17T14:00:00 Last Updated: 2024-08-06T00:03:34.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors related to "scheme-relative" URLs. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudbees.com/jenkins-security-advisory-2016-05-11 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11 - https://access.redhat.com/errata/RHSA-2016:1206 - http://rhn.redhat.com/errata/RHS
enkins+Security+Advisory+2016-05-11 - https://access.redhat.com/errata/RHSA-2016:1206 - http://rhn.redhat.com/errata/RHSA-2016-1773.html
CVE ID: CVE-2016-3727 State: PUBLISHED Published: 2016-05-17T14:00:00 Last Updated: 2024-08-06T00:03:34.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudbees.com/jenkins-security-advisory-2016-05-11 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11 - https://access.redhat.com/errata/RHSA-2016:1206 - http://rhn.re
/display/SECURITY/Jenkins+Security+Advisory+2016-05-11 - https://access.redhat.com/errata/RHSA-2016:1206 - http://rhn.redhat.com/errata/RHSA-2016-1773.html
CVE ID: CVE-2016-3728 State: PUBLISHED Published: 2016-05-20T14:00:00 Last Updated: 2024-08-06T00:03:34.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows remote attackers to execute arbitrary code via the PXE template type portion of the PATH_INFO to tftp/. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/theforeman/smart-proxy/commit/eef532aa668d656b9d61d9c6edf7c2505f3f43c7 - http://www.openwall.com/lists/oss-security/2016/05/19/2 - http://projects.theforeman.org/issues/14931 - http://theforeman.org/securi