Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
RHSA-2016-0620.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html - https://bto.bluecoat.com/security-advisory/sa122 - http://www.ubuntu.com/usn/USN-2950-3 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html - https://security.gentoo.org/glsa/201612-47 - http://www.debian.org/security/2016/dsa-3548 - http://www.ubuntu.com/usn/USN-2950-2 - https://www.samba.org/samba/security/CVE-2016-2113.html - http://www.ubuntu.com/usn/USN-2950-4
CVE ID: CVE-2016-2114 State: PUBLISHED Published: 2016-04-25T00:00:00 Last Updated: 2024-08-05T23:17:50.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012 - http://rhn.redhat.com/errata/RHSA-2016-0612.html - http://www.ubuntu.com/usn/USN-2950-1 - htt
lackware-security.458012 - http://rhn.redhat.com/errata/RHSA-2016-0612.html - http://www.ubuntu.com/usn/USN-2950-1 - http://www.securityfocus.com/bid/86011 - http://badlock.org/ - https://www.samba.org/samba/security/CVE-2016-2114.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.ubuntu.com/usn/USN-2950-5 - https://www.samba.org/samba/history/samba-4.2.10.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html - http://rhn.redhat.com/errata/RHSA-2016-0618.html - https://www.samba.org/samba/latest_news.html#4.4.2 - http://www.securitytracker.com/id/1035533 - http://lists.fedoraproject.org/pipermail/package-a
/latest_news.html#4.4.2 - http://www.securitytracker.com/id/1035533 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html - http://rhn.redhat.com/errata/RHSA-2016-0614.html - http://rhn.redhat.com/errata/RHSA-2016-0620.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html - https://bto.bluecoat.com/security-advisory/sa122 - http://www.ubuntu.com/usn/USN-2950-3 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html - https://security.gentoo.org/glsa/201612-47 - http://www.debian.org/security/2016/dsa-3548 - http://www.ubuntu.com/usn/
- https://security.gentoo.org/glsa/201612-47 - http://www.debian.org/security/2016/dsa-3548 - http://www.ubuntu.com/usn/USN-2950-2 - http://www.ubuntu.com/usn/USN-2950-4
CVE ID: CVE-2016-2115 State: PUBLISHED Published: 2016-04-25T00:00:00 Last Updated: 2024-08-05T23:17:50.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html - http://rhn.redhat.com/errata/RHSA-201
012 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html - http://rhn.redhat.com/errata/RHSA-2016-0612.html - http://www.ubuntu.com/usn/USN-2950-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html - http://rhn.redhat.com/errata/RHSA-2016-0613.html - http://badlock.org/ - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html - http://www.ubuntu.com/usn/USN-2950-5 - https://www.samba.org/samba/history/samba-4.2.10.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html - http://rhn.redhat.com/errata/RHSA-20
http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html - http://rhn.redhat.com/errata/RHSA-2016-0624.html - http://rhn.redhat.com/errata/RHSA-2016-0618.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html - https://www.samba.org/samba/latest_news.html#4.4.2 - http://www.securitytracker.com/id/1035533 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html - http://rhn.redhat.com/errata/RHSA-2016-0614.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html - http://rhn.redhat.com/errata/RHSA-2016-0620.html - h
sts.opensuse.org/opensuse-security-announce/2016-04/msg00023.html - http://rhn.redhat.com/errata/RHSA-2016-0620.html - http://rhn.redhat.com/errata/RHSA-2016-0611.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html - https://bto.bluecoat.com/security-advisory/sa122 - http://www.ubuntu.com/usn/USN-2950-3 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html - http://rhn.redhat.com/errata/RHSA-2016-0619.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr
al/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821 - https://security.gentoo.org/glsa/201612-47 - http://www.debian.org/security/2016/dsa-3548 - http://www.ubuntu.com/usn/USN-2950-2 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399 - http://www.ubuntu.com/usn/USN-2950-4 - https://www.samba.org/samba/security/CVE-2016-2115.html
CVE ID: CVE-2016-2116 State: PUBLISHED Published: 2016-04-13T14:00:00 Last Updated: 2024-08-05T23:17:50.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3508 - http://www.openwall.com/lists/oss-security/2016/03/03/12 - https://bugs.launchpad.net/ubuntu/+source/jasper/+bug/1547865 - http://www.ubuntu.com/usn/USN-2919-1 - https://access.redhat.com/errata/RHSA-201
et/ubuntu/+source/jasper/+bug/1547865 - http://www.ubuntu.com/usn/USN-2919-1 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.securityfocus.com/bid/84133
CVE ID: CVE-2016-2117 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-05T23:17:50.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3006-1 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.ubuntu.com/usn/USN-3004-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux
jul2016-3090546.html - http://www.ubuntu.com/usn/USN-3004-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f43bfaeddc79effbf3d0fcb53ca477cca66f3db8 - http://www.ubuntu.com/usn/USN-3001-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.ubuntu.com/usn/USN-3005-1 - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://www.ubuntu.com/usn/USN-3000-1 - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-3002-1 - http://www.securityfocus.com/bid/84500 - http://www.ubuntu.com/usn/USN-2989-1 - http://www.ubuntu.com/usn/USN-3007-1 - http://www.
.securityfocus.com/bid/84500 - http://www.ubuntu.com/usn/USN-2989-1 - http://www.ubuntu.com/usn/USN-3007-1 - http://www.openwall.com/lists/oss-security/2016/03/16/7 - http://www.ubuntu.com/usn/USN-3003-1 - http://www.ubuntu.com/usn/USN-2998-1 - https://github.com/torvalds/linux/commit/f43bfaeddc79effbf3d0fcb53ca477cca66f3db8 - https://bugzilla.redhat.com/show_bug.cgi?id=1312298
CVE ID: CVE-2016-2118 State: PUBLISHED Published: 2016-04-12T23:00:00 Last Updated: 2024-08-05T23:17:50.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK." Additional Analyst Notes: - CVE Program Container: References: - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012 - http://lists.opensuse.org/opensuse-security-an
rity/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html - http://rhn.redhat.com/errata/RHSA-2016-0612.html - http://www.ubuntu.com/usn/USN-2950-1 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05166182 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html - http://rhn.redhat.com/errata/RHSA-2016-0613.html - http://badlock.org/ - http://rhn.redhat.com/errata/RHSA-2016-0621.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html - http
ty/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html - http://www.ubuntu.com/usn/USN-2950-5 - https://www.samba.org/samba/history/samba-4.2.10.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html - http://rhn.redhat.com/errata/RHSA-2016-0624.html - http://rhn.redhat.com/errata/RHSA-2016-0618.html - http://www.securityfocus.com/bid/86002 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html - https://www.samba.org/samba/security/CVE-2016-2118.html - https://www.samba.org/samba/latest_news.html#4.4.2
021.html - https://www.samba.org/samba/security/CVE-2016-2118.html - https://www.samba.org/samba/latest_news.html#4.4.2 - http://www.securitytracker.com/id/1035533 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html - https://www.kb.cert.org/vuls/id/813296 - http://rhn.redhat.com/errata/RHSA-2016-0614.html - https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html - http://rhn.redhat.com/errata/RHSA-2016-0620.html - http://rhn.redhat.com/errata/RHSA-2016-0611.html - http://lists.opensuse.org/opensuse-security-announce/2016-04
0.html - http://rhn.redhat.com/errata/RHSA-2016-0611.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html - https://bto.bluecoat.com/security-advisory/sa122 - http://www.ubuntu.com/usn/USN-2950-3 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html - http://rhn.redhat.com/errata/RHSA-2016-0619.html - https://security.gentoo.org/glsa/201612-47 - http://www.debian.org/security/2016/dsa-3548 - http://rhn.redhat.com/errata/RHSA-2016-0623.html - http://www.ubuntu.com/usn/USN-2950-2 - https://access.redhat.com/security/vulnerabilities/badlock - http://rhn.redhat.c
http://www.ubuntu.com/usn/USN-2950-2 - https://access.redhat.com/security/vulnerabilities/badlock - http://rhn.redhat.com/errata/RHSA-2016-0625.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40196 - http://www.ubuntu.com/usn/USN-2950-4 - https://kb.netapp.com/support/s/article/ka51A0000008SXzQAM/smb-vulnerabilities-in-multiple-netapp-products
CVE ID: CVE-2016-2119 State: PUBLISHED Published: 2016-07-07T15:00:00 Last Updated: 2024-08-05T23:17:50.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5 allows man-in-the-middle attackers to bypass a client-signing protection mechanism, and consequently spoof SMB2 and SMB3 servers, via the (1) SMB2_SESSION_FLAG_IS_GUEST or (2) SMB2_SESSION_FLAG_IS_NULL flag. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://rhn.redhat.com/errata/RHSA-2016-1494.html - http://www.securityfocus
security/linuxbulletinjul2016-3090544.html - http://rhn.redhat.com/errata/RHSA-2016-1494.html - http://www.securityfocus.com/bid/91700 - http://rhn.redhat.com/errata/RHSA-2016-1486.html - https://security.gentoo.org/glsa/201805-07 - http://lists.opensuse.org/opensuse-updates/2016-07/msg00060.html - http://rhn.redhat.com/errata/RHSA-2016-1487.html - http://www.securitytracker.com/id/1036244 - https://www.samba.org/samba/security/CVE-2016-2119.html
CVE ID: CVE-2016-2120 State: PUBLISHED Published: 2018-11-01T13:00:00 Last Updated: 2024-08-05T23:17:50.591Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: [UNKNOWN] Products: pdns Problem Types: CWE-190 Description: An issue has been found in PowerDNS Authoritative Server versions up to and including 3.4.10, 4.0.1 allowing an authorized user to crash the server by inserting a specially crafted record in a zone under their control then sending a DNS query for that record. The issue is due to an integer overflow when checking if the content of the record matches the expected size, allowing an attacker to cause a read past the buffer boundary. Additional Analys
f the record matches the expected size, allowing an attacker to cause a read past the buffer boundary. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-3764 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2120
CVE ID: CVE-2016-2121 State: PUBLISHED Published: 2018-10-31T13:00:00 Last Updated: 2024-08-05T23:17:50.670Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: [UNKNOWN] Products: redis Problem Types: CWE-732 Description: A permissions flaw was found in redis, which sets weak permissions on certain files and directories that could potentially contain sensitive information. A local, unprivileged user could possibly use this flaw to access unauthorized system information. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:3226 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2121 - http://www.securityfo
ess.redhat.com/errata/RHSA-2017:3226 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2121 - http://www.securityfocus.com/bid/94111
CVE ID: CVE-2016-2122 State: REJECTED Published: 2022-07-28T16:40:50 Last Updated: 2022-07-28T16:40:50 Description: No description available.
CVE ID: CVE-2016-2123 State: PUBLISHED Published: 2018-11-01T13:00:00 Last Updated: 2024-08-05T23:17:50.724Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: [UNKNOWN] Products: samba Problem Types: CWE-122 Description: A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This
emory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://www.samba.org/samba/security/CVE-2016-2123.html - http://www.securityfocus.com/bid/94970 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2123 - http://www.securitytracker.com/id/1037493
CVE ID: CVE-2016-2124 State: PUBLISHED Published: 2022-02-18T00:00:00 Last Updated: 2024-08-05T23:17:50.581Z Vendors: n/a Products: samba Problem Types: CWE-287 Description: A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2019660 - https://www.samba.org/samba/security/CVE-2016-2124.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html - https://security.gentoo.org/glsa/202309-06
CVE ID: CVE-2016-2125 State: PUBLISHED Published: 2018-10-31T20:00:00 Last Updated: 2024-08-05T23:17:50.585Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: [UNKNOWN] Products: samba Problem Types: CWE-287 Description: It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0495.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-
: References: - http://rhn.redhat.com/errata/RHSA-2017-0495.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2125 - http://rhn.redhat.com/errata/RHSA-2017-0494.html - http://www.securitytracker.com/id/1037494 - https://access.redhat.com/errata/RHSA-2017:1265 - http://www.securityfocus.com/bid/94988 - https://www.samba.org/samba/security/CVE-2016-2125.html - http://rhn.redhat.com/errata/RHSA-2017-0744.html - http://rhn.redhat.com/errata/RHSA-2017-0662.html
CVE ID: CVE-2016-2126 State: PUBLISHED Published: 2017-05-11T14:01:00 Last Updated: 2024-08-05T23:17:50.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.samba.org/samba/security/CVE-2016-2126.html - http://www.securitytracker.com/i
gram Container: References: - https://www.samba.org/samba/security/CVE-2016-2126.html - http://www.securitytracker.com/id/1037495 - http://rhn.redhat.com/errata/RHSA-2017-0495.html - http://rhn.redhat.com/errata/RHSA-2017-0494.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730 - https://access.redhat.com/errata/RHSA-2017:1265 - http://www.securityfocus.com/bid/94994 - http://rhn.redhat.com/errata/RHSA-2017-0744.html - http://rhn.redhat.com/errata/RHSA-2017-0662.html
CVE ID: CVE-2016-2127 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2128 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2129 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2130 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2131 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2132 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2133 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2134 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2135 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2136 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2137 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2138 State: PUBLISHED Published: 2022-07-28T14:48:40 Last Updated: 2024-08-05T23:17:50.575Z Vendors: n/a Products: kippo-graph Problem Types: CWE-79 Description: In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in xss_clean() in class/KippoInput.class.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ikoniaris/kippo-graph/issues/35 - https://github.com/ikoniaris/kippo-graph/commit/e6587ec598902763110b70c8bd0a72f7951b4997
CVE ID: CVE-2016-2139 State: PUBLISHED Published: 2022-07-28T14:49:03 Last Updated: 2024-08-05T23:17:50.711Z Vendors: n/a Products: kippo-graph Problem Types: CWE-79 Description: In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in $file_link in class/KippoInput.class.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ikoniaris/kippo-graph/issues/35 - https://github.com/ikoniaris/kippo-graph/commit/e6587ec598902763110b70c8bd0a72f7951b4997
CVE ID: CVE-2016-2140 State: PUBLISHED Published: 2016-04-12T14:00:00 Last Updated: 2024-08-05T23:17:50.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/nova/+bug/1548450 - https://security.openstack.org/ossa/OSSA-2016-007.html - http://www.securityfocus.com/bid/84277 - http://www.openwall.com/lists/oss-security
nstack.org/ossa/OSSA-2016-007.html - http://www.securityfocus.com/bid/84277 - http://www.openwall.com/lists/oss-security/2016/03/08/6
CVE ID: CVE-2016-2141 State: PUBLISHED Published: 2016-06-30T00:00:00 Last Updated: 2024-08-05T23:17:50.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1347 - http://rhn.redhat.com/errata/RHSA-2016-2035.html - https://access.r