Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Program Container: References: - http://www.securityfocus.com/bid/98341 - https://www.solutionary.com/threat-intelligence/vulnerability-disclosures/2017/03/citrix-xenmobile-server/
CVE ID: CVE-2016-6878 State: PUBLISHED Published: 2017-04-10T15:00:00 Last Updated: 2024-08-06T01:43:38.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Curve25519 code in botan before 1.11.31, on systems without a native 128-bit integer type, might allow attackers to have unspecified impact via vectors related to undefined behavior, as demonstrated on 32-bit ARM systems compiled by Clang. Additional Analyst Notes: - CVE Program Container: References: - https://botan.randombit.net/security.html#id2
CVE ID: CVE-2016-6879 State: PUBLISHED Published: 2017-04-10T15:00:00 Last Updated: 2024-08-06T01:43:38.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: The X509_Certificate::allowed_usage function in botan 1.11.x before 1.11.31 might allow attackers to have unspecified impact by leveraging a call with more than one Key_Usage set in the enum value. Additional Analyst Notes: - CVE Program Container: References: - https://botan.randombit.net/security.html#id2
CVE ID: CVE-2016-6881 State: PUBLISHED Published: 2016-12-23T05:00:00 Last Updated: 2024-08-06T01:43:38.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: The zlib_refill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93163 - http://www.openwall.com/lists/oss-security/2016/09/26/6
CVE ID: CVE-2016-6882 State: PUBLISHED Published: 2017-03-03T16:00:00 Last Updated: 2024-08-06T01:43:38.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: MatrixSSL before 3.8.7, when the DHE_RSA based cipher suite is supported, makes it easier for remote attackers to obtain RSA private key information by conducting a Lenstra side-channel attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/08/19/7 - https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf - https://access.redhat.com/blogs/766093/posts/1976703 - https://github.com/matrixssl/matrixssl/blob/master/CHANGES.md#validation-of-rsa-signature-creation - http
osts/1976703 - https://github.com/matrixssl/matrixssl/blob/master/CHANGES.md#validation-of-rsa-signature-creation - http://www.securityfocus.com/bid/91488
CVE ID: CVE-2016-6883 State: PUBLISHED Published: 2017-03-03T16:00:00 Last Updated: 2024-08-06T01:43:38.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a Bleichenbacher variant attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrixssl/matrixssl/blob/master/CHANGES.md - http://www.openwall.com/lists/oss-security/2016/08/19/8 - http://www.securityfocus.com/bid/91488
CVE ID: CVE-2016-6884 State: PUBLISHED Published: 2017-03-03T16:00:00 Last Updated: 2024-08-06T01:43:38.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: TLS cipher suites with CBC mode in TLS 1.1 and 1.2 in MatrixSSL before 3.8.3 allow remote attackers to cause a denial of service (out-of-bounds read) via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrixssl/matrixssl/blob/master/CHANGES.md - http://www.openwall.com/lists/oss-security/2016/08/19/8 - http://www.securityfocus.com/bid/91488
CVE ID: CVE-2016-6885 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T01:43:38.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pstm_exptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid free and crash) via a base zero value for the modular exponentiation. Additional Analyst Notes: - CVE Program Container: References: - http://www.matrixssl.org/blog/releases/matrixssl_3_8_4 - https://blog.fuzzing-project.org/51-Fun-with-Bignums-Crashing-MatrixSSL-and-more.html
CVE ID: CVE-2016-6886 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T01:43:38.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pstm_reverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid memory read and crash) via a (1) zero value or (2) the key's modulus for the secret key during RSA key exchange. Additional Analyst Notes: - CVE Program Container: References: - http://www.matrixssl.org/blog/releases/matrixssl_3_8_4 - https://blog.fuzzing-project.org/51-Fun-with-Bignums-Crashing-MatrixSSL-and-more.html - http://www.securityfocus.com/bid/92604
CVE ID: CVE-2016-6887 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T01:43:38.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via a CRT attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.matrixssl.org/blog/releases/matrixssl_3_8_4 - https://blog.fuzzing-project.org/51-Fun-with-Bignums-Crashing-MatrixSSL-and-more.html
CVE ID: CVE-2016-6888 State: PUBLISHED Published: 2016-12-10T00:00:00 Last Updated: 2024-08-06T01:43:38.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92556 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=47882fa4975bf0b58dd74474329fdd7154e8f04c - http://www.openwall.com/lists/oss-secu
it.qemu.org/?p=qemu.git%3Ba=commit%3Bh=47882fa4975bf0b58dd74474329fdd7154e8f04c - http://www.openwall.com/lists/oss-security/2016/08/19/6 - https://access.redhat.com/errata/RHSA-2017:2392 - https://security.gentoo.org/glsa/201609-01 - https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg03176.html - http://www.openwall.com/lists/oss-security/2016/08/19/10 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - https://access.redhat.com/errata/RHSA-2017:2408
CVE ID: CVE-2016-6890 State: PUBLISHED Published: 2017-01-05T22:00:00 Last Updated: 2024-08-06T01:43:38.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrixssl/matrixssl/blob/3-8-6-open/CHANGES.md - https://www.kb.cert.org/vuls/id/396440 - http://www.securityfocus.com/bid/93498 - http://www.tripwire.com/state-of-security/security-data-protection/cyber-security/flawed-matrixssl-code-highlights-need-for-better-iot-update-practices/
CVE ID: CVE-2016-6891 State: PUBLISHED Published: 2017-01-05T22:00:00 Last Updated: 2024-08-06T01:43:38.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ASN.1 Bit Field primitive in an X.509 certificate. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrixssl/matrixssl/blob/3-8-6-open/CHANGES.md - https://www.kb.cert.org/vuls/id/396440 - http://www.securityfocus.com/bid/93498 - http://www.tripwire.com/state-of-security/security-data-protection/cyber-security/flawed-matrixssl-code-highlights-need-for-better-iot-update-practices/
CVE ID: CVE-2016-6892 State: PUBLISHED Published: 2017-01-05T22:00:00 Last Updated: 2024-08-06T01:43:38.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (free of unallocated memory) via a crafted X.509 certificate. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrixssl/matrixssl/blob/3-8-6-open/CHANGES.md - https://www.kb.cert.org/vuls/id/396440 - http://www.securityfocus.com/bid/93498 - http://www.tripwire.com/state-of-security/security-data-protection/cyber-security/flawed-matrixssl-code-highlights-need-for-better-iot-update-pr
state-of-security/security-data-protection/cyber-security/flawed-matrixssl-code-highlights-need-for-better-iot-update-practices/
CVE ID: CVE-2016-6893 State: PUBLISHED Published: 2016-09-02T14:00:00 Last Updated: 2024-08-06T01:43:38.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3668 - https://bugs.launchpad.net/bugs/1614841 - http://www.securityfocus.com/bid/92731 - http://www.securitytracker.com/id/1036728
CVE ID: CVE-2016-6894 State: PUBLISHED Published: 2017-01-04T21:00:00 Last Updated: 2024-08-06T01:43:38.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series devices allow remote attackers to cause a denial of service (device reboot) by sending crafted packets to the control plane. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95267 - https://www.arista.com/en/support/advisories-notices/security-advisories/1752-security-advisory-25
CVE ID: CVE-2016-6895 State: REJECTED Published: 2016-08-31T01:00:00 Last Updated: 2016-08-31T01:57:01 Description: No description available.
CVE ID: CVE-2016-6896 State: PUBLISHED Published: 2017-01-18T21:00:00 Last Updated: 2024-08-06T01:43:38.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress 4.5.3 allows remote authenticated users to cause a denial of service or read certain text files via a .. (dot dot) in the plugin parameter to wp-admin/admin-ajax.php, as demonstrated by /dev/random read operations that deplete the entropy pool. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036683 - https://www.exploit-db.com/exploits/40288/ - http://www
ainer: References: - http://www.securitytracker.com/id/1036683 - https://www.exploit-db.com/exploits/40288/ - http://www.openwall.com/lists/oss-security/2016/08/20/1 - https://sumofpwn.nl/advisory/2016/path_traversal_vulnerability_in_wordpress_core_ajax_handlers.html - https://wpvulndb.com/vulnerabilities/8606
CVE ID: CVE-2016-6897 State: PUBLISHED Published: 2017-01-18T21:00:00 Last Updated: 2024-08-06T01:43:38.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to the check_ajax_referer function, a related issue to CVE-2016-6896. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92572 - http://www.securitytracker.com/id/1036683 - https://www.exploit-db.com/exploits/40
p://www.securityfocus.com/bid/92572 - http://www.securitytracker.com/id/1036683 - https://www.exploit-db.com/exploits/40288/ - http://www.openwall.com/lists/oss-security/2016/08/20/1 - https://sumofpwn.nl/advisory/2016/path_traversal_vulnerability_in_wordpress_core_ajax_handlers.html - https://github.com/WordPress/WordPress/commit/8c82515ab62b88fb32d01c9778f0204b296f3568 - https://wpvulndb.com/vulnerabilities/8606
CVE ID: CVE-2016-6898 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:43:38.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in the Hyper Management Module (HMM) in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary files or cause a denial of service (web service outage) via a crafted XML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92620 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-e9000-en
CVE ID: CVE-2016-6899 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:43:38.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, RH2288H V3 servers with software before V100R003C00SPC515, RH5885 V3 servers with software before V100R003C10SPC102, and XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610 might allow remote attackers to decrypt encrypted data and consequently obtain sensitive information by leveraging selection of an insecure SSL encryp
o decrypt encrypted data and consequently obtain sensitive information by leveraging selection of an insecure SSL encryption algorithm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92623 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-server-en
CVE ID: CVE-2016-6900 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:43:38.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613; RH2288 V3 servers with software before V100R003C00SPC617; RH2288H V3 servers with software before V100R003C00SPC515; RH5885 V3 servers with software before V100R003C10SPC102; and XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610 allows local users to cause a denial of service (iBMC resource consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container
denial of service (iBMC resource consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-server-en
CVE ID: CVE-2016-6901 State: PUBLISHED Published: 2016-09-26T16:00:00 Last Updated: 2024-08-06T01:43:38.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote authenticated users to cause a denial of service via format string specifiers in vectors involving partial commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92618 - http://www.huawei.com/en/psirt/security-advisories/huawei-s
iner: References: - http://www.securityfocus.com/bid/92618 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-vrp-en
CVE ID: CVE-2016-6902 State: PUBLISHED Published: 2017-04-24T19:00:00 Last Updated: 2024-08-06T01:43:38.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1369345 - http://www.securityfocus.com/bid/92591 - https://github.com/ghantoos/lshell/commit/a686f71732a3d0f16df52ef46ab8a49ee0083c68 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=834949 - http://www.openwall.com/lists/oss-security/2016/08/22/17 - https://github.com/ghantoos/lshell/issues/147
CVE ID: CVE-2016-6903 State: PUBLISHED Published: 2017-04-24T19:00:00 Last Updated: 2024-08-06T01:43:38.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1369345 - http://www.securityfocus.com/bid/92591 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=834946 - http://www.openwall.com/lists/oss-security/2016/08/22/17 - https://github.com/ghantoos/lshell/issues/149 - https://github.com/ghantoos/lshell/commit/e72dfcd1f258193f9aaea3591ecbdaed207661a0 - https://g
ntoos/lshell/issues/149 - https://github.com/ghantoos/lshell/commit/e72dfcd1f258193f9aaea3591ecbdaed207661a0 - https://github.com/ghantoos/lshell/pull/153/commits/a686f71732a3d0f16df52ef46ab8a49ee0083c68
CVE ID: CVE-2016-6904 State: PUBLISHED Published: 2017-12-11T15:00:00Z Last Updated: 2024-09-17T00:35:49.170Z Vendors: NetApp Products: VASA Provider for Clustered Data ONTAP Problem Types: Plain text authentication Description: Versions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that accepts plain text authentication. This could allow an unauthenticated attacker to obtain authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20171208-0002/
CVE ID: CVE-2016-6905 State: PUBLISHED Published: 2016-10-03T21:00:00 Last Updated: 2024-08-06T01:43:38.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html - http://www.securityfocus.com/bid/91743 - http://libgd.github.io/release-2.2.3.html - http://lists.opensuse.org/opensuse-updates/2016-08/msg00121.html - https://github.com/libgd/libgd/issues/248 - https://githu
://lists.opensuse.org/opensuse-updates/2016-08/msg00121.html - https://github.com/libgd/libgd/issues/248 - https://github.com/libgd/libgd/pull/251 - https://github.com/libgd/libgd/commit/3c2b605d72e8b080dace1d98a6e50b46c1d12186 - https://github.com/libgd/libgd/commit/01c61f8ab110a77ae64b5ca67c244c728c506f03 - http://www.openwall.com/lists/oss-security/2016/08/23/1
CVE ID: CVE-2016-6906 State: PUBLISHED Published: 2017-03-15T14:00:00 Last Updated: 2024-08-06T01:43:38.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file, related to the decompression buffer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libgd/libgd/blob/gd-2.2.4/CHANGELOG.md - https://github.com/libgd/libgd/commit/58b6dde319c301b0eae27d12e2a659e067d80558 - http://www.debian.org/security/2017/dsa-3777 - https://github.com/libgd/libgd/commit/fb0e0cce0b9f25
12e2a659e067d80558 - http://www.debian.org/security/2017/dsa-3777 - https://github.com/libgd/libgd/commit/fb0e0cce0b9f25389ab56604c3547351617e1415 - http://www.securityfocus.com/bid/96503
CVE ID: CVE-2016-6908 State: PUBLISHED Published: 2017-01-26T15:00:00 Last Updated: 2024-08-06T01:43:38.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Characters from languages are such as Arabic, Hebrew are displayed from RTL (Right To Left) order in Opera 37.0.2192.105088 for Android, due to mishandling of several unicode characters such as U+FE70, U+0622, U+0623 etc and how they are rendered combined with (first strong character) such as an IP address or alphabet could lead to a spoofed URL. It was noticed that by placing neutral characters such as "/", "?" in filepath causes the URL to be flipped and displayed from Right To Left. However, in order for the URL to be spoof
"?" in filepath causes the URL to be flipped and displayed from Right To Left. However, in order for the URL to be spoofed the URL must begin with an IP address followed by neutral characters as omnibox considers IP address to be combination of punctuation and numbers and since LTR (Left To Right) direction is not properly enforced, this causes the entire URL to be treated and rendered from RTL (Right To Left). However, it doesn't have be an IP address, what matters is that first strong character (generally, alphabetic character) in the URL must be an RTL character. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92701
CVE ID: CVE-2016-6909 State: PUBLISHED Published: 2016-08-24T16:00:00 Last Updated: 2024-08-06T01:43:38.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9 and FortiSwitch before 3.4.3 allows remote attackers to execute arbitrary code via a crafted HTTP request, aka EGREGIOUSBLUNDER. Additional Analyst Notes: - CVE Program Container: References: - http://fortiguard.com/advisory/FG-IR-16-023 - https://musalbas.com/2016/08/16/equation-group-firewall-operations-catalogue.html - http://www.securitytracker.com/id/1036643 - http://packetstormsecurity.com/files/138387/
all-operations-catalogue.html - http://www.securitytracker.com/id/1036643 - http://packetstormsecurity.com/files/138387/EGREGIOUSBLUNDER-Fortigate-Remote-Code-Execution.html - https://www.exploit-db.com/exploits/40276/ - http://www.securityfocus.com/bid/92523
CVE ID: CVE-2016-6910 State: PUBLISHED Published: 2016-12-23T16:00:00 Last Updated: 2024-08-06T01:43:38.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The non-existent notification listener vulnerability was introduced in the initial Android 5.0.2 builds for the Samsung Galaxy S6 Edge devices, but the vulnerability can persist on the device even after the device has been upgraded to an Android 5.1.1 or 6.0.1 build. The vulnerable system app gives a non-existent app the ability to read the notifications from the device, which a third-party app can utilize if it uses a package name of com.samsung.android.app.portalservicewidget. This vulnerability allows an unprivileged third-
it uses a package name of com.samsung.android.app.portalservicewidget. This vulnerability allows an unprivileged third-party app to obtain the text of the user's notifications, which tend to contain personal data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95092 - http://www.kryptowire.com/disclosures/CVE-2016-6910/Factory_Resets_and_Obtaining_Notifications_on_Samsung_Android_Devices.pdf
CVE ID: CVE-2016-6911 State: PUBLISHED Published: 2017-01-26T15:00:00 Last Updated: 2024-08-06T01:43:38.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95840 - https://github.com/libgd/libgd/blob/gd-2.2.4/CHANGELOG.md - http://www.debian.org/security/2016/dsa-3693 - https://github.com/libgd/libgd/pull/353 - https://github.com/libgd/libgd/commit/4859d69e07504d4b0a4bdf9bcb4d9e3769ca35ae