Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-5095 State: PUBLISHED Published: 2016-08-07T10:00:00 Last Updated: 2024-08-06T00:53:48.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from a FILTER_SANITIZE_FULL_SPECIAL_CHARS filter_var call. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-5094. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/26/3 - http://www
alyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/26/3 - http://www.debian.org/security/2016/dsa-3602 - http://php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=72135 - http://www.securityfocus.com/bid/92144 - https://gist.github.com/8ef775c117d84ff15185953990a28576
CVE ID: CVE-2016-5096 State: PUBLISHED Published: 2016-08-07T10:00:00 Last Updated: 2024-08-06T00:53:47.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer in the second argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/26/3 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.debian.org/security/2016/dsa-3602 - http://php.net/ChangeLog-5.php - https://h20566.www2.hpe.com/port
.html - http://www.debian.org/security/2016/dsa-3602 - http://php.net/ChangeLog-5.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http://www.securityfocus.com/bid/90861 - https://bugs.php.net/bug.php?id=72114 - https://github.com/php/php-src/commit/abd159cce48f3e34f08e4751c568e09677d5ec9c?w=1
CVE ID: CVE-2016-5097 State: PUBLISHED Published: 2016-07-05T01:00:00 Last Updated: 2024-08-06T00:53:47.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by reading (1) HTTP requests or (2) server logs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/8326aaebe54083d9726e153abdd303a141fe5ad3 - https://www.phpmyadmin.net/security/PMASA-2016-14 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html - http://www.securit
admin.net/security/PMASA-2016-14 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html - http://www.securitytracker.com/id/1035978 - https://github.com/phpmyadmin/phpmyadmin/commit/59e56bd63a5e023b797d82eb272cd074e3b4bfd1 - https://github.com/phpmyadmin/phpmyadmin/commit/11eb574242d2526107366d367ab5585fbe29578f - https://github.com/phpmyadmin/phpmyadmin/commit/5fc8020c5ba9cd2e38beb5dfe013faf2103cdf0f - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-5098 State: PUBLISHED Published: 2016-07-05T01:00:00 Last Updated: 2024-08-06T00:53:47.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in libraries/error_report.lib.php in phpMyAdmin before 4.6.2-prerelease allows remote attackers to determine the existence of arbitrary files by triggering an error. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/d2dc9481d2af25b035778c67eaf0bfd2d2c59dd8 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html - https://www.phpmyadmin.net/security/PMASA-2016-15 - http://www.securitytracker.com/id/1035980 - https://secur
043.html - https://www.phpmyadmin.net/security/PMASA-2016-15 - http://www.securitytracker.com/id/1035980 - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-5099 State: PUBLISHED Published: 2016-07-05T01:00:00 Last Updated: 2024-08-06T00:53:47.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mishandled during double URL decoding. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-06/msg00043.html - https://www.phpmyadmin.net/security/PMASA-2016-16 - http://www.securitytracker.com/id/1035979 - http://www.securityfocus.com/bid/90877 - http://www.debian.org/securit
-16 - http://www.securitytracker.com/id/1035979 - http://www.securityfocus.com/bid/90877 - http://www.debian.org/security/2016/dsa-3627 - https://github.com/phpmyadmin/phpmyadmin/commit/b061096abd992801fbbd805ef6ff74e627528780 - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-5100 State: PUBLISHED Published: 2017-02-13T18:00:00 Last Updated: 2024-08-06T00:53:47.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attackers to guess the password reset token by predicting a value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Froxlor/Froxlor/commit/da4ec3e1b591de96675817a009e26e05e848a6ba
CVE ID: CVE-2016-5101 State: PUBLISHED Published: 2016-06-29T14:00:00 Last Updated: 2024-08-06T00:53:47.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Opera Mail before 2016-02-16 on Windows allows user-assisted remote attackers to execute arbitrary code via a crafted e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/blogs/security/2016/02/opera-12-and-opera-mail-security-update/ - http://www.securityfocus.com/bid/91507
CVE ID: CVE-2016-5102 State: PUBLISHED Published: 2017-02-06T17:00:00 Last Updated: 2024-08-06T00:53:48.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (segmentation fault) via a crafted gif file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96049 - https://usn.ubuntu.com/3606-1/ - http://bugzilla.maptools.org/show_bug.cgi?id=2552 - https://security.gentoo.org/glsa/201701-16 - https://bugzilla.redhat.com/show_bug.cgi?id=1343407
CVE ID: CVE-2016-5103 State: REJECTED Published: 2016-12-21T16:00:00 Last Updated: 2016-12-21T15:57:01 Description: No description available.
CVE ID: CVE-2016-5104 State: PUBLISHED Published: 2016-06-13T14:00:00 Last Updated: 2024-08-06T00:53:47.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-06/msg00029.html - https://bugzilla.redhat.com/show_bug.cgi?id=1339988 - http://www.ubuntu.com/usn/USN-3026-1 - https://github.com/libimobiledevice/libusbmuxd/commit/4397b3376dc4e4cb1c991d0aed6
http://www.ubuntu.com/usn/USN-3026-1 - https://github.com/libimobiledevice/libusbmuxd/commit/4397b3376dc4e4cb1c991d0aed61ce6482614196 - https://github.com/libimobiledevice/libimobiledevice/commit/df1f5c4d70d0c19ad40072f5246ca457e7f9849e - http://www.openwall.com/lists/oss-security/2016/05/26/1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00042.html - http://www.ubuntu.com/usn/USN-3026-2 - http://www.openwall.com/lists/oss-security/2016/05/26/6 - https://lists.debian.org/debian-lts-announce/2020/02/msg00027.html - https://lists.debian.org/debian-lts-announce/2020/02/msg00028.html
CVE ID: CVE-2016-5105 State: PUBLISHED Published: 2016-09-02T14:00:00 Last Updated: 2024-08-06T00:53:47.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3047-1 - http://www.openwall.com/lists/oss-security/2016/05/25/5 - https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04419.html - htt
openwall.com/lists/oss-security/2016/05/25/5 - https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04419.html - http://www.ubuntu.com/usn/USN-3047-2 - http://www.openwall.com/lists/oss-security/2016/05/26/7 - https://bugzilla.redhat.com/show_bug.cgi?id=1339583 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
CVE ID: CVE-2016-5106 State: PUBLISHED Published: 2016-09-02T14:00:00 Last Updated: 2024-08-06T00:53:47.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3047-1 - http://www.openwall.com/lists/oss-security/2016/05/26/8 - https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04340.html
//www.openwall.com/lists/oss-security/2016/05/26/8 - https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04340.html - https://security.gentoo.org/glsa/201609-01 - http://www.ubuntu.com/usn/USN-3047-2 - http://www.openwall.com/lists/oss-security/2016/05/25/6 - https://bugzilla.redhat.com/show_bug.cgi?id=1339578 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
CVE ID: CVE-2016-5107 State: PUBLISHED Published: 2016-09-02T14:00:00 Last Updated: 2024-08-06T00:53:48.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3047-1 - http://www.openwall.com/lists/oss-security/2016/05/25/7 - http://www.openwall.com/lists/oss-security/2016/05/26/9 - https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04424.html - http
penwall.com/lists/oss-security/2016/05/26/9 - https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04424.html - https://security.gentoo.org/glsa/201609-01 - http://www.ubuntu.com/usn/USN-3047-2 - https://bugzilla.redhat.com/show_bug.cgi?id=1336461 - http://www.securityfocus.com/bid/90874 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
CVE ID: CVE-2016-5108 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-06T00:53:47.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00045.html - http://www.securitytracker.com/id/1036009 - http://www.debian.org/security/2016/dsa-3598 - http://www.securityfocus.com/bid/90924 - https://secu
er.com/id/1036009 - http://www.debian.org/security/2016/dsa-3598 - http://www.securityfocus.com/bid/90924 - https://security.gentoo.org/glsa/201701-39 - http://www.videolan.org/security/sa1601.html
CVE ID: CVE-2016-5109 State: PUBLISHED Published: 2016-07-13T15:00:00 Last Updated: 2024-08-06T00:53:47.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX214006
CVE ID: CVE-2016-5114 State: PUBLISHED Published: 2016-08-07T10:00:00 Last Updated: 2024-08-06T00:53:47.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return value, which allows attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and buffer overflow) via a long string, as demonstrated by a long URI in a configuration with custom REQUEST_URI logging. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=70755 - http://rhn.redhat.com/errata/RHSA-20
tes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=70755 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://php.net/ChangeLog-5.php - http://www.openwall.com/lists/oss-security/2016/05/29/1 - http://php.net/ChangeLog-7.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http://github.com/php/php-src/commit/2721a0148649e07ed74468f097a28899741eb58f?w=1 - http://www.search-lab.hu/about-us/news/111-some-unusual-vulnerabilities-in-the-php-engine
CVE ID: CVE-2016-5115 State: PUBLISHED Published: 2017-02-03T15:00:00 Last Updated: 2024-08-06T00:53:47.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: The avcodec_decode_audio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/29/4 - https://trac.mplayerhq.hu/ticket/2298
CVE ID: CVE-2016-5116 State: PUBLISHED Published: 2016-08-07T10:00:00 Last Updated: 2024-08-06T00:53:47.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service (stack-based buffer under-read and application crash) via a long name. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html - https://github.com/libgd/libgd/issues/211 - http://www.openwall.com/lists/oss-security/2016/05/29/5
6-09/msg00078.html - https://github.com/libgd/libgd/issues/211 - http://www.openwall.com/lists/oss-security/2016/05/29/5 - http://www.debian.org/security/2016/dsa-3619 - http://www.ubuntu.com/usn/USN-3030-1 - https://github.com/libgd/libgd/commit/4dc1a2d7931017d3625f2d7cff70a17ce58b53b4
CVE ID: CVE-2016-5117 State: PUBLISHED Published: 2017-01-31T19:00:00 Last Updated: 2024-08-06T00:53:47.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenNTPD before 6.0p1 does not validate the CN for HTTPS constraint requests, which allows remote attackers to bypass the man-in-the-middle mitigations via a crafted timestamp constraint with a valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/ntpd/constraint.c.diff?r1=1.27&r2=1.28 - http://www.openwall.com/lists/oss-security/2016/05/23/2 - http://www.openwall.com/lists/oss-security/2016/05/29/6 - http://www.openntpd.org/txt/release-6.0p1.t
ity/2016/05/23/2 - http://www.openwall.com/lists/oss-security/2016/05/29/6 - http://www.openntpd.org/txt/release-6.0p1.txt
CVE ID: CVE-2016-5118 State: PUBLISHED Published: 2016-06-10T15:00:00 Last Updated: 2024-08-06T00:53:47.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1237 - http://www.securitytracker.com/id/1035985 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00021.html - http://hg.code.sf.net/p/graphicsmagick/code/rev/ae3928faa858 - http://lists.opensuse.org/opensuse-security-announ
html - http://hg.code.sf.net/p/graphicsmagick/code/rev/ae3928faa858 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00008.html - http://www.securitytracker.com/id/1035984 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.securityfocus.com/bid/90938 - http://www.openwall.com/lists/oss-security/2016/05/30/1 - http://www.ubuntu.com/usn/USN-2990-1 - http://www.debian.org/security/2016/dsa-3591 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.397749 - http://lists.opensuse.org/opensuse-security-announce/2016-
php?l=slackware-security&y=2016&m=slackware-security.397749 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.debian.org/security/2016/dsa-3746 - http://www.openwall.com/lists/oss-security/2016/05/29/7 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00047.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00009.html - http://git.imagemagick.org/repos/ImageMagick/commit/40639d173aa8c76b850d625c630b711fee4dcfb8 - http://hg.code.sf.net/p/graphicsmagick/code/file/
rg/repos/ImageMagick/commit/40639d173aa8c76b850d625c630b711fee4dcfb8 - http://hg.code.sf.net/p/graphicsmagick/code/file/41876934e762/ChangeLog
CVE ID: CVE-2016-5119 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T00:53:47.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code by spoofing the version check response and supplying a crafted update. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/137274/KeePass-2-Man-In-The-Middle.html - https://bogner.sh/2016/03/mitm-attack-against-keepass-2s-update-check/ - https://sourceforge.net/p/keepass/discussion/329220/thread/e430cc12/
CVE ID: CVE-2016-5124 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T00:53:48.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev14. Adding images from external sources to HTML editors by drag&drop can potentially lead to script code execution in the context of the active user. To exploit this, a user needs to be tricked to use an image from a specially crafted website and add it to HTML editor areas of OX App Suite, for example E-Mail Compose or OX Text. This specific attack circumvents typical XSS filters and detection mechanisms since the code is not loaded from an external service
c attack circumvents typical XSS filters and detection mechanisms since the code is not loaded from an external service but injected locally. Malicious script code can be executed within a user's context. This can lead to session hijacking or triggering unwanted actions via the web interface (sending mail, deleting data etc.). To exploit this vulnerability, a attacker needs to convince a user to follow specific steps (social-engineering). Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/137894/Open-Xchange-App-Suite-7.8.1-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/538892/100/0/threaded - http://www.securitytracker.c
-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/538892/100/0/threaded - http://www.securitytracker.com/id/1036296 - http://www.securityfocus.com/bid/91775
CVE ID: CVE-2016-5125 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-5126 State: PUBLISHED Published: 2016-06-01T22:00:00 Last Updated: 2024-08-06T00:53:47.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-1756.html - http://www.ubuntu.com/usn/USN-3047-1 - http://rhn.redhat.com/errata/RHSA-2016-1655.html - http://www.openwall.com/lists/oss-security/2016/05/30/6 - http://rhn.redhat.com/
redhat.com/errata/RHSA-2016-1655.html - http://www.openwall.com/lists/oss-security/2016/05/30/6 - http://rhn.redhat.com/errata/RHSA-2016-1763.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.securityfocus.com/bid/90948 - http://rhn.redhat.com/errata/RHSA-2016-1653.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=a6b3167fa0e825aebb5a7cd8b437b6d41584a196 - http://rhn.redhat.com/errata/RHSA-2016-1607.html - http://rhn.redhat.com/errata/RHSA-2016-1654.html - https://security.gentoo.org/glsa/201609-01 - http://www.ubuntu.com/usn/USN-3047-2 - http://rhn.redhat.com/errata/RHSA-2016-1606.html - http://www.openwall.com/lists/oss-security/201
u.com/usn/USN-3047-2 - http://rhn.redhat.com/errata/RHSA-2016-1606.html - http://www.openwall.com/lists/oss-security/2016/05/30/7 - https://lists.gnu.org/archive/html/qemu-block/2016-05/msg00779.html - https://bugzilla.redhat.com/show_bug.cgi?id=1340924 - https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html
CVE ID: CVE-2016-5127 State: PUBLISHED Published: 2016-07-23T19:00:00 Last Updated: 2024-08-06T00:53:47.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code involving an @import at-rule in a Cascading Style Sheets (CSS) token sequence in conjunction with a rel=import attribute of a LINK element. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.ht
t Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html - http://www.securityfocus.com/bid/92053 - http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html - https://codereview.chromium.org/2082893005/ - https://codereview.chromium.org/2091633002 - https://crbug.com/618237 - http://www.ubuntu.com/usn/USN-3041-1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html - http://rhn.redhat.com/e
rg/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html - http://rhn.redhat.com/errata/RHSA-2016-1485.html - http://www.securitytracker.com/id/1036428 - http://www.debian.org/security/2016/dsa-3637