Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-9896 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T03:07:30.881Z Vendors: Mozilla Products: Firefox Problem Types: Use-after-free with WebVR Description: Use-after-free while manipulating the "navigator" object within WebVR. Note: WebVR is not currently enabled by default. This vulnerability affects Firefox < 50.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2016-94/ - http://www.securityfocus.com/bid/94883 - http://www.securitytracker.com/id/1037461 - https://bugzilla.mozilla.org/show_bug.cgi?id=1315543
CVE ID: CVE-2016-9897 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T03:07:30.797Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Memory corruption in libGLES Description: Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a varying array within libGLES. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2016-94/ - https://www.mozilla.org/security/advisories/mfsa2016-95/ - http://www.securityfocus.com/bid/94885 - https://bugz
6-94/ - https://www.mozilla.org/security/advisories/mfsa2016-95/ - http://www.securityfocus.com/bid/94885 - https://bugzilla.mozilla.org/show_bug.cgi?id=1301381 - http://www.securitytracker.com/id/1037461 - https://security.gentoo.org/glsa/201701-15 - https://www.debian.org/security/2017/dsa-3757 - https://www.mozilla.org/security/advisories/mfsa2016-96/ - http://rhn.redhat.com/errata/RHSA-2016-2946.html
CVE ID: CVE-2016-9898 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T03:07:30.980Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Use-after-free in Editor while manipulating DOM subtrees Description: Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1314442 - https://www.mozilla.org/security/advisories/mfsa2016-94/ - https://www.mozilla.org/security/advisories/mfsa2016-95/ - http://www.secur
zilla.org/security/advisories/mfsa2016-94/ - https://www.mozilla.org/security/advisories/mfsa2016-95/ - http://www.securityfocus.com/bid/94885 - http://www.securitytracker.com/id/1037461 - https://security.gentoo.org/glsa/201701-15 - https://www.debian.org/security/2017/dsa-3757 - https://www.mozilla.org/security/advisories/mfsa2016-96/ - http://rhn.redhat.com/errata/RHSA-2016-2946.html
CVE ID: CVE-2016-9899 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T03:07:31.881Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Use-after-free while manipulating DOM events and audio elements Description: Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2016-94/ - https://www.mozilla.org/security/advisories/mfsa2016-95/ - http://www.securityfocus.com/bid/94885 - http:/
fsa2016-94/ - https://www.mozilla.org/security/advisories/mfsa2016-95/ - http://www.securityfocus.com/bid/94885 - http://www.securitytracker.com/id/1037461 - https://bugzilla.mozilla.org/show_bug.cgi?id=1317409 - https://security.gentoo.org/glsa/201701-15 - https://www.debian.org/security/2017/dsa-3757 - https://www.exploit-db.com/exploits/41042/ - http://rhn.redhat.com/errata/RHSA-2016-2973.html - https://www.mozilla.org/security/advisories/mfsa2016-96/ - http://rhn.redhat.com/errata/RHSA-2016-2946.html
CVE ID: CVE-2016-9900 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T03:07:31.403Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Restricted external resources can be loaded by SVG images through data URLs Description: External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs. This could allow for cross-domain data leakage. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2016-94/ - https://www.mozilla.org/security/
am Container: References: - https://www.mozilla.org/security/advisories/mfsa2016-94/ - https://www.mozilla.org/security/advisories/mfsa2016-95/ - http://www.securityfocus.com/bid/94885 - http://www.securitytracker.com/id/1037461 - https://bugzilla.mozilla.org/show_bug.cgi?id=1319122 - https://security.gentoo.org/glsa/201701-15 - https://www.debian.org/security/2017/dsa-3757 - http://rhn.redhat.com/errata/RHSA-2016-2973.html - https://www.mozilla.org/security/advisories/mfsa2016-96/ - http://rhn.redhat.com/errata/RHSA-2016-2946.html
CVE ID: CVE-2016-9901 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T03:07:31.414Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: Data from Pocket server improperly sanitized before execution Description: HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:pocket-saved" (unprivileged) page, giving it access to Pocket's messaging API through HTML injection. This vulnerability affects Firefox ESR < 45.6 and Firefox < 50.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2016-94/ - https://www.mozilla.o
- CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2016-94/ - https://www.mozilla.org/security/advisories/mfsa2016-95/ - http://www.securityfocus.com/bid/94885 - http://www.securitytracker.com/id/1037461 - https://security.gentoo.org/glsa/201701-15 - http://rhn.redhat.com/errata/RHSA-2016-2973.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1320057 - http://rhn.redhat.com/errata/RHSA-2016-2946.html
CVE ID: CVE-2016-9902 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T03:07:31.367Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: Pocket extension does not validate the origin of events Description: The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. This allows content from other origins to fire events and inject content and commands into the Pocket context. Note: this issue does not affect users with e10s enabled. This vulnerability affects Firefox ESR < 45.6 and Firefox < 50.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.
fox ESR < 45.6 and Firefox < 50.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2016-94/ - https://www.mozilla.org/security/advisories/mfsa2016-95/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1320039 - http://www.securityfocus.com/bid/94885 - http://www.securitytracker.com/id/1037461 - https://security.gentoo.org/glsa/201701-15 - http://rhn.redhat.com/errata/RHSA-2016-2973.html - http://rhn.redhat.com/errata/RHSA-2016-2946.html
CVE ID: CVE-2016-9903 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T03:07:31.355Z Vendors: Mozilla Products: Firefox Problem Types: XSS injection vulnerability in add-ons SDK Description: Mozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability. If an additional vulnerability allowed this resource to be loaded as a document it could allow injecting content and script into an add-on's context. This vulnerability affects Firefox < 50.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2016-94/ - http://www.securityfocus.com/bid/94883 - http://www.securitytracker.com/id/1
illa.org/security/advisories/mfsa2016-94/ - http://www.securityfocus.com/bid/94883 - http://www.securitytracker.com/id/1037461 - https://bugzilla.mozilla.org/show_bug.cgi?id=1315435
CVE ID: CVE-2016-9904 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T03:07:31.215Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Cross-origin information leak in shared atoms Description: An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another compartment/zone in specific contexts. This could be used to leak information, such as usernames embedded in JavaScript code, across websites. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2016-94/
dditional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2016-94/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1317936 - https://www.mozilla.org/security/advisories/mfsa2016-95/ - http://www.securityfocus.com/bid/94885 - http://www.securitytracker.com/id/1037461 - https://security.gentoo.org/glsa/201701-15 - https://www.debian.org/security/2017/dsa-3757 - https://www.mozilla.org/security/advisories/mfsa2016-96/ - http://rhn.redhat.com/errata/RHSA-2016-2946.html
CVE ID: CVE-2016-9905 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T03:07:31.496Z Vendors: Mozilla Products: Firefox ESR, Thunderbird Problem Types: Crash in EnumerateSubDocuments Description: A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR < 45.6 and Thunderbird < 45.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2016-95/ - http://www.securityfocus.com/bid/94884 - https://security.gentoo.org/glsa/201701-15 - https://www.debian.org/security/2017/dsa-3757 - https://bugzilla.mozilla.org/show_bug.cgi?id=1293985
g/glsa/201701-15 - https://www.debian.org/security/2017/dsa-3757 - https://bugzilla.mozilla.org/show_bug.cgi?id=1293985 - http://rhn.redhat.com/errata/RHSA-2016-2973.html - http://www.securitytracker.com/id/1037462 - https://www.mozilla.org/security/advisories/mfsa2016-96/ - http://rhn.redhat.com/errata/RHSA-2016-2946.html
CVE ID: CVE-2016-9906 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9907 State: PUBLISHED Published: 2016-12-23T22:00:00 Last Updated: 2024-08-06T03:07:31.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredir_handle_destroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94759 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://access.redhat.com/errata/RHSA-2017:2392 - https://security.gentoo.
g/debian-lts-announce/2018/09/msg00007.html - https://access.redhat.com/errata/RHSA-2017:2392 - https://security.gentoo.org/glsa/201701-49 - http://www.openwall.com/lists/oss-security/2016/12/08/3 - https://access.redhat.com/errata/RHSA-2017:2408
CVE ID: CVE-2016-9908 State: PUBLISHED Published: 2016-12-23T22:00:00 Last Updated: 2024-08-06T03:07:31.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_GET_CAPSET' command. A guest user/process could use this flaw to leak contents of the host memory bytes. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/08/4 - https://security.gentoo.org/glsa/201701-49 - http://www.securityfocus.com/bid/94761
CVE ID: CVE-2016-9909 State: PUBLISHED Published: 2017-02-22T16:00:00 Last Updated: 2024-08-06T03:07:31.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of the < (less than) character in attribute values. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/html5lib/html5lib-python/issues/12 - https://html5lib.readthedocs.io/en/latest/changes.html#b9 - http://www.openwall.com/lists/oss-security/2016/12/06/5 - http://www.openwall.com/lists/oss-security/2016/12/08/8 - http://www.securityfocus.com/bid/9513
-security/2016/12/06/5 - http://www.openwall.com/lists/oss-security/2016/12/08/8 - http://www.securityfocus.com/bid/95132 - https://github.com/html5lib/html5lib-python/commit/9b8d8eb5afbc066b7fac9390f5ec75e5e8a7cab7 - https://github.com/html5lib/html5lib-python/issues/11
CVE ID: CVE-2016-9910 State: PUBLISHED Published: 2017-02-22T16:00:00 Last Updated: 2024-08-06T03:07:31.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/html5lib/html5lib-python/issues/12 - https://html5lib.readthedocs.io/en/latest/changes.html#b9 - http://www.openwall.com/lists/oss-security/2016/12/06/5 - http://www.openwall.com/lists/oss-security/2016/12/08/8 -
9 - http://www.openwall.com/lists/oss-security/2016/12/06/5 - http://www.openwall.com/lists/oss-security/2016/12/08/8 - http://www.securityfocus.com/bid/95132 - https://github.com/html5lib/html5lib-python/commit/9b8d8eb5afbc066b7fac9390f5ec75e5e8a7cab7 - https://github.com/html5lib/html5lib-python/issues/11
CVE ID: CVE-2016-9911 State: PUBLISHED Published: 2016-12-23T22:00:00 Last Updated: 2024-08-06T03:07:31.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in 'ehci_init_transfer'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - http://www.securityfocus.com/bid/94762 - https://access.redhat.com/errata/RHSA-2017:2392 - https://security.gentoo.org/glsa/201701-4
ecurityfocus.com/bid/94762 - https://access.redhat.com/errata/RHSA-2017:2392 - https://security.gentoo.org/glsa/201701-49 - https://access.redhat.com/errata/RHSA-2017:2408 - http://www.openwall.com/lists/oss-security/2016/12/08/5
CVE ID: CVE-2016-9912 State: PUBLISHED Published: 2016-12-23T22:00:00 Last Updated: 2024-08-06T03:07:31.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue. It could occur while destroying gpu resource object in 'virtio_gpu_resource_destroy'. A guest user/process could use this flaw to leak host memory bytes, resulting in DoS for a host. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/08/6 - https://security.gentoo.org/glsa/201701-49 - http://www.securityfocus.com/bid/94760
CVE ID: CVE-2016-9913 State: PUBLISHED Published: 2016-12-29T22:00:00 Last Updated: 2024-08-06T03:07:31.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the v9fs_device_unrealize_common function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) via vectors involving the order of resource cleanup. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94729 - https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg03278.html - https://security.gentoo.org/glsa/201701-49 - http://www.openwall.com/lists/
hive/html/qemu-devel/2016-11/msg03278.html - https://security.gentoo.org/glsa/201701-49 - http://www.openwall.com/lists/oss-security/2016/12/06/11 - http://www.openwall.com/lists/oss-security/2016/12/08/7 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=4774718e5c194026ba5ee7a28d9be49be3080e42
CVE ID: CVE-2016-9914 State: PUBLISHED Published: 2016-12-29T22:00:00 Last Updated: 2024-08-06T03:07:31.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leveraging a missing cleanup operation in FileOperations. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - http://www.securityfocus.com/bid/94729 - https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg03278.html - https://security.gentoo.org/glsa/201701-49
4729 - https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg03278.html - https://security.gentoo.org/glsa/201701-49 - http://www.openwall.com/lists/oss-security/2016/12/06/11 - http://www.openwall.com/lists/oss-security/2016/12/08/7 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=702dbcc274e2ca43be20ba64c758c0ca57dab91d
CVE ID: CVE-2016-9915 State: PUBLISHED Published: 2016-12-29T22:00:00 Last Updated: 2024-08-06T03:07:31.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in hw/9pfs/9p-handle.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leveraging a missing cleanup operation in the handle backend. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - http://www.securityfocus.com/bid/94729 - https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg03278.html - https://security.gentoo.org/glsa
s.com/bid/94729 - https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg03278.html - https://security.gentoo.org/glsa/201701-49 - http://www.openwall.com/lists/oss-security/2016/12/06/11 - http://www.openwall.com/lists/oss-security/2016/12/08/7 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=971f406b77a6eb84e0ad27dcc416b663765aee30
CVE ID: CVE-2016-9916 State: PUBLISHED Published: 2016-12-29T22:00:00 Last Updated: 2024-08-06T03:07:31.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in hw/9pfs/9p-proxy.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leveraging a missing cleanup operation in the proxy backend. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - http://www.securityfocus.com/bid/94729 - https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg03278.html - https://security.gentoo.org/glsa/2
com/bid/94729 - https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg03278.html - https://security.gentoo.org/glsa/201701-49 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=898ae90a44551d25b8e956fd87372d303c82fe68 - http://www.openwall.com/lists/oss-security/2016/12/06/11 - http://www.openwall.com/lists/oss-security/2016/12/08/7
CVE ID: CVE-2016-9917 State: PUBLISHED Published: 2016-12-08T08:08:00 Last Updated: 2024-08-06T03:07:31.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BlueZ 5.42, a buffer overflow was observed in "read_n" function in "tools/hcidump.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.spinics.net/lists/linux-bluetooth/msg68892.html - http://www.securityfocus.com/bid/95013 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00069.html
CVE ID: CVE-2016-9918 State: PUBLISHED Published: 2016-12-08T08:08:00 Last Updated: 2024-08-06T03:07:31.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BlueZ 5.42, an out-of-bounds read was identified in "packet_hexdump" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.spinics.net/lists/linux-bluetooth/msg68898.html - http://www.securityfocus.com/bid/95013 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00054.html
CVE ID: CVE-2016-9919 State: PUBLISHED Published: 2016-12-08T17:00:00 Last Updated: 2024-08-06T03:07:31.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: The icmp6_send function in net/ipv6/icmp.c in the Linux kernel through 4.8.12 omits a certain check of the dst data structure, which allows remote attackers to cause a denial of service (panic) via a fragmented IPv6 packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94824 - https://github.com/torvalds/linux/commit/79dc7e3f1cd323be4c81aa1a94faa1b3ed987fb2 - http://www.openwall.com/lists/oss-security/2016/12/08/15 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.
- http://www.openwall.com/lists/oss-security/2016/12/08/15 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=79dc7e3f1cd323be4c81aa1a94faa1b3ed987fb2
CVE ID: CVE-2016-9920 State: PUBLISHED Published: 2016-12-08T18:00:00 Last Updated: 2024-08-06T03:07:31.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sendmail program is enabled, does not properly restrict the use of custom envelope-from addresses on the sendmail command line, which allows remote authenticated users to execute arbitrary code via a modified HTTP request that sends a crafted e-mail message. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/2016/roundcube-command-execution-via-email/ - http://www.securityf
am Container: References: - https://blog.ripstech.com/2016/roundcube-command-execution-via-email/ - http://www.securityfocus.com/bid/94858 - http://www.openwall.com/lists/oss-security/2016/12/08/10 - https://roundcube.net/news/2016/11/28/updates-1.2.3-and-1.1.7-released - https://security.gentoo.org/glsa/201612-44
CVE ID: CVE-2016-9921 State: PUBLISHED Published: 2016-12-23T22:00:00 Last Updated: 2024-08-06T03:07:31.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://access.redhat.com/errata/RHSA-2017:2392 - https://security.gentoo.org/glsa
-lts-announce/2018/09/msg00007.html - https://access.redhat.com/errata/RHSA-2017:2392 - https://security.gentoo.org/glsa/201701-49 - http://www.securityfocus.com/bid/94803 - https://access.redhat.com/errata/RHSA-2017:2408 - http://www.openwall.com/lists/oss-security/2016/12/09/1