Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10989 State: PUBLISHED Published: 2019-09-17T14:29:07 Last Updated: 2024-08-06T03:47:34.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leenkme plugin before 2.6.0 for WordPress has wp-admin/admin.php?page=leenkme_facebook CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8457 - https://wordpress.org/plugins/leenkme/#developers - https://www.openwall.com/lists/oss-security/2016/04/16/4
CVE ID: CVE-2016-10990 State: PUBLISHED Published: 2019-09-17T14:30:32 Last Updated: 2024-08-06T03:47:33.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8430 - https://wordpress.org/plugins/wp-cerber/#developers
CVE ID: CVE-2016-10991 State: PUBLISHED Published: 2019-09-17T14:31:30 Last Updated: 2024-08-06T03:47:33.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: The imdb-widget plugin before 1.0.9 for WordPress has Local File Inclusion. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8426 - https://wordpress.org/plugins/imdb-widget/#developers
CVE ID: CVE-2016-10992 State: PUBLISHED Published: 2019-09-17T14:36:04 Last Updated: 2024-08-06T03:47:33.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8429 - https://wordpress.org/plugins/music-store/#developers - https://packetstormsecurity.com/files/136445/
CVE ID: CVE-2016-10993 State: PUBLISHED Published: 2019-09-17T14:37:37 Last Updated: 2024-08-06T03:47:33.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8431 - https://www.vulnerability-lab.com/get_content.php?id=1808
CVE ID: CVE-2016-10994 State: PUBLISHED Published: 2019-09-18T11:07:55 Last Updated: 2024-08-06T03:47:33.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Truemag theme 2016 Q2 for WordPress has XSS via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8478 - https://www.vulnerability-lab.com/get_content.php?id=1839
CVE ID: CVE-2016-10995 State: PUBLISHED Published: 2019-09-18T11:05:38 Last Updated: 2024-08-06T03:47:33.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tevolution plugin before 2.3.0 for WordPress has arbitrary file upload via single_upload.php or single-upload.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8482
CVE ID: CVE-2016-10996 State: PUBLISHED Published: 2019-09-20T14:07:07 Last Updated: 2024-08-06T03:47:33.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/optinmonster/#developers - http://www.pritect.net/blog/optinmonster-1-1-4-6-security-vulnerability
CVE ID: CVE-2016-10997 State: PUBLISHED Published: 2019-09-20T14:08:52 Last Updated: 2024-08-06T03:47:33.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: The beauty-premium theme 1.0.8 for WordPress has CSRF with resultant arbitrary file upload in includes/sendmail.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8412 - https://www.exploit-db.com/exploits/39552
CVE ID: CVE-2016-10998 State: PUBLISHED Published: 2019-09-20T14:29:55 Last Updated: 2024-08-06T03:47:33.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ocim-mp3 plugin through 2016-03-07 for WordPress has wp-content/plugins/ocim-mp3/source/pages.php?id= XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8425
CVE ID: CVE-2016-10999 State: PUBLISHED Published: 2019-09-20T14:31:42 Last Updated: 2024-08-06T03:47:33.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Goodnews theme through 2016-02-28 for WordPress has XSS via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=1771
CVE ID: CVE-2016-11000 State: PUBLISHED Published: 2019-09-20T14:32:57 Last Updated: 2024-08-06T03:47:34.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the export_type_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-ultimate-exporter/#developers - https://seclists.org/bugtraq/2016/Feb/183
CVE ID: CVE-2016-11001 State: PUBLISHED Published: 2019-09-20T14:35:09 Last Updated: 2024-08-06T03:47:33.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted-content field. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/user-submitted-posts/#developers - https://www.securityfocus.com/archive/1/537616/30/0/threaded
CVE ID: CVE-2016-11002 State: PUBLISHED Published: 2019-09-20T14:39:03 Last Updated: 2024-08-06T03:47:34.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Elegant Themes Extra theme before 1.2.4 for WordPress has privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://wptavern.com/critical-security-vulnerability-discovered-in-elegant-themes-products - http://www.pritect.net/blog/elegant-themes-security-vulnerability
CVE ID: CVE-2016-11003 State: PUBLISHED Published: 2019-09-20T14:38:21 Last Updated: 2024-08-06T03:47:33.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Elegant Themes Bloom plugin before 1.1.1 for WordPress has privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://wptavern.com/critical-security-vulnerability-discovered-in-elegant-themes-products - http://www.pritect.net/blog/elegant-themes-security-vulnerability
CVE ID: CVE-2016-11004 State: PUBLISHED Published: 2019-09-20T14:39:42 Last Updated: 2024-08-06T03:47:34.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Elegant Themes Monarch plugin before 1.2.7 for WordPress has privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://wptavern.com/critical-security-vulnerability-discovered-in-elegant-themes-products - http://www.pritect.net/blog/elegant-themes-security-vulnerability
CVE ID: CVE-2016-11005 State: PUBLISHED Published: 2019-09-20T14:41:18 Last Updated: 2024-08-06T03:47:34.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: The instalinker plugin before 1.1.2 for WordPress has includes/instalinker-admin-preview.php?client_id= XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/instalinker/#developers - https://rastating.github.io/instalinker-reflected-xss-information-disclosure/
CVE ID: CVE-2016-11006 State: PUBLISHED Published: 2019-09-20T14:43:10 Last Updated: 2024-08-06T03:47:33.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8378 - https://wordpress.org/plugins/wp-invoice/#developers - http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities
CVE ID: CVE-2016-11007 State: PUBLISHED Published: 2019-09-20T14:44:13 Last Updated: 2024-08-06T03:47:34.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8378 - https://wordpress.org/plugins/wp-invoice/#developers - http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities
CVE ID: CVE-2016-11008 State: PUBLISHED Published: 2019-09-20T14:44:47 Last Updated: 2024-08-06T03:47:34.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8378 - https://wordpress.org/plugins/wp-invoice/#developers - http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities
CVE ID: CVE-2016-11009 State: PUBLISHED Published: 2019-09-20T14:45:30 Last Updated: 2024-08-06T03:47:33.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8378 - https://wordpress.org/plugins/wp-invoice/#developers - http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities
CVE ID: CVE-2016-11010 State: PUBLISHED Published: 2019-09-20T14:46:10 Last Updated: 2024-08-06T03:47:34.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8378 - https://wordpress.org/plugins/wp-invoice/#developers - http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities
CVE ID: CVE-2016-11011 State: PUBLISHED Published: 2019-09-20T14:47:29 Last Updated: 2024-08-06T03:47:34.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-invoice plugin before 4.1.1 for WordPress has wpi_update_user_option privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8378 - https://wordpress.org/plugins/wp-invoice/#developers - http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities
CVE ID: CVE-2016-11012 State: PUBLISHED Published: 2019-09-20T14:48:38 Last Updated: 2024-08-06T03:47:33.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sola-support-tickets plugin before 3.13 for WordPress has incorrect access control for /wp-admin with resultant XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8389 - https://wordpress.org/plugins/sola-support-tickets/#developers
CVE ID: CVE-2016-11013 State: PUBLISHED Published: 2019-09-20T14:49:50 Last Updated: 2024-08-06T03:47:34.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-listings plugin before 2.0.2 for WordPress has includes/views/single-listing.php XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-listings/#developers - https://github.com/agentevolution/wp-listings/pull/52
CVE ID: CVE-2016-11014 State: PUBLISHED Published: 2019-10-16T00:26:23 Last Updated: 2024-08-06T03:47:34.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cybersecurityworks/Disclosed/issues/14 - https://packetstormsecurity.com/files/135216/Netgear-1.0.0.24-Bypass-Improper-Session-Management.html - https://lists.openwall.net/full-disclosure/2016/01/11/5 - https://khalil-shreateh.com/khalil.shtml/it-highlights/593-Netgear-1.0.0.24-Bypass---Improper-Session-Management--.
/5 - https://khalil-shreateh.com/khalil.shtml/it-highlights/593-Netgear-1.0.0.24-Bypass---Improper-Session-Management--.html - https://cybersecurityworks.com/zerodays/cve-2016-11014-netgear.html
CVE ID: CVE-2016-11015 State: PUBLISHED Published: 2019-10-16T00:25:58 Last Updated: 2024-08-06T03:47:34.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.X_TWSZ-COM_URL_Filter.BlackList.1.URL parameter. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openwall.net/full-disclosure/2016/01/11/4 - https://github.com/cybersecurityworks/Disclosed/issues/13 - https://packetstormsecurity.com/files/135215/Netgear-1.0.0.24-Cross-Site-Request-Forgery.html - https://pmcg2k15.wordpress.com/2016/01/11/fd-cross-site-request-forgery-in-netgear-router-jnr1010-version
Forgery.html - https://pmcg2k15.wordpress.com/2016/01/11/fd-cross-site-request-forgery-in-netgear-router-jnr1010-version-1-0-0-24/ - https://cybersecurityworks.com/zerodays/cve-2016-11015-netgear.html
CVE ID: CVE-2016-11016 State: PUBLISHED Published: 2019-10-16T00:25:37 Last Updated: 2024-08-06T03:47:34.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openwall.net/full-disclosure/2016/01/11/1 - https://github.com/cybersecurityworks/Disclosed/issues/12 - https://packetstormsecurity.com/files/135194/Netgear-1.0.0.24-Cross-Site-Scripting.html - http://007software.net/multiple-cross-site-scripting-in-netgear-router-version1-0-0-24/ - https://khalil-shreateh.com/khalil.shtml/it-highlights/592-Netgear-1.0.0.24-Cross-Site-Request-Forge
-version1-0-0-24/ - https://khalil-shreateh.com/khalil.shtml/it-highlights/592-Netgear-1.0.0.24-Cross-Site-Request-Forgery--.html - https://cybersecurityworks.com/zerodays/cve-2016-11016-netgear.html
CVE ID: CVE-2016-11017 State: PUBLISHED Published: 2020-01-06T16:30:56 Last Updated: 2024-08-06T03:47:33.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: The application login page in AKIPS Network Monitor 15.37 through 16.5 allows a remote unauthenticated attacker to execute arbitrary OS commands via shell metacharacters in the username parameter (a failed login attempt returns the command-injection output to a limited login failure field). This is fixed in 16.6. Additional Analyst Notes: - CVE Program Container: References: - https://ctrlu.net/vuln/0002.html - https://www.exploit-db.com/exploits/39564
CVE ID: CVE-2016-11018 State: PUBLISHED Published: 2020-01-21T18:26:25 Last Updated: 2024-08-06T03:47:34.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is huge_it_image_gallery_ajax_callback(). Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/browser/gallery-images/tags/1.8.9 - https://plugins.trac.wordpress.org/browser/gallery-images/tags/1.9.0 - http://10degres.net/cve-2016-11018-image-gal
.9 - https://plugins.trac.wordpress.org/browser/gallery-images/tags/1.9.0 - http://10degres.net/cve-2016-11018-image-gallery-sql-injection/
CVE ID: CVE-2016-11020 State: PUBLISHED Published: 2020-02-24T17:04:35 Last Updated: 2024-08-06T03:47:33.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png. This can lead to XSS and remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.kunena.org/bugs/changelog - https://github.com/Kunena/Kunena-Forum/pull/5028 - https://www.kunena.org/blog/179-kunena-5-0-4-released
CVE ID: CVE-2016-11021 State: PUBLISHED Published: 2020-03-09T00:55:19.000Z Last Updated: 2025-10-21T23:35:49.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/39437
CVE ID: CVE-2016-11022 State: PUBLISHED Published: 2020-03-23T14:17:51 Last Updated: 2024-08-06T03:47:34.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR Prosafe WC9500 5.1.0.17, WC7600 5.1.0.17, and WC7520 2.5.0.35 devices allow a remote attacker to execute code with root privileges via shell metacharacters in the reqMethod parameter to login_handler.php. Additional Analyst Notes: - CVE Program Container: References: - https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/ - http://firmware.re/vulns/acsa-2015-002.php - https://github.com/threat9/routersploit/blob/master/routersploit/modules/exploits/routers/netg
vulns/acsa-2015-002.php - https://github.com/threat9/routersploit/blob/master/routersploit/modules/exploits/routers/netgear/prosafe_rce.py
CVE ID: CVE-2016-11023 State: PUBLISHED Published: 2020-03-30T19:41:55 Last Updated: 2024-08-06T03:47:34.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE: this product is apparently discontinued. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/d/msg/odata4j-discuss/_lBwwXP30g0/Av6zkZMdBwAJ
CVE ID: CVE-2016-11024 State: PUBLISHED Published: 2020-03-30T19:41:46 Last Updated: 2024-08-06T03:47:34.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/d/msg/odata4j-discuss/_lBwwXP30g0/Av6zkZMdBwAJ
CVE ID: CVE-2016-11025 State: PUBLISHED Published: 2020-04-07T13:50:43 Last Updated: 2024-08-06T03:47:34.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with software through 2016-09-13 (Exynos AP chipsets). There is a memcpy heap-based buffer overflow in the OTP service. The Samsung ID is SVE-2016-7114 (December 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11026 State: PUBLISHED Published: 2020-04-07T13:49:38 Last Updated: 2024-08-06T03:47:34.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. BootReceiver allows attackers to trigger a system crash because of incorrect exception handling. The Samsung ID is SVE-2016-7118 (December 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11027 State: PUBLISHED Published: 2020-04-07T13:48:10 Last Updated: 2024-08-06T03:47:34.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with M(6.0) software. In the Shade Locked state, a physically proximate attacker can read notifications on the lock screen. The Samsung ID is SVE-2016-7132 (December 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11028 State: PUBLISHED Published: 2020-04-07T13:46:58 Last Updated: 2024-08-06T03:47:34.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with software through 2016-09-13 (Exynos AP chipsets). There is a stack-based buffer overflow in the OTP TrustZone trustlet. The Samsung IDs are SVE-2016-7173 and SVE-2016-7174 (December 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11029 State: PUBLISHED Published: 2020-04-07T13:45:49 Last Updated: 2024-08-06T03:47:34.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with L(5.0/5.1), M(6.0), and N(7.0) software. Attackers can read the password of the Mobile Hotspot in the log because of an unprotected intent. The Samsung ID is SVE-2016-7301 (December 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11030 State: PUBLISHED Published: 2020-04-07T13:44:36 Last Updated: 2024-08-06T03:47:33.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (with Hrm sensor support) software. The sysfs of the MAX86902 sensor driver does not prevent concurrent access, leading to a race condition and resultant heap-based buffer overflow. The Samsung ID is SVE-2016-7341 (December 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11031 State: PUBLISHED Published: 2020-04-07T13:42:43 Last Updated: 2024-08-06T03:47:34.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. AntService allows a system_server crash and reboot. The Samsung ID is SVE-2016-7044 (November 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11032 State: PUBLISHED Published: 2020-04-07T13:38:52 Last Updated: 2024-08-06T03:47:33.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with M(6.0) software. An attacker can disable all Sound functionality by broadcasting an unprotected intent. The Samsung IDs are SVE-2016-7179 and SVE-2016-7182 (November 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11033 State: PUBLISHED Published: 2020-04-07T13:30:10 Last Updated: 2024-08-06T03:47:34.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with M(6.0) software. There is a heap-based buffer overflow in tlc_server. The Samsung IDs are SVE-2016-7220 and SVE-2016-7225 (November 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11034 State: PUBLISHED Published: 2020-04-07T13:26:42 Last Updated: 2024-08-06T03:47:34.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. The decode function in Qjpeg in Qt 5.7 allows attackers to trigger a system crash via a malformed image. The Samsung ID is SVE-2016-6560 (October 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2016-11035 State: PUBLISHED Published: 2020-04-07T13:24:58 Last Updated: 2024-08-06T03:47:34.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with software through 2016-05-27 (Exynos AP chipsets). A local graphics user can cause a Kernel Crash via the fb0(DECON) frame buffer interface. The Samsung ID is SVE-2016-7011 (October 2016). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb