Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-6179 State: PUBLISHED Published: 2016-09-07T20:00:00 Last Updated: 2024-08-06T01:22:20.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WiFi driver in Huawei Honor 6 smartphones with software H60-L01 before H60-L01C00B850, H60-L11 before H60-L11C00B850, H60-L21 before H60-L21C00B850, H60-L02 before H60-L02C00B850, H60-L12 before H60-L12C00B850, and H60-L03 before H60-L03C01B850 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91773 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160713-
ences: - http://www.securityfocus.com/bid/91773 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160713-01-smartphone-en
CVE ID: CVE-2016-6180 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:22:20.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CHM-TL00C01B564, and CHM-TL00C00 before CHM-TL00HC00B564 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2016-6181, CVE-2016-6182, CVE-2016-6183, and CVE-2016-6184. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160716-01-smartphone-en
CVE ID: CVE-2016-6181 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:22:20.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CHM-TL00C01B564, and CHM-TL00C00 before CHM-TL00HC00B564 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2016-6180, CVE-2016-6182, CVE-2016-6183, and CVE-2016-6184. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160716-01-smartphone-en
CVE ID: CVE-2016-6182 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:22:20.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CHM-TL00C01B564, and CHM-TL00C00 before CHM-TL00HC00B564 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2016-6180, CVE-2016-6181, CVE-2016-6183, and CVE-2016-6184. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160716-01-smartphone-en
CVE ID: CVE-2016-6183 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:22:20.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CHM-TL00C01B564, and CHM-TL00C00 before CHM-TL00HC00B564 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2016-6180, CVE-2016-6181, CVE-2016-6182, and CVE-2016-6184. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160716-01-smartphone-en
CVE ID: CVE-2016-6184 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:22:20.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CHM-TL00C01B564, and CHM-TL00C00 before CHM-TL00HC00B564 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2016-6180, CVE-2016-6181, CVE-2016-6182, and CVE-2016-6183. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160716-01-smartphone-en
CVE ID: CVE-2016-6185 State: PUBLISHED Published: 2016-08-02T14:00:00 Last Updated: 2024-08-06T01:22:20.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PRIPTDA6XINBVEJXI2NGLKVEINBREHTN/ - https://security.gentoo.org/glsa/201701-75 - https://usn.ubuntu.com/3625-2/ - https://lists.fedoraproje
GLKVEINBREHTN/ - https://security.gentoo.org/glsa/201701-75 - https://usn.ubuntu.com/3625-2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITYZJXQH24X2F2LAOQEQAC5KXLYJTJ76/ - http://www.securitytracker.com/id/1036260 - http://www.debian.org/security/2016/dsa-3628 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://perl5.git.perl.org/perl.git/commitdiff/08e3451d7 - http://www.securityfocus.com/bid/91685 - http://www.openwall.com/lists/oss-security/2016/07/07/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5RFDMASVZLFZYBB2GNTZXU6I76E4NA4V/ - http://www
ject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5RFDMASVZLFZYBB2GNTZXU6I76E4NA4V/ - http://www.openwall.com/lists/oss-security/2016/07/08/5 - https://usn.ubuntu.com/3625-1/ - https://rt.cpan.org/Public/Bug/Display.html?id=115808
CVE ID: CVE-2016-6186 State: PUBLISHED Published: 2016-08-05T15:00:00 Last Updated: 2024-08-06T01:22:20.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors involving unsafe usage of Element.innerHTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036338 - http://seclists.org/fulldisclosure/2016/Jul/53 - http://rhn.redhat.com/errata/RH
://www.securitytracker.com/id/1036338 - http://seclists.org/fulldisclosure/2016/Jul/53 - http://rhn.redhat.com/errata/RHSA-2016-1594.html - http://www.debian.org/security/2016/dsa-3622 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KHHPN6MISX5I6UTXQHYLPTLEEUE6WDXW/ - http://www.vulnerability-lab.com/get_content.php?id=1869 - http://www.securityfocus.com/archive/1/538947/100/0/threaded - http://packetstormsecurity.com/files/137965/Django-3.3.0-Script-Insertion.html - http://www.ubuntu.com/usn/USN-3039-1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DMLLFAUT4J4IP4P2KI4NOVWRMHA22WUJ/ - https
raproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DMLLFAUT4J4IP4P2KI4NOVWRMHA22WUJ/ - https://github.com/django/django/commit/f68e5a99164867ab0e071a936470958ed867479d - http://rhn.redhat.com/errata/RHSA-2016-1596.html - https://www.djangoproject.com/weblog/2016/jul/18/security-releases/ - https://github.com/django/django/commit/d03bf6fe4e9bf5b07de62c1a271c4b41a7d3d158 - http://www.securityfocus.com/bid/92058 - http://rhn.redhat.com/errata/RHSA-2016-1595.html - https://www.exploit-db.com/exploits/40129/
CVE ID: CVE-2016-6187 State: PUBLISHED Published: 2016-08-06T20:00:00 Last Updated: 2024-08-06T01:22:20.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 4.6.5 does not validate the buffer size, which allows local users to gain privileges by triggering an AppArmor setprocattr hook. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/30a46a4647fd1df9cf52e43bf467f0d9265096ca - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=30a46a4647fd1df9cf52e43bf467f0d9265096ca - http://www.kernel.org/pub/linux/kernel/v4.x/Chang
rvalds/linux.git/commit/?id=30a46a4647fd1df9cf52e43bf467f0d9265096ca - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.5 - http://www.openwall.com/lists/oss-security/2016/07/09/2 - http://marc.info/?l=linux-kernel&m=146793642811929&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=1354383 - http://www.securityfocus.com/bid/91696
CVE ID: CVE-2016-6188 State: PUBLISHED Published: 2017-02-03T16:00:00 Last Updated: 2024-08-06T01:22:20.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service (memory consumption) via a large number of attempts to upload a large attachment, related to temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://sogo.nu/bugs/view.php?id=3510 - https://github.com/inverse-inc/sogo/commit/32bb1456e23a32c7f45079c3985bf732dd0d276d - http://www.openwall.com/lists/oss-security/2016/07/09/3 - http://www.securityfocus.com/bid/96007
CVE ID: CVE-2016-6189 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T01:22:20.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/inverse-inc/sogo/commit/875a4aca3218340fd4d3141950c82c2ff45b343d - https://github.com/inverse-inc/sogo/commit/717f45f640a2866b76a8984139391fae64339225 - http://www.openwall.com/lists/oss-security/2016/07/09/3 - https://sogo.nu/bugs/view.php?id=3695
CVE ID: CVE-2016-6190 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T01:22:20.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: SOGo before 2.3.12 and 3.x before 3.1.1 does not restrict access to the UID and DTSTAMP attributes, which allows remote authenticated users to obtain sensitive information about appointments with the "View the Date & Time" restriction, as demonstrated by correlating UIDs and DTSTAMPs between all users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/inverse-inc/sogo/commit/875a4aca3218340fd4d3141950c82c2ff45b343d - https://github.com/inverse-inc/sogo/commit/717f45f640a2866b76a8984139391fae64
875a4aca3218340fd4d3141950c82c2ff45b343d - https://github.com/inverse-inc/sogo/commit/717f45f640a2866b76a8984139391fae64339225 - https://sogo.nu/bugs/view.php?id=3696 - http://www.openwall.com/lists/oss-security/2016/07/09/3
CVE ID: CVE-2016-6191 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T01:22:20.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Description, (2) Location, (3) URL, or (4) Title field. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/09/3 - https://github.com/inverse-inc/sogo/commit/64ce3c9c22fd9a28caabf11e76216cd53d0245aa - https://sogo.nu/bugs/view.php?id=3718
CVE ID: CVE-2016-6192 State: PUBLISHED Published: 2016-08-02T16:00:00 Last Updated: 2024-08-06T01:22:20.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Wi-Fi driver in Huawei P8 smartphones with software before GRA-CL00C92B363 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2016-6193. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160708-01-smartphone-en - http://www.securityfocus.com/bid/91735
CVE ID: CVE-2016-6193 State: PUBLISHED Published: 2016-08-02T16:00:00 Last Updated: 2024-08-06T01:22:20.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Wi-Fi driver in Huawei P8 smartphones with software before GRA-CL00C92B363 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2016-6192. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160708-01-smartphone-en - http://www.securityfocus.com/bid/91735
CVE ID: CVE-2016-6195 State: PUBLISHED Published: 2016-08-30T19:00:00 Last Updated: 2024-08-06T01:22:20.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin before 4.2.2 Patch Level 5 and 4.2.3 before Patch Level 1 allows remote attackers to execute arbitrary SQL commands via the postids parameter to forumrunner/request.php, as exploited in the wild in July 2016. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/drewlong/vbully - http://www.vbulletin.org/forum/showthread.php?t=322848 - http://www.securityfocus.com/bid/92687 - https://enumerated.wordpress.com/2016/07/11
org/forum/showthread.php?t=322848 - http://www.securityfocus.com/bid/92687 - https://enumerated.wordpress.com/2016/07/11/1/
CVE ID: CVE-2016-6197 State: PUBLISHED Published: 2016-08-06T20:00:00 Last Updated: 2024-08-06T01:22:20.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with unlink and rename system-call processing, which allows local users to cause a denial of service (system crash) via a rename system call that specifies a self-hardlink. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.ubuntu.com/usn/USN-3070-1 - https://bugzilla.r
/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.ubuntu.com/usn/USN-3070-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1355650 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=11f3710417d026ea2f4fcf362d866342c5274185 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://rhn.redhat.com/errata/RHSA-2016-1847.html - http://www.securityfocus.com/bid/91709 - http://rhn.redhat.com/errata/RHSA-2016-1875.html - http://www.ubuntu.com/usn/USN-3070-3 - http://www.securitytracker.com/id/1036273 - http://www.ubuntu.com/usn/USN-3070-2 - https://github.com/torvalds/linux/commit/11f3710417d026ea2f4fcf362d866342c52
73 - http://www.ubuntu.com/usn/USN-3070-2 - https://github.com/torvalds/linux/commit/11f3710417d026ea2f4fcf362d866342c5274185 - http://www.openwall.com/lists/oss-security/2016/07/11/8 - http://www.ubuntu.com/usn/USN-3070-4
CVE ID: CVE-2016-6198 State: PUBLISHED Published: 2016-08-06T20:00:00 Last Updated: 2024-08-06T01:22:20.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local users to cause a denial of service (system crash) via a rename system call, related to fs/namei.c and fs/open.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://rhn.redhat.c
3090546.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://rhn.redhat.com/errata/RHSA-2016-1847.html - https://github.com/torvalds/linux/commit/9409e22acdfc9153f88d9b1ed2bd2a5b34d2d3ca - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://www.securityfocus.com/bid/91709 - http://rhn.redhat.com/errata/RHSA-2016-1875.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://www.securitytracker.com/id/1036273 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9409e22acdfc9153f88d9b1ed2bd2a5b34d2d3ca - https://github.com/torvalds/linux/commit/54d5ca871e72f2bb172ec9323497f01cd5091ec7 - http://www.openwall.com/l
34d2d3ca - https://github.com/torvalds/linux/commit/54d5ca871e72f2bb172ec9323497f01cd5091ec7 - http://www.openwall.com/lists/oss-security/2016/07/11/8 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5 - https://bugzilla.redhat.com/show_bug.cgi?id=1355654 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54d5ca871e72f2bb172ec9323497f01cd5091ec7
CVE ID: CVE-2016-6199 State: PUBLISHED Published: 2017-02-07T15:00:00 Last Updated: 2024-08-06T01:22:20.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serialized object. Additional Analyst Notes: - CVE Program Container: References: - https://philwantsfish.github.io/security/java-deserialization-github - https://discuss.gradle.org/t/a-security-issue-about-gradle-rce/17726
CVE ID: CVE-2016-6201 State: PUBLISHED Published: 2017-07-03T16:00:00 Last Updated: 2024-08-06T01:22:20.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Ektron Content Management System (CMS) before 9.1.0.184 SP3 (9.1.0.184.3.127) allows remote attackers to inject arbitrary web script or HTML via the ContType parameter in a ViewContentByCategory action to WorkArea/content.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/143014/Ektron-CMS-9.10SP1-Cross-Site-Scripting.html
CVE ID: CVE-2016-6204 State: PUBLISHED Published: 2016-07-22T15:00:00 Last Updated: 2024-08-06T01:22:20.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-208-03 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-119132.pdf - http://www.securityfocus.com/bid/92114
CVE ID: CVE-2016-6206 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-06T01:22:20.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei AR3200 routers with software before V200R007C00SPC600 allow remote attackers to cause a denial of service or execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91774 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160713-01-router-en
CVE ID: CVE-2016-6207 State: PUBLISHED Published: 2016-08-12T15:00:00 Last Updated: 2024-08-06T01:22:20.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92080 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html - https://libgd.github.io/release-2.2.3.html - https://bugs.php.net/bug.php?id=72558 - http://lists.opensus
sg00086.html - https://libgd.github.io/release-2.2.3.html - https://bugs.php.net/bug.php?id=72558 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.securityfocus.com/archive/1/539100/100/0/threaded - http://www.ubuntu.com/usn/USN-3060-1 - http://www.debian.org/security/2016/dsa-3630 - http://www.securitytracker.com/id/1036535 - https://security.gentoo.org/glsa/201612-09 - https://secunia.com/secunia_research/2016-9/ - http://packetstormsecurity.com/files/138174/LibGD-2.2.2-Integer-Overflow-Denial-Of-Service.html
CVE ID: CVE-2016-6209 State: PUBLISHED Published: 2017-03-31T15:00:00 Last Updated: 2024-08-06T01:22:20.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Nagios. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1346217 - http://seclists.org/fulldisclosure/2016/Jun/20
CVE ID: CVE-2016-6210 State: PUBLISHED Published: 2017-02-13T00:00:00 Last Updated: 2024-08-06T01:22:20.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:2563 - http://www.securitytracker.com/id/1036319 - http://seclists.org/fulldisclosure/2016/Jul/51 - http://www.debian.org/s
3 - http://www.securitytracker.com/id/1036319 - http://seclists.org/fulldisclosure/2016/Jul/51 - http://www.debian.org/security/2016/dsa-3626 - https://www.exploit-db.com/exploits/40136/ - https://www.exploit-db.com/exploits/40113/ - https://www.openssh.com/txt/release-7.3 - https://security.gentoo.org/glsa/201612-18 - https://access.redhat.com/errata/RHSA-2017:2029 - http://www.securityfocus.com/bid/91812 - https://security.netapp.com/advisory/ntap-20190206-0001/ - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-6211 State: PUBLISHED Published: 2016-09-09T14:00:00 Last Updated: 2024-08-06T01:22:20.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3604 - http://www.securityfocus.com/bid/91230 - http://www.openwall.com/lists/oss-security/2016/07/13/4 - https://www.drupal.org/SA-CORE-2016-002 - http://www.openwall.com/lists/oss-security/2016/07/13/7
CVE ID: CVE-2016-6212 State: PUBLISHED Published: 2016-09-09T14:00:00 Last Updated: 2024-08-06T01:22:20.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91230 - https://www.drupal.org/node/2749333 - http://www.openwall.com/lists/oss-security/2016/07/13/4 - https://www.drupal.org/SA-CORE-2016-002 - http://www.openwall.com/lists/oss-secu
l.com/lists/oss-security/2016/07/13/4 - https://www.drupal.org/SA-CORE-2016-002 - http://www.openwall.com/lists/oss-security/2016/07/13/7