Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-8741 State: PUBLISHED Published: 2017-05-15T14:00:00 Last Updated: 2024-08-06T02:34:59.610Z Vendors: Apache Software Foundation Products: Apache Qpid Broker-J Problem Types: Information Leakage Description: The Apache Qpid Broker for Java can be configured to use different so called AuthenticationProviders to handle user authentication. Among the choices are the SCRAM-SHA-1 and SCRAM-SHA-256 AuthenticationProvider types. It was discovered that these AuthenticationProviders in Apache Qpid Broker for Java 6.0.x before 6.0.6 and 6.1.x before 6.1.1 prematurely terminate the SCRAM SASL negotiation if the provided user name does not exist thus allowing remote attacker to determine
terminate the SCRAM SASL negotiation if the provided user name does not exist thus allowing remote attacker to determine the existence of user accounts. The Vulnerability does not apply to AuthenticationProviders other than SCRAM-SHA-1 and SCRAM-SHA-256. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037537 - https://issues.apache.org/jira/browse/QPID-7599 - http://www.securityfocus.com/bid/95136 - http://qpid.2158936.n2.nabble.com/CVE-2016-8741-Apache-Qpid-Broker-for-Java-Information-Leakage-td7657025.html
CVE ID: CVE-2016-8742 State: PUBLISHED Published: 2018-02-12T17:00:00Z Last Updated: 2024-09-17T00:26:42.742Z Vendors: Apache Software Foundation Products: Apache CouchDB Problem Types: File permissions Description: The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service launcher, or CouchDB batch or binary files. A subsequent service or server restart will then run that binary with administrator privilege. This issue affected CouchDB 2.0.0 (Windows platform only) and was addr
hen run that binary with administrator privilege. This issue affected CouchDB 2.0.0 (Windows platform only) and was addressed in CouchDB 2.0.0.1. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.apache.org/mod_mbox/couchdb-dev/201612.mbox/%3C825F65E1-0E5F-4E1F-8053-CF2C6200C526%40apache.org%3E - https://www.exploit-db.com/exploits/40865/ - http://www.securityfocus.com/bid/94766
CVE ID: CVE-2016-8743 State: PUBLISHED Published: 2017-07-27T21:00:00Z Last Updated: 2024-09-16T17:03:31.158Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: Request Smuggling, Response Splitting Description: Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.
proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3796 - https://access.redhat.com/errata/RHSA-2017:1721 - http://www.securitytracker.com/id/1037508 - https://access.redhat.com/errata/RHSA-2017:1413 - https://access.redhat.com/errata/RHSA-2017:1161 - https://www.tenable.com/security/tns-2017-04 - https://access.redhat.com/errata/RHSA-2017:1414 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03753en_us - http://www.securityfocus.com/bid/95077
.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03753en_us - http://www.securityfocus.com/bid/95077 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us - http://rhn.redhat.com/errata/RHSA-2017-1415.html - https://access.redhat.com/errata/RHSA-2017:0906 - https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743 - https://security.gentoo.org/glsa/201701-36 - https://security.netapp.com/advisory/ntap-20180423-0001/ - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc3
3cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/
.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Cc
pd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r6521a7f622763
807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1%40%3Ccvs.httpd.apache.org%3E - h
/lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2016-8744 State: PUBLISHED Published: 2017-09-13T16:00:00Z Last Updated: 2024-09-16T18:09:23.475Z Vendors: Apache Software Foundation Products: Apache Brooklyn Problem Types: Remote code execution Description: Apache Brooklyn uses the SnakeYAML library for parsing YAML inputs. SnakeYAML allows the use of YAML tags to indicate that SnakeYAML should unmarshal data to a Java type. In the default configuration in Brooklyn before 0.10.0, SnakeYAML will allow unmarshalling to any Java type available on the classpath. This could provide an authenticated user with a means to cause the JVM running Brooklyn to load and run Java code without detection by Brooklyn. Such code would have the p
ns to cause the JVM running Brooklyn to load and run Java code without detection by Brooklyn. Such code would have the privileges of the Java process running Brooklyn, including the ability to open files and network connections, and execute system commands. There is known to be a proof-of-concept exploit using this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://brooklyn.apache.org/community/security/CVE-2016-8744.html - https://lists.apache.org/thread.html/3f4d09c1c1a3cdfd1da0a05c8362769b917c078eed5b6c2f8e37a761%40%3Cdev.brooklyn.apache.org%3E
CVE ID: CVE-2016-8745 State: PUBLISHED Published: 2017-08-10T22:00:00Z Last Updated: 2024-11-14T20:02:16.961Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Information Disclosure Description: A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.RC1 to 8.0.39, 7.0.0 to 7.0.73 and 6.0.16 to 6.0.48 resulted in the current Processor object being added to the Processor cache multiple times. This in turn meant that the same Processor could be used for concurrent requests. Sharing a Processor can result in information leakage between requests including, not not limited to, session ID a
ests. Sharing a Processor can result in information leakage between requests including, not not limited to, session ID and the response body. The bug was first noticed in 8.5.x onwards where it appears the refactoring of the Connector code for 8.5.x onwards made it more likely that the bug was observed. Initially it was thought that the 8.5.x refactoring introduced the bug but further investigation has shown that the bug is present in all currently supported Tomcat versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/94828 - http://www.securitytracker.com/id/1037432 - https://security.gentoo.org/glsa/201705-09 -
.securityfocus.com/bid/94828 - http://www.securitytracker.com/id/1037432 - https://security.gentoo.org/glsa/201705-09 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://security.netapp.com/advisory/ntap-20180607-0002/ - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://access.redhat.com/errata/RHSA-2017:0935 - http://www.debian.org/security/2017/dsa-3754 - http://rhn.redhat.com/errata/RHSA-2017-0457.html - http://www.debian.org/security/2017/dsa-3755 - https://access.redhat.com/errata/RHSA-2017:0455 - http://rhn.redhat.com/errata/RHSA-2017-0527.html - https://access.redhat.com/errata/RHSA-2017:0456 - https://lists.apach
http://rhn.redhat.com/errata/RHSA-2017-0527.html - https://access.redhat.com/errata/RHSA-2017:0456 - https://lists.apache.org/thread.html/4113c05d37f37c12b8033205684f04033c5f7a9bae117d4af23b32b4%40%3Cannounce.tomcat.apache.org%3E - https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bb
%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/3d1
377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apac
3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2016-8746 State: PUBLISHED Published: 2017-06-14T17:00:00 Last Updated: 2024-08-06T02:34:59.604Z Vendors: Apache Software Foundation Products: Apache Ranger Problem Types: Authorization Description: Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95998 - https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
CVE ID: CVE-2016-8747 State: PUBLISHED Published: 2017-03-14T09:02:00 Last Updated: 2024-10-15T19:01:18.289Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Information disclosure Description: An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote attackers to read data that was intended to be associated with a different request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.netapp.com/advisory/ntap-20180614-0002/ - http://tomcat.apache.org/security-9.html - http://www.securityfocus.com
curity.netapp.com/advisory/ntap-20180614-0002/ - http://tomcat.apache.org/security-9.html - http://www.securityfocus.com/bid/96895 - http://svn.apache.org/viewvc?view=revision&revision=1774161 - http://tomcat.apache.org/security-8.html - http://svn.apache.org/viewvc?view=revision&revision=1774166 - https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.o
ead.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2016-8748 State: PUBLISHED Published: 2017-10-19T20:00:00Z Last Updated: 2024-09-17T04:05:08.852Z Vendors: Apache Software Foundation Products: Apache NiFi Problem Types: Information Disclosure Description: In Apache NiFi before 1.0.1 and 1.1.x before 1.1.1, there is a cross-site scripting vulnerability in connection details dialog when accessed by an authorized user. The user supplied text was not being properly handled when added to the DOM. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95621 - https://nifi.apache.org/security.html#CVE-2016-8748
CVE ID: CVE-2016-8749 State: PUBLISHED Published: 2017-03-28T18:00:00 Last Updated: 2024-08-06T02:35:00.312Z Vendors: Apache Software Foundation Products: Apache Camel Problem Types: remote code execution Description: Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1832 - https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true - http://camel.apache.org/security-advisories.data/CVE-2016-8749.txt.asc?version=2&modificationDate=1486565034000&api=v2 - http://www.securityfocus.com/bid/97179 - http://www.op
16-8749.txt.asc?version=2&modificationDate=1486565034000&api=v2 - http://www.securityfocus.com/bid/97179 - http://www.openwall.com/lists/oss-security/2017/05/22/2 - https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E
CVE ID: CVE-2016-8750 State: PUBLISHED Published: 2018-02-19T15:00:00Z Last Updated: 2024-09-17T00:36:15.735Z Vendors: Apache Software Foundation Products: Apache Karaf Problem Types: Injection Attack Description: Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP. However, it did not encoding usernames properly and hence was vulnerable to LDAP injection attacks leading to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1322 - https://karaf.apache.org/security/cve-2016-8750.txt - http://www.securityfocus.com/bid/103098
CVE ID: CVE-2016-8751 State: PUBLISHED Published: 2017-06-14T17:00:00 Last Updated: 2024-08-06T02:35:00.223Z Vendors: Apache Software Foundation Products: Apache Ranger Problem Types: CSS Description: Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions. Admin users can store some arbitrary javascript code to be executed when normal users login and access policies. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99067 - https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
CVE ID: CVE-2016-8752 State: PUBLISHED Published: 2017-08-29T20:00:00Z Last Updated: 2024-09-16T19:05:02.136Z Vendors: Apache Software Foundation Products: Apache Atlas Problem Types: Information Disclosure Description: Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/f7435d66b840daa2a38ad1329d639b70f5a9476e7580ae885d422e86%40%3Cdev.atlas.apache.org%3E
CVE ID: CVE-2016-8753 State: REJECTED Published: 2017-02-04T18:00:00 Last Updated: 2017-02-04T17:57:01 Description: No description available.
CVE ID: CVE-2016-8754 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T02:35:00.239Z Vendors: n/a Products: OceanStor 5600 V3 V300R003C00 Problem Types: Hardcoded SSH Key Description: Huawei OceanStor 5600 V3 V300R003C00 has a hardcoded SSH key vulnerability; the hardcoded keys are used to encrypt communication data and authenticate different nodes of the devices. An attacker may obtain the hardcoded keys and log in to such a device through SSH. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93607 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161017-01-storage-en
CVE ID: CVE-2016-8755 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-8756 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T02:35:00.182Z Vendors: n/a Products: Mate8 NXT-AL10C00B197 and earlier versions,NXT-DL10C00B197 and earlier versions,NXT-TL10C00B197 and earlier versions,NXT-CL10C00B197 and earlier versions Problem Types: denial of service Description: ION memory management module in Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions, NXT-DL10C00B197 and earlier versions, NXT-TL10C00B197 and earlier versions, NXT-CL10C00B197 and earlier versions allows attackers to cause a denial of service (restart). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com
nial of service (restart). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93935 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161026-01-smartphone-en
CVE ID: CVE-2016-8757 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T02:35:00.076Z Vendors: n/a Products: P9 EVA-AL10C00B192 and earlier versions,EVA-DL10C00B192 and earlier versions,EVA-TL10C00B192 and earlier versions,EVA-CL10C00B192 and earlier versions Problem Types: Information Leak Description: ION memory management module in Huawei P9 phones with software EVA-AL10C00B192 and earlier versions, EVA-DL10C00B192 and earlier versions, EVA-TL10C00B192 and earlier versions, EVA-CL10C00B192 and earlier versions allows attackers to obtain sensitive information from uninitialized memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei
nformation from uninitialized memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161026-02-smartphone-en - http://www.securityfocus.com/bid/93932
CVE ID: CVE-2016-8758 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T02:35:00.115Z Vendors: n/a Products: Mate8 NXT-AL10C00B561 and earlier versions,NXT-CL10C00B561 and earlier versions,NXT-DL10C00B561 and earlier versions,NXT-TL10C00B561 and earlier versions Problem Types: denial of service Description: ION memory management module in Huawei Mate8 phones with software NXT-AL10C00B561 and earlier versions, NXT-CL10C00B561 and earlier versions, NXT-DL10C00B561 and earlier versions, NXT-TL10C00B561 and earlier versions allows attackers to cause a denial of service (restart). Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psir
ial of service (restart). Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170111-01-smartphone-en - http://www.securityfocus.com/bid/95384
CVE ID: CVE-2016-8759 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T02:35:00.190Z Vendors: n/a Products: P9,Honor 6 Versions before EVA-AL10C00B192,Versions before H60-L02_6.10.1 Problem Types: stack overflow Description: Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a stack overflow vulnerability, which allows attackers to crash the system or escalate user privilege. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93530 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161012-01-smartphone-en