Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-6814 State: PUBLISHED Published: 2018-01-18T18:00:00Z Last Updated: 2024-09-16T20:52:30.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: When an application with unsupported Codehaus versions of Groovy from 1.7.0 to 2.4.3, Apache Groovy 2.4.4 to 2.4.7 on classpath uses standard Java serialization mechanisms, e.g. to communicate between servers or to store local data, it was possible for an attacker to bake a special serialized object that will execute code directly when deserialized. All applications which rely on serialization and do not isolate the code which deserializes objects were subject to this vulnerability. Additional Analyst Notes: - CVE Program Con
late the code which deserializes objects were subject to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:2596 - https://access.redhat.com/errata/RHSA-2017:0868 - https://access.redhat.com/errata/RHSA-2017:2486 - http://rhn.redhat.com/errata/RHSA-2017-0272.html - http://www.securityfocus.com/bid/95429 - http://www.securitytracker.com/id/1039600 - https://security.gentoo.org/glsa/202003-01 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.
work/security-advisory/cpuapr2018-3678067.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - http://mail-archives.apache.org/mod_mbox/www-announce/201701.mbox/%3CCADRx3PMZ2hBCGDTY35zYXFGaDnjAs0tc5-upaVs6QN2sYUejyA%40mail.gmail.com%3E
CVE ID: CVE-2016-6815 State: PUBLISHED Published: 2017-10-13T14:00:00Z Last Updated: 2024-09-17T04:14:03.099Z Vendors: Apache Software Foundation Products: Apache Ranger Problem Types: Incorrect Privileges Description: In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94221 - https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
CVE ID: CVE-2016-6816 State: PUBLISHED Published: 2017-03-20T18:00:00 Last Updated: 2024-11-14T20:05:46.260Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: character validation bypass Description: The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack and/or obtain sensiti
se. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack and/or obtain sensitive information from requests other then their own. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rhn.redhat.com/errata/RHSA-2017-0250.html - https://www.exploit-db.com/exploits/41783/ - https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.39 - https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.0.M13 - http://www.securityfocus.com/bid/94461 - http://www.debian.org/security/2016/dsa-3738 - https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.73 - http://rhn.redhat.com/errata/R
2016/dsa-3738 - https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.73 - http://rhn.redhat.com/errata/RHSA-2017-0244.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://access.redhat.com/errata/RHSA-2017:0935 - https://security.netapp.com/advisory/ntap-20180607-0001/ - http://rhn.redhat.com/errata/RHSA-2017-0457.html - http://rhn.redhat.com/errata/RHSA-2017-0246.html - http://www.securitytracker.com/id/1037332 - https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.8 - https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.48 - https://access.redhat.com/errata/RHSA-2017:0455 - http://rhn.redhat.com/errata/
y-6.html#Fixed_in_Apache_Tomcat_6.0.48 - https://access.redhat.com/errata/RHSA-2017:0455 - http://rhn.redhat.com/errata/RHSA-2017-0527.html - http://rhn.redhat.com/errata/RHSA-2017-0245.html - https://access.redhat.com/errata/RHSA-2017:0456 - http://rhn.redhat.com/errata/RHSA-2017-0247.html - https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thr
ml/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.t
apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f19
efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E - https://usn.ubuntu.com/4557-1/
CVE ID: CVE-2016-6817 State: PUBLISHED Published: 2017-08-10T22:00:00Z Last Updated: 2024-10-15T19:01:10.556Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Denial of Service Description: The HTTP/2 header parser in Apache Tomcat 9.0.0.M1 to 9.0.0.M11 and 8.5.0 to 8.5.6 entered an infinite loop if a header was received that was larger than the available buffer. This made a denial of service attack possible. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1037330 - https://lists.apache.org/thread.html/a9f24571460af003071475b75f18cad81ebcc36fa7c876965a75e32a%40%3Cannounce.tomcat.apache.org%3
/lists.apache.org/thread.html/a9f24571460af003071475b75f18cad81ebcc36fa7c876965a75e32a%40%3Cannounce.tomcat.apache.org%3E - https://security.netapp.com/advisory/ntap-20180607-0001/ - http://www.securityfocus.com/bid/94462 - https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3
omcat.apache.org%3E - https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2016-6818 State: PUBLISHED Published: 2017-04-13T19:00:00 Last Updated: 2024-08-06T01:43:38.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service (data deletion), or launch administrative operations or possibly OS commands via a crafted SQL query. The vendor response is SAP Security Note 2361633. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97661 - https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-january-2017/
CVE ID: CVE-2016-6820 State: PUBLISHED Published: 2017-01-11T16:00:00 Last Updated: 2024-08-06T01:43:37.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by an unauthenticated user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92495 - https://security.netapp.com/advisory/ntap-20160816-0001/ - https://kb.netapp.com/support/s/article/cve-2016-6820-sensitive-information-disclosure-in-metrocluster-tiebreaker-for-clustered-data-ontap?language=en_US
CVE ID: CVE-2016-6823 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T01:43:38.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (crash) via crafted height and width values, which triggers an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=834504 - http://www.securityfocus.com/bid/93158 - https://github.com/ImageMagick/ImageMagick/commit/4cc6ec8a4197d4c008577127736bf7985d632323 - http://www.openwall.com/lists/oss-security/2016/09/26/3
CVE ID: CVE-2016-6824 State: PUBLISHED Published: 2016-09-22T15:00:00 Last Updated: 2024-08-06T01:43:37.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service (device restart) via crafted CAPWAP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-ac-en - http://www.securityfocus.com/bid/92506
CVE ID: CVE-2016-6825 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:43:37.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610, RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, and RH2288H V3 servers with software before V100R003C00SPC515 allow remote attackers to obtain passwords via a brute-force attack, related to "lack of authentication protection mechanisms." Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-
Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-server-en - http://www.securityfocus.com/bid/92504
CVE ID: CVE-2016-6826 State: PUBLISHED Published: 2016-09-26T16:00:00 Last Updated: 2024-08-06T01:43:38.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei AnyMail before 2.6.0301.0060 allows remote attackers to cause a denial of service (application crash) via a crafted compressed email attachment. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160815-01-anymail-en
CVE ID: CVE-2016-6827 State: PUBLISHED Published: 2016-09-26T16:00:00 Last Updated: 2024-08-06T01:43:37.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei FusionCompute before V100R005C10CP7002 stores cleartext AES keys in a file, which allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92626 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160815-01-fusioncompute-en - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160815-01-fusioncompute-EN
CVE ID: CVE-2016-6828 State: PUBLISHED Published: 2016-10-16T21:00:00 Last Updated: 2024-08-06T01:43:37.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service (tcp_xmit_retransmit_queue use-after-free and system crash) via a crafted SACK option. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/bb1fceca22492109be12640d49f5ea5a544c6bb4 - http://rhn.redhat.com/errata/RHSA-2017-0086.html - http://rhn.redhat.com/errata/RHS
ca22492109be12640d49f5ea5a544c6bb4 - http://rhn.redhat.com/errata/RHSA-2017-0086.html - http://rhn.redhat.com/errata/RHSA-2017-0113.html - http://rhn.redhat.com/errata/RHSA-2017-0091.html - http://www.openwall.com/lists/oss-security/2016/08/15/1 - http://www.securityfocus.com/bid/92452 - https://source.android.com/security/bulletin/2016-11-01.html - http://rhn.redhat.com/errata/RHSA-2017-0036.html - https://marcograss.github.io/security/linux/2016/08/18/cve-2016-6828-linux-kernel-tcp-uaf.html - https://bugzilla.redhat.com/show_bug.cgi?id=1367091 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.5 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bb1fceca22
linux/kernel/v4.x/ChangeLog-4.7.5 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bb1fceca22492109be12640d49f5ea5a544c6bb4
CVE ID: CVE-2016-6829 State: PUBLISHED Published: 2016-12-09T20:00:00 Last Updated: 2024-08-06T01:43:38.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: The trove service user in (1) Openstack deployment (aka crowbar-openstack) and (2) Trove Barclamp (aka barclamp-trove and crowbar-barclamp-trove) in the Crowbar Framework has a default password, which makes it easier for remote attackers to obtain access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.suse.com/security/cve//CVE-2016-6829.html - http://www.openwall.com/lists/oss-security/2016/08/16/1 - http://www.openwall.com/lists/oss-security/2016/08/18/9 - https://github.
openwall.com/lists/oss-security/2016/08/16/1 - http://www.openwall.com/lists/oss-security/2016/08/18/9 - https://github.com/crowbar/barclamp-trove/commit/932298f250365fed6963700870e52db3a7a32daa - http://www.securityfocus.com/bid/92476 - https://github.com/crowbar/crowbar-openstack/commit/208230bdfbcb19d062149d083b1a66b429516a69
CVE ID: CVE-2016-6830 State: PUBLISHED Published: 2017-01-10T15:00:00 Last Updated: 2024-08-06T01:43:38.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments and environment variables to use in its execve() call. This would allow user-supplied argument/environment variable lists to trigger a buffer overrun. This affects all releases of CHICKEN up to and including 4.11 (it will be fixed in 4.12 and 5.0, which are not yet released). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92550 - http://lists.nongnu.org/arch
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92550 - http://lists.nongnu.org/archive/html/chicken-announce/2016-08/msg00001.html
CVE ID: CVE-2016-6831 State: PUBLISHED Published: 2017-01-10T15:00:00 Last Updated: 2024-08-06T01:43:37.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "process-execute" and "process-spawn" procedures did not free memory correctly when the execve() call failed, resulting in a memory leak. This could be abused by an attacker to cause resource exhaustion or a denial of service. This affects all releases of CHICKEN up to and including 4.11 (it will be fixed in 4.12 and 5.0, which are not yet released). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92550 - http://lists.nongnu.org/archive/html/chicken-announce/2016-08/msg0000
rences: - http://www.securityfocus.com/bid/92550 - http://lists.nongnu.org/archive/html/chicken-announce/2016-08/msg00001.html
CVE ID: CVE-2016-6832 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T01:43:37.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ff_audio_resample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service (crash) via vectors related to buffer resizing. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/08/07/libav-heap-based-buffer-overflow-in-ff_audio_resample-resample-c/ - http://www.openwall.com/lists/oss-security/2016/08/18/1 - http://www.openwall.com/lists/oss-security/2016/08/13/1 - https://git.libav.org/?p=libav.git%3Ba=commit%
/2016/08/18/1 - http://www.openwall.com/lists/oss-security/2016/08/13/1 - https://git.libav.org/?p=libav.git%3Ba=commit%3Bh=0ac8ff618c5e6d878c547a8877e714ed728950ce - https://bugzilla.libav.org/show_bug.cgi?id=825
CVE ID: CVE-2016-6833 State: PUBLISHED Published: 2016-12-10T00:00:00 Last Updated: 2024-08-06T01:43:37.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU instance crash) by leveraging failure to check if the device is active. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93255 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - http://www.openwall.com/lists/oss-security/2016/08/12/1 - https://lists.gnu.org/archive/html/qemu
018/09/msg00007.html - http://www.openwall.com/lists/oss-security/2016/08/12/1 - https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01602.html - https://security.gentoo.org/glsa/201609-01 - http://www.openwall.com/lists/oss-security/2016/08/18/3 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=6c352ca9b4ee3e1e286ea9e8434bd8e69ac7d0d8
CVE ID: CVE-2016-6834 State: PUBLISHED Published: 2016-12-10T00:00:00 Last Updated: 2024-08-06T01:43:37.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: The net_tx_pkt_do_sw_fragmentation function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a zero length for the current fragment length. Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ead315e43ea0c2ca3491209c6c8db8ce3f2bbe05 - http://www.securityfocus.com/bid/92446 - https://security.gentoo.org/glsa/201609-01 - http://www.openwall.com/lists/oss-secur
//www.securityfocus.com/bid/92446 - https://security.gentoo.org/glsa/201609-01 - http://www.openwall.com/lists/oss-security/2016/08/18/7 - https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01601.html - http://www.openwall.com/lists/oss-security/2016/08/11/8 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
CVE ID: CVE-2016-6835 State: PUBLISHED Published: 2016-12-10T00:00:00 Last Updated: 2024-08-06T01:43:37.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (buffer over-read) by leveraging failure to check IP header length. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-stable/2016-08/msg00077.html - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - http://www.openwall.com/lists/oss-security/2016/08/11/7 - http://git.qemu.org/?p=qemu.git%3Ba=com
018/09/msg00007.html - http://www.openwall.com/lists/oss-security/2016/08/11/7 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=93060258ae748573ca7197204125a2670047896d - http://www.openwall.com/lists/oss-security/2016/08/18/4 - https://access.redhat.com/errata/RHSA-2017:2392
CVE ID: CVE-2016-6836 State: PUBLISHED Published: 2016-12-10T00:00:00 Last Updated: 2024-08-06T01:43:37.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host memory information by leveraging failure to initialize the txcq_descr object. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92444 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fdda170e50b8af062cf5741e12c4fb5e57a2eacf - http://www.openwall.com/lists/oss-security/2016/08/11/5 - http://www.openwall.com/lists/oss-security/2016/08/1
7a2eacf - http://www.openwall.com/lists/oss-security/2016/08/11/5 - http://www.openwall.com/lists/oss-security/2016/08/18/5 - https://security.gentoo.org/glsa/201609-01 - https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg02108.html - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
CVE ID: CVE-2016-6837 State: PUBLISHED Published: 2017-01-10T15:00:00 Last Updated: 2024-08-06T01:43:38.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MantisBT Filter API in MantisBT versions before 1.2.19, and versions 2.0.0-beta1, 1.3.0-beta1 allows remote attackers to inject arbitrary web script or HTML via the 'view_type' parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mantisbt/mantisbt/commit/7086c2d8b4b20ac14013b36761ac04f0abf21a4e - https://mantisbt.org/bugs/view.php?id=21611 - http://www.securitytracker.com/id/1036655 - http://www.securityfocus.com/bid/92522
CVE ID: CVE-2016-6838 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:43:37.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei X6800 and XH620 V3 servers with software before V100R003C00SPC606, RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, CH140 V3 and CH226 V3 servers with software before V100R001C00SPC122, CH220 V3 servers with software before V100R001C00SPC201, and CH121 V3 and CH222 V3 servers with software before V100R001C00SPC202 might allow remote attackers to decrypt encrypted data and consequently obtain sensitive information by leveraging selection of an insecure SS
ackers to decrypt encrypted data and consequently obtain sensitive information by leveraging selection of an insecure SSH encryption algorithm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92503 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-02-server-en