Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ta/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/660854 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5222 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.851Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: insufficient policy enforcement Description: Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - https://crbug.com/657720 - http://www.securityfocus.com/bid/94633 - ht
ttp://rhn.redhat.com/errata/RHSA-2016-2919.html - https://crbug.com/657720 - http://www.securityfocus.com/bid/94633 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5223 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.748Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: integer overflow Description: Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption or DoS via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/652038 - https://chromereleases.goog
ta/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/652038 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5224 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.614Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: sidechannel information leakage Description: A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/9463
rogram Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/615851 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5225 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.605Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: insufficient policy enforcement Description: Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled form actions, which allowed a remote attacker to bypass Content Security Policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://chromereleases.googlebl
p://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://crbug.com/630332 - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5226 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.928Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac Problem Types: insufficient policy enforcement Description: Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbu
: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/639750 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5228 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-06T00:53:48.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl.ocx in Micro Focus Rumba 9.x before 9.3 HF 11997 and 9.4.x before 9.4 HF 12815 allows remote attackers to execute arbitrary code via a long MacroName argument. NOTE: some references mention CVE-2016-5226 but that is not a correct ID for any Rumba vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2016050136 - http://community.microfocus.com/microfocus/mainframe_solutions/r
rences: - https://cxsecurity.com/issue/WLB-2016050136 - http://community.microfocus.com/microfocus/mainframe_solutions/rumba/w/knowledge_base/28600.micro-focus-rumba-9-x-security-update.aspx - https://www.exploit-db.com/exploits/40649/ - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5327.php
CVE ID: CVE-2016-5229 State: PUBLISHED Published: 2016-08-02T16:00:00 Last Updated: 2024-08-06T00:53:48.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted deserialized classes, which allows remote attackers to execute arbitrary code via vectors related to XStream Serialization. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/539003/100/0/threaded - http://packetstormsecurity.com/files/138053/Bamboo-Deserialization-Issue.html - http://www.securityfocus.com/bid/92057 - https://jira.atlassian.com/browse/BAM-17736 - https://confluen
ion-Issue.html - http://www.securityfocus.com/bid/92057 - https://jira.atlassian.com/browse/BAM-17736 - https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2016-07-20-831660461.html
CVE ID: CVE-2016-5230 State: PUBLISHED Published: 2016-06-30T16:00:00 Last Updated: 2024-08-06T00:53:48.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and control partial module functions via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160520-01-smartphone-en - http://www.securityfocus.com/bid/91554
CVE ID: CVE-2016-5231 State: PUBLISHED Published: 2016-06-30T16:00:00 Last Updated: 2024-08-06T00:53:48.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and delete user data via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91556 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160520-01-smartphone-en
CVE ID: CVE-2016-5232 State: PUBLISHED Published: 2016-06-30T16:00:00 Last Updated: 2024-08-06T00:53:48.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to cause a denial of service (system crash) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160520-01-smartphone-en - http://www.securityfocus.com/bid/91555
CVE ID: CVE-2016-5233 State: PUBLISHED Published: 2016-06-10T15:00:00 Last Updated: 2024-08-06T00:53:48.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei Mate 8 smartphones with software NXT-AL10 before NXT-AL10C00B182, NXT-CL00 before NXT-CL00C92B182, NXT-DL00 before NXT-DL00C17B182, and NXT-TL00 before NXT-TL00C01B182 allow remote base stations to obtain sensitive subscriber signal strength information via vectors involving improper security status verification, aka HWPSIRT-2015-12007. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90792 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160520-03-smartph
ttp://www.securityfocus.com/bid/90792 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160520-03-smartphone-en
CVE ID: CVE-2016-5234 State: PUBLISHED Published: 2016-06-13T14:00:00 Last Updated: 2024-08-06T00:53:48.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Huawei VP9660, VP9650, and VP9630 multipoint control unit devices with software before V500R002C00SPC200 and RSE6500 videoconference devices with software before V500R002C00SPC100, when an unspecified service is enabled, allows remote attackers to execute arbitrary code via a crafted packet, aka HWPSIRT-2016-05054. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90978 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160601-01-videoconference-e
securityfocus.com/bid/90978 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160601-01-videoconference-en
CVE ID: CVE-2016-5235 State: PUBLISHED Published: 2019-07-01T15:54:40 Last Updated: 2024-08-06T00:53:48.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting (XSS) vulnerability in versions of F5 WebSafe Dashboard 3.9.x and earlier, aka F5 WebSafe Alert Server, allows an unauthenticated user to inject HTML via a crafted alert. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K48572812
CVE ID: CVE-2016-5236 State: PUBLISHED Published: 2019-07-01T15:59:19 Last Updated: 2024-08-06T00:53:48.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site-Scripting (XSS) vulnerabilities in F5 WebSafe Dashboard 3.9.5 and earlier, aka F5 WebSafe Alert Server, allow privileged authenticated users to inject arbitrary web script or HTML when creating a new user, account or signature. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K55922302
CVE ID: CVE-2016-5237 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T00:53:48.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse Steam.exe file. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/137343/Valve-Steam-3.42.16.13-Local-Privilege-Escalation.html - https://www.exploit-db.com/exploits/39888/
CVE ID: CVE-2016-5238 State: PUBLISHED Published: 2016-06-14T14:00:00 Last Updated: 2024-08-06T00:53:48.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to reading from the information transfer buffer in non-DMA mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3047-1 - https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg00150.html - https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg05691.html - http://www.openwall.com/lists/oss-securit
0.html - https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg05691.html - http://www.openwall.com/lists/oss-security/2016/06/02/2 - https://security.gentoo.org/glsa/201609-01 - http://www.ubuntu.com/usn/USN-3047-2 - http://www.securityfocus.com/bid/90995 - http://www.openwall.com/lists/oss-security/2016/06/02/9 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - https://bugzilla.redhat.com/show_bug.cgi?id=1341931
CVE ID: CVE-2016-5239 State: PUBLISHED Published: 2017-03-15T19:00:00 Last Updated: 2024-08-06T00:53:48.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://git.imagemagick.org/repos/ImageMagick/commit/70a2cf326ed32bedee144b961005c63846541a16 - https://access.redhat.com/errata/RHSA-2016:1237 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.securityfocus.com/bid/91018 - http://www.openwall.com/lists/os
s/security/linuxbulletinapr2016-2952096.html - http://www.securityfocus.com/bid/91018 - http://www.openwall.com/lists/oss-security/2016/06/02/13 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html
CVE ID: CVE-2016-5240 State: PUBLISHED Published: 2017-02-27T22:00:00 Last Updated: 2024-08-06T00:53:48.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allow remote attackers to cause a denial of service (infinite loop) by converting a circularly defined SVG file. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1237 - http://www.openwall.com/lists/oss-security/2016/05/01/4 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.securityfocus.com/bid/89348 - htt
.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.securityfocus.com/bid/89348 - http://www.openwall.com/lists/oss-security/2016/06/02/14 - http://www.debian.org/security/2016/dsa-3746 - http://www.openwall.com/lists/oss-security/2016/05/01/6 - http://www.graphicsmagick.org/ChangeLog-2016.html - http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=ddc999ec896c
CVE ID: CVE-2016-5241 State: PUBLISHED Published: 2017-02-03T15:00:00 Last Updated: 2024-08-06T00:53:48.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: magick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of service (arithmetic exception and application crash) via a crafted svg file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00037.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.html - http://www.securityfocus.com/bid/89348 - http://www.graphicsmagick.org/NEWS.html#may-30-2016 - http://www.openwall.com/lists/oss-security/2016/
s.com/bid/89348 - http://www.graphicsmagick.org/NEWS.html#may-30-2016 - http://www.openwall.com/lists/oss-security/2016/06/02/14 - https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html - http://www.openwall.com/lists/oss-security/2016/05/01/6 - https://bugzilla.redhat.com/show_bug.cgi?id=1333410
CVE ID: CVE-2016-5242 State: PUBLISHED Published: 2016-06-07T14:00:00 Last Updated: 2024-08-06T00:53:48.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: The p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (NULL pointer dereference and host OS crash) by creating concurrent domains and holding references to them, related to VMID exhaustion. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91015 - http://xenbits.xen.org/xsa/advisory-181.html - http://www.securitytracker.com/id/1036035 - http://www.debian.org/security/2016/ds
nbits.xen.org/xsa/advisory-181.html - http://www.securitytracker.com/id/1036035 - http://www.debian.org/security/2016/dsa-3633
CVE ID: CVE-2016-5243 State: PUBLISHED Published: 2016-06-27T10:00:00 Last Updated: 2024-08-06T00:53:48.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c in the Linux kernel through 4.6.3 does not properly copy a certain string, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3054-1 - http://www.openwall.com/lists/oss-security/2016/06/03/4 - http://www.ubuntu.com/usn/USN-3051-1 - https://github.com/torvalds/linux/commit/5d2be1422e02ccd697ccfcd45c85b4a26e61
4 - http://www.ubuntu.com/usn/USN-3051-1 - https://github.com/torvalds/linux/commit/5d2be1422e02ccd697ccfcd45c85b4a26e6178e2 - http://www.ubuntu.com/usn/USN-3053-1 - https://patchwork.ozlabs.org/patch/629100/ - http://www.ubuntu.com/usn/USN-3055-1 - http://www.ubuntu.com/usn/USN-3056-1 - http://www.ubuntu.com/usn/USN-3052-1 - http://www.ubuntu.com/usn/USN-3049-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5d2be1422e02ccd697ccfcd45c85b4a26e6178e2 - https://bugzilla.redhat.com/show_bug.cgi?id=1343335 - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-3050-1 - http://www.ubuntu.com/usn/USN-3057-1 - http://www.securityfocus.com/bid/9133
07 - http://www.ubuntu.com/usn/USN-3050-1 - http://www.ubuntu.com/usn/USN-3057-1 - http://www.securityfocus.com/bid/91334
CVE ID: CVE-2016-5244 State: PUBLISHED Published: 2016-06-27T10:00:00 Last Updated: 2024-08-06T00:53:48.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/4116def2337991b39919f3b448326e21c40e0dbb - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://www.ubuntu.com/usn/USN-3070-1 - http://www.openwall.co
use.org/opensuse-security-announce/2016-06/msg00054.html - http://www.ubuntu.com/usn/USN-3070-1 - http://www.openwall.com/lists/oss-security/2016/06/03/5 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - https://patchwork.ozlabs.org/patch/629110/ - http://www.ubuntu.com/usn/USN-3070-3 - http://www.securitytracker.com/id/1041895 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html - http://www.securityfocus.com/bid/91021 - http://www.debian.org/security/2016/dsa-3607 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4116def2337991b39919f3b
curity/2016/dsa-3607 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4116def2337991b39919f3b448326e21c40e0dbb - http://www.ubuntu.com/usn/USN-3070-2 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - https://bugzilla.redhat.com/show_bug.cgi?id=1343337 - http://www.ubuntu.com/usn/USN-3071-1 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - http://www.ubuntu.com/usn/USN-3070-4 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - http://www.ubuntu.com/usn/USN-3072-2 - http://www.ubuntu.com/usn/USN-3072-1 - http://www.ubuntu.com/usn/USN-3071-2 - http://lists.opensuse.org/opensuse-secur
- http://www.ubuntu.com/usn/USN-3072-1 - http://www.ubuntu.com/usn/USN-3071-2 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE ID: CVE-2016-5247 State: PUBLISHED Published: 2016-09-22T15:00:00 Last Updated: 2024-08-06T00:53:48.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240, TS440, and TS540 devices; and ThinkStation E32, P300, and P310 devices might allow local users or physically proximate attackers to bypass the Secure Boot protection mechanism by leveraging an AMI test key. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92661 - https://support.lenovo.com/product_securi
CVE Program Container: References: - http://www.securityfocus.com/bid/92661 - https://support.lenovo.com/product_security/PS500067
CVE ID: CVE-2016-5248 State: PUBLISHED Published: 2016-06-30T16:00:00 Last Updated: 2024-08-06T00:53:48.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: The StopProxy command in LSC.Services.SystemService in Lenovo Solution Center before 3.3.003 allows local users to terminate arbitrary processes via the PID argument. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/len_7814 - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-012/?fid=8073
CVE ID: CVE-2016-5249 State: PUBLISHED Published: 2016-06-30T16:00:00 Last Updated: 2024-08-06T00:53:48.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lenovo Solution Center (LSC) before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges via vectors involving the LSC.Services.SystemService StartProxy command with a named pipe created in advance and crafted .NET assembly. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/len_7814 - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-012/?fid=8073
CVE ID: CVE-2016-5250 State: PUBLISHED Published: 2016-08-05T01:00:00 Last Updated: 2024-08-06T00:53:48.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderbird < 45.4 allow remote attackers to obtain sensitive information about the previously retrieved page via Resource Timing API calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036508 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - https://www.mozilla.org/security/advisories/mfsa2016-86/ - http://www.mozilla.org/security/announce/2016/mfsa2016-84.html - http://www.ubuntu.co
security/advisories/mfsa2016-86/ - http://www.mozilla.org/security/announce/2016/mfsa2016-84.html - http://www.ubuntu.com/usn/USN-3044-1 - http://www.debian.org/security/2016/dsa-3674 - http://www.securityfocus.com/bid/92260 - https://security.gentoo.org/glsa/201701-15 - https://bugzilla.mozilla.org/show_bug.cgi?id=1254688 - http://rhn.redhat.com/errata/RHSA-2016-1912.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html - https://www.mozilla.org/security/advisories/mfsa2016-88/ - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html