Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-1495 State: PUBLISHED Published: 2016-04-13T14:00:00 Last Updated: 2024-08-05T22:55:14.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the graphics drivers in Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160203-01-smartphone-en
CVE ID: CVE-2016-1496 State: PUBLISHED Published: 2016-04-13T14:00:00 Last Updated: 2024-08-05T22:55:14.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: The graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 allows attackers to cause a denial of service (system crash) via a crafted application, aka a "semaphore deadlock issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-01-smartphone-en
CVE ID: CVE-2016-1497 State: PUBLISHED Published: 2016-08-26T14:00:00 Last Updated: 2024-08-05T22:55:14.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager (APM) access logs via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/kb/en-us/solutions/public/k/31/sol31925518.html - http://www.securityfocus.com/bid/92671 - http://www.securitytracker.com/id/1036631
CVE ID: CVE-2016-1498 State: PUBLISHED Published: 2016-01-08T21:00:00 Last Updated: 2024-08-05T22:55:14.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the OCS discovery provider component in ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a URL. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.org/security/advisory/?id=oc-sa-2016-001
CVE ID: CVE-2016-1499 State: PUBLISHED Published: 2016-01-08T21:00:00 Last Updated: 2024-08-05T22:55:14.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information from a directory listing and possibly cause a denial of service (CPU consumption) via the force parameter to index.php/apps/files/ajax/scan.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/537244/100/0/threaded - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2015-062.txt - http://packetstormsecurity.com/file
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2015-062.txt - http://packetstormsecurity.com/files/135158/ownCloud-8.2.1-8.1.4-8.0.9-Information-Exposure.html - http://www.securityfocus.com/archive/1/537556/100/0/threaded - https://owncloud.org/security/advisory/?id=oc-sa-2016-002
CVE ID: CVE-2016-1500 State: PUBLISHED Published: 2016-01-08T21:00:00 Last Updated: 2024-08-05T22:55:14.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2, when the "file_versions" application is enabled, does not properly check the return value of getOwner, which allows remote authenticated users to read the files with names starting with ".v" and belonging to a sharing user by leveraging an incoming share. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.org/security/advisory/?id=oc-sa-2016-003
CVE ID: CVE-2016-1501 State: PUBLISHED Published: 2016-01-08T21:00:00 Last Updated: 2024-08-05T22:55:14.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud Server before 8.0.9 and 8.1.x before 8.1.4 allow remote authenticated users to obtain sensitive information via unspecified vectors, which reveals the installation path in the resulting exception messages. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.org/security/advisory/?id=oc-sa-2016-004
CVE ID: CVE-2016-1502 State: PUBLISHED Published: 2017-02-07T17:00:00 Last Updated: 2024-08-05T22:55:14.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication and then list and delete backups via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/authentication-bypass-vulnerability-in-snapcenter-server-1-0-1-0p1
CVE ID: CVE-2016-1503 State: PUBLISHED Published: 2016-04-18T00:00:00 Last Updated: 2024-08-05T22:55:14.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 and other products, mismanages option lengths, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a malformed DHCP response, aka internal bug 26461634. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201606-07 - https://android.googlesource.com/platform/external/dhcpcd/+/1390ace71179f04a09
ps://security.gentoo.org/glsa/201606-07 - https://android.googlesource.com/platform/external/dhcpcd/+/1390ace71179f04a09c300ee8d0300aa69d9db09 - http://roy.marples.name/projects/dhcpcd/info/76a1609352263bd9def1300d7ba990679571fa30 - http://source.android.com/security/bulletin/2016-04-02.html - https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05388711 - http://www.securitytracker.com/id/1034601
CVE ID: CVE-2016-1504 State: PUBLISHED Published: 2017-02-07T15:00:00 Last Updated: 2024-08-05T22:55:14.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: dhcpcd before 6.10.0 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to the option length. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/07/3 - http://www.openwall.com/lists/oss-security/2016/01/07/4 - http://roy.marples.name/projects/dhcpcd/info/595883e2a431f65d8fabf33059aa4689cca17403 - https://security.gentoo.org/glsa/201606-07 - http://roy.marples.name/projects/dhcpcd/timeline?r=trunk&nd&c=2016-01-07+16%3
tps://security.gentoo.org/glsa/201606-07 - http://roy.marples.name/projects/dhcpcd/timeline?r=trunk&nd&c=2016-01-07+16%3A47%3A19&n=200 - http://www.securitytracker.com/id/1034601
CVE ID: CVE-2016-1505 State: PUBLISHED Published: 2016-02-03T15:00:00 Last Updated: 2024-08-05T22:55:14.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrated by /c:/file/ignore. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/06/7 - http://www.securityfocus.com/bid/80255 - https://github.com/Unrud/Radicale/commit/b4b3d51f33c7623d312f289252dd7bbb8f58bbe6 - http://www.openwall.com/lists/oss-security/2016/01/05/7 - https://github.com/Kozea/Radicale/pull/343 -
dd7bbb8f58bbe6 - http://www.openwall.com/lists/oss-security/2016/01/05/7 - https://github.com/Kozea/Radicale/pull/343 - http://www.openwall.com/lists/oss-security/2016/01/06/4 - http://www.openwall.com/lists/oss-security/2016/01/07/7
CVE ID: CVE-2016-1513 State: PUBLISHED Published: 2016-08-05T14:00:00 Last Updated: 2024-08-05T22:55:14.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Impress tool in Apache OpenOffice 4.1.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read or write) or execute arbitrary code via crafted MetaActions in an (1) ODP or (2) OTP file. Additional Analyst Notes: - CVE Program Container: References: - https://bz.apache.org/ooo/show_bug.cgi?id=127045 - http://www.securityfocus.com/bid/92079 - https://security.gentoo.org/glsa/201703-01 - http://www.securitytracker.com/id/1036443 - http://www.ubuntu.com/usn/USN-3046-1 - http://www.talosintelligenc
1703-01 - http://www.securitytracker.com/id/1036443 - http://www.ubuntu.com/usn/USN-3046-1 - http://www.talosintelligence.com/reports/TALOS-2016-0051/ - http://www.openoffice.org/security/cves/CVE-2016-1513.html
CVE ID: CVE-2016-1514 State: REJECTED Published: 2017-01-06T21:00:00 Last Updated: 2017-01-18T14:57:01 Description: No description available.
CVE ID: CVE-2016-1515 State: REJECTED Published: 2017-01-06T21:00:00 Last Updated: 2017-01-18T14:57:01 Description: No description available.
CVE ID: CVE-2016-1516 State: PUBLISHED Published: 2017-04-10T03:00:00 Last Updated: 2024-08-05T22:55:14.835Z Vendors: n/a Products: OpenCV 3.0.0 Problem Types: double free Description: OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html - https://github.com/opencv/opencv/issues/5956 - https://arxiv.org/pdf/1701.04739.pdf - https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html
CVE ID: CVE-2016-1517 State: PUBLISHED Published: 2017-04-10T03:00:00 Last Updated: 2024-08-05T23:02:11.551Z Vendors: n/a Products: OpenCV 3.0.0 Problem Types: DoS Description: OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opencv/opencv/issues/5956 - https://arxiv.org/pdf/1701.04739.pdf
CVE ID: CVE-2016-1518 State: PUBLISHED Published: 2017-04-21T20:00:00 Last Updated: 2024-08-05T23:02:11.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof provisioning data and consequently modify device functionality, obtain sensitive information from system logs, and have unspecified other impact by leveraging failure to use an HTTPS session for downloading configuration files from http://fm.grandstream.com/gs/. Additional Analyst Notes: - CVE Program Container: References: - https://rt-solutions.de/wp-content/
randstream.com/gs/. Additional Analyst Notes: - CVE Program Container: References: - https://rt-solutions.de/wp-content/uploads/2016/04/CVE-2016-1518-insecure-provisioning.pdf - http://www.securityfocus.com/archive/1/537818/100/0/threaded - http://packetstormsecurity.com/files/136280/Grandstream-Wave-1.0.1.26-Man-In-The-Middle.html
CVE ID: CVE-2016-1519 State: PUBLISHED Published: 2017-04-21T20:00:00 Last Updated: 2024-08-05T23:02:11.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, which allows man-in-the-middle attackers to spoof the Grandstream provisioning server via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://rt-solutions.de/wp-content/uploads/2016/04/CVE-2016-1519-gswave-tls-mitm.pdf - http://packetstormsecurity.com/files/136290/Grandstream-Wave-1.0.1.26-TLS-Man-In-The-Middle.html - http://www.securityfocus.com/
acketstormsecurity.com/files/136290/Grandstream-Wave-1.0.1.26-TLS-Man-In-The-Middle.html - http://www.securityfocus.com/archive/1/537819/100/0/threaded
CVE ID: CVE-2016-1520 State: PUBLISHED Published: 2017-04-21T20:00:00 Last Updated: 2024-08-05T23:02:11.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary code via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136291/Grandstream-Wave-1.0.1.26-Update-Redirection.html - https://rt-solutions.de/wp-content/uploads/2016/04/CVE-2016-1520-app-update-redirection.pdf - http://www.securityfocus.com/archive/1/537821/100/0/threaded
CVE ID: CVE-2016-1521 State: PUBLISHED Published: 2016-02-13T02:00:00 Last Updated: 2024-08-05T23:02:11.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00088.html
Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00088.html - https://security.gentoo.org/glsa/201701-35 - http://www.securityfocus.com/bid/82991 - http://www.ubuntu.com/usn/USN-2902-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://rhn.redhat.com/errata/RHSA-2016-0594.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00058.html - http://www.debian.org/security/2016/dsa-3479 - http://blog.talosintel.com/2016/02/vulnerability-spotlight-libgraphite.html - http://rhn.redhat.com/errat
016/dsa-3479 - http://blog.talosintel.com/2016/02/vulnerability-spotlight-libgraphite.html - http://rhn.redhat.com/errata/RHSA-2016-0258.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html - http://rhn.redhat.com/errata/RHSA-2016-0197.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00052.html - https://security.gentoo.org/glsa/201701-63 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184623.html - http://www.mozilla.org/security/announce/2016/mfsa2016-14.html
CVE ID: CVE-2016-1522 State: PUBLISHED Published: 2016-02-13T02:00:00 Last Updated: 2024-08-05T23:02:11.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-35 - http://www.securityfocus.com/bid/82991 - http://www.ubuntu.com/usn/USN-2902-1 - http
ecurity.gentoo.org/glsa/201701-35 - http://www.securityfocus.com/bid/82991 - http://www.ubuntu.com/usn/USN-2902-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://rhn.redhat.com/errata/RHSA-2016-0594.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00058.html - http://www.debian.org/security/2016/dsa-3479 - http://blog.talosintel.com/2016/02/vulnerability-spotlight-libgraphite.html - http://rhn.redhat.com/errata/RHSA-2016-0258.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html - http://rhn.redhat.com/
0258.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html - http://rhn.redhat.com/errata/RHSA-2016-0197.html - https://security.gentoo.org/glsa/201701-63 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184623.html - http://www.mozilla.org/security/announce/2016/mfsa2016-14.html
CVE ID: CVE-2016-1523 State: PUBLISHED Published: 2016-02-13T02:00:00 Last Updated: 2024-08-05T23:02:11.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles a return value, which allows remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00088.html - https://security.gentoo.org/glsa/20
nces: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00088.html - https://security.gentoo.org/glsa/201701-35 - http://www.debian.org/security/2016/dsa-3491 - http://www.securityfocus.com/bid/82991 - http://www.debian.org/security/2016/dsa-3477 - http://www.ubuntu.com/usn/USN-2902-1 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00055.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://rhn.redhat.com/errata/RHSA-2016-0594.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00053.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.security
sg00053.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.securitytracker.com/id/1035017 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00058.html - http://www.debian.org/security/2016/dsa-3479 - http://blog.talosintel.com/2016/02/vulnerability-spotlight-libgraphite.html - http://rhn.redhat.com/errata/RHSA-2016-0258.html - http://www.ubuntu.com/usn/USN-2904-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1246093 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html - https://security.gentoo.org/glsa/201605-06 - http://rhn.redhat.com/errata/RHSA-2016-0197.html - http://lists.opensuse.org/
tps://security.gentoo.org/glsa/201605-06 - http://rhn.redhat.com/errata/RHSA-2016-0197.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00052.html - https://security.gentoo.org/glsa/201701-63 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184623.html - http://www.mozilla.org/security/announce/2016/mfsa2016-14.html
CVE ID: CVE-2016-1524 State: PUBLISHED Published: 2016-02-13T02:00:00 Last Updated: 2024-08-05T23:02:11.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileUpload.do or (2) lib-1.0/external/flash/fileUpload.do to upload a JSP file, and then accessing it via a direct request for a /null URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/537446/100/0/threaded - http://seclists.org/fulldisclosure/2016/Feb/30 - http://packetstormsecurity.com/files/1356
ive/1/537446/100/0/threaded - http://seclists.org/fulldisclosure/2016/Feb/30 - http://packetstormsecurity.com/files/135618/Netgear-Pro-NMS-300-Code-Execution-File-Download.html - https://www.exploit-db.com/exploits/39412/ - http://www.kb.cert.org/vuls/id/777024
CVE ID: CVE-2016-1525 State: PUBLISHED Published: 2016-02-13T02:00:00 Last Updated: 2024-08-05T23:02:11.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read arbitrary files via a .. (dot dot) in the realName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.rapid7.com/db/modules/exploit/windows/http/netgear_nms_rce - http://www.securityfocus.com/archive/1/537446/100/0/threaded - http://seclists.org/fulldisclosure/2016/Feb/30 - https://www.exploit-db.com/exploits/39515/ - http://packetstorms
aded - http://seclists.org/fulldisclosure/2016/Feb/30 - https://www.exploit-db.com/exploits/39515/ - http://packetstormsecurity.com/files/135618/Netgear-Pro-NMS-300-Code-Execution-File-Download.html - http://packetstormsecurity.com/files/135999/NETGEAR-ProSafe-Network-Management-System-300-Arbitrary-File-Upload.html - https://www.exploit-db.com/exploits/39412/ - http://www.kb.cert.org/vuls/id/777024
CVE ID: CVE-2016-1526 State: PUBLISHED Published: 2016-02-13T02:00:00 Last Updated: 2024-08-05T23:02:11.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, incorrectly validates a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00088.html - https://security.gentoo.org
: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00088.html - https://security.gentoo.org/glsa/201701-35 - http://www.securityfocus.com/bid/82991 - http://www.ubuntu.com/usn/USN-2902-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://rhn.redhat.com/errata/RHSA-2016-0695.html - http://rhn.redhat.com/errata/RHSA-2016-0594.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00058.html - http://www.debian.org/security/2016/dsa-3479 - http://blog.talosintel.com/2016/02/vulnerability-spotlight-libgraphite.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html - http:/
potlight-libgraphite.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00052.html - https://security.gentoo.org/glsa/201701-63 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184623.html - http://www.mozilla.org/security/announce/2016/mfsa2016-14.html
CVE ID: CVE-2016-1531 State: PUBLISHED Published: 2016-04-07T23:00:00 Last Updated: 2024-08-05T23:02:11.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3517 - https://www.exploit-db.com/exploits/39535/ - http://www.securitytracker.com/id/1035512 - http://packetstormsecurity.com/files/136124/Exim-4.84-3-Local-Root-Privilege-Escalation.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00026.html - https://www.exploit-db.com/exploits/39702/
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00026.html - https://www.exploit-db.com/exploits/39702/ - http://www.ubuntu.com/usn/USN-2933-1 - http://www.exim.org/static/doc/CVE-2016-1531.txt - http://www.rapid7.com/db/modules/exploit/unix/local/exim_perl_startup - https://www.exploit-db.com/exploits/39549/