Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-9408 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:37.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Mod control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving editing users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94395 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-
http://www.openwall.com/lists/oss-security/2016/11/10/8 - https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/
CVE ID: CVE-2016-9409 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:37.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving pruning logs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94395 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8
- http://www.openwall.com/lists/oss-security/2016/11/10/8 - https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/
CVE ID: CVE-2016-9410 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:37.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to obtain sensitive database information via vectors involving templates. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94395 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/
CVE ID: CVE-2016-9411 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:37.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to obtain the installation path via vectors involving sending mails. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94395 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/
CVE ID: CVE-2016-9412 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:37.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow attackers to have unspecified impact via vectors related to low adminsid and sid entropy. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94395 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/
CVE ID: CVE-2016-9413 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:37.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94395 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/
CVE ID: CVE-2016-9414 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:37.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow remote attackers to obtain sensitive information by leveraging missing directory listing protection in upload directories. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94395 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/
CVE ID: CVE-2016-9415 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:38.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows allow remote attackers to overwrite arbitrary CSS files via vectors related to "style import." Additional Analyst Notes: - CVE Program Container: References: - https://blog.mybb.com/2016/10/17/mybb-1-8-8-merge-system-1-8-8-release/ - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - http://www.securityfocus.com/bid/94396
CVE ID: CVE-2016-9416 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:37.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the users data handler in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://blog.mybb.com/2016/10/17/mybb-1-8-8-merge-system-1-8-8-release/ - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - http://www.securityfocus.com/bid/94396
CVE ID: CVE-2016-9417 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:38.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fetch_remote_file function in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to conduct server-side request forgery (SSRF) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://blog.mybb.com/2016/10/17/mybb-1-8-8-merge-system-1-8-8-release/ - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - http://www.securityfocus.com/bid/94396
CVE ID: CVE-2016-9418 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:38.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sensitive information from ACP backups via vectors involving a short name. Additional Analyst Notes: - CVE Program Container: References: - https://blog.mybb.com/2016/10/17/mybb-1-8-8-merge-system-1-8-8-release/ - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - http://www.securityfocus.com/bid/94396
CVE ID: CVE-2016-9419 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:38.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://blog.mybb.com/2016/10/17/mybb-1-8-8-merge-system-1-8-8-release/ - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - http://www.securityfocus.com/bid/94396
CVE ID: CVE-2016-9420 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:38.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allow remote attackers to have unspecified impact via vectors related to "loose comparison false positives." Additional Analyst Notes: - CVE Program Container: References: - https://blog.mybb.com/2016/10/17/mybb-1-8-8-merge-system-1-8-8-release/ - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - http://www.securityfocus.com/bid/94396
CVE ID: CVE-2016-9421 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:38.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Users module in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://blog.mybb.com/2016/10/17/mybb-1-8-8-merge-system-1-8-8-release/ - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - http://www.securit
nwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - http://www.securityfocus.com/bid/94396
CVE ID: CVE-2016-9422 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-11-14T19:48:54.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. The feed_table_tag function in w3m doesn't properly validate the value of table span, which allows remote attackers to cause a denial of service (stack and/or heap buffer overflow) and possibly execute arbitrary code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/blob/master/ChangeLog - https://github.com/tats/w3m/
://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/blob/master/ChangeLog - https://github.com/tats/w3m/issues/8 - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9423 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-08-06T02:50:38.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/issues/9 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9424 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-08-06T02:50:38.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m doesn't properly validate the value of tag attribute, which allows remote attackers to cause a denial of service (heap buffer overflow crash) and possibly execute arbitrary code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - https://github.com/tats/w3m/issues/12 - http://
ats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - https://github.com/tats/w3m/issues/12 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9425 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-08-06T02:50:38.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - https://github.com/tats/w3m/issues/21 - http://www.openwall.com/l
r/ChangeLog - http://www.securityfocus.com/bid/94407 - https://github.com/tats/w3m/issues/21 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9426 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-08-06T02:50:38.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Integer overflow vulnerability in the renderTable function in w3m allows remote attackers to cause a denial of service (OOM) and possibly execute arbitrary code due to bdwgc's bug (CVE-2016-9427) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/issues/25 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/9
//github.com/tats/w3m/issues/25 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9427 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-08-06T02:50:38.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and possibly execute arbitrary code via huge allocation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-12/msg00089.html - https://github.com/ivmai/bdwgc/issues/135 - http://www.securityfocus.com/bid/94407 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00115.html - http://www.openwall.com/lists/oss-security/2
/94407 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00115.html - http://www.openwall.com/lists/oss-security/2016/11/18/3 - https://lists.debian.org/debian-lts-announce/2022/03/msg00039.html
CVE ID: CVE-2016-9428 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-10-15T19:01:25.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/issues/26 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 -
b.com/tats/w3m/issues/26 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9429 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-08-06T02:50:38.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Buffer overflow in the formUpdateBuffer function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/issues/29 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-se
ithub.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9430 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-08-06T02:50:38.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - https://github.com/tats/w3m/issues/7 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9431 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-08-06T02:50:38.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/blob/master/ChangeLog - https://github.com/tats/w3m/issues/10 - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9432 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-08-06T02:50:38.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (memory corruption, segmentation fault, and crash) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tats/w3m/issues/13 - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9433 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-08-06T02:50:38.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (out-of-bounds array access) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - https://github.com/tats/w3m/issues/14 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9434 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-08-06T02:50:38.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/issues/15 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9435 State: PUBLISHED Published: 2017-01-20T15:00:00 Last Updated: 2024-11-14T20:06:38.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to <dd> tags. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/commit/33509cc81ec5f2ba44eb6fd98bd5c1b5873e46bd - http://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html - https://github.com/tats/w3m/issues/16 - http:
e46bd - http://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html - https://github.com/tats/w3m/issues/16 - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9436 State: PUBLISHED Published: 2017-01-20T15:00:00 Last Updated: 2024-08-06T02:50:38.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a <i> tag. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/commit/33509cc81ec5f2ba44eb6fd98bd5c1b5873e46bd - http://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html - https://github.com/tats/w3m/issues/16 - http://www.securityfocus.com/bid/94407 - http://www.op
s/2016-12/msg00084.html - https://github.com/tats/w3m/issues/16 - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9437 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-11-14T19:44:12.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) and possibly memory corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/issues/17 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/20
/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9438 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-08-06T02:50:38.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/issues/18 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/2016/11/18/3
CVE ID: CVE-2016-9439 State: PUBLISHED Published: 2016-12-12T02:00:00 Last Updated: 2024-08-06T02:50:38.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-08 - https://github.com/tats/w3m/issues/20 - https://github.com/tats/w3m/blob/master/ChangeLog - http://www.securityfocus.com/bid/94407 - http://www.openwall.com/lists/oss-security/2016/11/18/3