Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
168 - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://www.zerodayinitiative.com/advisories/ZDI-16-203 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - https://support.apple.com/HT206166
CVE ID: CVE-2016-1762 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:38.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10170 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - https://support.apple.com/HT206167 - https://support.apple.com/HT206168 - https://ac
y-announce/2016/Mar/msg00004.html - https://support.apple.com/HT206167 - https://support.apple.com/HT206168 - https://access.redhat.com/errata/RHSA-2016:1292 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://www.debian.org/security/2016/dsa-3593 - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://xmlsoft.org/news.html - https://bugzilla.gnome.org/show_bug.cgi?id=759671 - http://www.ubuntu.com/usn/USN-2994-1 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - https://git.gno
w.ubuntu.com/usn/USN-2994-1 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - https://git.gnome.org/browse/libxml2/commit/?id=a7a94612aa3b16779e2c74e1fa353b5d9786c602 - https://support.apple.com/HT206171 - http://rhn.redhat.com/errata/RHSA-2016-2957.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html - https://support.apple.com/HT206169 - https://support.apple.com/HT206166 - http://www.securityfocus.com/bid/85059
CVE ID: CVE-2016-1763 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:38.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which allows remote authenticated users to obtain sensitive information by providing a crafted sms: URL and reading a thread. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - https://support.apple.com/HT206166
CVE ID: CVE-2016-1764 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Content Security Policy (CSP) implementation in Messages in Apple OS X before 10.11.4 allows remote attackers to obtain sensitive information via a javascript: URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - https://support.apple.com/HT206167 - http://www.securitytracker.com/id/1035363
CVE ID: CVE-2016-1765 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT206172 - http://www.securitytracker.com/id/1035352 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00003.html
CVE ID: CVE-2016-1766 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-314 - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - https://support.apple.com/HT206166
CVE ID: CVE-2016-1767 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image, a different vulnerability than CVE-2016-1768. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - https://support.apple.com/HT206167 - https://www.exploit-db.com/exploits/39633/ - http://www.securitytracker.com/id/1035363
CVE ID: CVE-2016-1768 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image, a different vulnerability than CVE-2016-1767. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - https://support.apple.com/HT206167 - https://www.exploit-db.com/exploits/39634/ - http://www.securitytracker.com/id/1035363
CVE ID: CVE-2016-1769 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:38.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - https://support.apple.com/HT206167 - https://www.exploit-db.com/exploits/39635/ - http://www.securitytracker.com/id/1035363
CVE ID: CVE-2016-1770 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - https://support.apple.com/HT206167 - http://www.securitytracker.com/id/1035363
CVE ID: CVE-2016-1771 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Downloads feature in Apple Safari before 9.1 mishandles file expansion, which allows remote attackers to cause a denial of service via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035354 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html - http://www.securityfocus.com/bid/85055 - https://support.apple.com/HT206171
CVE ID: CVE-2016-1772 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier for remote web servers to track users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035354 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html - http://www.securityfocus.com/bid/85055 - https://support.apple.com/HT206171
CVE ID: CVE-2016-1773 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:38.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: The code-signing subsystem in Apple OS X before 10.11.4 does not properly verify file ownership, which allows local users to determine the existence of arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - https://support.apple.com/HT206167 - http://www.securitytracker.com/id/1035363
CVE ID: CVE-2016-1774 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:38.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Time Machine server in Server App in Apple OS X Server before 5.1 does not notify the user about ignored permissions during a backup, which makes it easier for remote attackers to obtain sensitive information in opportunistic circumstances by reading backup data that lacks intended restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035342 - http://www.securityfocus.com/bid/85054 - https://support.apple.com/HT206173 - http://lists.apple.com/archives/security-ann
tp://www.securityfocus.com/bid/85054 - https://support.apple.com/HT206173 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html
CVE ID: CVE-2016-1775 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205635 - https://support.apple.com/HT205637 - http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce
e/2015/Dec/msg00002.html - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html - https://support.apple.com/HT205641 - https://support.apple.com/HT205640 - http://www.zerodayinitiative.com/advisories/ZDI-16-204 - http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html
CVE ID: CVE-2016-1776 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DS_Store and .htaccess files, which allows remote attackers to obtain sensitive configuration information via an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035342 - http://www.securityfocus.com/bid/85054 - https://support.apple.com/HT206173 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html
CVE ID: CVE-2016-1777 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Server in Apple OS X Server before 5.1 supports the RC4 algorithm, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035342 - http://www.securityfocus.com/bid/85054 - https://support.apple.com/HT206173 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html
CVE ID: CVE-2016-1778 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html - http://www.zerodayinitiative.com/advisories/ZDI-16-200 - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://www.securityfocus.com/archive/1/5
53 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://www.securityfocus.com/archive/1/537948/100/0/threaded - https://support.apple.com/HT206171 - https://support.apple.com/HT206166
CVE ID: CVE-2016-1779 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to bypass the Same Origin Policy and obtain physical-location data via a crafted geolocation request. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://www.securityfocus.com/archive/1/537948/100/0/threaded - https://support.apple.com/HT206
/2016/Mar/msg00000.html - http://www.securityfocus.com/archive/1/537948/100/0/threaded - https://support.apple.com/HT206171 - https://support.apple.com/HT206166
CVE ID: CVE-2016-1780 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - https://support.apple.com/HT206166
CVE ID: CVE-2016-1781 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205635 - http://www.securitytracker.com/id/1035353 - http://www.securityfocus.com/archive/1/537948/100/0/threaded - http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html - http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html - https:/
ity-announce/2015/Dec/msg00003.html - http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html - https://support.apple.com/HT205639
CVE ID: CVE-2016-1782 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:38.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iOS before 9.3 and Safari before 9.1 does not properly restrict redirects that specify a TCP port number, which allows remote attackers to bypass intended port restrictions via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://www.securityfocus.com/archive/1/537948/100/0/threaded
ple.com/archives/security-announce/2016/Mar/msg00000.html - http://www.securityfocus.com/archive/1/537948/100/0/threaded - https://support.apple.com/HT206171 - https://support.apple.com/HT206166
CVE ID: CVE-2016-1783 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://www.securityfocus.com/archive/1/537948/100/0/threaded - https://support.
curity-announce/2016/Mar/msg00000.html - http://www.securityfocus.com/archive/1/537948/100/0/threaded - https://support.apple.com/HT206171 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html - https://support.apple.com/HT206169 - https://support.apple.com/HT206166
CVE ID: CVE-2016-1784 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The History implementation in WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to cause a denial of service (resource consumption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - https://support.apple.com/HT206171 - http://lists.
//lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - https://support.apple.com/HT206171 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html - https://support.apple.com/HT206169 - https://support.apple.com/HT206166
CVE ID: CVE-2016-1785 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles character encoding during access to cached data, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http:
://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://www.securityfocus.com/archive/1/537948/100/0/threaded - https://support.apple.com/HT206171 - https://support.apple.com/HT206166
CVE ID: CVE-2016-1786 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles HTTP responses with a 3xx (aka redirection) status code, which allows remote attackers to spoof the displayed URL, bypass the Same Origin Policy, and obtain sensitive cached information via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/securit
ty-announce/2016/Mar/msg00005.html - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://www.securityfocus.com/archive/1/537948/100/0/threaded - https://support.apple.com/HT206171 - https://support.apple.com/HT206166
CVE ID: CVE-2016-1787 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:39.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wiki Server in Apple OS X Server before 5.1 allows remote attackers to obtain sensitive information from Wiki pages via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035342 - http://www.securityfocus.com/bid/85054 - https://support.apple.com/HT206173 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html
CVE ID: CVE-2016-1788 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-05T23:10:40.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachments via vectors related to duplicate messages. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - https://support.apple.com/HT206167 - https://support.apple.com/HT206168 - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archiv
T206167 - https://support.apple.com/HT206168 - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - https://support.apple.com/HT206166
CVE ID: CVE-2016-1789 State: PUBLISHED Published: 2016-04-05T14:00:00 Last Updated: 2024-08-05T23:10:38.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iBooks Author before 2.4.1 allows remote attackers to read arbitrary files via an iBooks Author file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT206224 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00008.html
CVE ID: CVE-2016-1790 State: PUBLISHED Published: 2016-05-20T10:00:00 Last Updated: 2024-08-05T23:10:39.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Accessibility component in Apple iOS before 9.3.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035890 - http://lists.apple.com/archives/security-announce/2016/May/msg00002.html - https://support.apple.com/HT206568
CVE ID: CVE-2016-1791 State: PUBLISHED Published: 2016-05-20T10:00:00 Last Updated: 2024-08-05T23:10:39.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AMD subsystem in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT206567 - http://lists.apple.com/archives/security-announce/2016/May/msg00004.html - http://www.securityfocus.com/bid/90696 - http://www.securitytracker.com/id/1035895
CVE ID: CVE-2016-1792 State: PUBLISHED Published: 2016-05-20T10:00:00 Last Updated: 2024-08-05T23:10:39.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AMD subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT206567 - http://lists.apple.com/archives/security-announce/2016/May/msg00004.html - http://www.securityfocus.com/bid/90696 - http://www.securitytracker.com/id/1035895