Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2c1e6298-f243-49a5-b1b7-52bd6a6c8858?source=cve - https://www.pluginvulnerabilities.com/2016/09/19/arbitrary-file-upload-vulnerability-in-front-end-file-upload-and-manager-plugin/ - https://wordpress.org/plugins/nmedia-user-file-uploader/#developers - https://wpscan.com/vulnerability/052f7d9a-aaff-4fb1-92b7-aeb83cc705a7 - https://www.pluginvulnerabilities.com/2016/09/19/arbitrary-file-upload-vulnerability-in-n-media-po
1-92b7-aeb83cc705a7 - https://www.pluginvulnerabilities.com/2016/09/19/arbitrary-file-upload-vulnerability-in-n-media-post-front-end-form/ - https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-n-media-post-front-end-form-arbitrary-file-upload-1-0/
CVE ID: CVE-2016-15043 State: PUBLISHED Published: 2025-07-19T09:23:52.395Z Last Updated: 2025-07-21T16:49:40.705Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Websitez.com, LLC Products: WP Mobile Detector Problem Types: CWE-434 Description: The WP Mobile Detector plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in resize.php file in versions up to, and including, 3.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfenc
ke remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5a5d5dbd-36f0-4886-adf8-045ec9c2e306?source=cve - https://blog.sucuri.net/2016/06/wp-mobile-detector-vulnerability-being-exploited-in-the-wild.html - https://www.pluginvulnerabilities.com/2016/05/31/aribitrary-file-upload-vulnerability-in-wp-mobile-detector/ - https://wordpress.org/plugins/wp-mobile-detector/changelog/ - https://wpscan.com/vulnerability/e4739674-eed4-417e-8c4d-2f5351b057cf - https://aadityapurani.com/2016/06/03/mobile-detector-poc/
CVE ID: CVE-2016-15044 State: PUBLISHED Published: 2025-07-23T22:02:04.812Z Last Updated: 2025-07-24T13:36:57.890Z Vendors: Kaltura Products: Video Platform Problem Types: CWE-502, CWE-94 Description: A remote code execution vulnerability exists in Kaltura versions prior to 11.1.0-2 due to unsafe deserialization of user-controlled data within the keditorservices module. An unauthenticated remote attacker can exploit this issue by sending a specially crafted serialized PHP object in the kdata GET parameter to the redirectWidgetCmd endpoint. Successful exploitation leads to execution of arbitrary PHP code in the context of the web server process. Additional Analyst Notes: - CISA ADP Vulnrichme
xecution of arbitrary PHP code in the context of the web server process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/kaltura_unserialize_rce.rb - https://www.exploit-db.com/exploits/39563 - https://www.exploit-db.com/exploits/40404 - https://www.vulncheck.com/advisories/kaltura-php-object-injection-rce
CVE ID: CVE-2016-15045 State: PUBLISHED Published: 2025-07-23T13:51:15.064Z Last Updated: 2025-07-23T15:13:57.117Z Vendors: Wuhan Deepin Technology Co., Ltd. Products: Deepin Linux Problem Types: CWE-306, CWE-269 Description: A local privilege escalation vulnerability exists in lastore-daemon, the system package manager daemon used in Deepin Linux (developed by Wuhan Deepin Technology Co., Ltd.). In versions 0.9.53-1 (Deepin 15.5) and 0.9.66-1 (Deepin 15.7), the D-Bus configuration permits any user in the sudo group to invoke the InstallPackage method without password authentication. By default, the first user created on Deepin is in the sudo group. An attacker with shell access can craft a
ntication. By default, the first user created on Deepin is in the sudo group. An attacker with shell access can craft a .deb package containing a malicious post-install script and use dbus-send to install it via lastore-daemon, resulting in arbitrary code execution as root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/39433 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/local/lastore_daemon_dbus_priv_esc.rb - https://github.com/linuxdeepin/lastore-daemon - https://www.deepin.org/en/mirrors/releases/ - https://www.exploit-db.com/exploits/44523 - https://www.vulncheck.com/advisories/deepin-la
in.org/en/mirrors/releases/ - https://www.exploit-db.com/exploits/44523 - https://www.vulncheck.com/advisories/deepin-lastore-daemon-priv-esc
CVE ID: CVE-2016-15046 State: PUBLISHED Published: 2025-07-25T15:53:44.379Z Last Updated: 2025-11-21T14:07:12.496Z Vendors: Hanwha Products: Smart Security Manager (SSM) Problem Types: CWE-434, CWE-306 Description: A client-side remote code execution vulnerability exists in Hanwha Techwin Smart Security Manager (SSM) versions 1.32 and 1.4, due to improper restrictions on the PUT method exposed by the bundled Apache ActiveMQ instance (running on port 8161). An attacker can exploit this flaw through a Cross-Origin Resource Sharing (CORS) bypass combined with JavaScript-triggered file uploads to the web server, ultimately resulting in arbitrary code execution with SYSTEM privileges. This vulner
red file uploads to the web server, ultimately resulting in arbitrary code execution with SYSTEM privileges. This vulnerability bypasses the server-side mitigations introduced in ZDI-15-156 and ZDI-16-481 by shifting the exploitation to the client-side. This product is now referred to as Hanwha Wisenet SSM and it is unknown if current versions are affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/browser/samsung_security_manager_put.rb - http://www.zerodayinitiative.com/advisories/ZDI-15-156/ - http://www.zerodayinitiative.com/advisories/ZDI-16-481/ - https://web.archive.org
nitiative.com/advisories/ZDI-15-156/ - http://www.zerodayinitiative.com/advisories/ZDI-16-481/ - https://web.archive.org/web/20160518205411/http://security.hanwhatechwin.com/product/product_view.asp?idx=6779#FL080000 - https://srcincite.io/advisories/src-2016-0032/ - https://www.vulncheck.com/advisories/samsung-security-manager-activemq-file-upload-rce
CVE ID: CVE-2016-15047 State: PUBLISHED Published: 2025-10-09T21:10:42.921Z Last Updated: 2025-10-15T16:12:45.713Z Vendors: AVTECH SECURITY Corporation Products: IP Camera, NVR, and DVR Devices Problem Types: CWE-78 Description: AVTECH devices that include the CloudSetup.cgi management endpoint are vulnerable to authenticated OS command injection. The `exefile` parameter in CloudSetup.cgi is passed to the underlying system command execution without proper validation or whitelisting. An authenticated attacker who can invoke this endpoint can supply crafted input to execute arbitrary system commands as root. Successful exploitation grants full control of the device, and - depending on deployme
rbitrary system commands as root. Successful exploitation grants full control of the device, and - depending on deployment and whether the device stores credentials or has network reachability to internal systems - may enable credential theft, lateral movement, or data exfiltration. The archived SEARCH-LAB disclosure implies that this vulnerability was remediated in early 2017, but AVTECH has not defined an affected version range. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20240810225729/https://www.search-lab.hu/advisories/126-AVTech-devices-multiple-vulnerabilities - https://web.archive.org/web/20170420145806/http://www.search-lab.hu/media/
126-AVTech-devices-multiple-vulnerabilities - https://web.archive.org/web/20170420145806/http://www.search-lab.hu/media/vulnerability_matrix.txt - https://www.exploit-db.com/exploits/40500 - https://www.trendmicro.com/en_us/research/17/c/new-linux-malware-exploits-cgi-vulnerability.html - https://www.sonicwall.com/blog/attackers-actively-targeting-vulnerable-avtech-devices - https://www.vulncheck.com/advisories/avtech-cloudsetup-cgi-auth-command-injection
CVE ID: CVE-2016-15048 State: PUBLISHED Published: 2025-10-22T14:21:01.096Z Last Updated: 2025-10-22T14:34:46.683Z Vendors: Anmei Century (Beijing) Technology Co., Ltd. Products: Hotel Broadband Operation System (HiBOS) Problem Types: CWE-78 Description: AMTT Hotel Broadband Operation System (HiBOS) contains an unauthenticated command injection vulnerability in the /manager/radius/server_ping.php endpoint. The application constructs a shell command that includes the user-supplied ip parameter and executes it without proper validation or escaping. An attacker can insert shell metacharacters into the ip parameter to inject and execute arbitrary system commands as the web server user. The initi
l metacharacters into the ip parameter to inject and execute arbitrary system commands as the web server user. The initial third-party disclosure in 2016 recommended contacting the vendor for remediation guidance. Additionally, this product may have been rebranded under a different name. VulnCheck has observed this vulnerability being exploited in the wild as of 2025-10-14 at 04:45:53.510819 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amttgroup.com/ - https://wooyun.laolisafe.com/bug_detail.php?wybug_id=wooyun-2016-0181444 - https://www.cnvd.org.cn/flaw/show/CNVD-2021-37784 - https://github.com/adysec/nuclei_poc/blob/49c283b2bbb244c071786a2b768fbdde1b91f
.cnvd.org.cn/flaw/show/CNVD-2021-37784 - https://github.com/adysec/nuclei_poc/blob/49c283b2bbb244c071786a2b768fbdde1b91f38e/poc/remote_code_execution/hiboss-rce_2.yaml#L21 - https://www.vulncheck.com/advisories/amtt-hibos-command-injection-rce-via-server-ping-php
CVE ID: CVE-2016-15049 State: PUBLISHED Published: 2025-10-30T21:23:13.241Z Last Updated: 2025-11-17T21:36:22.045Z Vendors: Nagios Products: Log Server Problem Types: CWE-79 Description: Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting (XSS) in the Dashboards section when rendering log entries in the Logs table. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in the victim’s browser within the application origin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-log-server-2024r1/ - https://www.vulncheck.com/advisories
ichment: References: - https://www.nagios.com/changelog/nagios-log-server-2024r1/ - https://www.vulncheck.com/advisories/nagios-log-server-dashboards-logs-table-xss
CVE ID: CVE-2016-15050 State: PUBLISHED Published: 2025-10-30T21:44:49.116Z Last Updated: 2025-11-17T18:21:38.140Z Vendors: Nagios Products: XI Problem Types: CWE-89 Description: Nagios XI versions prior to 5.2.4 contain a SQL injection vulnerability in the notification search functionality. User-supplied search parameters were incorporated into SQL statements without adequate parameterization or sanitation, allowing an authenticated user to manipulate database queries. Successful exploitation could disclose or modify notification data and, in some cases, impact the application database more broadly. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/chan
tion database more broadly. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-sqli-in-notification-search
CVE ID: CVE-2016-15051 State: PUBLISHED Published: 2025-10-30T21:55:32.598Z Last Updated: 2025-11-17T18:21:38.334Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting (XSS) via the Reports interface through values from the startdate and enddate fields. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-report-startdate-enddate-fields
CVE ID: CVE-2016-15052 State: PUBLISHED Published: 2025-10-30T21:54:04.092Z Last Updated: 2025-11-17T18:21:38.506Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting (XSS) via the Menu System of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-menu-system
CVE ID: CVE-2016-15053 State: PUBLISHED Published: 2025-10-30T21:54:25.746Z Last Updated: 2025-11-17T18:21:38.698Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting (XSS) via the “My Reports” listing of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-my-reports-listing
CVE ID: CVE-2016-15054 State: REJECTED Published: 2025-11-03T21:56:26.267Z Last Updated: 2025-11-10T17:57:55.745Z Description: No description available.
CVE ID: CVE-2016-15055 State: PUBLISHED Published: 2025-11-12T22:08:35.468Z Last Updated: 2025-11-14T16:52:25.858Z Vendors: JVC (JVCKENWOOD) Products: IP-Camera (VN-T216VPRU) Problem Types: CWE-22 Description: JVC VN-T IP-camera models firmware versions up to 2016-08-22 (confirmed on the VN-T216VPRU model) contain a directory traversal vulnerability in the checkcgi endpoint that accepts a user-controlled file parameter. An unauthenticated remote attacker can leverage this vulnerability to read arbitrary files on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/40282 - https://web.archive.org/web/20170713051843/http://www.black-r
References: - https://www.exploit-db.com/exploits/40282 - https://web.archive.org/web/20170713051843/http://www.black-rose.ml/2016/08/analyzing-security-cameras-products.html - http://pro.jvc.com/prof/attributes/tech_desc.jsp?model_id=MDL102145&feature_id=02 - https://www.vulncheck.com/advisories/jvc-vnt-ip-camera-directory-traversal-via-check-cgi
CVE ID: CVE-2016-15056 State: PUBLISHED Published: 2025-11-14T22:49:58.179Z Last Updated: 2025-11-18T16:19:32.158Z Vendors: Ubee Interactive Products: Ubee EVW3226 Problem Types: CWE-538 Description: Ubee EVW3226 cable modem/routers firmware versions up to and including 1.0.20 store configuration backup files in the web root after they are generated for download. These backup files remain accessible without authentication until the next reboot. A remote attacker on the local network can request 'Configuration_file.cfg' directly to obtain the backup archive. Because backup files are not encrypted, they expose sensitive information including the plaintext admin password, allowing full compromi
iles are not encrypted, they expose sensitive information including the plaintext admin password, allowing full compromise of the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/40156 - https://seclists.org/fulldisclosure/2016/Jul/66 - https://web.archive.org/web/20160726145043/http://www.search-lab.hu/advisories/122-ubee-evw3226-modem-router-multiple-vulnerabilities - https://web.archive.org/web/20160403014231/http://www.ubeeinteractive.com/products/cable/evw3226 - https://www.vulncheck.com/advisories/ubee-evw3226-unauthenticated-backup-file-disclosure
CVE ID: CVE-2016-1000 State: PUBLISHED Published: 2016-03-12T15:00:00 Last Updated: 2024-08-05T22:38:41.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, and CVE-2016-0999. Additio
90, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, and CVE-2016-0999. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00032.html - http://www.securitytracker.com/id/1035251 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00024.html - http://rhn.redhat.com/errata/RHSA-2016-1583.html - http://rhn.redhat.com/errata/RHSA-2016-1582.html - https://www.exploit-db.com/exploits/39610/ - https://security.gentoo.org/glsa/201603-07 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00022.html - https://helpx.adobe.com/security/products/flash-player/
.opensuse.org/opensuse-security-announce/2016-03/msg00022.html - https://helpx.adobe.com/security/products/flash-player/apsb16-08.html - http://www.securityfocus.com/bid/84312 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00023.html
CVE ID: CVE-2016-1001 State: PUBLISHED Published: 2016-03-12T15:00:00 Last Updated: 2024-08-05T22:38:41.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00032.html - http://www.securitytracker.com/id/1035251 - http://l
sts.opensuse.org/opensuse-security-announce/2016-03/msg00032.html - http://www.securitytracker.com/id/1035251 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00024.html - https://www.exploit-db.com/exploits/39609/ - https://security.gentoo.org/glsa/201603-07 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00022.html - https://helpx.adobe.com/security/products/flash-player/apsb16-08.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00023.html
CVE ID: CVE-2016-1002 State: PUBLISHED Published: 2016-03-12T15:00:00 Last Updated: 2024-08-05T22:38:41.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, and CVE-2016-1005. Additional Analyst Notes: - CVE Prog
961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, and CVE-2016-1005. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00032.html - http://www.securitytracker.com/id/1035251 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00024.html - http://www.securityfocus.com/bid/84311 - https://security.gentoo.org/glsa/201603-07 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00022.html - https://helpx.adobe.com/security/products/flash-player/apsb16-08.html - https://www.exploit-db.com/exploits/39608/ - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00023.htm
- https://www.exploit-db.com/exploits/39608/ - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00023.html
CVE ID: CVE-2016-1003 State: REJECTED Published: 2016-12-31T02:00:00 Last Updated: 2016-12-31T01:57:01 Description: No description available.
CVE ID: CVE-2016-1004 State: REJECTED Published: 2016-12-31T02:00:00 Last Updated: 2016-12-31T01:57:01 Description: No description available.
CVE ID: CVE-2016-1005 State: PUBLISHED Published: 2016-03-12T15:00:00 Last Updated: 2024-08-05T22:38:41.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (uninitialized pointer dereference and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, and CVE-2016-1002
ability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, and CVE-2016-1002. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00032.html - http://www.securitytracker.com/id/1035251 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00024.html - http://www.securityfocus.com/bid/84311 - https://security.gentoo.org/glsa/201603-07 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00022.html - https://helpx.adobe.com/security/products/flash-player/apsb16-08.html - http://www.zerodayinitiative.com/advisories/ZDI-16-192/ - http://lists.opensuse.
/products/flash-player/apsb16-08.html - http://www.zerodayinitiative.com/advisories/ZDI-16-192/ - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00023.html
CVE ID: CVE-2016-1006 State: PUBLISHED Published: 2016-04-09T01:00:00 Last Updated: 2024-08-05T22:38:41.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass the ASLR protection mechanism via JIT data. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html - http://rhn.redhat.com/errata/RHSA-2016-0610.html - http://www.securitytracker.com/id/1035509 - https://docs.micr
.html - http://rhn.redhat.com/errata/RHSA-2016-0610.html - http://www.securitytracker.com/id/1035509 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050 - https://helpx.adobe.com/security/products/flash-player/apsb16-10.html
CVE ID: CVE-2016-1007 State: PUBLISHED Published: 2016-03-09T11:00:00 Last Updated: 2024-08-05T22:38:41.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1009. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035199 - http://www.securityfocus.com/bid/84215 - https://helpx.adobe.com/security/pr