Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
urityfocus.com/bid/94486 - http://www.securitytracker.com/id/1037329 - http://www.vmware.com/security/advisories/VMSA-2016-0022.html
CVE ID: CVE-2016-7460 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:57:47.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Single Sign-On feature in VMware vCenter Server 5.5 before U3e and 6.0 before U2a and vRealize Automation 6.x before 6.2.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94485 - http://www.securitytracker.com/id/1037329 - http://www.securitytracker.c
ces: - http://www.securityfocus.com/bid/94485 - http://www.securitytracker.com/id/1037329 - http://www.securitytracker.com/id/1037327 - http://www.vmware.com/security/advisories/VMSA-2016-0022.html
CVE ID: CVE-2016-7461 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:57:47.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion and Fusion Pro 8.x before 8.5.2 allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (out-of-bounds memory access on the host OS) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94280 - http://www.vmware.com/security/advisories/VMSA-2016-0019.html - http://www.security
://www.securityfocus.com/bid/94280 - http://www.vmware.com/security/advisories/VMSA-2016-0019.html - http://www.securitytracker.com/id/1037282
CVE ID: CVE-2016-7462 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:57:47.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload that is mishandled during deserialization. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94351 - http://www.securitytracker.com/id/1037297 - http://www.vmware.com/security/advisories/VMSA-2016-0020.html - https://www.tenable.com/security/research/tra-2016-34
CVE ID: CVE-2016-7463 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:57:47.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Host Client in VMware vSphere Hypervisor (aka ESXi) 5.5 and 6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted VM. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94998 - http://www.securitytracker.com/id/1037501 - http://www.vmware.com/security/advisories/VMSA-2016-0023.html
CVE ID: CVE-2016-7464 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7465 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7466 State: PUBLISHED Published: 2016-12-10T00:00:00 Last Updated: 2024-08-06T01:57:47.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when the xhci uses msix, allows local guest OS administrators to cause a denial of service (memory consumption and possibly QEMU process crash) by repeatedly unplugging a USB device. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/19/8 - http://www.openwall.com/lists/oss-security/2016/09/20/3 - https://security.gentoo.org/glsa/201611-11 - http://www.securityfocus.com/b
enwall.com/lists/oss-security/2016/09/20/3 - https://security.gentoo.org/glsa/201611-11 - http://www.securityfocus.com/bid/93029 - https://access.redhat.com/errata/RHSA-2017:2392 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b53dd4495ced2432a0b652ea895e651d07336f7e - https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg02773.html - https://access.redhat.com/errata/RHSA-2017:2408
CVE ID: CVE-2016-7467 State: PUBLISHED Published: 2017-04-11T14:00:00 Last Updated: 2024-08-06T01:57:47.649Z Vendors: F5 Networks Products: F5 BIG-IP APM Problem Types: TMM SSO plugin Description: The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider (SP) connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an authenticated user is sent via the SP connector. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97168 - https://support.f5.com/csp/article/K95444512 - htt
ram Container: References: - http://www.securityfocus.com/bid/97168 - https://support.f5.com/csp/article/K95444512 - http://www.securitytracker.com/id/1038131
CVE ID: CVE-2016-7468 State: PUBLISHED Published: 2017-03-23T14:00:00 Last Updated: 2024-08-06T01:57:47.659Z Vendors: F5 Networks Products: F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, PEM, PSM, Problem Types: denial of service Description: An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system's tm.tcpprogressive db variable value is set to non-default setting "enabled". The default value for the tm.tcpprogressive db variable is "negotiate". An attacker may be able to disrupt traffic or cau
he default value for the tm.tcpprogressive db variable is "negotiate". An attacker may be able to disrupt traffic or cause the BIG-IP system to fail over to another device in the device group. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97119 - http://www.securitytracker.com/id/1038121 - https://support.f5.com/csp/article/K13053402
CVE ID: CVE-2016-7469 State: PUBLISHED Published: 2017-06-09T15:00:00 Last Updated: 2024-08-06T01:57:47.636Z Vendors: F5 Networks, Inc. Products: BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM,WebAccelerator,WOM,WebSafe Problem Types: cross-site scripting (XSS) Description: A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 12.1.2, 11.4.0 - 11.6.1, and 11.2.1 allows an authenticated user to inject arbitrary web script or HTML. Exploitation requires Res
.4.0 - 11.6.1, and 11.2.1 allows an authenticated user to inject arbitrary web script or HTML. Exploitation requires Resource Administrator or Administrator privileges, and it could cause the Configuration utility client to become unstable. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K97285349 - http://www.securitytracker.com/id/1037559 - http://www.securityfocus.com/bid/95320 - http://www.securitytracker.com/id/1037560
CVE ID: CVE-2016-7470 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2016-7471 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2016-7472 State: PUBLISHED Published: 2018-04-03T13:00:00Z Last Updated: 2024-09-17T01:50:32.618Z Vendors: F5 Networks, Inc. Products: BIG-IP ASM Problem Types: BIG-IP ASM vulnerability Description: F5 BIG-IP ASM version 12.1.0 - 12.1.1 may allow remote attackers to cause a denial of service (DoS) via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K17119920 - http://www.securitytracker.com/id/1037275 - http://www.securityfocus.com/bid/94260 - http://www.securityfocus.com/bid/97168
CVE ID: CVE-2016-7473 State: REJECTED Published: 2018-07-26T20:00:00 Last Updated: 2018-07-26T19:57:01 Description: No description available.
CVE ID: CVE-2016-7474 State: PUBLISHED Published: 2017-03-27T15:00:00 Last Updated: 2024-08-06T01:57:47.652Z Vendors: F5 Networks Products: F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM Problem Types: MCPD data on disk may expose sensitive parameters Description: In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally unrecoverable information. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K52180214 - http://www.securityfocus.com/bid/97198 - http://www.securitytracker.com/id/1038133
CVE ID: CVE-2016-7475 State: PUBLISHED Published: 2018-10-08T19:00:00Z Last Updated: 2024-09-17T01:15:55.297Z Vendors: F5 Networks, Inc. Products: BIG-IP Problem Types: DoS Description: Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkernel (TMM) may not properly clean-up pool member network connections when using SPDY or HTTP/2 virtual server profiles. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K01587042
CVE ID: CVE-2016-7476 State: PUBLISHED Published: 2017-05-11T16:00:00 Last Updated: 2024-08-06T01:57:47.651Z Vendors: F5 Networks, Inc. Products: BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link Controller, PEM, PSM, WebSafe Problem Types: Traffic Management Microkernel (TMM) memory leak Description: The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link Controller, PEM, PSM, and WebSafe 11.6.0 before 11.6.0 HF6, 11.5.0 before 11.5.3 HF2, and 11.3.0 before 11.4.1 HF10 may suffer from a memory leak while handling certain types of TCP traffic. Remote attackers may cause a denial of service (DoS) by way of a crafted TCP packet. Additional Analyst Notes: - CVE Program
e attackers may cause a denial of service (DoS) by way of a crafted TCP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037274 - https://support.f5.com/csp/#/article/K87416818 - http://www.securityfocus.com/bid/94353
CVE ID: CVE-2016-7477 State: PUBLISHED Published: 2017-02-15T21:00:00 Last Updated: 2024-08-06T01:57:47.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_put_pixels8_xy2_mmx function in rnd_template.c in Libav 11.7 allows remote attackers to cause a denial of service (invalid memory access and crash) via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/09/20/libav-null-pointer-dereference-in-ff_put_pixels8_xy2_mmx-rnd_template-c/ - http://www.securityfocus.com/bid/93042 - http://www.openwall.com/lists/oss-security/2016/09
s8_xy2_mmx-rnd_template-c/ - http://www.securityfocus.com/bid/93042 - http://www.openwall.com/lists/oss-security/2016/09/21/6
CVE ID: CVE-2016-7478 State: PUBLISHED Published: 2017-01-11T06:02:00 Last Updated: 2024-08-06T01:57:47.681Z Vendors: n/a Products: PHP before 5.6.28 Problem Types: infinite loop Description: Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876. Additional Analyst Notes: - CVE Program Container: References: - http://blog.checkpoint.com/wp-content/uploads/2016/12/PHP_Technical_Report.pdf - http://www.securityfocus.com/bid/95150 - https://www.youtube.com/watch?v=LDcaPstAuPk - https://security.netapp.com/advisory/nta
www.securityfocus.com/bid/95150 - https://www.youtube.com/watch?v=LDcaPstAuPk - https://security.netapp.com/advisory/ntap-20180112-0001/ - http://blog.checkpoint.com/2016/12/27/check-point-discovers-three-zero-day-vulnerabilities-web-programming-language-php-7 - https://bugs.php.net/bug.php?id=73093
CVE ID: CVE-2016-7479 State: PUBLISHED Published: 2017-01-12T00:00:00 Last Updated: 2024-08-06T01:57:47.655Z Vendors: n/a Products: PHP 7.x Problem Types: Remote Code Execution Description: In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-after-free. A remote attacker may exploit this bug to gain arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://blog.checkpoint.com/wp-content/uploads/2016/12/PHP_Technical_Report.pdf - https://www.youtube.com/watch?v=LDcaPstAuPk - https://bugs.php.net/bug.php?id=73092 - https://access.redhat.com/errata/RHSA-2018:1296 - https
om/watch?v=LDcaPstAuPk - https://bugs.php.net/bug.php?id=73092 - https://access.redhat.com/errata/RHSA-2018:1296 - https://security.netapp.com/advisory/ntap-20180112-0001/ - http://www.securityfocus.com/bid/95151 - http://www.securitytracker.com/id/1037659 - http://blog.checkpoint.com/2016/12/27/check-point-discovers-three-zero-day-vulnerabilities-web-programming-language-php-7
CVE ID: CVE-2016-7480 State: PUBLISHED Published: 2017-01-11T06:45:00 Last Updated: 2024-08-06T01:57:47.646Z Vendors: n/a Products: PHP before 7.0.12 Problem Types: missing data-type validation Description: The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12 does not verify that a key is an object, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access) via crafted serialized data. Additional Analyst Notes: - CVE Program Container: References: - http://blog.checkpoint.com/wp-content/uploads/2016/12/PHP_Technical_Report.pdf - https://www.youtube.com/watch?v=LDcaPstAuPk - https://bugs.php.net/
p-content/uploads/2016/12/PHP_Technical_Report.pdf - https://www.youtube.com/watch?v=LDcaPstAuPk - https://bugs.php.net/bug.php?id=73257 - http://php.net/ChangeLog-7.php - http://www.securityfocus.com/bid/95152 - https://github.com/php/php-src/commit/61cdd1255d5b9c8453be71aacbbf682796ac77d4 - https://security.netapp.com/advisory/ntap-20180112-0001/ - http://blog.checkpoint.com/2016/12/27/check-point-discovers-three-zero-day-vulnerabilities-web-programming-language-php-7
CVE ID: CVE-2016-7481 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7482 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7483 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7484 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7485 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7486 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7487 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7488 State: PUBLISHED Published: 2016-11-10T16:00:00 Last Updated: 2024-08-06T01:57:47.655Z Vendors: Teradata Products: Virtual Machine Community Edition Problem Types: perm Description: Teradata Virtual Machine Community Edition v15.10 has insecure file permissions on /etc/luminex/pkgmgr. These could allow a local user to modify its contents and execute commands as root. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94262 - http://www.vapidlabs.com/advisory.php?v=172
CVE ID: CVE-2016-7489 State: PUBLISHED Published: 2016-11-10T16:00:00 Last Updated: 2024-08-06T01:57:47.656Z Vendors: Teradata Products: Virtual Machine Community Edition Problem Types: perm Description: Teradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl creates files in /tmp in an insecure manner, this may lead to elevated code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94262 - http://www.vapidlabs.com/advisory.php?v=173
CVE ID: CVE-2016-7490 State: PUBLISHED Published: 2016-11-10T16:00:00 Last Updated: 2024-08-06T01:57:47.636Z Vendors: Teradata Products: Studio Express Problem Types: symlink Description: The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. A malicious local user could create a symlink in /tmp and possibly clobber system files or perhaps elevate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=174 - http://www.securityfocus.com/bid/94255
CVE ID: CVE-2016-7491 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7492 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7493 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7494 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7495 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7496 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7497 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7498 State: PUBLISHED Published: 2016-09-27T15:00:00 Last Updated: 2024-08-06T01:57:47.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. NOTE: this vulnerability exists because of a CVE-2015-3280 regression. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93068 - http://www.openwall.com/lists/oss-security/2016/09/23/1 - https://security.openstack.org/ossa/OSSA-2016-011.html - http://www.openw
openwall.com/lists/oss-security/2016/09/23/1 - https://security.openstack.org/ossa/OSSA-2016-011.html - http://www.openwall.com/lists/oss-security/2016/09/21/8
CVE ID: CVE-2016-7499 State: PUBLISHED Published: 2017-02-15T21:00:00 Last Updated: 2024-08-06T01:57:47.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sbr_make_f_master function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp3 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93102 - http://www.openwall.com/lists/oss-security/2016/09/21/9 - https://git.libav.org/?p=libav.git%3Ba=blobdiff%3Bf=libavcodec/aacsbr.c%3Bh=7d156e525b40b197c38db17acf16730845b91e56%3Bhp=dbfb1677813ce6c531e4362d0be7ccf9fdfdd28e%3Bhb=a50a5ff29ec5a82434997
.c%3Bh=7d156e525b40b197c38db17acf16730845b91e56%3Bhp=dbfb1677813ce6c531e4362d0be7ccf9fdfdd28e%3Bhb=a50a5ff29ec5a8243499769e2bb9b5509ce9fd52%3Bhpb=f55e3ff5891daf3d538b4d9176371960200d68fa - https://blogs.gentoo.org/ago/2016/09/21/libav-divide-by-zero-in-sbr_make_f_master-aacsbr-c/
CVE ID: CVE-2016-7502 State: PUBLISHED Published: 2016-12-23T05:00:00 Last Updated: 2024-08-06T01:57:47.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cavs_idct8_add_c function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavs_decode. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/08/1 - https://security.gentoo.org/glsa/201701-71 - http://www.securityfocus.com/bid/94834
CVE ID: CVE-2016-7504 State: PUBLISHED Published: 2016-10-29T01:00:00 Last Updated: 2024-08-06T01:57:47.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use-after-free vulnerability was observed in Rp_toString function of Artifex Software, Inc. MuJS before 5c337af4b3df80cf967e4f9f6a21522de84b392a. A successful exploitation of this issue can lead to code execution or denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.ghostscript.com/show_bug.cgi?id=697142 - http://www.securityfocus.com/bid/94241
CVE ID: CVE-2016-7505 State: PUBLISHED Published: 2016-10-29T01:00:00 Last Updated: 2024-08-06T01:57:47.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability was observed in divby function of Artifex Software, Inc. MuJS before 8c805b4eb19cf2af689c860b77e6111d2ee439d5. A successful exploitation of this issue can lead to code execution or denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94231 - http://bugs.ghostscript.com/show_bug.cgi?id=697140
CVE ID: CVE-2016-7506 State: PUBLISHED Published: 2016-10-29T01:00:00 Last Updated: 2024-08-06T01:57:47.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read vulnerability was observed in Sp_replace_regexp function of Artifex Software, Inc. MuJS before 5000749f5afe3b956fc916e407309de840997f4a. A successful exploitation of this issue can lead to code execution or denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.ghostscript.com/show_bug.cgi?id=697141 - http://www.securityfocus.com/bid/94241
CVE ID: CVE-2016-7507 State: PUBLISHED Published: 2017-07-19T13:00:00 Last Updated: 2024-08-06T01:57:47.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an admin account in the application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/issues/2483
CVE ID: CVE-2016-7508 State: PUBLISHED Published: 2017-06-21T20:00:00 Last Updated: 2024-08-06T01:57:47.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/issues/1047 - https://www.exploit-db.com/exploits/42262/
CVE ID: CVE-2016-7509 State: PUBLISHED Published: 2017-07-19T13:00:00 Last Updated: 2024-08-06T01:57:47.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to inject arbitrary web script or HTML by attaching a crafted HTML file to a ticket. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/issues/2483