Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-9807 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T02:59:03.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted FLIC file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0019.html - http://rhn.redhat.com/errata/RHSA-2016-2975.html - https://cgit.freedesktop.org/gstreamer/gst-plugins-good/commit/?id=153a8ae752c90d07190ef45803422a4f71ea8bff - http://rhn.redhat.com/errata/RHSA-2017-0020.html - https://gstre
d/commit/?id=153a8ae752c90d07190ef45803422a4f71ea8bff - http://rhn.redhat.com/errata/RHSA-2017-0020.html - https://gstreamer.freedesktop.org/releases/1.10/#1.10.2 - https://bugzilla.gnome.org/show_bug.cgi?id=774859 - http://www.openwall.com/lists/oss-security/2016/12/05/8 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2016/12/01/2 - http://www.securityfocus.com/bid/95148
CVE ID: CVE-2016-9808 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T02:59:03.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted series of skip and count pairs. Additional Analyst Notes: - CVE Program Container: References: - https://scarybeastsecurity.blogspot.com/2016/11/0day-poc-incorrect-fix-for-gstreamer.html - http://rhn.redhat.com/errata/RHSA-2017-0019.html - http://rhn.redhat.com/errata/RHSA-2016-2975.html - http://rhn.redhat.com/errata/RHSA-2017-0020.html - http://www.securityfocus.com/bid/95446 - https:
RHSA-2016-2975.html - http://rhn.redhat.com/errata/RHSA-2017-0020.html - http://www.securityfocus.com/bid/95446 - https://gstreamer.freedesktop.org/releases/1.10/#1.10.2 - http://www.openwall.com/lists/oss-security/2016/12/05/8 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2016/12/01/2
CVE ID: CVE-2016-9809 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T02:59:03.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the gst_h264_parse_set_caps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3818 - http://rhn.redhat.com/errata/RHSA-2017-0021.html - http://www.securityfocus.com/bid/95147 - https://bugzilla.gnome.org/show_bug.cgi?id=774896 - http://rhn.redhat.com/errata/RHSA-2017-0018.html - https://gstreamer.freedesktop.or
a.gnome.org/show_bug.cgi?id=774896 - http://rhn.redhat.com/errata/RHSA-2017-0018.html - https://gstreamer.freedesktop.org/releases/1.10/#1.10.2 - http://www.openwall.com/lists/oss-security/2016/12/05/8 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2016/12/01/2 - https://lists.debian.org/debian-lts-announce/2020/03/msg00038.html
CVE ID: CVE-2016-9810 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T02:59:03.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gst_decode_chain_free_internal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via an invalid file, which triggers an incorrect unref call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95163 - https://gstreamer.freedesktop.org/releases/1.10/#1.10.2 - https://access.redhat.com/errata/RHSA-2017:2060 - https://bugzilla.gnome.org/show_bug.cgi?id=774897 - http://
/#1.10.2 - https://access.redhat.com/errata/RHSA-2017:2060 - https://bugzilla.gnome.org/show_bug.cgi?id=774897 - http://www.openwall.com/lists/oss-security/2016/12/05/8 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2016/12/01/2
CVE ID: CVE-2016-9811 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T02:59:03.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3819 - https://bugzilla.gnome.org/show_bug.cgi?id=774902 - https://gstreamer.freedesktop.org/releases/1.10/#1.10.2 - http://www.securityfocus.com/bid/95161 - https://access.redhat.com/errata/RHSA-2017:2060 -
.org/releases/1.10/#1.10.2 - http://www.securityfocus.com/bid/95161 - https://access.redhat.com/errata/RHSA-2017:2060 - http://www.openwall.com/lists/oss-security/2016/12/05/8 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2016/12/01/2 - https://lists.debian.org/debian-lts-announce/2020/02/msg00032.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UM7IXFGHV66KNWGWG6ZBDNKXD2UJL2VQ/
CVE ID: CVE-2016-9812 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T02:59:03.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gst_mpegts_section_new function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a too small section. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3818 - http://rhn.redhat.com/errata/RHSA-2017-0021.html - https://gstreamer.freedesktop.org/releases/1.10/#1.10.2 - https://bugzilla.gnome.org/show_bug.cgi?id=775048 - http://www.securityfocus.com/bid/95160 - http://www.openwall.com/lists/oss-
/bugzilla.gnome.org/show_bug.cgi?id=775048 - http://www.securityfocus.com/bid/95160 - http://www.openwall.com/lists/oss-security/2016/12/05/8 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2016/12/01/2
CVE ID: CVE-2016-9813 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T02:59:03.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3818 - http://rhn.redhat.com/errata/RHSA-2017-0021.html - https://bugzilla.gnome.org/show_bug.cgi?id=775120 - https://gstreamer.freedesktop.org/releases/1.10/#1.10.2 - https://www.exploit-db.com/exploits/42162/ - http://www.openwall.com/lists/os
er.freedesktop.org/releases/1.10/#1.10.2 - https://www.exploit-db.com/exploits/42162/ - http://www.openwall.com/lists/oss-security/2016/12/05/8 - http://www.securityfocus.com/bid/95158 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2016/12/01/2
CVE ID: CVE-2016-9814 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-06T02:59:03.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: The validateSignature method in the SAML2\Utils class in SimpleSAMLphp before 1.14.10 and simplesamlphp/saml2 library before 1.9.1, 1.10.x before 1.10.3, and 2.x before 2.3.3 allows remote attackers to spoof SAML responses or possibly cause a denial of service (memory consumption) by leveraging improper conversion of return values to boolean. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94730 - https://simplesamlphp.org/security/201612-01 - https://lists.debian.org/debian-lt
tp://www.securityfocus.com/bid/94730 - https://simplesamlphp.org/security/201612-01 - https://lists.debian.org/debian-lts-announce/2018/03/msg00001.html
CVE ID: CVE-2016-9815 State: PUBLISHED Published: 2017-02-27T22:00:00 Last Updated: 2024-08-06T02:59:03.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host panic) by sending an asynchronous abort. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-201.html - https://security.gentoo.org/glsa/201612-56 - http://xenbits.xen.org/xsa/xsa201-1.patch - http://www.securitytracker.com/id/1037358 - http://www.openwall.com/lists/oss-security/2016/11/29/3 - http://www.securityfocus.com/bid/94581 - http://www.openwall.com/lists/oss-security/2016/12/05/7
CVE ID: CVE-2016-9816 State: PUBLISHED Published: 2017-02-27T22:00:00 Last Updated: 2024-08-06T02:59:03.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an asynchronous abort while at EL2. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/xsa201-2.patch - http://xenbits.xen.org/xsa/advisory-201.html - https://security.gentoo.org/glsa/201612-56 - http://www.securitytracker.com/id/1037358 - http://www.openwall.com/lists/oss-security/2016/11/29/3 - http://www.securityfocus.com/bid/94581 - http://www.openwall.com/lists/oss-secu
ll.com/lists/oss-security/2016/11/29/3 - http://www.securityfocus.com/bid/94581 - http://www.openwall.com/lists/oss-security/2016/12/05/7
CVE ID: CVE-2016-9817 State: PUBLISHED Published: 2017-02-27T22:00:00 Last Updated: 2024-08-06T02:59:03.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving a (1) data or (2) prefetch abort with the ESR_EL2.EA bit set. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-201.html - https://security.gentoo.org/glsa/201612-56 - http://xenbits.xen.org/xsa/xsa201-3-4.7.patch - http://www.securitytracker.com/id/1037358 - http://www.openwall.com/lists/oss-security/2016/11/29/3 - http://www.securityfocus.com/bid/94581 - http://x
id/1037358 - http://www.openwall.com/lists/oss-security/2016/11/29/3 - http://www.securityfocus.com/bid/94581 - http://xenbits.xen.org/xsa/xsa201-3.patch - http://www.openwall.com/lists/oss-security/2016/12/05/7
CVE ID: CVE-2016-9818 State: PUBLISHED Published: 2017-02-27T22:00:00 Last Updated: 2024-08-06T02:59:03.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an asynchronous abort while at HYP. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/xsa201-4.patch - http://xenbits.xen.org/xsa/advisory-201.html - https://security.gentoo.org/glsa/201612-56 - http://www.securitytracker.com/id/1037358 - http://www.openwall.com/lists/oss-security/2016/11/29/3 - http://www.securityfocus.com/bid/94581 - http://www.openwall.com/lists/oss-secu
CVE ID: CVE-2016-9819 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-06T02:59:03.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/mpegvideo.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94732 - https://blogs.gentoo.org/ago/2016/12/01/libav-multiple-crashes-from-the-undefined-behavior-sanitizer/
CVE ID: CVE-2016-9820 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-06T02:59:03.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/mpegvideo_motion.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94732 - https://blogs.gentoo.org/ago/2016/12/01/libav-multiple-crashes-from-the-undefined-behavior-sanitizer/
CVE ID: CVE-2016-9821 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-06T02:59:03.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in libavcodec/mpegvideo_parser.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94732 - http://www.debian.org/security/2017/dsa-3833 - https://blogs.gentoo.org/ago/2016/12/01/libav-multiple-crashes-from-the-undefined-behavior-sanitizer/
CVE ID: CVE-2016-9822 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-06T02:59:03.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in libavcodec/mpeg12dec.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94732 - http://www.debian.org/security/2017/dsa-3833 - https://blogs.gentoo.org/ago/2016/12/01/libav-multiple-crashes-from-the-undefined-behavior-sanitizer/
CVE ID: CVE-2016-9823 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-06T02:59:03.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/x86/mpegvideo.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94732 - https://blogs.gentoo.org/ago/2016/12/01/libav-multiple-crashes-from-the-undefined-behavior-sanitizer/
CVE ID: CVE-2016-9824 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-06T02:59:03.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in libswscale/x86/swscale.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94732 - https://blogs.gentoo.org/ago/2016/12/01/libav-multiple-crashes-from-the-undefined-behavior-sanitizer/
CVE ID: CVE-2016-9825 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-06T02:59:03.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: libswscale/utils.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94732 - https://blogs.gentoo.org/ago/2016/12/01/libav-multiple-crashes-from-the-undefined-behavior-sanitizer/
CVE ID: CVE-2016-9826 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-06T02:59:03.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/ituh263dec.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94732 - https://blogs.gentoo.org/ago/2016/12/01/libav-multiple-crashes-from-the-undefined-behavior-sanitizer/
CVE ID: CVE-2016-9827 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-06T02:59:03.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service (buffer over-read) via a crafted SWF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/05/2 - http://www.openwall.com/lists/oss-security/2016/12/01/7 - https://blogs.gentoo.org/ago/2016/12/01/libming-listswf-heap-based-buffer-overflow-in-_iprintf-outputtxt-c/ - http://www.securityfocus.com/bid/95086
CVE ID: CVE-2016-9828 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-06T02:59:03.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dumpBuffer function in read.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SWF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/01/8 - https://blogs.gentoo.org/ago/2016/12/01/libming-listswf-null-pointer-dereference-in-dumpbuffer-read-c/ - http://www.securityfocus.com/bid/94627 - http://www.openwall.com/lists/oss-security/2016/12/05/3
CVE ID: CVE-2016-9829 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-06T02:59:03.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the parseSWF_DEFINEFONT function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SWF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/01/5 - http://www.openwall.com/lists/oss-security/2016/12/05/4 - https://blogs.gentoo.org/ago/2016/12/01/libming-listswf-heap-based-buffer-overflow-in-parseswf_definefont-parser-c/ - http://www.securityfocus.com/bid/95133
CVE ID: CVE-2016-9830 State: PUBLISHED Published: 2017-03-01T20:00:00 Last Updated: 2024-08-06T02:59:03.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MagickRealloc function in memory.c in Graphicsmagick 1.3.25 allows remote attackers to cause a denial of service (crash) via large dimensions in a jpeg image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-12/msg00141.html - http://www.openwall.com/lists/oss-security/2016/12/05/5 - http://www.securityfocus.com/bid/94625 - http://www.debian.org/security/2016/dsa-3746 - https://bugzilla.redhat.com/show_bug.cgi?id=1401536 - https://blogs.gentoo.org/ago/2016/12/
org/security/2016/dsa-3746 - https://bugzilla.redhat.com/show_bug.cgi?id=1401536 - https://blogs.gentoo.org/ago/2016/12/01/graphicsmagick-memory-allocation-failure-in-magickrealloc-memory-c - http://hg.code.sf.net/p/graphicsmagick/code/rev/38d0f281e8c8
CVE ID: CVE-2016-9831 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-06T02:59:03.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the parseSWF_RGBA function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have unspecified impact via a crafted SWF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/05/6 - https://blogs.gentoo.org/ago/2016/12/01/libming-listswf-heap-based-buffer-overflow-in-parseswf_rgba-parser-c/ - http://www.securityfocus.com/bid/94767 - http://www.openwall.com/lists/oss-security/2016/12/01/6
CVE ID: CVE-2016-9832 State: PUBLISHED Published: 2016-12-09T11:00:00 Last Updated: 2024-08-06T02:59:03.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via (1) SAPGUI or (2) Internet Communication Framework (ICF) over HTTP or HTTPS, as demonstrated by WEBGUI or Report. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/539883/30/0/threaded - http://www.securityfocus.com/bid/94733 - http://packetstormsecurity.com/files/140062/PwC-ACE-Software-For-SAP-Security-8.10.304-
ww.securityfocus.com/bid/94733 - http://packetstormsecurity.com/files/140062/PwC-ACE-Software-For-SAP-Security-8.10.304-ABAP-Injection.html - http://seclists.org/fulldisclosure/2016/Dec/33 - https://www.esnc.de/security-advisories/vulnerability-in-pwc-ace-for-sap-security - http://www.securityfocus.com/archive/1/539883/100/0/threaded
CVE ID: CVE-2016-9834 State: PUBLISHED Published: 2017-06-07T12:00:00 Last Updated: 2024-08-06T02:59:03.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS vulnerability allows remote attackers to execute arbitrary client side script on vulnerable installations of Sophos Cyberoam firewall devices with firmware through 10.6.4. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of a request to the "LiveConnectionDetail.jsp" application. GET parameters "applicationname" and "username" are improperly sanitized allowing an attacker to inject arbitrary Ja
on. GET parameters "applicationname" and "username" are improperly sanitized allowing an attacker to inject arbitrary JavaScript into the page. This can be abused by an attacker to perform a cross-site scripting attack on the user. A vulnerable URI is /corporate/webpages/trafficdiscovery/LiveConnectionDetail.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2017/Jun/4
CVE ID: CVE-2016-9835 State: PUBLISHED Published: 2016-12-05T08:09:00 Last Updated: 2024-08-06T02:59:03.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x before 1.4.4 on Windows allows a remote attacker to launch a PHP object injection by uploading a serialized file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zikula/core/issues/3237 - https://github.com/zikula/core/blob/1.4/CHANGELOG-1.4.md - https://github.com/zikula/core/blob/1.3/CHANGELOG-1.3.md - http://www.securityfocus.com/bid/95005
CVE ID: CVE-2016-9836 State: PUBLISHED Published: 2016-12-05T17:00:00 Last Updated: 2024-08-06T02:59:03.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file scanning mechanism of JFilterInput::isFileSafe() in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the `.php6`, `.php7`, `.phtml`, and `.phpt` extensions. Additionally, JHelperMedia::canUpload() did not blacklist these file extensions as uploadable file types. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/XiphosResearch/exploits/tree/master/Joomraa - http
lyst Notes: - CVE Program Container: References: - https://github.com/XiphosResearch/exploits/tree/master/Joomraa - http://www.securityfocus.com/bid/94663
CVE ID: CVE-2016-9837 State: PUBLISHED Published: 2016-12-16T09:02:00 Last Updated: 2024-08-06T02:59:03.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in templates/beez3/html/com_content/article/default.php in Joomla! before 3.6.5. Inadequate permissions checks in the Beez3 layout override of the com_content article view allow users to view articles that should not be publicly accessible, as demonstrated by an index.php?option=com_content&view=article&id=1&template=beez3 request. Additional Analyst Notes: - CVE Program Container: References: - https://www.joomla.org/announcements/release-news/5693-joomla-3-6-5-released.html - http://www.securityfocus.
erences: - https://www.joomla.org/announcements/release-news/5693-joomla-3-6-5-released.html - http://www.securityfocus.com/bid/94892
CVE ID: CVE-2016-9838 State: PUBLISHED Published: 2016-12-16T09:02:00 Last Updated: 2024-08-06T02:59:03.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5. Incorrect filtering of registration form data stored to the session on a validation error enables a user to gain access to a registered user's account and reset the user's group mappings, username, and password, as demonstrated by submitting a form that targets the `registration.register` task. Additional Analyst Notes: - CVE Program Container: References: - https://www.joomla.org/announcements/release-news/5693-joomla-3-6-5-releas