Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10317 State: PUBLISHED Published: 2017-04-03T20:00:00 Last Updated: 2024-08-06T03:14:43.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PostScript document. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=697459 - https://usn.ubuntu.com/3636-1/ - http://www.securityfocus.com/bid/97410
CVE ID: CVE-2016-10318 State: PUBLISHED Published: 2017-04-04T16:00:00 Last Updated: 2024-08-06T03:14:42.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: A missing authorization check in the fscrypt_process_policy function in fs/crypto/policy.c in the ext4 and f2fs filesystem encryption support in the Linux kernel before 4.7.4 allows a user to assign an encryption policy to a directory owned by a different user, potentially creating a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.4 - https://github.com/torvalds/linux/commit/163ae1c6ad6299b19e22b4a35d5ab24a89791a98 - http://www.secur
x/ChangeLog-4.7.4 - https://github.com/torvalds/linux/commit/163ae1c6ad6299b19e22b4a35d5ab24a89791a98 - http://www.securityfocus.com/bid/97404 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=163ae1c6ad6299b19e22b4a35d5ab24a89791a98
CVE ID: CVE-2016-10319 State: PUBLISHED Published: 2017-04-06T15:00:00Z Last Updated: 2024-09-16T17:37:44.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ARM Trusted Firmware 1.2 and 1.3, a malformed firmware update SMC can result in copying unexpectedly large data into secure memory because of integer overflows. This affects certain cases involving execution of both AArch64 Generic Trusted Firmware (TF) BL1 code and other firmware update code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-1
CVE ID: CVE-2016-10320 State: PUBLISHED Published: 2017-04-06T18:00:00Z Last Updated: 2024-09-16T18:39:18.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: textract before 1.5.0 allows OS Command Injection attacks via a filename in a call to the process function. This may be a remote attack if a web application accepts names of arbitrary uploaded files. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2016/q4/442
CVE ID: CVE-2016-10321 State: PUBLISHED Published: 2017-04-10T14:00:00 Last Updated: 2024-08-06T03:14:43.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker to perform brute-force attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/web2py/web2py/issues/1585#issuecomment-284317919 - https://github.com/web2py/web2py/commit/944d8bd8f3c5cf8ae296fc03d149056c65358426 - https://usn.ubuntu.com/4030-1/
CVE ID: CVE-2016-10322 State: PUBLISHED Published: 2017-04-10T18:00:00Z Last Updated: 2024-09-16T23:40:50.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Synology Photo Station before 6.3-2958 allows remote authenticated guest users to execute arbitrary commands via shell metacharacters in the X-Forwarded-For HTTP header to photo/login.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-us/releaseNote/PhotoStation - http://seclists.org/oss-sec/2016/q1/236
CVE ID: CVE-2016-10323 State: PUBLISHED Published: 2017-04-10T18:00:00Z Last Updated: 2024-09-16T22:15:48.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a "synophoto_dsm_user --copy-no-ea" command. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-us/releaseNote/PhotoStation - http://seclists.org/oss-sec/2016/q1/236
CVE ID: CVE-2016-10324 State: PUBLISHED Published: 2017-04-13T15:00:00 Last Updated: 2024-08-06T03:14:43.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/support/index.php?109133 - http://www.debian.org/security/2017/dsa-3879 - http://www.securityfocus.com/bid/97641
CVE ID: CVE-2016-10325 State: PUBLISHED Published: 2017-04-13T15:00:00 Last Updated: 2024-08-06T03:14:42.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the _osip_message_to_str() function defined in osipparser2/osip_message_to_str.c, resulting in a remote DoS. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3879 - http://www.securityfocus.com/bid/92921 - https://savannah.gnu.org/support/index.php?109131
CVE ID: CVE-2016-10326 State: PUBLISHED Published: 2017-04-13T15:00:00 Last Updated: 2024-08-06T03:14:43.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_body_to_str() function defined in osipparser2/osip_body.c, resulting in a remote DoS. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3879 - https://savannah.gnu.org/support/index.php?109132 - http://www.securityfocus.com/bid/92921
CVE ID: CVE-2016-10327 State: PUBLISHED Published: 2017-04-14T04:30:00 Last Updated: 2024-08-06T03:14:43.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreOffice before 2016-12-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the EnhWMFReader::ReadEnhWMF function in vcl/source/filter/wmf/enhwmf.cxx. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=313 - http://www.libreoffice.org/about-us/security/advisories/cve-2016-10327/ - http://www.securityfocus.com/bid/97668 - https://github.com/LibreOffice/core/commit/7485fc2a1484f31631f62f97e5c64c0ae74c6416 - https://security.gentoo
id/97668 - https://github.com/LibreOffice/core/commit/7485fc2a1484f31631f62f97e5c64c0ae74c6416 - https://security.gentoo.org/glsa/201706-28
CVE ID: CVE-2016-10328 State: PUBLISHED Published: 2017-04-14T04:30:00 Last Updated: 2024-08-06T03:14:43.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType 2 before 2016-12-16 has an out-of-bounds write caused by a heap-based buffer overflow related to the cff_parser_run function in cff/cffparse.c. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201706-14 - http://savannah.nongnu.org/bugs/?func=detailitem&item_id=49858 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=289 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=beecf80a6deecbaf5d264d4f864451bde4fe98b8 - http://www.securityfocus.com/bid/
.org/cgit/freetype/freetype2.git/commit/?id=beecf80a6deecbaf5d264d4f864451bde4fe98b8 - http://www.securityfocus.com/bid/97677 - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2016-10329 State: PUBLISHED Published: 2017-05-12T20:00:00 Last Updated: 2024-08-06T03:14:42.953Z Vendors: Synology Products: Synology Photo Station Problem Types: CWE-77 Description: Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code via shell metacharacters in the crafted 'X-Forwarded-For' header. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Photo_Station_6_5_3_3226 - https://bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016/#Vul-01-PhotoStation-Login-without-password - https://bamboofox.github.io/2017/03/20/Synolo
/20/Synology-Bug-Bounty-2016/#Vul-01-PhotoStation-Login-without-password - https://bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016/#Vul-02-PhotoStation-Remote-Code-Execution - http://seclists.org/oss-sec/2016/q1/236
CVE ID: CVE-2016-10330 State: PUBLISHED Published: 2017-05-12T20:00:00 Last Updated: 2024-08-06T03:14:43.046Z Vendors: Synology Products: Synology Photo Station Problem Types: CWE-22 Description: Directory traversal vulnerability in synophoto_dsm_user, a SUID program, as used in Synology Photo Station before 6.5.3-3226 allows local users to write to arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016/#Vul-04-Privilege-Escalation - https://bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016/#Vul-03-Read-Write-Arbitrary-Files - https://www.synology.com/en-global/support/sec
/2017/03/20/Synology-Bug-Bounty-2016/#Vul-03-Read-Write-Arbitrary-Files - https://www.synology.com/en-global/support/security/Photo_Station_6_5_3_3226 - http://seclists.org/oss-sec/2016/q1/236
CVE ID: CVE-2016-10331 State: PUBLISHED Published: 2017-05-12T20:00:00 Last Updated: 2024-08-06T03:14:42.900Z Vendors: Synology Products: Synology Photo Station Problem Types: CWE-22 Description: Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to read arbitrary files via a full pathname in the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Photo_Station_6_5_3_3226 - https://bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016/#Vul-06-Local-File-Inclusion
CVE ID: CVE-2016-10332 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-06T03:14:42.997Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Configuration Error in TrustZone Description: In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2016-10333 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-06T03:21:50.774Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Authorization in TrustZone Description: In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2016-10334 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-06T03:21:50.892Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Access Control in TrustZone Description: In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2016-10335 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-06T03:21:50.464Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Cryptographic Issues in Multimedia Description: In all Android releases from CAF using the Linux kernel, libtomcrypt was updated. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2016-10336 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-06T03:21:50.872Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Input Validation in Boot Description: In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2016-10337 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-06T03:21:50.457Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Input Validation in TrustZone Description: In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2016-10338 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-06T03:21:50.447Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Buffer Copy without Checking Size of Input in Storage Description: In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2016-10339 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-06T03:21:50.447Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Integer Underflow Vulnerability in TrustZone Description: In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2016-10340 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-06T03:21:50.840Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Integer Underflow Vulnerability in TrustZone Description: In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall handler. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2016-10341 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-06T03:21:50.843Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Access Control in TrustZone Description: In all Android releases from CAF using the Linux kernel, 3rd party TEEs have more privilege than intended. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2016-10342 State: PUBLISHED Published: 2017-06-13T20:00:00 Last Updated: 2024-08-06T03:21:51.439Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Buffer Copy without Checking Size of Input in TrustZone Description: In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a syscall handler. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-06-01 - http://www.securityfocus.com/bid/98874 - http://www.securitytracker.com/id/1038623
CVE ID: CVE-2016-10343 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T23:35:39.026Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Release of Memory Before Removing Last Reference in SSL Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2016-10344 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T18:29:28.139Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Use of Out-of-range Pointer Offset in LTE Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in LTE. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2016-10345 State: PUBLISHED Published: 2017-04-18T20:00:00Z Last Updated: 2024-09-16T23:00:26.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phusion/passenger/commit/e5b4b0824d6b648525b4bf63d9fa37e5beeae441 - https://github.com/phusion/passenger/blob/stable-5.1/CHANGELOG
CVE ID: CVE-2016-10346 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T22:56:25.687Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Integer Overflow or Wraparound in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2016-10347 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T20:11:29.644Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Input Validation in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2016-10349 State: PUBLISHED Published: 2017-05-01T01:00:00 Last Updated: 2024-08-06T03:21:50.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: The archive_le32dec function in archive_endian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html - https://www.debian.org/security/2018/dsa-4360 - https://security.gentoo.org/glsa/201710-19 - https://usn.ubuntu.com/3736-1/ - https://github.com/libarchive/libarchive/issues/834 - http://www.securityfocu
1710-19 - https://usn.ubuntu.com/3736-1/ - https://github.com/libarchive/libarchive/issues/834 - http://www.securityfocus.com/bid/100347
CVE ID: CVE-2016-10350 State: PUBLISHED Published: 2017-05-01T01:00:00 Last Updated: 2024-08-06T03:21:50.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: The archive_read_format_cab_read_header function in archive_read_support_format_cab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html - https://github.com/libarchive/libarchive/issues/835 - https://www.debian.org/security/2018/dsa-4360 - https://security.gentoo.org/glsa/201710-19 - https://usn.ubuntu.
s/835 - https://www.debian.org/security/2018/dsa-4360 - https://security.gentoo.org/glsa/201710-19 - https://usn.ubuntu.com/3736-1/
CVE ID: CVE-2016-10351 State: PUBLISHED Published: 2017-05-01T01:00:00 Last Updated: 2024-08-06T03:21:50.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telegram Desktop 0.10.19 uses 0755 permissions for $HOME/.TelegramDesktop, which allows local users to obtain sensitive authentication information via standard filesystem operations. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/telegramdesktop/tdesktop/issues/2666 - https://github.com/telegramdesktop/tdesktop/pull/3842/commits/388703b9ca1912a5438e37f9dd54c35805f2c594
CVE ID: CVE-2016-10352 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2016-10353 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2016-10354 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2016-10355 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2016-10356 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2016-10357 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2016-10358 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2016-10359 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2016-10360 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2016-10361 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2016-10362 State: PUBLISHED Published: 2017-06-16T21:00:00 Last Updated: 2024-08-06T03:21:50.889Z Vendors: Elastic Products: Logstash Problem Types: CWE-532 Description: Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.elastic.co/community/security - http://www.securityfocus.com/bid/99154
CVE ID: CVE-2016-10363 State: PUBLISHED Published: 2017-06-16T21:00:00 Last Updated: 2024-08-06T03:21:51.334Z Vendors: Elastic Products: Logstash Problem Types: CWE-248 Description: Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could perform a denial of service attack on the Logstash instance. The errors resulting from these crafted inputs are not handled by the codec and can cause the Logstash process to exit. Additional Analyst Notes: - CVE Program Container: References: - https://www.elastic.co/community/security
CVE ID: CVE-2016-10364 State: PUBLISHED Published: 2017-06-16T21:00:00 Last Updated: 2024-08-06T03:21:50.862Z Vendors: Elastic Products: Elastic X-Pack Security Problem Types: CWE-306 Description: With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any authenticated user could make requests to those services regardless of their own permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.elastic.co/community/security