Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10096 State: PUBLISHED Published: 2017-01-01T19:00:00 Last Updated: 2024-08-06T03:07:32.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.hackersb.cn/shenji/107.html - http://www.securityfocus.com/bid/95172 - https://github.com/semplon/GeniXCMS/commit/d885eb20006099262c0278932b9f8aca3c1ac97f - https://github.com/semplon/GeniXCMS/issues/58
CVE ID: CVE-2016-10097 State: PUBLISHED Published: 2017-01-02T09:46:00 Last Updated: 2024-08-06T03:07:32.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML External Entity (XXE) Vulnerability in /SSOPOST/metaAlias/%realm%/idpv2 in OpenAM - Access Management 10.1.0 allows remote attackers to read arbitrary files via the SAMLRequest parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95174 - http://www.cloudscan.me/2016/03/xxe-dork-open-am-1010-xml-injection.html - https://twitter.com/h02332/status/816252923688665088
CVE ID: CVE-2016-10098 State: PUBLISHED Published: 2017-02-05T18:00:00 Last Updated: 2024-08-06T03:07:32.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on SendQuick Entera and Avera devices before 2HF16. Multiple Command Injection vulnerabilities allow attackers to execute arbitrary system commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96129 - https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances/
CVE ID: CVE-2016-10099 State: PUBLISHED Published: 2017-01-02T21:09:00 Last Updated: 2024-08-06T03:07:32.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Borg (aka BorgBackup) before 1.0.9 has a flaw in the cryptographic protocol used to authenticate the manifest (list of archives), potentially allowing an attacker to spoof the list of archives. Additional Analyst Notes: - CVE Program Container: References: - http://borgbackup.readthedocs.io/en/stable/changes.html#pre-1-0-9-manifest-spoofing-vulnerability - http://www.securityfocus.com/bid/95205
CVE ID: CVE-2016-10100 State: PUBLISHED Published: 2017-01-02T21:09:00 Last Updated: 2024-08-06T03:07:32.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Borg (aka BorgBackup) before 1.0.9 has a flaw in the way duplicate archive names were processed during manifest recovery, potentially allowing an attacker to overwrite an archive. Additional Analyst Notes: - CVE Program Container: References: - http://borgbackup.readthedocs.io/en/stable/changes.html#pre-1-0-9-manifest-spoofing-vulnerability - http://www.securityfocus.com/bid/95203
CVE ID: CVE-2016-10101 State: PUBLISHED Published: 2017-01-23T06:49:00 Last Updated: 2024-08-06T03:07:32.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information Disclosure can occur in Hitek Software's Automize 10.x and 11.x passManager.jsd. Users have the Read attribute, which allows an attacker to recover the encrypted password to access the Password Manager. Additional Analyst Notes: - CVE Program Container: References: - https://rastamouse.me/guff/2016/automize/ - http://www.securityfocus.com/bid/96840
CVE ID: CVE-2016-10102 State: PUBLISHED Published: 2017-01-23T06:49:00 Last Updated: 2024-08-06T03:07:32.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: hitek.jar in Hitek Software's Automize uses weak encryption when encrypting SSH/SFTP and Encryption profile passwords. This allows an attacker to retrieve the encrypted passwords from sshProfiles.jsd and encryptionProfiles.jsd and decrypt them to recover cleartext passwords. All 10.x up to and including 10.25 and all 11.x up to and including 11.14 are verified to be affected. Additional Analyst Notes: - CVE Program Container: References: - https://rastamouse.me/guff/2016/automize/ - http://www.securityfocus.com/bid/96848
CVE ID: CVE-2016-10103 State: PUBLISHED Published: 2017-01-23T06:49:00 Last Updated: 2024-08-06T03:07:32.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information Disclosure can occur in encryptionProfiles.jsd in Hitek Software's Automize because of the Read attribute being set for Users. This allows an attacker to recover encrypted passwords for GPG Encryption profiles. Verified in all 10.x versions up to and including 10.25, and all 11.x versions up to and including 11.14. Additional Analyst Notes: - CVE Program Container: References: - https://rastamouse.me/guff/2016/automize/ - http://www.securityfocus.com/bid/96850
CVE ID: CVE-2016-10104 State: PUBLISHED Published: 2017-01-23T06:49:00 Last Updated: 2024-08-06T03:07:32.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information Disclosure can occur in sshProfiles.jsd in Hitek Software's Automize because of the Read attribute being set for Users. This allows an attacker to recover encrypted passwords for SSH/SFTP profiles. Verified in all 10.x versions up to and including 10.25, and all 11.x versions up to and including 11.14. Additional Analyst Notes: - CVE Program Container: References: - https://rastamouse.me/guff/2016/automize/ - http://www.securityfocus.com/bid/96845
CVE ID: CVE-2016-10105 State: PUBLISHED Published: 2017-01-03T06:34:00 Last Updated: 2024-08-06T03:07:32.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files. This can cause information disclosure and code execution if it contains a .. sequence. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/issues/574#issuecomment-267938358 - http://www.securityfocus.com/bid/95202 - https://github.com/Piwigo/Piwigo/commit/8796e43aa344681d92a92e1f9b985409d4f36e31 - https://github.com/Piwigo/Piwigo/commit/9004fdfc0b4a11cb32e9e15a5f67e4ec8
mit/8796e43aa344681d92a92e1f9b985409d4f36e31 - https://github.com/Piwigo/Piwigo/commit/9004fdfc0b4a11cb32e9e15a5f67e4ec827e82dc
CVE ID: CVE-2016-10106 State: PUBLISHED Published: 2017-01-03T06:34:00 Last Updated: 2024-08-06T03:07:32.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in scgi-bin/platform.cgi on NETGEAR FVS336Gv3, FVS318N, FVS318Gv2, and SRX5308 devices with firmware before 4.3.3-8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the thispage parameter, as demonstrated by reading the /etc/shadow file. Additional Analyst Notes: - CVE Program Container: References: - http://kb.netgear.com/30739/Path-Traversal-Attack-Security-Vulnerability - http://www.securityfocus.com/bid/95204 - http://www.securitytracker.com/id/1037548 - htt
Attack-Security-Vulnerability - http://www.securityfocus.com/bid/95204 - http://www.securitytracker.com/id/1037548 - https://twitter.com/mantislesin/status/816618162770821120
CVE ID: CVE-2016-10107 State: PUBLISHED Published: 2017-01-03T06:34:00 Last Updated: 2024-08-06T03:07:32.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie header. Additional Analyst Notes: - CVE Program Container: References: - https://www.stevencampbell.info/2016/12/command-injection-in-western-digital-mycloud-nas/ - http://www.securityfocus.com/bid/95201
CVE ID: CVE-2016-10108 State: PUBLISHED Published: 2017-01-03T00:00:00 Last Updated: 2024-08-06T03:07:32.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data. Additional Analyst Notes: - CVE Program Container: References: - https://www.stevencampbell.info/2016/12/command-injection-in-western-digital-mycloud-nas/ - http://www.securityfocus.com/bid/95200 - http://packetstormsecurity.com/files/173802/Western-Digital-MyCloud-Unauthenticated-Command-Injection.html
CVE ID: CVE-2016-10109 State: PUBLISHED Published: 2017-02-23T20:00:00 Last Updated: 2024-08-06T03:07:32.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-01 - http://www.ubuntu.com/usn/USN-3176-1 - https://lists.alioth.debian.org/pipermail/pcsclite-muscle/Week-of-Mon-20161226/000779.html - http://www.debian.org/security/2017/dsa-3752 - http://www.s
pipermail/pcsclite-muscle/Week-of-Mon-20161226/000779.html - http://www.debian.org/security/2017/dsa-3752 - http://www.securityfocus.com/bid/95263 - http://www.openwall.com/lists/oss-security/2017/01/03/3 - https://salsa.debian.org/rousseau/PCSC/-/commit/697fe05967af7ea215bcd5d5774be587780c9e22 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2016-10112 State: PUBLISHED Published: 2017-01-04T02:00:00 Last Updated: 2024-08-06T03:07:32.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.6.9 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML by providing crafted tax-rate table values in CSV format. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95292 - https://wordpress.org/plugins/woocommerce/changelog/
CVE ID: CVE-2016-10114 State: PUBLISHED Published: 2017-01-04T02:00:00 Last Updated: 2024-08-06T03:07:32.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2.6.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via vectors involving categorysearch and smartSearch. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95293 - https://www.exploit-db.com/exploits/40973/ - https://github.com/qemm/joomlasqli - https://vel.joomla.org/resolved/1897-aweb-cart-watching-system-2-6-0
CVE ID: CVE-2016-10115 State: PUBLISHED Published: 2017-01-04T08:10:00 Last Updated: 2024-08-06T03:07:32.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR Arlo base stations with firmware 1.7.5_6178 and earlier, Arlo Q devices with firmware 1.8.0_5551 and earlier, and Arlo Q Plus devices with firmware 1.8.1_6094 and earlier have a default password of 12345678, which makes it easier for remote attackers to obtain access after a factory reset or in a factory configuration. Additional Analyst Notes: - CVE Program Container: References: - http://kb.netgear.com/30731/Arlo-WiFi-Default-Password-Security-Vulnerability - http://blog.newskysecurity.com/2016/09/factory_reset_vuln
.com/30731/Arlo-WiFi-Default-Password-Security-Vulnerability - http://blog.newskysecurity.com/2016/09/factory_reset_vuln_in_netgear_arlo/ - http://www.securityfocus.com/bid/95265
CVE ID: CVE-2016-10116 State: PUBLISHED Published: 2017-01-04T08:10:00 Last Updated: 2024-08-06T03:07:32.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR Arlo base stations with firmware 1.7.5_6178 and earlier, Arlo Q devices with firmware 1.8.0_5551 and earlier, and Arlo Q Plus devices with firmware 1.8.1_6094 and earlier use a pattern of adjective, noun, and three-digit number for the customized password, which makes it easier for remote attackers to obtain access via a dictionary attack. Additional Analyst Notes: - CVE Program Container: References: - http://kb.netgear.com/30731/Arlo-WiFi-Default-Password-Security-Vulnerability - http://www.securityfocus.com/bid/952
: - http://kb.netgear.com/30731/Arlo-WiFi-Default-Password-Security-Vulnerability - http://www.securityfocus.com/bid/95266 - http://blog.newskysecurity.com/2016/09/brute-force-vulnerability-netgear-arlo/
CVE ID: CVE-2016-10117 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T03:07:32.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as demonstrated by mounting over /etc. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/05/4 - http://www.openwall.com/lists/oss-security/2017/01/06/2
CVE ID: CVE-2016-10118 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T03:07:32.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/05/4 - http://www.openwall.com/lists/oss-security/2017/01/06/2
CVE ID: CVE-2016-10119 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T03:14:42.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/05/4 - http://www.openwall.com/lists/oss-security/2017/01/06/2
CVE ID: CVE-2016-10120 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T03:14:41.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firejail uses 0777 permissions when mounting (1) /dev, (2) /dev/shm, (3) /var/tmp, or (4) /var/lock, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/05/4 - http://www.openwall.com/lists/oss-security/2017/01/06/2
CVE ID: CVE-2016-10121 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T03:14:41.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/05/4 - http://www.openwall.com/lists/oss-security/2017/01/06/2
CVE ID: CVE-2016-10122 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T03:14:42.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firejail does not properly clean environment variables, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/05/4 - http://www.openwall.com/lists/oss-security/2017/01/06/2
CVE ID: CVE-2016-10123 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T03:14:42.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/05/4 - http://www.openwall.com/lists/oss-security/2017/01/06/2
CVE ID: CVE-2016-10124 State: PUBLISHED Published: 2017-01-09T08:48:00 Last Updated: 2024-08-06T03:14:42.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Linux Containers (LXC) before 2016-02-22. When executing a program via lxc-attach, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the container. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/12/15/5 - http://www.securityfocus.com/bid/95404 - http://www.openwall.com/lists/oss-security/2015/09/03/5 - https://security.gen
http://www.securityfocus.com/bid/95404 - http://www.openwall.com/lists/oss-security/2015/09/03/5 - https://security.gentoo.org/glsa/201711-09 - https://github.com/lxc/lxc/commit/e986ea3dfa4a2957f71ae9bfaed406dd6e1ffff6
CVE ID: CVE-2016-10125 State: PUBLISHED Published: 2017-01-09T17:00:00 Last Updated: 2024-08-06T03:14:41.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DGS-1100 devices with Rev.B firmware 1.01.018 have a hardcoded SSL private key, which allows man-in-the-middle attackers to spoof devices by hijacking an HTTPS session. Additional Analyst Notes: - CVE Program Container: References: - https://labs.integrity.pt/advisories/dlink-dgs-1100-hardcoded-keys/ - http://www.securityfocus.com/bid/95329
CVE ID: CVE-2016-10126 State: PUBLISHED Published: 2017-01-10T11:00:00 Last Updated: 2024-08-06T03:14:41.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Splunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x before 6.2.12, 6.3.x before 6.3.8, and 6.4.x before 6.4.4 allows remote attackers to conduct HTTP request injection attacks and obtain sensitive REST API authentication-token information via unspecified vectors, aka SPL-128840. Additional Analyst Notes: - CVE Program Container: References: - https://www.splunk.com/view/SP-CAAAPSR - http://www.securityfocus.com/bid/95412
CVE ID: CVE-2016-10127 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-06T03:14:41.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: PySAML2 allows remote attackers to conduct XML external entity (XXE) attacks via a crafted SAML XML request or response. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rohe/pysaml2/issues/366 - https://github.com/rohe/pysaml2/pull/379 - http://www.openwall.com/lists/oss-security/2017/01/19/5 - https://github.com/rohe/pysaml2/commit/6e09a25d9b4b7aa7a506853210a9a14100b8bc9b - http://www.securityfocus.com/bid/95376 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850716
CVE ID: CVE-2016-10128 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-06T03:14:42.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspecified impact via a crafted non-flush packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95338 - https://libgit2.github.com/security/ - https://github.com/libgit2/libgit2/commit/66e3774d279672ee51c3b54545a79d20d1ada834 - https://github.com/libgit2/libgit2/commit/4ac39c76c0153d1
git2/libgit2/commit/66e3774d279672ee51c3b54545a79d20d1ada834 - https://github.com/libgit2/libgit2/commit/4ac39c76c0153d1ee6889a0984c39e97731684b2 - http://www.openwall.com/lists/oss-security/2017/01/10/5 - http://www.openwall.com/lists/oss-security/2017/01/11/6 - http://lists.opensuse.org/opensuse-updates/2017-02/msg00030.html - http://lists.opensuse.org/opensuse-updates/2017-02/msg00036.html - http://lists.opensuse.org/opensuse-updates/2017-02/msg00072.html
CVE ID: CVE-2016-10129 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-06T03:14:41.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via an empty packet line. Additional Analyst Notes: - CVE Program Container: References: - https://libgit2.github.com/security/ - https://github.com/libgit2/libgit2/commit/2fdef641fd0dd2828bd948234ae86de75221a11a - https://github.com/libgit2/libgit2/commit/84d30d569ada986f3eef527cbdb932643c2dd037 - http://www.openwall.com/lists/oss-security/2017/01/10/5 - http://www.o
commit/84d30d569ada986f3eef527cbdb932643c2dd037 - http://www.openwall.com/lists/oss-security/2017/01/10/5 - http://www.openwall.com/lists/oss-security/2017/01/11/6 - http://lists.opensuse.org/opensuse-updates/2017-02/msg00030.html - http://lists.opensuse.org/opensuse-updates/2017-02/msg00036.html - http://www.securityfocus.com/bid/95339 - http://lists.opensuse.org/opensuse-updates/2017-02/msg00072.html
CVE ID: CVE-2016-10130 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-06T03:14:41.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variable. Additional Analyst Notes: - CVE Program Container: References: - https://libgit2.github.com/security/ - http://www.openwall.com/lists/oss-security/2017/01/10/5 - http://www.openwall.com/lists/oss-security/2017/01/11/6 - http://www.securityfocus.com/bid/95359 - https://github.com/libgit2/libgit2/commit/9a64e62f0f20c9cf9b2e1609f0
/01/11/6 - http://www.securityfocus.com/bid/95359 - https://github.com/libgit2/libgit2/commit/9a64e62f0f20c9cf9b2e1609f037060eb2d8eb22 - http://lists.opensuse.org/opensuse-updates/2017-02/msg00030.html - http://lists.opensuse.org/opensuse-updates/2017-02/msg00036.html - https://github.com/libgit2/libgit2/commit/b5c6a1b407b7f8b952bded2789593b68b1876211 - http://lists.opensuse.org/opensuse-updates/2017-02/msg00072.html
CVE ID: CVE-2016-10131 State: PUBLISHED Published: 2017-01-12T06:06:00 Last Updated: 2024-08-06T03:14:41.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: system/libraries/Email.php in CodeIgniter before 3.1.3 allows remote attackers to execute arbitrary code by leveraging control over the email->from field to insert sendmail command-line arguments. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bcit-ci/CodeIgniter/pull/4966 - https://github.com/bcit-ci/CodeIgniter/issues/4963 - https://gist.github.com/Zenexer/40d02da5e07f151adeaeeaa11af9ab36 - http://www.securityfocus.com/bid/96851
CVE ID: CVE-2016-10132 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-06T03:14:41.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: regexp.c in Artifex Software, Inc. MuJS allows attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to regular expression compilation. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/13/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T3U5APFS3FEBOPXUJIFWBNU55PYR7ZBF/ - http://www.openwall.com/lists/oss-security/2017/01/12/9 - http://git.ghostscript.com/?p=mujs.git%
PXUJIFWBNU55PYR7ZBF/ - http://www.openwall.com/lists/oss-security/2017/01/12/9 - http://git.ghostscript.com/?p=mujs.git%3Bh=fd003eceda531e13fbdd1aeb6e9c73156496e569 - https://bugs.ghostscript.com/show_bug.cgi?id=697381
CVE ID: CVE-2016-10133 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-06T03:14:42.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the js_stackoverflow function in jsrun.c in Artifex Software, Inc. MuJS allows attackers to have unspecified impact by leveraging an error when dropping extra arguments to lightweight functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/13/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T3U5APFS3FEBOPXUJIFWBNU55PYR7ZBF/ - http://www.openwall.com/lists/oss-security/2017/01
40lists.fedoraproject.org/message/T3U5APFS3FEBOPXUJIFWBNU55PYR7ZBF/ - http://www.openwall.com/lists/oss-security/2017/01/12/9 - http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=77ab465f1c394bb77f00966cd950650f3f53cb24 - https://bugs.ghostscript.com/show_bug.cgi?id=697401