Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-9380 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T02:50:37.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/xsa198.patch - http://www.securityfocus.com/bid/94473 - https://security.gentoo.org/glsa/201612-56 - http://xenbits.xen.org/xsa/advisory-198.html - http://www.securitytracker.com/id/1037347 - https://suppo
lsa/201612-56 - http://xenbits.xen.org/xsa/advisory-198.html - http://www.securitytracker.com/id/1037347 - https://support.citrix.com/article/CTX218775
CVE ID: CVE-2016-9381 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T02:50:37.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-197.html - https://security.gentoo.org/glsa/201612-56 - http://www.securityfocus.com/bid/94476 - https://support.citrix.com/article/CTX218775 - http://www.securitytracker.com/id/1037344
CVE ID: CVE-2016-9382 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T02:50:36.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service (guest OS crash) by leveraging a guest operating system that uses hardware task switching and allows a new task to start in VM86 mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94470 - https://security.gentoo.org/glsa/201612-56 - http://xenbits.xen.org/xsa/advisory-192.html - http://www.securitytracker.com/id/10
security.gentoo.org/glsa/201612-56 - http://xenbits.xen.org/xsa/advisory-192.html - http://www.securitytracker.com/id/1037341 - https://support.citrix.com/article/CTX218775
CVE ID: CVE-2016-9383 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T02:50:37.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary memory and consequently obtain sensitive information, cause a denial of service (host crash), or execute arbitrary code on the host by leveraging broken emulation of bit test instructions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94474 - https://security.gentoo.org/glsa/201612-56 - http://xenbits.xen.org/xsa/advisory-195.html - http://www.securitytracker.com/id/1037346 - https:/
.org/glsa/201612-56 - http://xenbits.xen.org/xsa/advisory-195.html - http://www.securitytracker.com/id/1037346 - https://support.citrix.com/article/CTX218775
CVE ID: CVE-2016-9384 State: PUBLISHED Published: 2017-02-22T16:00:00 Last Updated: 2024-08-06T02:50:37.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-194.html - https://security.gentoo.org/glsa/201612-56 - http://www.securityfocus.com/bid/94468 - http://www.securitytracker.com/id/1037343 - http://xenbits.xen.org/xsa/xsa194.patch
CVE ID: CVE-2016-9385 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T02:50:37.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrators to cause a denial of service (host crash) by leveraging lack of canonical address checks. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-56 - http://www.securityfocus.com/bid/94472 - http://www.securitytracker.com/id/1037342 - https://support.citrix.com/article/CTX218775 - http://xenbits.xen.org/xsa/advisory-193.html
CVE ID: CVE-2016-9386 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T02:50:37.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94471 - https://security.gentoo.org/glsa/201612-56 - https://support.citrix.com/article/CTX218775 - http://xenbits.xen.org/xsa/advisory-191.html - http://www.securitytracker.com/id/1037340
CVE ID: CVE-2016-9387 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:50:38.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure - http://www.securityfocus.com/bid/94374 - https://access.redhat.com/errata/RHSA-2017:1208 - https://github.com/mdadams/jasper/commit/d91198abd00fc435a397fe6bad906a4c1748e9cf - ht
edhat.com/errata/RHSA-2017:1208 - https://github.com/mdadams/jasper/commit/d91198abd00fc435a397fe6bad906a4c1748e9cf - http://www.openwall.com/lists/oss-security/2016/11/17/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1396959 - https://usn.ubuntu.com/3693-1/
CVE ID: CVE-2016-9388 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:50:37.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure - https://github.com/mdadams/jasper/commit/411a4068f8c464e883358bf403a3e25158863823 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.openwall.com/lists/oss-security/2016/11/17/1 - https://usn.ubuntu.com/3693-1/ - htt
m/errata/RHSA-2017:1208 - http://www.openwall.com/lists/oss-security/2016/11/17/1 - https://usn.ubuntu.com/3693-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=1396962 - http://www.securityfocus.com/bid/94371
CVE ID: CVE-2016-9389 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:50:37.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure). Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://bugzilla.redhat.com/show_bug.cgi?id=1396963 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.openwall.com/lists/oss-security/2016/11/17/1 - ht
1396963 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.openwall.com/lists/oss-security/2016/11/17/1 - https://github.com/mdadams/jasper/commit/dee11ec440d7908d1daf69f40a3324b27cf213ba - https://usn.ubuntu.com/3693-1/ - http://www.securityfocus.com/bid/94371
CVE ID: CVE-2016-9390 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:50:37.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure - https://access.redhat.com/errata/RHSA-2017:1208 - https://github.com/mdadams/jasper/commit/ba2b9d000660313af7b692542afbd374c5685865 - http://www.openwall.com/lists/oss-security/2016/11/17/1 - https://bugzilla.redhat.com/sho
313af7b692542afbd374c5685865 - http://www.openwall.com/lists/oss-security/2016/11/17/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1396965 - https://usn.ubuntu.com/3693-1/ - http://www.securityfocus.com/bid/94371
CVE ID: CVE-2016-9391 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:50:37.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure - https://bugzilla.redhat.com/show_bug.cgi?id=1396967 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.openwall.com/lists/oss-security/2016/11/17/1 - https://usn.ubuntu.com/3693-1/ - https://github.com/mdadams
- http://www.openwall.com/lists/oss-security/2016/11/17/1 - https://usn.ubuntu.com/3693-1/ - https://github.com/mdadams/jasper/commit/1e84674d95353c64e5c4c0e7232ae86fd6ea813b - http://www.securityfocus.com/bid/94371
CVE ID: CVE-2016-9392 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:50:37.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - http://www.securityfocus.com/bid/94377 - https://github.com/mdadams/jasper/commit/f7038068550fba0e41e1d0c355787f1dcd5bf330 - https://access.redhat.com/er
94377 - https://github.com/mdadams/jasper/commit/f7038068550fba0e41e1d0c355787f1dcd5bf330 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.openwall.com/lists/oss-security/2016/11/17/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1396971 - https://usn.ubuntu.com/3693-1/
CVE ID: CVE-2016-9393 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:50:37.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure - http://www.securityfocus.com/bid/94377 - https://github.com/mdadams/jasper/commit/f7038068550fba0e41e1d0c355787f1dcd5bf330 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.openwall.com/lists/oss-security/2016/11/17
787f1dcd5bf330 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.openwall.com/lists/oss-security/2016/11/17/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1396972 - https://usn.ubuntu.com/3693-1/
CVE ID: CVE-2016-9394 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:50:37.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94372 - https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure - https://github.com/mdadams/jasper/commit/f7038068550fba0e41e1d0c355787f1dcd5bf330 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.openwall.com/lists/oss-security/2016/11/17/
87f1dcd5bf330 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.openwall.com/lists/oss-security/2016/11/17/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1396975 - https://usn.ubuntu.com/3693-1/
CVE ID: CVE-2016-9395 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:50:37.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure - https://bugzilla.redhat.com/show_bug.cgi?id=1396977 - http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html - http://www.securityfocus.com/bid/94376 - http://www.openwall.com/lists/oss-security/2016/11/17/1 -
17-01/msg00008.html - http://www.securityfocus.com/bid/94376 - http://www.openwall.com/lists/oss-security/2016/11/17/1 - http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html - https://github.com/mdadams/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a
CVE ID: CVE-2016-9396 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:50:37.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure - https://bugzilla.redhat.com/show_bug.cgi?id=1396978 - https://access.redhat.com/errata/RHSA-2018:3253 - https://access.redhat.com/errata/RHSA-2018:3505 - https://bugzilla.redhat.com/show_bug.cgi?id=1485272 -
HSA-2018:3253 - https://access.redhat.com/errata/RHSA-2018:3505 - https://bugzilla.redhat.com/show_bug.cgi?id=1485272 - http://www.securityfocus.com/bid/94379 - http://www.openwall.com/lists/oss-security/2016/11/17/1 - https://usn.ubuntu.com/3693-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00004.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/
CVE ID: CVE-2016-9397 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:50:37.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1396979 - https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure - http://www.openwall.com/lists/oss-security/2016/11/17/1 - http://www.securityfocus.com/bid/94373 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
ttp://www.securityfocus.com/bid/94373 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/
CVE ID: CVE-2016-9398 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:50:37.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure - https://bugzilla.redhat.com/show_bug.cgi?id=1396980 - http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00008.html - http://www.openwall.com/lists/oss-security/2016/11/17/1 - http://lists.opensuse.org/opensuse-se
/2017-01/msg00008.html - http://www.openwall.com/lists/oss-security/2016/11/17/1 - http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00009.html - http://www.securityfocus.com/bid/94382 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/
CVE ID: CVE-2016-9399 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:50:37.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/11/16/jasper-multiple-assertion-failure - http://www.openwall.com/lists/oss-security/2016/11/17/1 - http://www.securityfocus.com/bid/94380 - https://bugzilla.redhat.com/show_bug.cgi?id=1396981 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html - http
a.redhat.com/show_bug.cgi?id=1396981 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/
CVE ID: CVE-2016-9400 State: PUBLISHED Published: 2017-02-22T16:00:00 Last Updated: 2024-08-06T02:50:37.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201705-13 - https://www.teeworlds.com/?page=news&id=12086 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C4JNSBXXPE7O32ZMFK7D7YL6EKLG7PRV/ - http
oraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C4JNSBXXPE7O32ZMFK7D7YL6EKLG7PRV/ - http://www.securityfocus.com/bid/94381 - http://www.openwall.com/lists/oss-security/2016/11/16/8 - http://www.openwall.com/lists/oss-security/2016/11/17/8 - https://github.com/teeworlds/teeworlds/commit/ff254722a2683867fcb3e67569ffd36226c4bc62
CVE ID: CVE-2016-9401 State: PUBLISHED Published: 2017-01-23T21:00:00.000Z Last Updated: 2025-08-06T21:12:45.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rhn.redhat.com/errata/RHSA-2017-0725.html - https://access.redhat.com/errata/RHSA-2017:1931 - http://www.openwall.com/lists/oss-security/2016/11/17/5 - http://www.openwall.com/lists/oss-security/2016/11/17/9 - http://www.securityfocus.com/bid/94398 - https://security.gentoo.org/glsa/201701-02 - https://lists.de
ty/2016/11/17/9 - http://www.securityfocus.com/bid/94398 - https://security.gentoo.org/glsa/201701-02 - https://lists.debian.org/debian-lts-announce/2019/03/msg00028.html
CVE ID: CVE-2016-9402 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:38.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the moderation tool in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94395 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/
CVE ID: CVE-2016-9403 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:37.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: newreply.php in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to have unspecified impact by leveraging a missing permission check. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94395 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/
CVE ID: CVE-2016-9404 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:38.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors related to login. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94395 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/
CVE ID: CVE-2016-9405 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:37.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in member validation in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94395 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/
CVE ID: CVE-2016-9406 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:37.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the User control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94395 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/
CVE ID: CVE-2016-9407 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:50:37.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving Mod control panel logs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94395 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8 - https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/