Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-1864 State: PUBLISHED Published: 2016-06-19T20:00:00 Last Updated: 2024-08-05T23:10:40.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which allows remote attackers to obtain sensitive information via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036344 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - https://support.apple.com/HT206171 - http://www.securityfocu
ple.com/archives/security-announce/2016/Mar/msg00000.html - https://support.apple.com/HT206171 - http://www.securityfocus.com/bid/91358 - https://support.apple.com/HT206166
CVE ID: CVE-2016-1865 State: PUBLISHED Published: 2016-07-22T01:00:00 Last Updated: 2024-08-05T23:10:39.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036344 - http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.ht
chives/security-announce/2016/Jul/msg00002.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html - http://www.securityfocus.com/bid/91828 - http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html - https://support.apple.com/HT206905 - https://support.apple.com/HT206903 - https://support.apple.com/HT206902 - https://support.apple.com/HT206904
CVE ID: CVE-2016-1866 State: PUBLISHED Published: 2016-04-12T14:00:00 Last Updated: 2024-08-05T23:10:39.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream. Additional Analyst Notes: - CVE Program Container: References: - https://docs.saltstack.com/en/latest/topics/releases/2015.8.4.html - http://lists.opensuse.org/opensuse-updates/2016-03/msg00034.html
CVE ID: CVE-2016-1867 State: PUBLISHED Published: 2016-01-20T16:00:00 Last Updated: 2024-08-05T23:10:39.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jpc_pi_nextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG 2000 image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/81488 - http://www.debian.org/security/2017/dsa-3785 - http://www.openwall.com/lists/oss-security/2016/01/13/2 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.openwall.com/lists/oss-security/2016/01/13/6
CVE ID: CVE-2016-1876 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-05T23:10:40.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: The backend service process in Lenovo Solution Center (aka LSC) before 3.3.0002 allows local users to gain SYSTEM privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/len_4326
CVE ID: CVE-2016-1879 State: PUBLISHED Published: 2016-01-29T19:00:00 Last Updated: 2024-08-05T23:10:39.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote attackers to cause a denial of service (assertion failure or NULL pointer dereference and kernel panic) via a crafted ICMPv6 packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39305/ - https://www.freebsd.org/security/advisories/FreeBSD-SA-16:01.sctp.asc - http://www.securitytracker.com/id/1034673 -
/ - https://www.freebsd.org/security/advisories/FreeBSD-SA-16:01.sctp.asc - http://www.securitytracker.com/id/1034673 - http://packetstormsecurity.com/files/135369/FreeBSD-SCTP-ICMPv6-Denial-Of-Service.html
CVE ID: CVE-2016-1880 State: PUBLISHED Published: 2017-02-15T15:00:00 Last Updated: 2024-08-05T23:10:39.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to read portions of kernel memory and potentially gain privilege via unspecified vectors, related to "handling of Linux futex robust lists." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034675 - https://www.freebsd.org/security/advisories/FreeBSD-SA-16:03.linux.asc
CVE ID: CVE-2016-1881 State: PUBLISHED Published: 2017-02-15T15:00:00 Last Updated: 2024-08-05T23:10:40.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to cause a denial of service (crash) or potentially gain privilege via a crafted Linux compatibility layer setgroups system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securitytracker.com/id/1034676 - https://www.freebsd.org/security/advisories/FreeBSD-SA-16:04.linux.asc
CVE ID: CVE-2016-1882 State: PUBLISHED Published: 2016-01-29T19:00:00 Last Updated: 2024-08-05T23:10:40.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow remote attackers to cause a denial of service (kernel crash) via vectors related to creating a TCP connection with the TCP_MD5SIG and TCP_NOOPT socket options. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034677 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:05.tcp.asc
CVE ID: CVE-2016-1883 State: PUBLISHED Published: 2017-02-15T15:00:00 Last Updated: 2024-08-05T23:10:40.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The issetugid system call in the Linux compatibility layer in FreeBSD 9.3, 10.1, and 10.2 allows local users to gain privilege via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034872 - https://www.freebsd.org/security/advisories/FreeBSD-SA-16:10.linux.asc
CVE ID: CVE-2016-1885 State: PUBLISHED Published: 2016-04-08T16:00:00 Last Updated: 2024-08-05T23:10:40.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1 before p31, and 10.2 before p14 allows local users to cause a denial of service (kernel panic) via an i386_set_ldt system call, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39570/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:15.sysarch.asc - http://www.coresecurity.com/advisories/freebsd-kernel-amd6
ecurity.FreeBSD.org/advisories/FreeBSD-SA-16:15.sysarch.asc - http://www.coresecurity.com/advisories/freebsd-kernel-amd64setldt-heap-overflow - http://seclists.org/fulldisclosure/2016/Mar/56 - http://seclists.org/fulldisclosure/2016/Mar/67 - http://www.securitytracker.com/id/1035309 - http://www.securityfocus.com/archive/1/537813/100/0/threaded - http://www.securityfocus.com/archive/1/537812/100/0/threaded - http://packetstormsecurity.com/files/136276/FreeBSD-Kernel-amd64_set_ldt-Heap-Overflow.html
CVE ID: CVE-2016-1886 State: PUBLISHED Published: 2016-05-25T15:00:00 Last Updated: 2024-08-05T23:10:40.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the genkbd_commonioctl function in sys/dev/kbd/kbd.c in FreeBSD 9.3 before p42, 10.1 before p34, 10.2 before p17, and 10.3 before p3 allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory overwrite and kernel crash), or gain privileges via a negative value in the flen structure member in the arg argument in a SETFKEY ioctl call, which triggers a "two way heap and stack overflow." Additional Analyst Notes: - CVE Program Container: References: - http:/
ch triggers a "two way heap and stack overflow." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035905 - http://www.securityfocus.com/bid/90734 - https://www.freebsd.org/security/advisories/FreeBSD-SA-16:18.atkbd.asc - https://security.FreeBSD.org/patches/SA-16:18/atkbd.patch - http://cturt.github.io/SETFKEY.html
CVE ID: CVE-2016-1887 State: PUBLISHED Published: 2016-05-25T15:00:00 Last Updated: 2024-08-05T23:10:39.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the sockargs function in sys/kern/uipc_syscalls.c in FreeBSD 10.1 before p34, 10.2 before p17, and 10.3 before p3 allows local users to cause a denial of service (memory overwrite and kernel panic) or gain privileges via a negative buflen argument, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://cturt.github.io/sendmsg.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:19.sendmsg.asc - http://www.securitytracker.com/id/10
ndmsg.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:19.sendmsg.asc - http://www.securitytracker.com/id/1035906
CVE ID: CVE-2016-1888 State: PUBLISHED Published: 2017-02-15T15:00:00 Last Updated: 2024-08-05T23:10:39.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: The telnetd service in FreeBSD 9.3, 10.1, 10.2, 10.3, and 11.0 allows remote attackers to inject arguments to login and bypass authentication via vectors involving a "sequence of memory allocation failures." Additional Analyst Notes: - CVE Program Container: References: - https://www.freebsd.org/security/advisories/FreeBSD-SA-16:36.telnetd.asc - http://www.securitytracker.com/id/1037399
CVE ID: CVE-2016-1889 State: PUBLISHED Published: 2017-02-15T15:00:00 Last Updated: 2024-08-05T23:10:39.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, and 11.0 when configured with a large amount of guest memory, allows local users to gain privilege via a crafted device descriptor. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037400 - https://www.freebsd.org/security/advisories/FreeBSD-SA-16:38.bhyve.asc
CVE ID: CVE-2016-1894 State: PUBLISHED Published: 2017-02-07T17:00:00 Last Updated: 2024-08-05T23:10:39.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp OnCommand Workflow Automation before 3.1P2 allows remote attackers to bypass authentication via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20160310-0001/ - https://kb.netapp.com/support/s/article/cve-2016-1894-authentication-bypass-vulnerability-in-oncommand-workflow-automation
CVE ID: CVE-2016-1895 State: PUBLISHED Published: 2017-09-01T21:00:00 Last Updated: 2024-08-05T23:10:40.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to cause a denial of service via vectors related to unsafe user input string handling. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/NTAP-20170831-0003
CVE ID: CVE-2016-1896 State: PUBLISHED Published: 2016-01-27T02:00:00 Last Updated: 2024-08-05T23:10:39.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status. Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/index?page=content&id=TE745
CVE ID: CVE-2016-1897 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-05T23:10:39.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file. Additional Analyst Notes: - CVE Program Container: References: - http://security.stackexchange.com/questions/110644 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00034.html - http://www.securitytracker.com/id/1034932 - https://security.gentoo.org/
nsuse-security-announce/2016-01/msg00034.html - http://www.securitytracker.com/id/1034932 - https://security.gentoo.org/glsa/201705-08 - http://www.securityfocus.com/bid/80501 - http://www.ubuntu.com/usn/USN-2944-1 - http://www.openwall.com/lists/oss-security/2016/01/14/1 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.529036 - http://www.debian.org/security/2016/dsa-3506 - http://habrahabr.ru/company/mailru/blog/274855 - https://security.gentoo.org/glsa/201606-09 - https://www.kb.cert.org/vuls/id/772447
CVE ID: CVE-2016-1898 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-05T23:10:40.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains an arbitrary line of a local file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00034.html - http://www.securitytracker.com/id/1034932 - https://security.gentoo.org/glsa/201705-08 - http://www.securityfocus.com/bid
ttp://www.securitytracker.com/id/1034932 - https://security.gentoo.org/glsa/201705-08 - http://www.securityfocus.com/bid/80501 - http://www.ubuntu.com/usn/USN-2944-1 - http://www.openwall.com/lists/oss-security/2016/01/14/1 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.529036 - http://www.debian.org/security/2016/dsa-3506 - http://habrahabr.ru/company/mailru/blog/274855 - https://security.gentoo.org/glsa/201606-09 - https://www.kb.cert.org/vuls/id/772447
CVE ID: CVE-2016-1899 State: PUBLISHED Published: 2016-01-20T16:00:00 Last Updated: 2024-08-05T23:10:40.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the ui-blob handler in CGit before 0.12 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks via CRLF sequences in the mimetype parameter, as demonstrated by a request to blob/cgit.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/14/3 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00084.html - http://lists.zx2c4.com/pipermail/cgit/20
16/01/14/3 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00084.html - http://lists.zx2c4.com/pipermail/cgit/2016-January/002817.html - http://lists.zx2c4.com/pipermail/cgit/2016-January/002790.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176198.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00067.html - http://git.zx2c4.com/cgit/commit/?id=1c581a072651524f3b0d91f33e22a42c4166dd96 - http://www.openwall.com/lists/oss-security/2016/01/14/6 - http://www.debian.org/security/2016/dsa-3545 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176167.html
CVE ID: CVE-2016-1900 State: PUBLISHED Published: 2016-01-20T16:00:00 Last Updated: 2024-08-05T23:10:39.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the cgit_print_http_headers function in ui-shared.c in CGit before 0.12 allows remote attackers with permission to write to a repository to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks via newline characters in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/14/3 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00084.html - http://lists.zx2c4.c
ists/oss-security/2016/01/14/3 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00084.html - http://lists.zx2c4.com/pipermail/cgit/2016-January/002817.html - http://lists.zx2c4.com/pipermail/cgit/2016-January/002790.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176198.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00067.html - http://git.zx2c4.com/cgit/commit/?id=513b3863d999f91b47d7e9f26710390db55f9463 - http://www.openwall.com/lists/oss-security/2016/01/14/6 - http://www.debian.org/security/2016/dsa-3545 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176167.html
CVE ID: CVE-2016-1901 State: PUBLISHED Published: 2016-01-20T16:00:00 Last Updated: 2024-08-05T23:10:40.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the authenticate_post function in CGit before 0.12 allows remote attackers to have unspecified impact via a large value in the Content-Length HTTP header, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/14/3 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00084.html - http://lists.zx2c4.com/pipermail/cgit/2016-January/002817.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-Janua
zx2c4.com/pipermail/cgit/2016-January/002817.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176198.html - http://git.zx2c4.com/cgit/commit/?id=4458abf64172a62b92810c2293450106e6dfc763 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00067.html - http://www.openwall.com/lists/oss-security/2016/01/14/6 - http://www.debian.org/security/2016/dsa-3545 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176167.html
CVE ID: CVE-2016-1902 State: PUBLISHED Published: 2016-06-01T22:00:00 Last Updated: 2024-08-05T23:10:39.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nextBytes function in the SecureRandom class in Symfony before 2.3.37, 2.6.x before 2.6.13, and 2.7.x before 2.7.9 does not properly generate random numbers when used with PHP 5.x without the paragonie/random_compat library and the openssl_random_pseudo_bytes function fails, which makes it easier for attackers to defeat cryptographic protection mechanisms via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://symfony.com/blog/cve-2016-1902-securerandom-s-fallback-not-secure-when-op
- CVE Program Container: References: - http://symfony.com/blog/cve-2016-1902-securerandom-s-fallback-not-secure-when-openssl-fails - https://github.com/symfony/symfony/pull/17359 - https://www.landaire.net/blog/cve-2016-1902-symfony-securerandom/ - http://www.debian.org/security/2016/dsa-3588
CVE ID: CVE-2016-1903 State: PUBLISHED Published: 2016-01-19T02:00:00 Last Updated: 2024-08-05T23:10:40.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a large bgd_color argument to the imagerotate function. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2952-1 - http://www.securityfocus.com/bid/79916 - http://www.php.net/ChangeLog-7.php - https://bugs.php.net/bug
/usn/USN-2952-1 - http://www.securityfocus.com/bid/79916 - http://www.php.net/ChangeLog-7.php - https://bugs.php.net/bug.php?id=70976 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00099.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.ubuntu.com/usn/USN-2952-2 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.461720 - http://www.openwall.com/lists/oss-security/2016/01/14/8 - http://www.php.net/ChangeLog-5.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00037.html - http://www.securitytracker.com/id/1034608
CVE ID: CVE-2016-1904 State: PUBLISHED Published: 2016-01-19T02:00:00 Last Updated: 2024-08-05T23:10:40.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a long string to the (1) php_escape_shell_cmd or (2) php_escape_shell_arg function, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-7.php - https://github.com/php/php-src/commit/2871c70efaaaa0f102557a17c727fd4d5204dd4b - http://www.openwall.com/lists/oss-security/2016/01/1
b.com/php/php-src/commit/2871c70efaaaa0f102557a17c727fd4d5204dd4b - http://www.openwall.com/lists/oss-security/2016/01/14/8 - https://bugs.php.net/bug.php?id=71270 - http://www.securitytracker.com/id/1034608
CVE ID: CVE-2016-1905 State: PUBLISHED Published: 2016-02-03T15:00:00 Last Updated: 2024-08-05T23:10:40.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/19479 - https://access.redhat.com/errata/RHSA-2016:0070
CVE ID: CVE-2016-1906 State: PUBLISHED Published: 2016-02-03T15:00:00 Last Updated: 2024-08-05T23:10:40.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openshift/origin/issues/6556 - https://github.com/openshift/origin/pull/6576 - https://access.redhat.com/errata/RHSA-2016:0070 - https://access.redhat.com/errata/RHSA-2016:0351
CVE ID: CVE-2016-1907 State: PUBLISHED Published: 2016-01-19T00:00:00 Last Updated: 2024-08-05T23:10:39.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/81293 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - http://lists.fedoraproject.org/pipermail/package-annou