Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10491 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T01:35:38.866Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Integer Overflow to Buffer Overflow in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, an integer overflow leading to buffer overflow can occur in a QuRT API functi
SD 820, SD 835, SD 845, SD 850, and SDX20, an integer overflow leading to buffer overflow can occur in a QuRT API function. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10492 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T19:46:58.326Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Input Validation in MODEM Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, improper ciphersuite validation leads SecSSL accept an unadvertised ciphersuite. Additional Ana
845, SD 850, and SDX20, improper ciphersuite validation leads SecSSL accept an unadvertised ciphersuite. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10493 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T02:46:57.628Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Untrusted pointer dereference in NPA routines over QDI Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20, NPA routines on the rootPD that handle resource requests remoted
10, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20, NPA routines on the rootPD that handle resource requests remoted over QDI may not validate pointers passed from user space which may result in guest OS memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10494 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T00:25:39.691Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Integer Overflow to Buffer Overflow vulnerability in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20, integer overflow may lead to buffer overflows
800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20, integer overflow may lead to buffer overflows in IPC router Root-PD driver. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10495 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T00:56:21.508Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Improper Validation of Array Index in WLAN. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, made changes to map the scan type value to an index value that is in range. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10496 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T18:14:20.047Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: NULL Pointer Dereference in Modem Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 210/SD 212/SD 205, SD 410/12, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, and SD 810, A NULL pointer dereference can occur during an SSL handshake. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10497 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T19:00:28.044Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Reachable Assertion in MODEM Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, improper CFG allocation can cause heap leak. Additional Analyst Notes: - CVE Progra
, SD 835, SD 845, SD 850, and SDX20, improper CFG allocation can cause heap leak. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10498 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T20:12:30.479Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Premature stopping of DTR HW causes microkernel to be stuck. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, MDM9645, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, stopping of the DTR prematurely causes micro kernel to be stuck. This can be triggered with a timing change injectable in RACH proce
the DTR prematurely causes micro kernel to be stuck. This can be triggered with a timing change injectable in RACH procedure. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10499 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T00:16:11.727Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Potential Memory leak in Modem Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, memory leak may occur in the IPSecurity module when repeating IKE-Rekey. Addition
20, SD 835, SD 845, SD 850, and SDX20, memory leak may occur in the IPSecurity module when repeating IKE-Rekey. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10500 State: REJECTED Published: 2019-08-30T15:02:19 Last Updated: 2019-08-30T15:02:19 Description: No description available.
CVE ID: CVE-2016-10501 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T02:48:01.137Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear, Small Cell SoC Problem Types: Improper Input Validation in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, MDM9206, MDM9607, MDM9635M, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, and SD 835, improper input validation can occur while parsing an image. Additional Analyst Notes: - CVE Program Container: R
SD 835, improper input validation can occur while parsing an image. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2016-10502 State: PUBLISHED Published: 2018-12-10T15:00:00 Last Updated: 2024-08-06T03:21:52.170Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Integer Overflow or Wraparound in TrustZone. Description: While generating trusted application id, An integer overflow can occur giving the trusted application an invalid identity in Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835 and SDA660. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105838 - https://source.android.com/security/bulletin/2018-11-01#qualcomm-components
CVE ID: CVE-2016-10503 State: PUBLISHED Published: 2017-08-29T18:00:00Z Last Updated: 2024-09-17T04:10:32.358Z Vendors: IBM Products: Sametime Problem Types: Other Description: IBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated and invited user of Sametime meeting to lower any or all hands in an e-meeting, thus spoofing results of votes in the meeting. IBM X-Force ID: 113803. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/113803
CVE ID: CVE-2016-10504 State: PUBLISHED Published: 2017-08-30T09:00:00 Last Updated: 2024-08-06T03:21:52.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (application crash) via a crafted bmp file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uclouvain/openjpeg/issues/835 - https://security.gentoo.org/glsa/201710-26 - https://www.exploit-db.com/exploits/42600/ - http://www.debian.org/security/2017/dsa-4013 - http://www.securityfocus.com/bid/100564 - https://github.com/uclouvain/ope
ttp://www.debian.org/security/2017/dsa-4013 - http://www.securityfocus.com/bid/100564 - https://github.com/uclouvain/openjpeg/commit/397f62c0a838e15d667ef50e27d5d011d2c79c04
CVE ID: CVE-2016-10505 State: PUBLISHED Published: 2017-08-30T09:00:00 Last Updated: 2024-08-06T03:21:52.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function in color.c, color_esycc_to_rgb function in color.c, and sycc422_to_rgb function in color.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (application crash) via crafted j2k files. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201710-26 - https://github.com/uclouvain/openjpeg/issues/784 - https://github.com/uclouvain/openjpeg/issues/776 - ht
lsa/201710-26 - https://github.com/uclouvain/openjpeg/issues/784 - https://github.com/uclouvain/openjpeg/issues/776 - https://github.com/uclouvain/openjpeg/issues/785 - https://github.com/uclouvain/openjpeg/issues/792
CVE ID: CVE-2016-10506 State: PUBLISHED Published: 2017-08-30T09:00:00 Last Updated: 2024-08-06T03:21:52.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (application crash) via crafted j2k files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100573 - https://github.com/uclouvain/openjpeg/commit/d27ccf01c68a31ad62b33d2dc1ba2bb1eeaafe7b - https://security.gentoo.org/glsa/201710-26 - https://github.com/uclouvain/openjpeg/issues/779 - https
c1ba2bb1eeaafe7b - https://security.gentoo.org/glsa/201710-26 - https://github.com/uclouvain/openjpeg/issues/779 - https://github.com/uclouvain/openjpeg/issues/732 - https://github.com/uclouvain/openjpeg/issues/780 - https://github.com/uclouvain/openjpeg/issues/777 - https://github.com/uclouvain/openjpeg/issues/731 - https://github.com/uclouvain/openjpeg/issues/778
CVE ID: CVE-2016-10507 State: PUBLISHED Published: 2017-08-30T09:00:00 Last Updated: 2024-08-06T03:21:52.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uclouvain/openjpeg/issues/833 - https://security.gentoo.org/glsa/201710-26 - https://github.com/uclouvain/openjpeg/commit/da940424816e11d624362ce080bc026adffa26e8 - http://www.securityfocus.com/bid/100567
CVE ID: CVE-2016-10508 State: PUBLISHED Published: 2017-08-31T20:00:00Z Last Updated: 2024-09-16T17:23:21.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpThumb() before 1.7.14 allow remote attackers to inject arbitrary web script or HTML via parameters in demo/phpThumb.demo.showpic.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JamesHeinrich/phpThumb/commit/162ae709162be3e6c4d942313a278ca5cbdb8e92
CVE ID: CVE-2016-10509 State: PUBLISHED Published: 2017-08-31T20:00:00Z Last Updated: 2024-09-16T19:30:16.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the updateAmazonOrderTracking function in upload/admin/model/openbay/amazon.php in OpenCart before version 2.3.0.0 allows remote authenticated administrators to execute arbitrary SQL commands via a carrier (aka courier_id) parameter to openbay.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opencart/opencart/issues/4114 - https://github.com/opencart/opencart/commit/b95044da6ac608e7239f7949ff21d3b65be68f82
CVE ID: CVE-2016-10510 State: PUBLISHED Published: 2017-08-31T20:00:00 Last Updated: 2024-08-06T03:21:52.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Security component of Kohana before 3.3.6 allows remote attackers to inject arbitrary web script or HTML by bypassing the strip_image_tags protection mechanism in system/classes/Kohana/Security.php. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/01/msg00015.html - https://github.com/kohana/kohana/releases/tag/v3.3.6 - https://github.com/kohana/kohana/issues/107 - https://www.checkmarx.com/advisories/cross-site-s
na/releases/tag/v3.3.6 - https://github.com/kohana/kohana/issues/107 - https://www.checkmarx.com/advisories/cross-site-scripting-xss-vulnerability-in-kohana/ - https://advisory.checkmarx.net/advisory/CX-2016-4451
CVE ID: CVE-2016-10511 State: PUBLISHED Published: 2017-09-18T21:00:00 Last Updated: 2024-08-06T03:21:52.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Twitter iOS client versions 6.62 and 6.62.1 fail to validate Twitter's server certificates for the /1.1/help/settings.json configuration endpoint, permitting man-in-the-middle attackers the ability to view an application-only OAuth client token and potentially enable unreleased Twitter iOS app features. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100904 - https://hackerone.com/reports/168538
CVE ID: CVE-2016-10512 State: PUBLISHED Published: 2017-09-29T18:00:00Z Last Updated: 2024-09-17T02:58:18.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: MultiTech FaxFinder before 4.1.2 stores Passwords unencrypted for maintaining the test connectivity function of its LDAP configuration. These credentials are retrieved by the system when the LDAP configuration page is opened and are embedded directly into the HTML source code in cleartext. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/139844/Multitech-RightFax-Faxfinder-Credential-Disclosure.html
CVE ID: CVE-2016-10513 State: PUBLISHED Published: 2017-10-10T20:00:00Z Last Updated: 2024-09-16T16:43:51.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) exists in Piwigo before 2.8.3 via a crafted search expression to include/functions_search.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/issues/548 - https://github.com/Piwigo/Piwigo/commit/9a93d1f44b06605af84520509e7a0e8b64ab0c05 - http://piwigo.org/releases/2.8.3
CVE ID: CVE-2016-10514 State: PUBLISHED Published: 2017-10-10T20:00:00Z Last Updated: 2024-09-17T02:15:43.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: url_check_format in include/functions.inc.php in Piwigo before 2.8.3 allows remote attackers to bypass intended access restrictions via a URL that contains a " character, or a URL beginning with a substring other than the http:// or https:// substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/issues/547 - http://piwigo.org/releases/2.8.3 - https://github.com/Piwigo/Piwigo/commit/b3157cbfd859c914911b114d4edbba4654758b57
CVE ID: CVE-2016-10515 State: PUBLISHED Published: 2017-10-18T02:00:00 Last Updated: 2024-08-06T03:21:52.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories
CVE ID: CVE-2016-10516 State: PUBLISHED Published: 2017-10-23T16:00:00 Last Updated: 2024-08-06T03:21:52.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other products) allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message. Additional Analyst Notes: - CVE Program Container: References: - http://blog.neargle.com/2016/09/21/flask-src-review-get-a-xss-from-debuger/ - https://lists.debian.org/debian-lts-announce/2017/11/msg00037.html - https://github.com/pal
ew-get-a-xss-from-debuger/ - https://lists.debian.org/debian-lts-announce/2017/11/msg00037.html - https://github.com/pallets/werkzeug/pull/1001
CVE ID: CVE-2016-10517 State: PUBLISHED Published: 2017-10-24T18:00:00 Last Updated: 2024-08-06T03:21:52.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: networking.c in Redis before 3.2.7 allows "Cross Protocol Scripting" because it lacks a check for POST and Host: strings, which are not valid in the Redis protocol (but commonly occur when an attack triggers an HTTP request to the Redis TCP port). Additional Analyst Notes: - CVE Program Container: References: - https://www.reddit.com/r/redis/comments/5r8wxn/redis_327_is_out_important_security_fixes_inside/ - https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES - http://www.securityfocus.com/bid/101572 - https:/
https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES - http://www.securityfocus.com/bid/101572 - https://github.com/antirez/redis/commit/874804da0c014a7d704b3d285aa500098a931f50
CVE ID: CVE-2016-10518 State: PUBLISHED Published: 2018-05-31T20:00:00Z Last Updated: 2024-09-17T02:57:19.095Z Vendors: HackerOne Products: ws node module Problem Types: CWE-201 Description: A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memory by sending a ping frame. The ping functionality by default responds with a pong frame and the previously given payload of the ping frame. This is exactly what you expect, but internally ws always transforms all data that we need to send to a Buffer instance and that is where the vulnerability existed. ws didn't do any checks for the type of data it was sending. With buffers in node w
is where the vulnerability existed. ws didn't do any checks for the type of data it was sending. With buffers in node when you allocate it when a number instead of a string it will allocate the amount of bytes. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/websockets/ws/releases/tag/1.0.1 - https://nodesecurity.io/advisories/67 - https://gist.github.com/c0nrad/e92005446c480707a74a
CVE ID: CVE-2016-10519 State: PUBLISHED Published: 2018-05-31T20:00:00Z Last Updated: 2024-09-17T03:02:17.484Z Vendors: HackerOne Products: bittorrent-dht node module Problem Types: CWE-201 Description: A security issue was found in bittorrent-dht before 5.1.3 that allows someone to send a specific series of messages to a listening peer and get it to reveal internal memory. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/68 - https://github.com/feross/bittorrent-dht/issues/87
CVE ID: CVE-2016-10520 State: PUBLISHED Published: 2018-05-31T20:00:00Z Last Updated: 2024-09-17T01:41:52.603Z Vendors: HackerOne Products: jadedown node module Problem Types: CWE-400 Description: jadedown is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/52
CVE ID: CVE-2016-10521 State: PUBLISHED Published: 2018-05-31T20:00:00Z Last Updated: 2024-09-16T19:50:46.651Z Vendors: HackerOne Products: jshamcrest node module Problem Types: CWE-400 Description: jshamcrest is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in to the emailAddress validator. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/53
CVE ID: CVE-2016-10522 State: PUBLISHED Published: 2018-07-05T16:00:00 Last Updated: 2024-08-06T03:21:52.174Z Vendors: https://github.com/sferik Products: rails_admin ruby gem Problem Types: CWE-352 Description: rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks. Non-GET methods were not validating CSRF tokens and, as a result, an attacker could hypothetically gain access to the application administrative endpoints exposed by the gem. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourceclear.com/blog/Rails_admin-Vulnerability-Disclosure/ - https://github.com/sferik/rails_admin/commit/b13e879eb93b661204e9fb5e55f7afa4f397537a
admin-Vulnerability-Disclosure/ - https://github.com/sferik/rails_admin/commit/b13e879eb93b661204e9fb5e55f7afa4f397537a - https://www.sourceclear.com/registry/security/cross-site-request-forgery-csrf-/ruby/sid-3173