Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-6650 State: PUBLISHED Published: 2017-03-21T16:00:00 Last Updated: 2024-08-06T01:36:29.477Z Vendors: n/a Products: EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 Problem Types: SSL Stripping Vulnerability Description: EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability that may potentially be exploited by malicious users to compromise the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038066 - http://www.securityfocus.com/archive/1/540303/30/0/threaded - http://www.
- http://www.securitytracker.com/id/1038066 - http://www.securityfocus.com/archive/1/540303/30/0/threaded - http://www.securityfocus.com/bid/96156
CVE ID: CVE-2016-6651 State: PUBLISHED Published: 2016-09-30T00:00:00 Last Updated: 2024-08-06T01:36:29.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8, 3.x before 3.3.0.6, and 3.4.x before 3.4.5; UAA BOSH before 11.7 and 12.x before 12.6; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.2; and Ops Manager 1.7.x before 1.7.13 and 1.8.x before 1.8.1 allows remote authenticated users to gain privileges by leveraging possession of a token. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93241 - https://pivotal.i
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93241 - https://pivotal.io/security/cve-2016-6651
CVE ID: CVE-2016-6652 State: PUBLISHED Published: 2016-10-05T16:00:00 Last Updated: 2024-08-06T01:36:29.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands via a sort instance with a function call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93276 - https://jira.spring.io/browse/DATAJPA-965 - https://pivotal.io/security/cve-2016-6652 - https://security.gentoo.org/glsa/20170
//jira.spring.io/browse/DATAJPA-965 - https://pivotal.io/security/cve-2016-6652 - https://security.gentoo.org/glsa/201701-01 - https://github.com/spring-projects/spring-data-jpa/commit/b8e7fe
CVE ID: CVE-2016-6653 State: PUBLISHED Published: 2016-10-06T10:00:00 Last Updated: 2024-08-06T01:36:29.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MariaDB audit_plugin component in Pivotal Cloud Foundry (PCF) cf-mysql-release 27 and 28 allows remote attackers to obtain sensitive information by reading syslog messages, as demonstrated by cleartext credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93480 - https://pivotal.io/security/cve-2016-6653
CVE ID: CVE-2016-6654 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-6655 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-06T01:36:29.579Z Vendors: n/a Products: Cloud Foundry Problem Types: command injection Description: An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A command injection vulnerability was discovered in a common script used by many Cloud Foundry components. A malicious user may exploit numerous vectors to execute arbitrary commands on servers running Cloud Foundry. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2016-6655/ - http://www.securityfocus.com/bid/93889
CVE ID: CVE-2016-6656 State: PUBLISHED Published: 2016-12-16T09:02:00 Last Updated: 2024-08-06T01:36:29.475Z Vendors: n/a Products: Pivotal Greenplum 4.3.0.0 to 4.3.9.1 and older versions that are end of life Problem Types: Code injection vulnerability Description: An issue was discovered in Pivotal Greenplum before 4.3.10.0. Creation of external tables using GPHDFS protocol has a vulnerability whereby arbitrary commands can be injected into the system. In order to exploit this vulnerability the user must have superuser 'gpadmin' access to the system or have been granted GPHDFS protocol permissions in order to create a GPHDFS external table. Additional Analyst Notes: - CVE Program Container:
HDFS protocol permissions in order to create a GPHDFS external table. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2016-6656 - http://www.securityfocus.com/bid/94954
CVE ID: CVE-2016-6657 State: PUBLISHED Published: 2016-12-16T09:02:00 Last Updated: 2024-08-06T01:36:29.434Z Vendors: n/a Products: PCF Elastic Runtime 1.8.x versions prior to 1.8.12 and PCF Ops Manager 1.7.x versions prior to 1.7.18 and 1.8.x versions prior to 1.8.10 Problem Types: Open redirect vulnerability Description: An open redirect vulnerability has been detected with some Pivotal Cloud Foundry Elastic Runtime components. Users of affected versions should apply the following mitigation: Upgrade PCF Elastic Runtime 1.8.x versions to 1.8.12 or later. Upgrade PCF Ops Manager 1.7.x versions to 1.7.18 or later and 1.8.x versions to 1.8.10 or later. Additional Analyst Notes: - CVE Program
anager 1.7.x versions to 1.7.18 or later and 1.8.x versions to 1.8.10 or later. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2016-6657 - http://www.securityfocus.com/bid/94126
CVE ID: CVE-2016-6658 State: PUBLISHED Published: 2018-03-29T22:00:00 Last Updated: 2024-08-06T01:36:29.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Applications in cf-release before 245 can be configured and pushed with a user-provided custom buildpack using a URL pointing to the buildpack. Although it is not recommended, a user can specify a credential in the URL (basic auth or OAuth) to access the buildpack through the CLI. For example, the user could include a GitHub username and password in the URL to access a private repo. Because the URL to access the buildpack is stored unencrypted, an operator with privileged access to the Cloud Controller database could view thes
the buildpack is stored unencrypted, an operator with privileged access to the Cloud Controller database could view these credentials. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2016-6658
CVE ID: CVE-2016-6659 State: PUBLISHED Published: 2016-12-23T05:00:00 Last Updated: 2024-08-06T01:36:29.545Z Vendors: n/a Products: Cloud Foundry v247 and earlier and UAA v3.9.2 & earlier and UAA bosh (uaa-release) v23 & earlier Problem Types: Privilege Escalation Description: Cloud Foundry before 248; UAA 2.x before 2.7.4.12, 3.x before 3.6.5, and 3.7.x through 3.9.x before 3.9.3; and UAA bosh release (aka uaa-release) before 13.9 for UAA 3.6.5 and before 24 for UAA 3.9.3 allow attackers to gain privileges by accessing UAA logs and subsequently running a specially crafted application that interacts with a configured SAML provider. Additional Analyst Notes: - CVE Program Container: Reference
application that interacts with a configured SAML provider. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2016-6659/ - http://www.securityfocus.com/bid/95085
CVE ID: CVE-2016-6660 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-6662 State: PUBLISHED Published: 2016-09-20T18:00:00 Last Updated: 2024-08-06T01:36:29.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information
raged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15. Additional Analyst Notes: - CVE Program Container: References: - https://mariadb.com/kb/en/mariadb/mariadb-10027-release-notes/ - http://rhn.redhat.com/errata/RHSA-2016-2749.html - http://rhn.redhat.com/errata/RHSA-2017-0184.html - http://rhn.redhat.com/errata/RHSA-2016-2131.html - http://rhn.redhat.com/errata/RHSA-2016-2060.html - https://mariadb.com/kb/en/mariadb/mariadb-10117-release-notes/ - https://mariadb.com/kb/en
/errata/RHSA-2016-2060.html - https://mariadb.com/kb/en/mariadb/mariadb-10117-release-notes/ - https://mariadb.com/kb/en/mariadb/mariadb-5551-release-notes/ - https://jira.mariadb.org/browse/MDEV-10465 - http://www.securityfocus.com/bid/92912 - http://seclists.org/fulldisclosure/2016/Sep/23 - https://security.gentoo.org/glsa/201701-01 - http://www.debian.org/security/2016/dsa-3666 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://rhn.redhat.com/errata/RHSA-2016-2130.html - http://rhn.redhat.com/errata/RHSA-2016-2077.html - http://rhn.redhat.com/errata/RHSA-2016-2927.html - http://rhn.redhat.com/errata/RHSA-2016-2059.html - http://legalhackers.com/advisori
hat.com/errata/RHSA-2016-2927.html - http://rhn.redhat.com/errata/RHSA-2016-2059.html - http://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.html - https://www.percona.com/blog/2016/09/12/percona-server-critical-update-cve-2016-6662/ - http://rhn.redhat.com/errata/RHSA-2016-2062.html - http://rhn.redhat.com/errata/RHSA-2016-2595.html - http://www.securitytracker.com/id/1036769 - http://rhn.redhat.com/errata/RHSA-2016-2061.html - http://www.openwall.com/lists/oss-security/2016/09/12/3 - https://www.exploit-db.com/exploits/40360/ - http://rhn.redhat.com/errata/RHSA-2016-2928.html - http://rhn.redhat.com/errata/RHSA-2016-2058.html
CVE ID: CVE-2016-6663 State: PUBLISHED Published: 2016-12-13T21:00:00 Last Updated: 2024-08-06T01:36:29.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17 allows local users with certain permissions to gain privileges by leveraging use of my_copystat by REPAIR TABLE to repair a MyISAM table. Additional Analyst
ssions to gain privileges by leveraging use of my_copystat by REPAIR TABLE to repair a MyISAM table. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2749.html - https://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-52.html - http://rhn.redhat.com/errata/RHSA-2017-0184.html - http://seclists.org/fulldisclosure/2016/Nov/4 - http://rhn.redhat.com/errata/RHSA-2016-2131.html - https://github.com/mysql/mysql-server/commit/4e5473862e6852b0f3802b0cd0c6fa10b5253291 - https://mariadb.com/kb/en/mariadb/mariadb-5552-release-notes/ - https://www.percona.com/blog/2016/11/02/percona-responds-to-cve-2016-6663-and-cve-2016-6664/ - http://www.oracle.c
es/ - https://www.percona.com/blog/2016/11/02/percona-responds-to-cve-2016-6663-and-cve-2016-6664/ - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://www.exploit-db.com/exploits/40678/ - http://rhn.redhat.com/errata/RHSA-2016-2130.html - http://rhn.redhat.com/errata/RHSA-2016-2927.html - http://www.openwall.com/lists/oss-security/2016/10/25/4 - https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html - http://www.securityfocus.com/bid/92911 - http://www.securityfocus.com/bid/93614 - http://rhn.redhat.com/errata/RHSA-2016-2595.html - https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-1.html - https://mariadb.com/kb/en/mariadb/mariadb-10118-re
l - https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-1.html - https://mariadb.com/kb/en/mariadb/mariadb-10118-release-notes/ - https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-15.html - https://github.com/MariaDB/server/commit/347eeefbfc658c8531878218487d729f4e020805 - http://rhn.redhat.com/errata/RHSA-2016-2928.html - https://mariadb.com/kb/en/mariadb/mariadb-10028-release-notes/ - https://legalhackers.com/advisories/MySQL-Maria-Percona-PrivEscRace-CVE-2016-6663-5616-Exploit.html
CVE ID: CVE-2016-6664 State: PUBLISHED Published: 2016-12-13T21:00:00 Last Updated: 2024-08-06T01:36:29.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files. Additional Analyst Notes: - CVE Program Container: References: - http:
nk attack on error logs and possibly other files. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2749.html - http://seclists.org/fulldisclosure/2016/Nov/4 - http://www.securityfocus.com/bid/93612 - https://www.percona.com/blog/2016/11/02/percona-responds-to-cve-2016-6663-and-cve-2016-6664/ - https://access.redhat.com/errata/RHSA-2018:0574 - https://security.gentoo.org/glsa/201702-18 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securityfocus.com/archive/1/539695/100/0/threaded - http://rhn.redhat.com/errata/RHSA-2016-2130.html - http://packetstormsecurity.com/files/139491/MySQL-MariaDB-Perco
ded - http://rhn.redhat.com/errata/RHSA-2016-2130.html - http://packetstormsecurity.com/files/139491/MySQL-MariaDB-PerconaDB-Root-Privilege-Escalation.html - https://www.exploit-db.com/exploits/40679/ - http://legalhackers.com/advisories/MySQL-Maria-Percona-RootPrivEsc-CVE-2016-6664-5617-Exploit.html - https://access.redhat.com/errata/RHSA-2018:0279 - http://www.debian.org/security/2017/dsa-3770 - https://access.redhat.com/errata/RHSA-2017:2192
CVE ID: CVE-2016-6667 State: PUBLISHED Published: 2017-02-07T17:00:00 Last Updated: 2024-08-06T01:36:29.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/NTAP-20161017-0002
CVE ID: CVE-2016-6668 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T01:36:29.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating with HipChat instances by reading unspecified pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/539530/100/0/threaded - https://confluence.atlassian.com/bitbucketserver/bitbucke
http://www.securityfocus.com/archive/1/539530/100/0/threaded - https://confluence.atlassian.com/bitbucketserver/bitbucket-server-security-advisory-2016-09-21-840698321.html - https://confluence.atlassian.com/doc/confluence-security-advisory-2016-09-21-849052104.html - http://www.securityfocus.com/bid/93159 - https://confluence.atlassian.com/jira/jira-and-hipchat-for-jira-plugin-security-advisory-2016-09-21-849052099.html - http://packetstormsecurity.com/files/139004/Atlassian-HipChat-Secret-Key-Disclosure.html
CVE ID: CVE-2016-6669 State: PUBLISHED Published: 2016-09-22T15:00:00 Last Updated: 2024-08-06T01:36:29.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600 allows remote authenticated RADIUS servers to execute arbitrary code by sending a crafted EAP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92441 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160810-01-usg-en
CVE ID: CVE-2016-6670 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:36:29.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 use random numbers with insufficient entropy to generate self-signed certificates, which makes it easier for remote attackers to discover private keys by leveraging knowledge of a certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160810-01-certificate-en - http://www.securityfocus.com/bid/92438
CVE ID: CVE-2016-6671 State: PUBLISHED Published: 2016-12-23T05:00:00 Last Updated: 2024-08-06T01:36:29.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: The raw_decode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted SWF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/08/12/6 - http://www.securityfocus.com/bid/92447
CVE ID: CVE-2016-6672 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka internal bug 30537088. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93338 - http://source.android.com/security/bulletin/2016-10-01.html
CVE ID: CVE-2016-6673 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA camera driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 30204201. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93321 - http://source.android.com/security/bulletin/2016-10-01.html
CVE ID: CVE-2016-6674 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: system_server in Android before 2016-10-05 on Nexus devices allows attackers to gain privileges via a crafted application, aka internal bug 30445380. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93316 - http://source.android.com/security/bulletin/2016-10-01.html
CVE ID: CVE-2016-6675 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted application that makes a linkspeed ioctl call, aka Android internal bug 30873776 and Qualcomm internal bug CR 1000861. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - https://source.codeaurora.org/quic/la//plat
References: - http://source.android.com/security/bulletin/2016-10-01.html - https://source.codeaurora.org/quic/la//platform/vendor/qcom-opensource/wlan/prima/commit/?id=1353fa0bd0c78427f3ae7d9bde7daeb75bd01d09 - http://www.securityfocus.com/bid/93328
CVE ID: CVE-2016-6676 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in CORE/HDD/src/wlan_hdd_cfg.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted application that makes a GET_CFG ioctl call, aka Android internal bug 30874066 and Qualcomm internal bug CR 1000853. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la//platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=6ba9136879232
ences: - https://source.codeaurora.org/quic/la//platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=6ba9136879232442a182996427e5c88e5a7512a8 - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93328
CVE ID: CVE-2016-6677 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA GPU driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30259955. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93319 - http://source.android.com/security/bulletin/2016-10-01.html
CVE ID: CVE-2016-6678 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Motorola USBNet driver in Android before 2016-10-05 on Nexus 6 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 29914434. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93305 - https://securityintelligence.com/android-vulnerabilities-attacking-nexus-6-and-6p-custom-boot-modes/
CVE ID: CVE-2016-6679 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive information via a crafted application that makes a setwpaie ioctl call, aka Android internal bug 29915601 and Qualcomm internal bug CR 1000913. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=f081695446679aa44baa0d00940ea18455eeb4c5 - http://source.androi
atform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=f081695446679aa44baa0d00940ea18455eeb4c5 - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93309 - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/?id=d39345f0abc309959d831d09fcbf1619cc0ae0f5