Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://rhn.redhat.com/errata/RHSA-2016-0128.html - https://review.openstack.org/#/c/217750/ - http://rhn.redhat.com/errata/RHSA-2016-0155.html - https://bugs.launchpad.net/swift/+bug/1466549 - https://security.openstack.org/ossa/OSSA-2016-004.html - https://launchpad.net/swift/+milestone/2.4.0
CVE ID: CVE-2016-0738 State: PUBLISHED Published: 2016-01-29T20:00:00 Last Updated: 2024-08-05T22:30:04.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0329.html - https://github.com/openstack/swift/blob/master/CHANGELOG - http://www.securityfocus.com/bid/81432 - https://bugs.launchpad.ne
://github.com/openstack/swift/blob/master/CHANGELOG - http://www.securityfocus.com/bid/81432 - https://bugs.launchpad.net/cloud-archive/+bug/1493303 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://rhn.redhat.com/errata/RHSA-2016-0128.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176713.html - http://rhn.redhat.com/errata/RHSA-2016-0155.html - https://security.openstack.org/ossa/OSSA-2016-004.html
CVE ID: CVE-2016-0739 State: PUBLISHED Published: 2016-04-13T17:00:00 Last Updated: 2024-08-05T22:30:04.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-hellman-group14 key exchange methods to 128 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug." Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178058.html - http://www.ubuntu.com/usn/USN-2912-1 - https://www.libssh.org/s
g/pipermail/package-announce/2016-February/178058.html - http://www.ubuntu.com/usn/USN-2912-1 - https://www.libssh.org/security/advisories/CVE-2016-0739.txt - https://puppet.com/security/cve/CVE-2016-0739 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178822.html - https://security.gentoo.org/glsa/201606-12 - http://www.debian.org/security/2016/dsa-3488 - http://rhn.redhat.com/errata/RHSA-2016-0566.html - https://www.libssh.org/2016/02/23/libssh-0-7-3-security-and-bugfix-release/ - http://lists.opensuse.org/opensuse-updates/2016-03/msg00111.html
CVE ID: CVE-2016-0740 State: PUBLISHED Published: 2016-04-13T16:00:00 Last Updated: 2024-08-05T22:30:03.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-52 - http://www.debian.org/security/2016/dsa-3499 - https://github.com/python-pillow/Pillow/commit/6dcbf5bd96b717c58d7b642949da8d323099928e - https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst
CVE ID: CVE-2016-0741 State: PUBLISHED Published: 2016-04-19T21:00:00 Last Updated: 2024-08-05T22:30:04.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection. Additional Analyst Notes: - CVE Program Container: References: - https://fedorahosted.org/389/ticket/48412 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/ - http://rhn.re
njan2016-2867209.html - https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/ - http://rhn.redhat.com/errata/RHSA-2016-0204.html - http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html - http://www.securityfocus.com/bid/82343
CVE ID: CVE-2016-0742 State: PUBLISHED Published: 2016-02-15T19:00:00 Last Updated: 2024-08-05T22:30:04.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process crash) via a crafted UDP DNS response. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-02/msg00042.html - https://bto.bluecoat.com/security-advisory/sa115 - https://security.gentoo.org/glsa/201606-06 - http://www.securitytracker.com/id/1034869 - http://mailman.nginx.org/pipermail/nginx/2016-January/049700.
sa/201606-06 - http://www.securitytracker.com/id/1034869 - http://mailman.nginx.org/pipermail/nginx/2016-January/049700.html - https://access.redhat.com/errata/RHSA-2016:1425 - http://www.debian.org/security/2016/dsa-3473 - https://bugzilla.redhat.com/show_bug.cgi?id=1302587 - http://www.ubuntu.com/usn/USN-2892-1 - https://support.apple.com/kb/HT212818 - http://seclists.org/fulldisclosure/2021/Sep/36
CVE ID: CVE-2016-0743 State: REJECTED Published: 2020-11-05T22:20:14 Last Updated: 2020-11-05T22:20:14 Description: No description available.
CVE ID: CVE-2016-0744 State: REJECTED Published: 2020-11-05T22:20:37 Last Updated: 2020-11-05T22:20:37 Description: No description available.
CVE ID: CVE-2016-0745 State: REJECTED Published: 2020-11-05T22:21:17 Last Updated: 2020-11-05T22:21:17 Description: No description available.
CVE ID: CVE-2016-0746 State: PUBLISHED Published: 2016-02-15T19:00:00 Last Updated: 2024-08-05T22:30:03.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (worker process crash) or possibly have unspecified other impact via a crafted DNS response related to CNAME response processing. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-02/msg00042.html - https://bto.bluecoat.com/security-advisory/sa115 - https://security.gentoo.org/glsa/201606-06 - http://www.securitytra
- https://bto.bluecoat.com/security-advisory/sa115 - https://security.gentoo.org/glsa/201606-06 - http://www.securitytracker.com/id/1034869 - http://mailman.nginx.org/pipermail/nginx/2016-January/049700.html - https://access.redhat.com/errata/RHSA-2016:1425 - http://www.debian.org/security/2016/dsa-3473 - http://www.ubuntu.com/usn/USN-2892-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1302588 - https://support.apple.com/kb/HT212818 - http://seclists.org/fulldisclosure/2021/Sep/36
CVE ID: CVE-2016-0747 State: PUBLISHED Published: 2016-02-15T19:00:00 Last Updated: 2024-08-05T22:30:04.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause a denial of service (worker process resource consumption) via vectors related to arbitrary name resolution. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-02/msg00042.html - https://bto.bluecoat.com/security-advisory/sa115 - https://security.gentoo.org/glsa/201606-06 - http://www.securitytracker.com/id/1034869 - http://mailm
y-advisory/sa115 - https://security.gentoo.org/glsa/201606-06 - http://www.securitytracker.com/id/1034869 - http://mailman.nginx.org/pipermail/nginx/2016-January/049700.html - https://access.redhat.com/errata/RHSA-2016:1425 - https://bugzilla.redhat.com/show_bug.cgi?id=1302589 - http://www.debian.org/security/2016/dsa-3473 - http://www.ubuntu.com/usn/USN-2892-1 - https://support.apple.com/kb/HT212818 - http://seclists.org/fulldisclosure/2021/Sep/36
CVE ID: CVE-2016-0749 State: PUBLISHED Published: 2016-06-09T16:00:00 Last Updated: 2024-08-05T22:30:03.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201606-05 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html - http://www.ubuntu.com/usn/U
tinapr2016-2952096.html - http://lists.opensuse.org/opensuse-updates/2016-07/msg00003.html - http://www.ubuntu.com/usn/USN-3014-1 - http://lists.opensuse.org/opensuse-updates/2016-07/msg00004.html - https://access.redhat.com/errata/RHSA-2016:1205 - http://www.debian.org/security/2016/dsa-3596 - https://access.redhat.com/errata/RHSA-2016:1204
CVE ID: CVE-2016-0750 State: PUBLISHED Published: 2018-09-11T13:00:00 Last Updated: 2024-08-05T22:30:04.027Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: Infinispan Problem Types: CWE-138 Description: The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks. Additional Analyst Notes: - CVE Program Container: References: - https://issues.jboss.org/browse/ISPN-7781 - http://www.securityfocus.com/bid/101910 - https://github
iner: References: - https://issues.jboss.org/browse/ISPN-7781 - http://www.securityfocus.com/bid/101910 - https://github.com/infinispan/infinispan/pull/5116 - https://access.redhat.com/errata/RHSA-2018:0501 - https://access.redhat.com/errata/RHSA-2017:3244 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-0750
CVE ID: CVE-2016-0751 State: PUBLISHED Published: 2016-02-16T02:00:00 Last Updated: 2024-08-05T22:30:03.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html - http://lists.opensuse.org/opensuse-updates/2016-0
: - http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00034.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html - https://groups.google.com/forum/message/raw?msg=ruby-security-ann/9oLY_FCzvoc/5CDXbvpYEgAJ - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html - http://www.securityfocus.com/bid/81800 - http://www.securitytracker.com/id/1034816 - http://www.openwall.com/lists/oss-security/2016/01/25/9 - http://www.debian.org/security/2016/dsa-3464 - http://rhn.redhat.com/errata/R
wall.com/lists/oss-security/2016/01/25/9 - http://www.debian.org/security/2016/dsa-3464 - http://rhn.redhat.com/errata/RHSA-2016-0296.html
CVE ID: CVE-2016-0752 State: PUBLISHED Published: 2016-02-16T02:00:00.000Z Last Updated: 2025-10-21T23:55:55.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/40561/ - http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html
erences: - https://www.exploit-db.com/exploits/40561/ - http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00034.html - http://www.openwall.com/lists/oss-security/2016/01/25/13 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178069.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html - http://www.securityfocus.com/bid/81801 - http://www.securitytracker.com/id/1034816 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178044.html - https://groups.google.com/forum/message/raw?msg=ruby-security-ann/335P1DcLG00/JXcBnTtZEgAJ - http://www.debian.org/se
- https://groups.google.com/forum/message/raw?msg=ruby-security-ann/335P1DcLG00/JXcBnTtZEgAJ - http://www.debian.org/security/2016/dsa-3464 - http://rhn.redhat.com/errata/RHSA-2016-0296.html
CVE ID: CVE-2016-0753 State: PUBLISHED Published: 2016-02-16T02:00:00 Last Updated: 2024-08-05T22:30:04.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/25/14 - https://groups.google.com/forum/message/raw?msg=ruby-security-ann/6jQVC1geukQ/3Iy0GU1ZEgAJ - http://lists.opensuse.org/opensuse-updates/2016-02/msg000
m/message/raw?msg=ruby-security-ann/6jQVC1geukQ/3Iy0GU1ZEgAJ - http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178041.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178065.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html - http://www.securitytracker.com/id/1034816 - http://www.debian.org/security/2016/dsa-3464 - http://rhn.redhat.com/errata/RHSA-2016-0296.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178066.html - http://
rata/RHSA-2016-0296.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178066.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178047.html - http://www.securityfocus.com/bid/82247
CVE ID: CVE-2016-0754 State: PUBLISHED Published: 2016-01-29T20:00:00 Last Updated: 2024-08-05T22:30:03.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: cURL before 7.47.0 on Windows allows attackers to write to arbitrary files in the current working directory on a different drive via a colon in a remote file name. Additional Analyst Notes: - CVE Program Container: References: - http://curl.haxx.se/docs/adv_20160127B.html
CVE ID: CVE-2016-0755 State: PUBLISHED Published: 2016-01-29T20:00:00 Last Updated: 2024-08-05T22:30:04.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176413.html - http://packetstormsecurity.com/files/135695/Slackware-Security-Advisory-curl-Updates.html - http://lists.opensuse.org/opensuse-updates/2
rmsecurity.com/files/135695/Slackware-Security-Advisory-curl-Updates.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00031.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176546.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://curl.haxx.se/docs/adv_20160127A.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.519965 - http://www.debian.org/security/2016/dsa-3455 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00047.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - http://www.securityfocus.com/bid/82307 - https://suppor
acle.com/technetwork/security-advisory/cpuoct2018-4428296.html - http://www.securityfocus.com/bid/82307 - https://support.apple.com/HT207170 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00044.html - http://www.securitytracker.com/id/1034882 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177383.html - http://www.ubuntu.com/usn/USN-2882-1 - https://security.gentoo.org/glsa/201701-47 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177342.html
CVE ID: CVE-2016-0756 State: PUBLISHED Published: 2016-01-29T20:00:00 Last Updated: 2024-08-05T22:30:04.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields when generating dialback keys, which allows remote attackers to spoof XMPP network domains via a crafted stream id and domain name that is included in the target domain as a suffix. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176796.html - http://www.securityfocus.com/bid/82241 - http://lists.fedoraproject.org/pipermail/
-announce/2016-February/176796.html - http://www.securityfocus.com/bid/82241 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176914.html - https://prosody.im/issues/issue/596 - http://www.openwall.com/lists/oss-security/2016/01/27/10 - http://blog.prosody.im/prosody-0-9-10-released/ - http://www.debian.org/security/2016/dsa-3463 - https://prosody.im/security/advisory_20160127/
CVE ID: CVE-2016-0757 State: PUBLISHED Published: 2016-04-13T17:00:00 Last Updated: 2024-08-05T22:30:04.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Image Service (Glance) before 2015.1.3 (kilo) and 11.0.x before 11.0.2 (liberty), when show_multiple_locations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0309.html - http://www.securityfocus.com/bid/82696 - https://security.openstack.org/ossa/OSSA-2016-006.html
CVE ID: CVE-2016-0758 State: PUBLISHED Published: 2016-06-27T10:00:00 Last Updated: 2024-08-05T22:30:04.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2979-4 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg0
org/opensuse-security-announce/2016-08/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=23c8a812dc3c621009e4f0e5342aa4e2ede1ceaa - https://github.com/torvalds/linux/commit/23c8a812dc3c621009e4f0e5342aa4e2ede1ceaa - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1055.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html -
e-security-announce/2016-08/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html - http://source.android.com/security/bulletin/2016-10-01.html - http://www.openwall.com/lists/oss-security/2016/05/12/9 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html - http://rhn.redhat.com/errata/RHSA-2016-1033.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html - https://bugzilla.redhat
SA-2016-1033.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html - https://bugzilla.redhat.com/show_bug.cgi?id=1300257 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://rhn.redhat.com/errata/RHSA-2016-1051.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html - http://www.securityfocus.com/bid/90626 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.ht
nsuse-security-announce/2016-08/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html - https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158555 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE ID: CVE-2016-0759 State: REJECTED Published: 2017-10-31T14:00:00 Last Updated: 2017-10-31T13:57:01 Description: No description available.
CVE ID: CVE-2016-0760 State: PUBLISHED Published: 2016-08-19T21:00:00 Last Updated: 2024-08-05T22:30:04.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple incomplete blacklist vulnerabilities in Apache Sentry before 1.7.0 allow remote authenticated users to execute arbitrary code via the (1) reflect, (2) reflect2, or (3) java_method Hive builtin functions. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.apache.org/mod_mbox/sentry-dev/201608.mbox/%3CCACMN7ixDqDyOZGLEvsMUVHBiJ6crq8zdy%2B2mNfRooNhnk7CJ1g%40mail.gmail.com%3E - http://www.securityfocus.com/bid/92328
CVE ID: CVE-2016-0761 State: PUBLISHED Published: 2017-05-25T17:00:00 Last Updated: 2024-08-05T22:30:04.112Z Vendors: Pivotal Products: Cloud Foundry Problem Types: File corruption Description: Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to 1.6.17 contain a flaw in managing container files during Docker image preparation that could be used to delete, corrupt or overwrite host files and directories, including other container filesystems on the host. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2016-0761