Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10134 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-06T03:14:42.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggle_ids array parameter in latest.php. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2017/10/zbx-11023-quick-autopsy.html - http://www.openwall.com/lists/oss-security/2017/01/12/4 - http://www.debian.org/security/2017/dsa-3802 - http://www.openwall.com/lists/oss-security/2017/01/13/4 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=8509
-3802 - http://www.openwall.com/lists/oss-security/2017/01/13/4 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850936 - http://www.securityfocus.com/bid/95423 - https://support.zabbix.com/browse/ZBX-11023
CVE ID: CVE-2016-10135 State: PUBLISHED Published: 2017-01-13T09:00:00 Last Updated: 2024-08-06T03:14:42.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG devices using the MTK chipset with L(5.0/5.1), M(6.0/6.0.1), and N(7.0) software, and RCA Voyager Tablet, BLU Advance 5.0, and BLU R1 HD devices. The MTKLogger app with a package name of com.mediatek.mtklogger has application components that are accessible to any application that resides on the device. Namely, the com.mediatek.mtklogger.framework.LogReceiver and com.mediatek.mtklogger.framework.MTKLoggerService application components are exported since they contain an intent filter, are not prote
logger.framework.MTKLoggerService application components are exported since they contain an intent filter, are not protected by a custom permission, and do not explicitly set the android:exported attribute to false. Therefore, these components are exported by default and are thus accessible to any third party application by using android.content.Intent object for communication. These application components can be used to start and stop the logs using Intent objects with embedded data. The available logs are the GPS log, modem log, network log, and mobile log. The base directory that contains the directories for the 4 types of logs is /sdcard/mtklog which makes them accessible to apps that re
tory that contains the directories for the 4 types of logs is /sdcard/mtklog which makes them accessible to apps that require the READ_EXTERNAL_STORAGE permission. The GPS log contains the GPS coordinates of the user as well as a timestamp for the coordinates. The modem log contains AT commands and their parameters which allow the user's outgoing and incoming calls and text messages to be obtained. The network log is a tcpdump network capture. The mobile log contains the Android log, which is not available to third-party apps as of Android 4.1. The LG ID is LVE-SMP-160019. Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/security_updates.html - http
Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/security_updates.html - http://www.securityfocus.com/bid/96846
CVE ID: CVE-2016-10136 State: PUBLISHED Published: 2017-01-13T09:00:00 Last Updated: 2024-08-06T03:14:41.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider named com.adups.fota.sysoper.provider.InfoProvider in the app with a package name of com.adups.fota.sysoper allows any app on the device to read, write, and delete files as the system user. In the com.adups.fota.sysoper app's AndroidManifest.xml file, it sets the android:sharedUserId attribute to a value of android.uid.system which makes it execute as the system user, which is a very privileged user on the device. This allows a thi
d.uid.system which makes it execute as the system user, which is a very privileged user on the device. This allows a third-party app to read, write, and delete files owned by the system user. The third-party app can modify the /data/system/users/0/settings_secure.xml file to add an app as a notification listener to be able to receive the text of notifications as they are received on the device. This also allows the /data/system/users/0/accounts.db to be read which contains authentication tokens for various accounts on the device. The third-party app can obtain privileged information and also modify files to obtain more privileges on the device. Additional Analyst Notes: - CVE Program Contain
formation and also modify files to obtain more privileges on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/adups_security_analysis.html - http://www.securityfocus.com/bid/96854 - https://www.nytimes.com/2016/11/16/us/politics/china-phones-software-security.html
CVE ID: CVE-2016-10137 State: PUBLISHED Published: 2017-01-13T09:00:00 Last Updated: 2024-08-06T03:14:42.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider named com.adups.fota.sysoper.provider.InfoProvider in the app with a package name of com.adups.fota.sysoper allows any app on the device to read, write, and delete files as the system user. In the com.adups.fota.sysoper app's AndroidManifest.xml file, it sets the android:sharedUserId attribute to a value of android.uid.system which makes it execute as the system user, which is a very privileged user on the device. This allows a thi
d.uid.system which makes it execute as the system user, which is a very privileged user on the device. This allows a third-party app to read, write, and delete the user's sent and received text messages and call log. This allows a third-party app to obtain PII from the user without permission to do so. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96852 - https://www.kryptowire.com/adups_security_analysis.html - https://www.nytimes.com/2016/11/16/us/politics/china-phones-software-security.html
CVE ID: CVE-2016-10138 State: PUBLISHED Published: 2017-01-13T09:00:00 Last Updated: 2024-08-06T03:14:41.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on BLU Advance 5.0 and BLU R1 HD devices with Shanghai Adups software. The com.adups.fota.sysoper app is installed as a system app and cannot be disabled by the user. In the com.adups.fota.sysoper app's AndroidManifest.xml file, it sets the android:sharedUserId attribute to a value of android.uid.system which makes it execute as the system user, which is a very privileged user on the device. The app has an exported broadcast receiver named com.adups.fota.sysoper.WriteCommandReceiver which any app on th
device. The app has an exported broadcast receiver named com.adups.fota.sysoper.WriteCommandReceiver which any app on the device can interact with. Therefore, any app can send a command embedded in an intent which will be executed by the WriteCommandReceiver component which is executing as the system user. The third-party app, utilizing the WriteCommandReceiver, can perform the following actions: call a phone number, factory reset the device, take pictures of the screen, record the screen in a video, install applications, inject events, obtain the Android log, and others. In addition, the com.adups.fota.sysoper.TaskService component will make a request to a URL of http://rebootv5.adsunflower
n addition, the com.adups.fota.sysoper.TaskService component will make a request to a URL of http://rebootv5.adsunflower.com/ps/fetch.do where the commands in the String array with a key of sf in the JSON Object sent back by the server will be executed as the system user. Since the connection is made via HTTP, it is vulnerable to a MITM attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.kryptowire.com/adups_security_analysis.html - http://www.securityfocus.com/bid/96853 - https://www.nytimes.com/2016/11/16/us/politics/china-phones-software-security.html
CVE ID: CVE-2016-10139 State: PUBLISHED Published: 2017-01-13T09:00:00 Last Updated: 2024-08-06T03:14:42.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The two package names involved in the exfiltration are com.adups.fota and com.adups.fota.sysoper. In the com.adups.fota.sysoper app's AndroidManifest.xml file, it sets the android:sharedUserId attribute to a value of android.uid.system which makes it execute as the system user, which is a very privileged user on the device. Therefore, the app executing as the system user has been granted a number of powerful permissions even though they are not present
the app executing as the system user has been granted a number of powerful permissions even though they are not present in the com.adups.fota.sysoper app's AndroidManifest.xml file. This app provides the com.adups.fota app access to the user's call log, text messages, and various device identifiers through the com.adups.fota.sysoper.provider.InfoProvider component. The com.adups.fota app uses timestamps when it runs and is eligible to exfiltrate the user's PII every 72 hours. If 72 hours have passed since the value of the timestamp, then the exfiltration will be triggered by the user plugging in the device to charge or when they leave or enter a wireless network. The exfiltration occurs in
by the user plugging in the device to charge or when they leave or enter a wireless network. The exfiltration occurs in the background without any user interaction. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96858 - https://www.kryptowire.com/adups_security_analysis.html - https://www.nytimes.com/2016/11/16/us/politics/china-phones-software-security.html
CVE ID: CVE-2016-10140 State: PUBLISHED Published: 2017-01-13T09:00:00 Last Updated: 2024-08-06T03:14:41.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled with ZoneMinder v1.30 and v1.29, which allows a remote unauthenticated attacker to browse all directories in the web root, e.g., a remote unauthenticated attacker can view all CCTV images on the server via the /events URI. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Feb/11 - http://www.securityfocus.com/bid/96849 - https://github.com/ZoneMinder/ZoneM
//seclists.org/fulldisclosure/2017/Feb/11 - http://www.securityfocus.com/bid/96849 - https://github.com/ZoneMinder/ZoneMinder/commit/71898df7565ed2a51dfe76a1cf30ddb81fc888ba - https://github.com/ZoneMinder/ZoneMinder/pull/1697 - http://seclists.org/bugtraq/2017/Feb/6
CVE ID: CVE-2016-10141 State: PUBLISHED Published: 2017-01-13T09:00:00 Last Updated: 2024-08-06T03:14:42.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045. The attack requires a regular expression with nested repetition. A successful exploitation of this issue can lead to code execution or a denial of service (buffer overflow) condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95876 - https://bugs.ghostscript.com/show_bug.cgi?id=697448 - http://git.ghostscript.c
http://www.securityfocus.com/bid/95876 - https://bugs.ghostscript.com/show_bug.cgi?id=697448 - http://git.ghostscript.com/?p=mujs.git%3Bh=fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045
CVE ID: CVE-2016-10142 State: PUBLISHED Published: 2017-01-14T06:56:00 Last Updated: 2024-08-06T03:14:42.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the IPv6 protocol specification, related to ICMP Packet Too Big (PTB) messages. (The scope of this CVE is all affected IPv6 implementations from all vendors.) The security implications of IP fragmentation have been discussed at length in [RFC6274] and [RFC7739]. An attacker can leverage the generation of IPv6 atomic fragments to trigger the use of fragmentation in an arbitrary IPv6 flow (in scenarios in which actual fragmentation of packets is not needed) and can subsequently perform any type of fra
flow (in scenarios in which actual fragmentation of packets is not needed) and can subsequently perform any type of fragmentation-based attack against legacy IPv6 nodes that do not implement [RFC6946]. That is, employing fragmentation where not actually needed allows for fragmentation-based attack vectors to be employed, unnecessarily. We note that, unfortunately, even nodes that already implement [RFC6946] can be subject to DoS attacks as a result of the generation of IPv6 atomic fragments. Let us assume that Host A is communicating with Host B and that, as a result of the widespread dropping of IPv6 packets that contain extension headers (including fragmentation) [RFC7872], some intermedi
e widespread dropping of IPv6 packets that contain extension headers (including fragmentation) [RFC7872], some intermediate node filters fragments between Host B and Host A. If an attacker sends a forged ICMPv6 PTB error message to Host B, reporting an MTU smaller than 1280, this will trigger the generation of IPv6 atomic fragments from that moment on (as required by [RFC2460]). When Host B starts sending IPv6 atomic fragments (in response to the received ICMPv6 PTB error message), these packets will be dropped, since we previously noted that IPv6 packets with extension headers were being dropped between Host B and Host A. Thus, this situation will result in a DoS scenario. Another possible
ders were being dropped between Host B and Host A. Thus, this situation will result in a DoS scenario. Another possible scenario is that in which two BGP peers are employing IPv6 transport and they implement Access Control Lists (ACLs) to drop IPv6 fragments (to avoid control-plane attacks). If the aforementioned BGP peers drop IPv6 fragments but still honor received ICMPv6 PTB error messages, an attacker could easily attack the corresponding peering session by simply sending an ICMPv6 PTB message with a reported MTU smaller than 1280 bytes. Once the attack packet has been sent, the aforementioned routers will themselves be the ones dropping their own traffic. Additional Analyst Notes: - CVE
sent, the aforementioned routers will themselves be the ones dropping their own traffic. Additional Analyst Notes: - CVE Program Container: References: - https://tools.ietf.org/html/draft-ietf-6man-deprecate-atomfrag-generation-08 - https://tools.ietf.org/html/rfc8021 - http://www.securityfocus.com/bid/95797 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730 - http://rhn.redhat.com/errata/RHSA-2017-0817.html - http://www.securitytracker.com/id/1038256 - https://support.f5.com/csp/article/K57211290?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2016-10143 State: PUBLISHED Published: 2017-01-20T08:39:00 Last Updated: 2024-08-06T03:14:42.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Tiki Wiki CMS 15.2 could allow a remote attacker to read arbitrary files on a targeted system via a crafted pathname in a banner URL field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96787 - https://dev.tiki.org/item6174 - https://sourceforge.net/p/tikiwiki/code/60308/
CVE ID: CVE-2016-10144 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-06T03:14:42.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/16/6 - http://www.securityfocus.com/bid/95750 - https://security.gentoo.org/glsa/201702-09 - http://www.debian.org/security/2017/dsa-3799 - http://www.openwall.com/lists/oss-security/2017/01/17/5 - https://github.com/ImageMagick/ImageMagick/commit/97566cf2806c0a5a86e884c96831a0c3b1ec6c20 - https://
ity/2017/01/17/5 - https://github.com/ImageMagick/ImageMagick/commit/97566cf2806c0a5a86e884c96831a0c3b1ec6c20 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851485
CVE ID: CVE-2016-10145 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-06T03:14:42.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/16/6 - https://security.gentoo.org/glsa/201702-09 - https://github.com/ImageMagick/ImageMagick/commit/d23beebe7b1179fb75db1e85fbca3100e49593d9 - http://www.debian.org/security/2017/dsa-3799 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851483 - http://www.openwall.com/lis
bian.org/security/2017/dsa-3799 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851483 - http://www.openwall.com/lists/oss-security/2017/01/17/5 - http://www.securityfocus.com/bid/95749
CVE ID: CVE-2016-10146 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-06T03:14:41.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service (memory consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/16/6 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851380 - https://security.gentoo.org/glsa/201702-09 - http://www.securityfocus.com/bid/95744 - http://www.debian.org/security/2017/dsa-3799 - https://github.com/ImageMagick/ImageMagick
.securityfocus.com/bid/95744 - http://www.debian.org/security/2017/dsa-3799 - https://github.com/ImageMagick/ImageMagick/commit/aeff00de228bc5a158c2a975ab47845d8a1db456 - http://www.openwall.com/lists/oss-security/2017/01/17/5
CVE ID: CVE-2016-10147 State: PUBLISHED Published: 2017-01-18T21:00:00 Last Updated: 2024-08-06T03:14:42.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5). Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=48a992727d82cb7db076fa15d372178743b1f4cd - https://github.com/torvalds/linux/commit/48a992727d82cb7db076fa15d372178743b1f4cd - http://marc.info/?l=linux-crypt
cd - https://github.com/torvalds/linux/commit/48a992727d82cb7db076fa15d372178743b1f4cd - http://marc.info/?l=linux-crypto-vger&m=148063683310477&w=2 - http://www.openwall.com/lists/oss-security/2017/01/17/13 - http://www.securityfocus.com/bid/95677 - https://bugzilla.redhat.com/show_bug.cgi?id=1404200 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.15 - https://access.redhat.com/errata/RHSA-2017:2077 - https://access.redhat.com/errata/RHSA-2017:1842
CVE ID: CVE-2016-10148 State: PUBLISHED Published: 2017-01-18T21:00:00 Last Updated: 2024-08-06T03:14:42.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 makes a get_plugin_data call before checking the update_plugins capability, which allows remote authenticated users to bypass intended read-access restrictions via the plugin parameter to wp-admin/admin-ajax.php, a related issue to CVE-2016-6896. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96847 - http://www.openwall.com/lists/oss-security/2016/08/20/1 - https://core.trac.wordp
tp://www.securityfocus.com/bid/96847 - http://www.openwall.com/lists/oss-security/2016/08/20/1 - https://core.trac.wordpress.org/changeset/38168 - https://sumofpwn.nl/advisory/2016/path_traversal_vulnerability_in_wordpress_core_ajax_handlers.html - https://core.trac.wordpress.org/ticket/37490
CVE ID: CVE-2016-10149 State: PUBLISHED Published: 2017-03-24T14:00:00 Last Updated: 2024-08-06T03:14:42.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rohe/pysaml2/issues/366 - https://access.redhat.com/errata/RHSA-2017:0936 - http://www.openwall.com/lists/oss-security/2017/01/19/5 - http://www.securityfocus.com/bid/97692 - http://www.debian.org/security/2017/dsa-3759 - https://github.com/rohe/pysaml2/commit/6e09a25d9b4b7aa7a50685321
/97692 - http://www.debian.org/security/2017/dsa-3759 - https://github.com/rohe/pysaml2/commit/6e09a25d9b4b7aa7a506853210a9a14100b8bc9b - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850716 - https://access.redhat.com/errata/RHSA-2017:0938 - https://github.com/rohe/pysaml2/pull/379 - https://access.redhat.com/errata/RHSA-2017:0937
CVE ID: CVE-2016-10150 State: PUBLISHED Published: 2017-02-06T06:04:00 Last Updated: 2024-08-06T03:14:42.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the kvm_ioctl_create_device function in virt/kvm/kvm_main.c in the Linux kernel before 4.8.13 allows host OS users to cause a denial of service (host OS crash) or possibly gain privileges via crafted ioctl calls on the /dev/kvm device. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.13 - http://www.openwall.com/lists/oss-security/2017/01/18/10 - https://github.com/torvalds/linux/commit/a0f1d21c1ccb1da66629627a74059dd7f5a
wall.com/lists/oss-security/2017/01/18/10 - https://github.com/torvalds/linux/commit/a0f1d21c1ccb1da66629627a74059dd7f5ac9c61 - http://www.securityfocus.com/bid/95672 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0f1d21c1ccb1da66629627a74059dd7f5ac9c61 - https://bugzilla.redhat.com/show_bug.cgi?id=1414506
CVE ID: CVE-2016-10151 State: PUBLISHED Published: 2017-03-01T20:00:00 Last Updated: 2024-08-06T03:14:42.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which allows local users to gain privileges via the (1) HESIOD_CONFIG or (2) HES_DOMAIN environment variable and leveraging certain SUID/SGUID binary. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/achernya/hesiod/pull/9 - https://bugzilla.redhat.com/show_bug.cgi?id=1332508 - http://www.securityfocus.com/bid/90952 - http://www.openwall.com/l
https://bugzilla.redhat.com/show_bug.cgi?id=1332508 - http://www.securityfocus.com/bid/90952 - http://www.openwall.com/lists/oss-security/2017/01/21/1 - https://security.gentoo.org/glsa/201805-01
CVE ID: CVE-2016-10152 State: PUBLISHED Published: 2017-03-28T14:00:00 Last Updated: 2024-08-06T03:14:42.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configuration file fails, which allows remote attackers to gain root privileges by poisoning the DNS cache. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90952 - https://bugzilla.redhat.com/show_bug.cgi?id=1332493 - http://www.openwall.com/lists/oss-security/2017/01/21/1 - https://github.com/achernya/hesiod/pull/10 - https://security.gentoo.org/gl
enwall.com/lists/oss-security/2017/01/21/1 - https://github.com/achernya/hesiod/pull/10 - https://security.gentoo.org/glsa/201805-01