Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- CVE Program Container: References: - https://launchpad.net/bugs/1492140 - https://review.opendev.org/220622 - https://security.openstack.org/ossa/OSSA-2020-001.html - http://www.openwall.com/lists/oss-security/2020/02/19/2
CVE ID: CVE-2015-9544 State: PUBLISHED Published: 2020-04-07T17:19:21 Last Updated: 2024-08-06T08:51:05.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage() function in xdLocalStoragePostMessageApi.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the confidentiality and integrity of data in the local storage of the vulnerable site via malicious web messages. Additional Analyst Notes: - CVE Program Container: References: - https://grimhacker.com/exploiting-xdlocalstorage-localstorage-and-pos
lyst Notes: - CVE Program Container: References: - https://grimhacker.com/exploiting-xdlocalstorage-localstorage-and-postmessage/#Missing-Origin-Magic-iframe - https://github.com/ofirdagan/cross-domain-local-storage/issues/17 - https://github.com/ofirdagan/cross-domain-local-storage/pull/19 - https://github.com/ofirdagan/cross-domain-local-storage
CVE ID: CVE-2015-9545 State: PUBLISHED Published: 2020-04-07T17:18:41 Last Updated: 2024-08-06T08:51:05.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage() function in xdLocalStorage.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the confidentiality and integrity of data in the local storage of the vulnerable site via malicious web messages. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ofirdagan/cross-domain-local-storage/issues/17 - https://github.
CVE Program Container: References: - https://github.com/ofirdagan/cross-domain-local-storage/issues/17 - https://github.com/ofirdagan/cross-domain-local-storage/pull/19 - https://github.com/ofirdagan/cross-domain-local-storage - https://grimhacker.com/exploiting-xdlocalstorage-localstorage-and-postmessage/#Missing-Origin-Client
CVE ID: CVE-2015-9546 State: PUBLISHED Published: 2020-04-10T18:54:57 Last Updated: 2024-08-06T08:51:05.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-06-16. In some cases, HTTP is used for an Inputmethod, rather than HTTPS. A man-in-the-middle attacker can modify the client-server data stream to insert directory traversal sequences into an extracted file path. The Samsung ID is SVE-2015-4363 (November 2015). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2015-9547 State: PUBLISHED Published: 2020-04-10T18:49:26 Last Updated: 2024-08-06T08:51:05.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with JBP(4.3) and KK(4.4.2) software. Because the READ_LOGS permission is mishandled, sensitive information is disclosed in a world-readable copy of the log file if the error message is "Unhandled exception in Dalvik VM," "Application not responding ANR event," or "Crash on an application's native code." The Samsung ID is SVE-2015-2885 (October 2015). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2015-9548 State: PUBLISHED Published: 2020-06-19T19:30:35 Last Updated: 2024-08-06T08:51:05.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 1.2.0. It allows attackers to cause a denial of service (memory consumption) via a small compressed file that has a large size when uncompressed. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2015-9549 State: PUBLISHED Published: 2020-08-03T15:48:45 Last Updated: 2024-08-06T08:51:05.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected Cross-site Scripting (XSS) vulnerability exists in OcPortal 9.0.20 via the OCF_EMOTICON_CELL.tpl FIELD_NAME field to data/emoticons.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cybersecurityworks/Disclosed/issues/11 - https://www.openwall.com/lists/oss-security/2015/12/19/2 - https://cybersecurityworks.com/zerodays/cve-2015-9549-ocportal.html
CVE ID: CVE-2015-9550 State: PUBLISHED Published: 2020-11-24T21:01:41 Last Updated: 2024-08-06T08:51:05.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices. By sending a specific hel,xasf packet to the WAN interface, it is possible to open the web management interface on the WAN interface. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2015-07-16-backdoor-and-RCE-found-in-8-TOTOLINK-products.html
CVE ID: CVE-2015-9551 State: PUBLISHED Published: 2020-11-24T21:01:27 Last Updated: 2024-08-06T08:58:24.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices. There is Remote Code Execution in the management interface via the formSysCmd sysCmd parameter. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2015-07-16-backdoor-and-RCE-found-in-8-TOTOLINK-products.html
CVE ID: CVE-2016-0001 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-0002 State: PUBLISHED Published: 2016-01-13T02:00:00 Last Updated: 2024-08-05T22:08:11.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034650 - http://www.securitytracker.com/id/1034648 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-003 - https://docs.microsoft.com/e
34648 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-003 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-001 - https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1215
CVE ID: CVE-2016-0003 State: PUBLISHED Published: 2016-01-13T02:00:00 Last Updated: 2024-08-05T22:08:11.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Microsoft Edge Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-002 - http://www.securitytracker.com/id/1034649 - http://www.zerodayinitiative.com/advisories/ZDI-16-019
CVE ID: CVE-2016-0004 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-0005 State: PUBLISHED Published: 2016-01-13T02:00:00 Last Updated: 2024-08-05T22:08:11.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034648 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-001
CVE ID: CVE-2016-0006 State: PUBLISHED Published: 2016-01-13T02:00:00 Last Updated: 2024-08-05T22:08:11.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles reparse points, which allows local users to gain privileges via a crafted application, aka "Windows Mount Point Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0007. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/secur
n CVE-2016-0007. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-008 - http://www.securitytracker.com/id/1034645 - https://www.exploit-db.com/exploits/39311/ - http://www.securityfocus.com/bid/79882
CVE ID: CVE-2016-0007 State: PUBLISHED Published: 2016-01-13T02:00:00 Last Updated: 2024-08-05T22:08:12.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles reparse points, which allows local users to gain privileges via a crafted application, aka "Windows Mount Point Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0006. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/secur
n CVE-2016-0006. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-008 - http://www.securitytracker.com/id/1034645 - https://code.google.com/p/google-security-research/issues/detail?id=589 - https://www.exploit-db.com/exploits/39311/ - http://www.securityfocus.com/bid/79898 - https://www.exploit-db.com/exploits/39310/
CVE ID: CVE-2016-0008 State: PUBLISHED Published: 2016-01-13T02:00:00 Last Updated: 2024-08-05T22:08:11.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: The graphics device interface in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "Windows GDI32.dll ASLR Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-005 - https://www.verisign.com/en_US/security-servi
ocs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-005 - https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1216 - http://www.securitytracker.com/id/1034654
CVE ID: CVE-2016-0009 State: PUBLISHED Published: 2016-01-13T02:00:00 Last Updated: 2024-08-05T22:08:11.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 10 Gold and 1511 allow remote attackers to execute arbitrary code via unspecified vectors, aka "Win32k Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-005 - http://www.securitytracker.com/id/1034654
CVE ID: CVE-2016-0010 State: PUBLISHED Published: 2016-01-13T02:00:00 Last Updated: 2024-08-05T22:08:11.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, Excel 2016 for Mac, PowerPoint 2016 for Mac, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-004 - http://ww
m Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-004 - http://www.securitytracker.com/id/1034651
CVE ID: CVE-2016-0011 State: PUBLISHED Published: 2016-01-13T02:00:00 Last Updated: 2024-08-05T22:08:12.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka "Microsoft SharePoint Security Feature Bypass," a different vulnerability than CVE-2015-6117. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-004 - http://www.securitytracker.com/id/1034653
CVE ID: CVE-2016-0012 State: PUBLISHED Published: 2016-01-13T02:00:00 Last Updated: 2024-08-05T22:08:11.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office 2016, Excel 2016, PowerPoint 2016, Visio 2016, Word 2016, and Visual Basic 6.0 Runtime allow remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "Microsoft Office AS
Runtime allow remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "Microsoft Office ASLR Bypass." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-004 - http://www.securitytracker.com/id/1034651
CVE ID: CVE-2016-0013 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-0014 State: PUBLISHED Published: 2016-01-13T02:00:00 Last Updated: 2024-08-05T22:08:12.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-007 - http://www.securitytracker.com/id/1034661
CVE ID: CVE-2016-0015 State: PUBLISHED Published: 2016-01-13T02:00:00 Last Updated: 2024-08-05T22:08:12.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file, aka "DirectShow Heap Corruption Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034660 - http://packetstormsecurity.com/files/135232/Microsoft-DirectShow-Remote-Code-Execution.html - https://w
com/id/1034660 - http://packetstormsecurity.com/files/135232/Microsoft-DirectShow-Remote-Code-Execution.html - https://www.exploit-db.com/exploits/39232/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-007
CVE ID: CVE-2016-0016 State: PUBLISHED Published: 2016-01-13T02:00:00 Last Updated: 2024-08-05T22:08:12.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39233/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-007
/www.exploit-db.com/exploits/39233/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-007 - http://www.securitytracker.com/id/1034661 - https://code.google.com/p/google-security-research/issues/detail?id=555
CVE ID: CVE-2016-0017 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-0018 State: PUBLISHED Published: 2016-01-13T02:00:00 Last Updated: 2024-08-05T22:08:11.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-007 - http://www.securitytracker.com/id/1034661
CVE ID: CVE-2016-0019 State: PUBLISHED Published: 2016-01-13T02:00:00 Last Updated: 2024-08-05T22:08:12.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Desktop Protocol (RDP) service implementation in Microsoft Windows 10 Gold and 1511 allows remote attackers to bypass intended access restrictions and establish sessions for blank-password accounts via a modified RDP client, aka "Windows Remote Desktop Protocol Security Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-007 - http://www.securitytracker.com/id/1034659
CVE ID: CVE-2016-0020 State: PUBLISHED Published: 2016-01-13T02:00:00 Last Updated: 2024-08-05T22:08:12.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "MAPI DLL Loading Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-018 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-007 - http://www.securitytracker.com/id/1034661
CVE ID: CVE-2016-0021 State: PUBLISHED Published: 2016-03-09T11:00:00 Last Updated: 2024-08-05T22:08:12.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft InfoPath 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035207 - http://www.securityfocus.com/bid/84024 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-029
CVE ID: CVE-2016-0022 State: PUBLISHED Published: 2016-02-10T11:00:00 Last Updated: 2024-08-05T22:08:13.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps Server 2013 SP1, and SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0052. Additional Analyst Notes: - CVE Program Contain
Corruption Vulnerability," a different vulnerability than CVE-2016-0052. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034976 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-015 - http://www.securitytracker.com/id/1034975
CVE ID: CVE-2016-0023 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-0024 State: PUBLISHED Published: 2016-01-13T02:00:00 Last Updated: 2024-08-05T22:08:12.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting Engine Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-002 - http://www.securitytracker.com/id/1034649 - http://www.securityfocus.com/bid/79891
CVE ID: CVE-2016-0025 State: PUBLISHED Published: 2016-06-16T01:00:00 Last Updated: 2024-08-05T22:08:12.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, and Office Online Server allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analys
arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070 - http://www.securitytracker.com/id/1036093
CVE ID: CVE-2016-0026 State: PUBLISHED Published: 2016-11-10T06:16:00 Last Updated: 2024-08-05T22:08:12.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows Common Log File System Driver Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3332, CVE-2016-3333, CVE-2016-3334, CVE-2016-3335, CVE-2016-3338, CVE-2016-3340, CVE-2016-3342, CVE-20
ity than CVE-2016-3332, CVE-2016-3333, CVE-2016-3334, CVE-2016-3335, CVE-2016-3338, CVE-2016-3340, CVE-2016-3342, CVE-2016-3343, and CVE-2016-7184. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037252 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-134 - http://www.securityfocus.com/bid/93998
CVE ID: CVE-2016-0027 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-0028 State: PUBLISHED Published: 2016-06-16T01:00:00 Last Updated: 2024-08-05T22:08:12.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Outlook Web Access (OWA) in Microsoft Exchange Server 2013 SP1, Cumulative Update 11, and Cumulative Update 12 and 2016 Gold and Cumulative Update 1 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to track users via a crafted HTML e-mail message, aka "Microsoft Exchange Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-079 - http://www.securitytracker