Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-7128 State: PUBLISHED Published: 2016-09-12T01:00:00 Last Updated: 2024-08-06T01:50:47.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: The exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file size, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-7.php - https://security.gentoo.org/glsa/201611-22 - http://www.securityfocus.com/bid/92564 - http://www.securitytracker.com/id/1036680 - http://rhn.redhat.com/
/201611-22 - http://www.securityfocus.com/bid/92564 - http://www.securitytracker.com/id/1036680 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.php.net/ChangeLog-5.php - https://www.tenable.com/security/tns-2016-19 - http://openwall.com/lists/oss-security/2016/09/02/9 - https://bugs.php.net/bug.php?id=72627 - https://github.com/php/php-src/commit/6dbb1ee46b5f4725cc6519abf91e512a2a10dfed?w=1
CVE ID: CVE-2016-7129 State: PUBLISHED Published: 2016-09-12T01:00:00 Last Updated: 2024-08-06T01:50:47.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: The php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via an invalid ISO 8601 time value, as demonstrated by a wddx_deserialize call that mishandles a dateTime element in a wddxPacket XML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-7.php - https://security.gentoo.org/glsa/201611-22 - https://github.com/php/php-s
rences: - http://www.php.net/ChangeLog-7.php - https://security.gentoo.org/glsa/201611-22 - https://github.com/php/php-src/commit/426aeb2808955ee3d3f52e0cfb102834cdb836a5?w=1 - http://www.securitytracker.com/id/1036680 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.php.net/ChangeLog-5.php - https://www.tenable.com/security/tns-2016-19 - http://openwall.com/lists/oss-security/2016/09/02/9 - https://bugs.php.net/bug.php?id=72749 - http://www.securityfocus.com/bid/92758
CVE ID: CVE-2016-7130 State: PUBLISHED Published: 2016-09-12T01:00:00 Last Updated: 2024-08-06T01:50:47.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: The php_wddx_pop_element function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via an invalid base64 binary value, as demonstrated by a wddx_deserialize call that mishandles a binary element in a wddxPacket XML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-7.php - https://github.com/php/php-src/commit/698a691724
E Program Container: References: - http://www.php.net/ChangeLog-7.php - https://github.com/php/php-src/commit/698a691724c0a949295991e5df091ce16f899e02?w=1 - https://security.gentoo.org/glsa/201611-22 - http://www.securitytracker.com/id/1036680 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.securityfocus.com/bid/92764 - http://www.php.net/ChangeLog-5.php - https://www.tenable.com/security/tns-2016-19 - http://openwall.com/lists/oss-security/2016/09/02/9 - https://bugs.php.net/bug.php?id=72750
CVE ID: CVE-2016-7131 State: PUBLISHED Published: 2016-09-12T01:00:00 Last Updated: 2024-08-06T01:50:47.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via a malformed wddxPacket XML document that is mishandled in a wddx_deserialize call, as demonstrated by a tag that lacks a < (less than) character. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-7.php - https://github.com/php/php-src/commit/a14fdb9746262549bbbb96abb87338bacd147e1
es: - http://www.php.net/ChangeLog-7.php - https://github.com/php/php-src/commit/a14fdb9746262549bbbb96abb87338bacd147e1b?w=1 - https://security.gentoo.org/glsa/201611-22 - http://www.securitytracker.com/id/1036680 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - https://bugs.php.net/bug.php?id=72790 - http://www.php.net/ChangeLog-5.php - https://www.tenable.com/security/tns-2016-19 - http://www.securityfocus.com/bid/92768 - http://openwall.com/lists/oss-security/2016/09/02/9 - https://github.com/php/php-src/commit/0c8a2a2cd1056b7dc403eacb5d2c0eec6ce47c6f
CVE ID: CVE-2016-7132 State: PUBLISHED Published: 2016-09-12T01:00:00 Last Updated: 2024-08-06T01:50:47.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via an invalid wddxPacket XML document that is mishandled in a wddx_deserialize call, as demonstrated by a stray element inside a boolean element, leading to incorrect pop processing. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-7.php - https://github.com/php/php-src/commit/a14fd
- CVE Program Container: References: - http://www.php.net/ChangeLog-7.php - https://github.com/php/php-src/commit/a14fdb9746262549bbbb96abb87338bacd147e1b?w=1 - http://www.securityfocus.com/bid/92767 - https://security.gentoo.org/glsa/201611-22 - http://www.securitytracker.com/id/1036680 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - https://bugs.php.net/bug.php?id=72799 - http://www.php.net/ChangeLog-5.php - https://www.tenable.com/security/tns-2016-19 - http://openwall.com/lists/oss-security/2016/09/02/9 - https://github.com/php/php-src/commit/0c8a2a2cd1056b7dc403eacb5d2c0eec6ce47c6f
CVE ID: CVE-2016-7133 State: PUBLISHED Published: 2016-09-12T01:00:00 Last Updated: 2024-08-06T01:50:47.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zend/zend_alloc.c in PHP 7.x before 7.0.10, when open_basedir is enabled, mishandles huge realloc operations, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a long pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92765 - http://www.php.net/ChangeLog-7.php - https://security.gentoo.org/glsa/201611-22 - https://github.com/php/php-src/commit/c2a13ced4272f2e65d2773e2ea6ca11c1ce4a911?w=1 - http://o
entoo.org/glsa/201611-22 - https://github.com/php/php-src/commit/c2a13ced4272f2e65d2773e2ea6ca11c1ce4a911?w=1 - http://openwall.com/lists/oss-security/2016/09/02/9 - https://bugs.php.net/bug.php?id=72742
CVE ID: CVE-2016-7134 State: PUBLISHED Published: 2016-09-12T01:00:00 Last Updated: 2024-08-06T01:50:47.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/curl/interface.c in PHP 7.x before 7.0.10 does not work around a libcurl integer overflow, which allows remote attackers to cause a denial of service (allocation error and heap-based buffer overflow) or possibly have unspecified other impact via a long string that is mishandled in a curl_escape call. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-7.php - https://security.gentoo.org/glsa/201611-22 - http://www.securitytracker.com/id/1036680 - https://bugs.php.net/bug.php?id=726
s://security.gentoo.org/glsa/201611-22 - http://www.securitytracker.com/id/1036680 - https://bugs.php.net/bug.php?id=72674 - https://github.com/php/php-src/commit/72dbb7f416160f490c4e9987040989a10ad431c7?w=1 - http://www.securityfocus.com/bid/92766 - http://openwall.com/lists/oss-security/2016/09/02/9
CVE ID: CVE-2016-7135 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T01:50:47.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Plone CMS 5.x through 5.0.6 and 4.2.x through 4.3.11 allows remote administrators to read arbitrary files via a .. (dot dot) in the path parameter in a getFile action to Plone/++theme++barceloneta/@@plone.resourceeditor.filemanager-actions. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html - http://seclists.org/fulldisclosure/2016/Oct/80 - https://plone.org/security/hotfix/2
S-Traversal-Open-Redirection.html - http://seclists.org/fulldisclosure/2016/Oct/80 - https://plone.org/security/hotfix/20160830/filesystem-information-leak - http://www.openwall.com/lists/oss-security/2016/09/05/4 - http://www.openwall.com/lists/oss-security/2016/09/05/5 - http://www.securityfocus.com/archive/1/539572/100/0/threaded - http://www.securityfocus.com/bid/92752
CVE ID: CVE-2016-7136 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T01:50:47.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: z3c.form in Plone CMS 5.x through 5.0.6 and 4.x through 4.3.11 allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted GET request. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html - http://seclists.org/fulldisclosure/2016/Oct/80 - https://plone.org/security/hotfix/20160830/non-persistent-xss-in-plone-forms - http://www.openwall.com/lists/oss-security/2016/09/05/4 - http://www.openw
/20160830/non-persistent-xss-in-plone-forms - http://www.openwall.com/lists/oss-security/2016/09/05/4 - http://www.openwall.com/lists/oss-security/2016/09/05/5 - http://www.securityfocus.com/archive/1/539572/100/0/threaded - http://www.securityfocus.com/bid/92752
CVE ID: CVE-2016-7137 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T01:50:47.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter to (1) %2b%2bgroupdashboard%2b%2bplone.dashboard1%2bgroup/%2b/portlets.Actions or (2) folder/%2b%2bcontextportlets%2b%2bplone.footerportlets/%2b /portlets.Actions or the (3) came_from parameter to /login_form. Additional Analyst Notes: - CVE Program Container: References: - http://packets
(3) came_from parameter to /login_form. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html - http://seclists.org/fulldisclosure/2016/Oct/80 - http://www.openwall.com/lists/oss-security/2016/09/05/4 - https://plone.org/security/hotfix/20160830/open-redirection-in-plone - http://www.openwall.com/lists/oss-security/2016/09/05/5 - http://www.securityfocus.com/archive/1/539572/100/0/threaded - http://www.securityfocus.com/bid/92752
CVE ID: CVE-2016-7138 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T01:50:47.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the URL checking infrastructure in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html - https://plone.org/security/hotfix/20160830/non-persistent-xss-in-plone-1 - http://seclists.org/fulldisclosure/2016/Oct/80 - http
plone.org/security/hotfix/20160830/non-persistent-xss-in-plone-1 - http://seclists.org/fulldisclosure/2016/Oct/80 - http://www.openwall.com/lists/oss-security/2016/09/05/4 - http://www.openwall.com/lists/oss-security/2016/09/05/5 - http://www.securityfocus.com/archive/1/539572/100/0/threaded - http://www.securityfocus.com/bid/92752
CVE ID: CVE-2016-7139 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T01:50:47.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in an unspecified page template in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://plone.org/security/hotfix/20160830/non-persistent-xss-in-plone - http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html - http://seclists.org/fulldisclosure/2016/Oct/80 - http://
10/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html - http://seclists.org/fulldisclosure/2016/Oct/80 - http://www.openwall.com/lists/oss-security/2016/09/05/4 - http://www.openwall.com/lists/oss-security/2016/09/05/5 - http://www.securityfocus.com/archive/1/539572/100/0/threaded - http://www.securityfocus.com/bid/92752
CVE ID: CVE-2016-7140 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T01:50:47.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the ZMI page in Zope2 in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/139110/Plone-CMS-4.3.11-5.0.6-XSS-Traversal-Open-Redirection.html - http://seclists.org/fulldisclosure/2016/Oct/80 - http://www.openwall.com/lists/oss-security/2016/09/05/4 - http://www.open
tp://seclists.org/fulldisclosure/2016/Oct/80 - http://www.openwall.com/lists/oss-security/2016/09/05/4 - http://www.openwall.com/lists/oss-security/2016/09/05/5 - http://www.securityfocus.com/archive/1/539572/100/0/threaded - http://www.securityfocus.com/bid/92752 - https://plone.org/security/hotfix/20160830/non-persistent-xss-in-zope2
CVE ID: CVE-2016-7141 State: PUBLISHED Published: 2016-10-03T21:00:00 Last Updated: 2024-08-06T01:50:47.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2575.html - https://curl.haxx.se/docs/adv_20160907.html - https://access.red
s: - http://rhn.redhat.com/errata/RHSA-2016-2575.html - https://curl.haxx.se/docs/adv_20160907.html - https://access.redhat.com/errata/RHSA-2018:3558 - https://bugzilla.redhat.com/show_bug.cgi?id=1373229 - http://www.securitytracker.com/id/1036739 - https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html - https://github.com/curl/curl/commit/curl-7_50_2~32 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - http://rhn.redhat.com/errata/RHSA-2016-2957.html - http://www.securityfocus.com/bid/92754 - https://security.gentoo.org/glsa/201701-47
CVE ID: CVE-2016-7142 State: PUBLISHED Published: 2016-09-26T15:00:00 Last Updated: 2024-08-06T01:50:47.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: The m_sasl module in InspIRCd before 2.0.23, when used with a service that supports SASL_EXTERNAL authentication, allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted SASL message. Additional Analyst Notes: - CVE Program Container: References: - http://www.inspircd.org/2016/09/03/v2023-released.html - https://github.com/inspircd/inspircd/commit/74fafb7f11b06747f69f182ad5e3769b665eea7a - http://www.openwall.com/lists/oss-security/2016/09/05/8 - http://www.openwall.com/l
7f11b06747f69f182ad5e3769b665eea7a - http://www.openwall.com/lists/oss-security/2016/09/05/8 - http://www.openwall.com/lists/oss-security/2016/09/04/3 - http://www.debian.org/security/2016/dsa-3662
CVE ID: CVE-2016-7143 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T01:50:47.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: The m_authenticate function in modules/m_sasl.c in Charybdis before 3.5.3 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/charybdis-ircd/charybdis/commit/818a3fda944b26d4814132cee14cfda4ea4aa824 - http://www.debian.org/security/2016/dsa-3661 - https://github.com/charybdis-ircd/charybdis/blob/charybdis-3.5.3/NEWS.md - http://www.securityfocus.com/bid/92761 -
1 - https://github.com/charybdis-ircd/charybdis/blob/charybdis-3.5.3/NEWS.md - http://www.securityfocus.com/bid/92761 - http://www.openwall.com/lists/oss-security/2016/09/05/8 - http://www.openwall.com/lists/oss-security/2016/09/04/3
CVE ID: CVE-2016-7144 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T01:50:47.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: The m_authenticate function in modules/m_sasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/unrealircd/unrealircd/commit/f473e355e1dc422c4f019dbf86bc50ba1a34a766 - https://forums.unrealircd.org/viewtopic.php?f=1&t=8588 - http://www.securityfocus.com/bid/92763 - http://www.openwall.com/lists/oss-security/
ircd.org/viewtopic.php?f=1&t=8588 - http://www.securityfocus.com/bid/92763 - http://www.openwall.com/lists/oss-security/2016/09/05/8 - http://www.openwall.com/lists/oss-security/2016/09/04/3
CVE ID: CVE-2016-7145 State: PUBLISHED Published: 2017-03-07T15:00:00 Last Updated: 2024-08-06T01:50:47.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: The m_authenticate function in ircd/m_authenticate.c in nefarious2 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/evilnet/nefarious2/commit/f50a84bad996d438e7b31b9e74c32a41e43f8be5 - http://www.openwall.com/lists/oss-security/2016/09/05/9
CVE ID: CVE-2016-7146 State: PUBLISHED Published: 2016-11-10T17:00:00 Last Updated: 2024-08-06T01:50:47.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=fckdialog&dialog=attachment (via page name) component. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3137-1 - http://www.securityfocus.com/bid/94259 - http://www.debian.org/security/2016/dsa-3715 - https://www.curesec.com/blog/article/blog/MoinMoin-198-XSS-175.html
CVE ID: CVE-2016-7147 State: PUBLISHED Published: 2017-02-04T05:20:00 Last Updated: 2024-08-06T01:50:47.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the manage_findResult component in the search feature in Zope ZMI in Plone before 4.3.12 and 5.x before 5.0.7 allows remote attackers to inject arbitrary web script or HTML via vectors involving double quotes, as demonstrated by the obj_ids:tokens parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7140. Additional Analyst Notes: - CVE Program Container: References: - https://www.curesec.com/blog/article/blog/Plone-XSS-186.html - https://plone.org/sec
VE Program Container: References: - https://www.curesec.com/blog/article/blog/Plone-XSS-186.html - https://plone.org/security/hotfix/20170117 - https://plone.org/security/hotfix/20170117/non-persistent-xss-in-zope2 - http://www.securityfocus.com/bid/96117
CVE ID: CVE-2016-7148 State: PUBLISHED Published: 2016-11-10T17:00:00 Last Updated: 2024-08-06T01:50:47.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=AttachFile (via page name) component. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3137-1 - http://www.securityfocus.com/bid/94259 - http://www.debian.org/security/2016/dsa-3715 - https://www.curesec.com/blog/article/blog/MoinMoin-198-XSS-175.html
CVE ID: CVE-2016-7149 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T01:50:47.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to the autolink function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/15/4 - http://www.securityfocus.com/bid/92967 - http://www.openwall.com/lists/oss-security/2016/09/12/1 - https://github.com/b2evolution/b2evolution/commit/9a4ab85439d1b838ee7b8eeebbf59174bb787811
CVE ID: CVE-2016-7150 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T01:50:47.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the site name. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/15/4 - http://www.securityfocus.com/bid/92967 - https://github.com/b2evolution/b2evolution/commit/dd975fff7fce81bf12f9c59edb1a99475747c83c - http://www.openwall.com/lists/oss-security/2016/09/12/1
CVE ID: CVE-2016-7151 State: PUBLISHED Published: 2019-05-15T13:05:03 Last Updated: 2024-08-06T01:50:47.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aquynh/capstone/pull/725 - https://github.com/aquynh/capstone/commit/87a25bb543c8e4c09b48d4b4a6c7db31ce58df06
CVE ID: CVE-2016-7152 State: PUBLISHED Published: 2016-09-06T10:00:00 Last Updated: 2024-08-06T01:50:47.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036741 - http://www.securitytracker.com/id/1036742 - http://www.securityfocus.com/bid/92769 - https://tom.vg/papers/heist_blackhat2016.pdf
.securitytracker.com/id/1036742 - http://www.securityfocus.com/bid/92769 - https://tom.vg/papers/heist_blackhat2016.pdf - http://www.securitytracker.com/id/1036745 - http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/ - http://www.securitytracker.com/id/1036744 - http://www.securitytracker.com/id/1036743 - http://www.securitytracker.com/id/1036746