Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-3138 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-05T23:47:57.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both a control and a data endpoint descriptor. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2971-2 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html - http
urity-announce/2016-06/msg00054.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html - http://www.ubuntu.com/usn/USN-2970-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8835ba4a39cf53f705417b3b3a94eb067673f2c9 - http://www.ubuntu.com/usn/USN-2969-1 - http://www.ubuntu.com/usn/USN-2968-1 - http://www.ubuntu.com/usn/USN-2971-3 - http://www.ubuntu.com/usn/USN-2997-1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-2971-1 - http://www.openwall.com/lists/oss-security/2016/03/14/4 - http://lists.opensuse.org/opensuse-security-announc
N-2971-1 - http://www.openwall.com/lists/oss-security/2016/03/14/4 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html - http://www.ubuntu.com/usn/USN-2996-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://www.ubuntu.com/usn/USN-2968-2 - https://bugzilla.redhat.com/show_bug.cgi?id=1316204 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - https://github.com/torvalds/linux/commit/8835ba4a39cf53f705417b3b3a94eb067673f2c9 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1
CVE ID: CVE-2016-3139 State: PUBLISHED Published: 2016-04-27T17:00:00 Last Updated: 2024-08-05T23:47:57.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39538/ - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - https://bugzilla.redhat.com/show_bug.cgi?id=1316993 - https://bugzilla.redhat.com/s
ity-announce/2016-06/msg00054.html - https://bugzilla.redhat.com/show_bug.cgi?id=1316993 - https://bugzilla.redhat.com/show_bug.cgi?id=1283377 - https://security-tracker.debian.org/tracker/CVE-2016-3139 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=471d17148c8b4174ac5f5283a73316d12c4379bc - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - https://github.com/torvalds/linux/commit/471d17148c8b4174ac5f5283a73316d12c4379bc - https://bugzilla.redhat.com/show_bug.cgi?id=1283375 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://li
-announce/2016-06/msg00059.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
CVE ID: CVE-2016-3140 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-05T23:47:57.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2971-2 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - https://www.exploit-db.com/exploits/39537/ - http://lists.opensuse.org/opensuse-s
urity-announce/2016-06/msg00054.html - https://www.exploit-db.com/exploits/39537/ - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html - http://www.ubuntu.com/usn/USN-2970-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1316995 - http://www.ubuntu.com/usn/USN-2968-1 - http://www.ubuntu.com/usn/USN-2971-3 - http://www.ubuntu.com/usn/USN-2997-1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://www.ubuntu.com/usn/USN-3000-1 - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-2971-1 - https://github.com/torvalds/linux/commit/5a07975ad0a36708c6b0a5b9fea1ff811d0b0c1f - http://lists.opensuse.org/opensuse-security
/github.com/torvalds/linux/commit/5a07975ad0a36708c6b0a5b9fea1ff811d0b0c1f - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html - http://www.ubuntu.com/usn/USN-2996-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://www.ubuntu.com/usn/USN-2968-2 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5a07975ad0a36708c6b0a5b9fea1ff811d0b0c1f - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1 - http://www.securityfocus.com/bid/84304 - http://www.openwa
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1 - http://www.securityfocus.com/bid/84304 - http://www.openwall.com/lists/oss-security/2016/03/14/6
CVE ID: CVE-2016-3141 State: PUBLISHED Published: 2016-03-31T16:00:00 Last Updated: 2024-08-05T23:47:57.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact by triggering a wddx_deserialize call on XML data containing a crafted var element. Additional Analyst Notes: - CVE Program Container: References: - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b1bd4119bcafab6f9a8f84d92cd65eec3afeface - http://www.ubuntu.com/usn/USN-2952-1 - http://ww
p=php-src.git%3Ba=commit%3Bh=b1bd4119bcafab6f9a8f84d92cd65eec3afeface - http://www.ubuntu.com/usn/USN-2952-1 - http://www.securityfocus.com/bid/84271 - https://support.apple.com/HT206567 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html - http://www.ubuntu.com/usn/USN-2952-2 - http://lists.apple.com/archives/security-announce/2016/May/msg00004.html - http://www.securitytracker.com/id/1035255 - https://bugs.php.net/bug.php?id=71587 - http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html - https://php.net/ChangeLog-5
?id=71587 - http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html - https://php.net/ChangeLog-5.php - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html
CVE ID: CVE-2016-3142 State: PUBLISHED Published: 2016-03-31T16:00:00 Last Updated: 2024-08-05T23:47:57.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) by placing a PK\x05\x06 signature at an invalid location. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2952-1 - https://support.apple.com/HT206567 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html -
2-1 - https://support.apple.com/HT206567 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html - http://www.ubuntu.com/usn/USN-2952-2 - http://lists.apple.com/archives/security-announce/2016/May/msg00004.html - http://www.securitytracker.com/id/1035255 - https://php.net/ChangeLog-5.php - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html - https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=a6fdc5bb27b20d889de0cd29318b3968aabb57bd - https://bugs.
g00052.html - https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=a6fdc5bb27b20d889de0cd29318b3968aabb57bd - https://bugs.php.net/bug.php?id=71498
CVE ID: CVE-2016-3144 State: PUBLISHED Published: 2016-04-15T15:00:00 Last Updated: 2024-08-05T23:47:57.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Block Class module 7.x-2.x before 7.x-2.2 for Drupal allows remote authenticated users with the "Administer block classes" permission to inject arbitrary web script or HTML via a class name. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2636502 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182953.html - https://www.drupal.org/node/2636498 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/
82953.html - https://www.drupal.org/node/2636498 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182886.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182535.html
CVE ID: CVE-2016-3145 State: PUBLISHED Published: 2016-04-22T00:00:00 Last Updated: 2024-08-05T23:47:57.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read operations on non-volatile memory. Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/index?page=content&id=TE760
CVE ID: CVE-2016-3147 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-05T23:47:57.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the collector.exe listener of the Landesk Management Suite 10.0.0.271 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93565 - https://www.securifera.com/advisories/cve-2016-3147/
CVE ID: CVE-2016-3149 State: PUBLISHED Published: 2017-01-12T23:00:00 Last Updated: 2024-08-05T23:47:57.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/139713/Barco-ClickShare-XSS-Remote-Code-Execution-Path-Traversal.html - http://www.securityfocus.com/archive/1/539754/100/0/threaded - http://www.securityfocus.com/bid/94323
CVE ID: CVE-2016-3150 State: PUBLISHED Published: 2017-01-12T23:00:00 Last Updated: 2024-08-05T23:47:58.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/139713/Barco-ClickShare-XSS-Remote-Code-Execution-Path-Traversal.html - http://www.securityfocus.com/archiv
ty.com/files/139713/Barco-ClickShare-XSS-Remote-Code-Execution-Path-Traversal.html - http://www.securityfocus.com/archive/1/539754/100/0/threaded - http://www.securityfocus.com/bid/94330
CVE ID: CVE-2016-3151 State: PUBLISHED Published: 2017-01-12T23:00:00 Last Updated: 2024-08-05T23:47:57.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to read /etc/shadow via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/139713/Barco-ClickShare-XSS-Remote-Code-Execution-Path-Traversal.html - http://www.securityfocus.com/archive/1/539754/100/0/thre
arco-ClickShare-XSS-Remote-Code-Execution-Path-Traversal.html - http://www.securityfocus.com/archive/1/539754/100/0/threaded - http://www.securityfocus.com/bid/94330
CVE ID: CVE-2016-3152 State: PUBLISHED Published: 2017-01-12T23:00:00 Last Updated: 2024-08-05T23:47:57.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94326 - http://packetstormsecurity.com/files/139713/Barco-ClickShare-XSS-Remote-Code-Execution-Path-Traversal.html - http://www.securityfocus.com/archive/1/539754/100/0/threaded
CVE ID: CVE-2016-3153 State: PUBLISHED Published: 2016-04-08T14:00:00 Last Updated: 2024-08-05T23:47:57.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to execute arbitrary PHP code by adding content, related to the filtrer_entites function. Additional Analyst Notes: - CVE Program Container: References: - https://core.spip.net/projects/spip/repository/revisions/22911 - https://blog.spip.net/Mise-a-jour-CRITIQUE-de-securite-Sortie-de-SPIP-3-1-1-SPIP-3-0-22-et-SPIP-2-1.html?lang=fr - http://www.debian.org/security/2016/dsa-3518
CVE ID: CVE-2016-3154 State: PUBLISHED Published: 2016-04-08T14:00:00 Last Updated: 2024-08-05T23:47:57.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: The encoder_contexte_ajax function in ecrire/inc/filtres.php in SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object. Additional Analyst Notes: - CVE Program Container: References: - https://blog.spip.net/Mise-a-jour-CRITIQUE-de-securite-Sortie-de-SPIP-3-1-1-SPIP-3-0-22-et-SPIP-2-1.html?lang=fr - http://www.debian.org/security/2016/dsa-3518 - https://core.spip.net/projects/spip/repositor
-et-SPIP-2-1.html?lang=fr - http://www.debian.org/security/2016/dsa-3518 - https://core.spip.net/projects/spip/repository/revisions/22903
CVE ID: CVE-2016-3155 State: PUBLISHED Published: 2016-03-18T14:00:00 Last Updated: 2024-08-05T23:47:58.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive information or modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-082-01 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-151221.pdf
CVE ID: CVE-2016-3156 State: PUBLISHED Published: 2016-04-27T17:00:00 Last Updated: 2024-08-05T23:47:57.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service (host OS networking outage) by arranging for a large number of IP addresses. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2971-2 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - https://bugzilla.redhat.com/show_bug.cgi?id=1318172 - http://www.ubuntu.com/usn/USN-2970-1 - http://git.kernel.org/cgi
- https://bugzilla.redhat.com/show_bug.cgi?id=1318172 - http://www.ubuntu.com/usn/USN-2970-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fbd40ea0180a2d328c5adc61414dc8bab9335ce2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.ubuntu.com/usn/USN-2969-1 - http://www.ubuntu.com/usn/USN-2968-1 - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://www.ubuntu.com/usn/USN-2971-3 - http://www.ubuntu.com/usn/USN-2997-1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.co
g/opensuse-security-announce/2016-07/msg00005.html - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-2971-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html - http://www.ubuntu.com/usn/USN-2996-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html - http://www.ubuntu.com/usn/USN-2968-2 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.securityfocus.com/bid/84428 - http://www.oracle.com/technetwork/topics/security/ovmbull
16-08/msg00038.html - http://www.securityfocus.com/bid/84428 - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http://www.openwall.com/lists/oss-security/2016/03/15/3 - https://github.com/torvalds/linux/commit/fbd40ea0180a2d328c5adc61414dc8bab9335ce2
CVE ID: CVE-2016-3157 State: PUBLISHED Published: 2016-04-12T16:00:00 Last Updated: 2024-08-05T23:47:57.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly context-switch IOPL on 64-bit PV Xen guests, which allows local guest OS users to gain privileges, cause a denial of service (guest OS crash), or obtain sensitive information by leveraging I/O port access. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2971-2 - http://xenbits.xen.org/xsa/advisory-171.html - http://www.ubuntu.com/usn/USN-2970-1 - http://www.oracle.com/technetwork/topics/
xenbits.xen.org/xsa/advisory-171.html - http://www.ubuntu.com/usn/USN-2970-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.ubuntu.com/usn/USN-2969-1 - http://www.ubuntu.com/usn/USN-2968-1 - http://www.ubuntu.com/usn/USN-2971-3 - http://www.ubuntu.com/usn/USN-2997-1 - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-2971-1 - http://www.ubuntu.com/usn/USN-2996-1 - http://www.ubuntu.com/usn/USN-2968-2 - http://www.securitytracker.com/id/1035308 - http://www.securityfocus.com/bid/84594
CVE ID: CVE-2016-3158 State: PUBLISHED Published: 2016-04-13T16:00:00 Last Updated: 2024-08-05T23:47:57.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-2076. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lis
Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181699.html - http://www.securityfocus.com/bid/85714 - http://xenbits.xen.org/xsa/xsa172-4.3.patch - http://xenbits.xen.org/xsa/advisory-172.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181729.html - http://xenbits.xen.org/xsa/xsa172.patch - http://www.securitytracker.com/id/1035435 - http://support.citrix.com/article/CTX209443 - http://www.debian.org/security/2016/dsa-3554
CVE ID: CVE-2016-3159 State: PUBLISHED Published: 2016-04-13T16:00:00 Last Updated: 2024-08-05T23:47:57.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fpu_fxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-2076. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://
ram Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181699.html - http://xenbits.xen.org/xsa/advisory-172.html - http://www.securityfocus.com/bid/85716 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181729.html - http://xenbits.xen.org/xsa/xsa172.patch - http://www.securitytracker.com/id/1035435 - http://support.citrix.com/article/CTX209443 - http://www.debian.org/security/2016/dsa-3554
CVE ID: CVE-2016-3161 State: PUBLISHED Published: 2016-11-08T20:37:00 Last Updated: 2024-08-05T23:47:57.469Z Vendors: n/a Products: Quadro, NVS, GeForce (all versions) Problem Types: Escalation of Privileges Description: For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system at the system/user privilege level. The CVE-2016-3161 ID is for the GameStream unquoted service path. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.
or the GameStream unquoted service path. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4213 - https://support.lenovo.com/us/en/product_security/ps500070 - http://www.securityfocus.com/bid/93251
CVE ID: CVE-2016-3162 State: PUBLISHED Published: 2016-04-12T15:00:00 Last Updated: 2024-08-05T23:47:57.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The File module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allows remote authenticated users to bypass access restrictions and read, delete, or substitute a link to a file uploaded to an unprocessed form by leveraging permission to create content or comment and upload files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/02/24/19 - http://www.openwall.com/lists/oss-security/2016/03/15/10 - http://www.debian.org/security/2016/dsa-3498 - https://www.drupal.org
ww.openwall.com/lists/oss-security/2016/03/15/10 - http://www.debian.org/security/2016/dsa-3498 - https://www.drupal.org/SA-CORE-2016-001