Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-5699 State: PUBLISHED Published: 2016-09-02T14:00:00 Last Updated: 2024-08-06T01:07:59.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAPUE - https://hg.python.org/cpython/rev/1c45047c5102 - http://rhn.redhat.com/errata/RHSA-2016-1630.html - http://rhn.redhat.com/errata/RHSA-2016-1627.html - https://hg.python.org/cpython/rev/bf3e1
/errata/RHSA-2016-1630.html - http://rhn.redhat.com/errata/RHSA-2016-1627.html - https://hg.python.org/cpython/rev/bf3e1c9b80e9 - http://rhn.redhat.com/errata/RHSA-2016-1629.html - http://www.splunk.com/view/SP-CAAAPSV - http://www.openwall.com/lists/oss-security/2016/06/16/2 - https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://hg.python.org/cpython/raw-file/v2.7.10/Misc/NEWS - https://docs.python.org/3.4/whatsnew/changelog.html#python-3-4-4 - http://www.openwall.com/lists/oss-security/2016/06/15/12 - http://blog.blindspotsecurity.com/2016/06/advisory-http-header-injection-in.html - htt
ists/oss-security/2016/06/15/12 - http://blog.blindspotsecurity.com/2016/06/advisory-http-header-injection-in.html - http://www.openwall.com/lists/oss-security/2016/06/14/7 - http://www.securityfocus.com/bid/91226 - http://rhn.redhat.com/errata/RHSA-2016-1628.html - http://rhn.redhat.com/errata/RHSA-2016-1626.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
CVE ID: CVE-2016-5700 State: PUBLISHED Published: 2016-10-03T16:00:00 Last Updated: 2024-08-06T01:07:59.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured with the HTTP Explicit Proxy functionality or SOCKS profile, allow remote attackers to modify the system configuration, read system files, and possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93325 - http://www.securitytracker.com
st Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93325 - http://www.securitytracker.com/id/1036928 - https://support.f5.com/kb/en-us/solutions/public/k/35/sol35520031.html
CVE ID: CVE-2016-5701 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-06T01:07:59.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: setup/frames/index.inc.php in phpMyAdmin 4.0.10.x before 4.0.10.16, 4.4.15.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to conduct BBCode injection attacks against HTTP sessions via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html - http://www.debian.org/security/2016/dsa-3627 - https://github.com/phpmyadmin/phpmyadmin/commit/1dca386505f396f0c2035112a403cc80768a141f - http://www.securityfocus.com/bid/91383 - htt
com/phpmyadmin/phpmyadmin/commit/1dca386505f396f0c2035112a403cc80768a141f - http://www.securityfocus.com/bid/91383 - https://www.phpmyadmin.net/security/PMASA-2016-17/ - https://security.gentoo.org/glsa/201701-32 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html
CVE ID: CVE-2016-5702 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-06T01:07:59.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 4.6.x before 4.6.3, when the environment lacks a PHP_SELF value, allows remote attackers to conduct cookie-attribute injection attacks via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/27caf5b46bd0890e576fea7bd7b166a0639fdf68 - https://www.phpmyadmin.net/security/PMASA-2016-18/ - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-5703 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-06T01:07:59.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in libraries/central_columns.lib.php in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allows remote attackers to execute arbitrary SQL commands via a crafted database name that is mishandled in a central column query. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html - https://github.com/phpmyadmin/phpmyadmin/commit/ef6c66dca1b0cb0a1a482477938cfc859d2baee3 - https://www.phpmyadmin.net/security/PMASA-2016-19/ -
admin/phpmyadmin/commit/ef6c66dca1b0cb0a1a482477938cfc859d2baee3 - https://www.phpmyadmin.net/security/PMASA-2016-19/ - http://www.securityfocus.com/bid/91381 - https://security.gentoo.org/glsa/201701-32 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html
CVE ID: CVE-2016-5704 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-06T01:08:00.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the table-structure page in phpMyAdmin 4.6.x before 4.6.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving a comment. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/72213573182896bd6a6e5af5ba1881dd87c4a20b - https://www.phpmyadmin.net/security/PMASA-2016-20/ - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-5705 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-06T01:08:00.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) server-privileges certificate data fields on the user privileges page, (2) an "invalid JSON" error message in the error console, (3) a database name in the central columns implementation, (4) a group name, or (5) a search name in the bookmarks implementation. Additional Analyst Notes: - CVE Program Container: References: - https://
a search name in the bookmarks implementation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/36df83a97a7f140fdb008b727a94f882847c6a6f - https://www.phpmyadmin.net/security/PMASA-2016-21/ - http://www.securityfocus.com/bid/91378 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html - https://github.com/phpmyadmin/phpmyadmin/commit/57ae483bad33059a885366d5445b7e1f6f29860a - http://www.debian.org/security/2016/dsa-3627 - https://github.com/phpmyadmin/phpmyadmin/commit/364732e309cccb3fb56c938ed8d8bc0e04a3ca98 - https://github.com/phpmyadmin/phpmyadmin/commit/0b7416c5f4439ed3f11c023785f2d4c49a1b09fc - https://github.c
0e04a3ca98 - https://github.com/phpmyadmin/phpmyadmin/commit/0b7416c5f4439ed3f11c023785f2d4c49a1b09fc - https://github.com/phpmyadmin/phpmyadmin/commit/03f73d48369703e0d3584699b08e24891c3295b8 - https://security.gentoo.org/glsa/201701-32 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html
CVE ID: CVE-2016-5706 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-06T01:08:00.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: js/get_scripts.js.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to cause a denial of service via a large array in the scripts parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/4767f24ea4c1e3822ce71a636c341e8ad8d07aa6 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html - https://www.phpmyadmin.net/security/PMASA-2016-22/ - http://www.debian.org/security/2016/dsa-3627 - http:/
g00114.html - https://www.phpmyadmin.net/security/PMASA-2016-22/ - http://www.debian.org/security/2016/dsa-3627 - http://www.securityfocus.com/bid/91376 - https://security.gentoo.org/glsa/201701-32 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html
CVE ID: CVE-2016-5709 State: PUBLISHED Published: 2016-06-24T17:00:00 Last Updated: 2024-08-06T01:07:59.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/137525/Solarwinds-Virtualization-Manager-6.3.1-Weak-Crypto.html - http://seclists.org/fulldisclosure/2016/Jun/38
CVE ID: CVE-2016-5710 State: PUBLISHED Published: 2020-02-10T23:19:09 Last Updated: 2024-08-06T01:07:59.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp Snap Creator Framework before 4.3P1 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/cve-2016-5710-clickjacking-vulnerability-in-snap-creator-framework
CVE ID: CVE-2016-5711 State: PUBLISHED Published: 2017-02-07T17:00:00 Last Updated: 2024-08-06T01:08:00.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp Virtual Storage Console for VMware vSphere before 6.2.1 uses a non-unique certificate, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/NTAP-20161108-0001
CVE ID: CVE-2016-5713 State: PUBLISHED Published: 2017-12-06T15:00:00Z Last Updated: 2024-09-17T00:06:12.325Z Vendors: Puppet Products: Puppet Agent Problem Types: Privilege Escalation Description: Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables through to Puppet runs. This could allow unauthorized code to be loaded. This bug was first introduced in Puppet Agent 1.3.0. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/cve-2016-5713
CVE ID: CVE-2016-5714 State: PUBLISHED Published: 2017-10-18T18:00:00 Last Updated: 2024-08-06T01:07:59.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet Enterprise 2015.3.3 and 2016.x before 2016.4.0, and Puppet Agent 1.3.6 through 1.7.0 allow remote attackers to bypass a host whitelist protection mechanism and execute arbitrary code on Puppet nodes via vectors related to command validation, aka "Puppet Execution Protocol (PXP) Command Whitelist Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/pxp-agent-oct-2016 - https://security.gentoo.org/glsa/201710-12 - https://bugs.gentoo.org/597684 - https
om/security/cve/pxp-agent-oct-2016 - https://security.gentoo.org/glsa/201710-12 - https://bugs.gentoo.org/597684 - https://puppet.com/security/cve/cve-2016-5714
CVE ID: CVE-2016-5715 State: PUBLISHED Published: 2017-01-12T23:00:00 Last Updated: 2024-08-06T01:08:00.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Console in Puppet Enterprise 2015.x and 2016.x before 2016.4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a // (slash slash) followed by a domain in the redirect parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6501. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/139302/Puppet-Enterprise-Web-Interface-Open-Redirect.html - https://puppet.com/security
://packetstormsecurity.com/files/139302/Puppet-Enterprise-Web-Interface-Open-Redirect.html - https://puppet.com/security/cve/cve-2016-5715 - http://www.securityfocus.com/archive/1/539618/100/0/threaded - http://hyp3rlinx.altervista.org/advisories/PUPPET-AUTHENTICATION-REDIRECT.txt - http://www.securityfocus.com/bid/93846
CVE ID: CVE-2016-5716 State: PUBLISHED Published: 2017-08-09T14:00:00Z Last Updated: 2024-09-16T23:46:30.239Z Vendors: Puppet Products: Puppet Enterprise Problem Types: RCE Description: The console in Puppet Enterprise 2015.x and 2016.x prior to 2016.4.0 includes unsafe string reads that potentially allows for remote code execution on the console node. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/pe-console-oct-2016
CVE ID: CVE-2016-5720 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T01:08:00.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in Microsoft Skype allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) msi.dll, (2) dpapi.dll, or (3) cryptui.dll that is located in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Sep/65 - http://www.securityfocus.com/bid/95859
CVE ID: CVE-2016-5721 State: PUBLISHED Published: 2016-08-29T17:00:00 Last Updated: 2024-08-06T01:08:00.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92682 - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE ID: CVE-2016-5722 State: PUBLISHED Published: 2016-06-24T17:00:00 Last Updated: 2024-08-06T01:07:59.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei OceanStor 5300 V3, 5500 V3, 5600 V3, 5800 V3, 6800 V3, 18800 V3, and 18500 V3 before V300R003C10 sends the plaintext session token in the HTTP header, which allows remote attackers to conduct replay attacks and obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160615-01-oceanstor-en
CVE ID: CVE-2016-5723 State: PUBLISHED Published: 2016-06-24T17:00:00 Last Updated: 2024-08-06T01:07:59.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei FusionInsight HD before V100R002C60SPC200 allows local users to gain root privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160617-01-fusioninsight-en
CVE ID: CVE-2016-5724 State: PUBLISHED Published: 2019-11-26T13:49:57 Last Updated: 2024-08-06T01:08:00.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles. Additional Analyst Notes: - CVE Program Container: References: - https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb-166
CVE ID: CVE-2016-5725 State: PUBLISHED Published: 2017-01-19T22:00:00 Last Updated: 2024-08-06T01:07:59.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Sep/53 - http://www.securityfocus.com/bid/93100 - https://access.redhat.com/errata/RHSA-2017:3115 - https://www.exploit-db.com/exploits/40411/ - https://lists.debian.org/debian-lts-anno
redhat.com/errata/RHSA-2017:3115 - https://www.exploit-db.com/exploits/40411/ - https://lists.debian.org/debian-lts-announce/2020/04/msg00017.html - https://www.oracle.com/security-alerts/cpuoct2020.html - http://packetstormsecurity.com/files/138809/jsch-0.1.53-Path-Traversal.html - https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-5725 - http://www.jcraft.com/jsch/ChangeLog - https://www.oracle.com/security-alerts/cpujan2021.html - https://www.oracle.com/security-alerts/cpuApr2021.html
CVE ID: CVE-2016-5726 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T01:07:59.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Packages.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the themechanges array parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/06/18/1 - http://www.openwall.com/lists/oss-security/2016/06/10/7
CVE ID: CVE-2016-5727 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T01:07:59.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: LogInOut.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via vectors related to variables derived from user input in a foreach loop. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SimpleMachines/SMF2.1/issues/3522 - https://github.com/SimpleMachines/SMF2.1/commit/19e560b9f3e8fc6d7d9d60c1ff617b5ed5c08008#diff-513c4f9c501cbefcc14420c01848f23c - http://www.openwall.com/lists/oss-security/2016/06/18/1 - http:/
f617b5ed5c08008#diff-513c4f9c501cbefcc14420c01848f23c - http://www.openwall.com/lists/oss-security/2016/06/18/1 - http://www.openwall.com/lists/oss-security/2016/06/10/7
CVE ID: CVE-2016-5728 State: PUBLISHED Published: 2016-06-27T10:00:00 Last Updated: 2024-08-06T01:07:59.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the vop_ioctl function in drivers/misc/mic/vop/vop_vringh.c in the MIC VOP driver in the Linux kernel before 4.6.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (memory corruption and system crash) by changing a certain header, aka a "double fetch" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3070-1 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.1 - https://bugzilla.kernel.org/sho
buntu.com/usn/USN-3070-1 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.1 - https://bugzilla.kernel.org/show_bug.cgi?id=116651 - http://www.ubuntu.com/usn/USN-3070-3 - https://github.com/torvalds/linux/commit/9bf292bfca94694a721449e3fd752493856710f6 - http://www.ubuntu.com/usn/USN-3070-2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9bf292bfca94694a721449e3fd752493856710f6 - http://www.ubuntu.com/usn/USN-3071-1 - http://www.debian.org/security/2016/dsa-3616 - http://www.ubuntu.com/usn/USN-3070-4 - http://www.securityfocus.com/archive/1/538802/30/0/threaded - http://www.ubuntu.com/usn/USN-3071-2
CVE ID: CVE-2016-5729 State: PUBLISHED Published: 2016-06-30T16:00:00 Last Updated: 2024-08-06T01:07:59.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode (SMM) privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/len_4901 - http://www.securityfocus.com/bid/91536
CVE ID: CVE-2016-5730 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-06T01:08:00.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information via vectors involving (1) an array value to FormDisplay.php, (2) incorrect data to validate.php, (3) unexpected data to Validator.php, (4) a missing config directory during setup, or (5) an incorrect OpenID identifier data type, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/96e0
e. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/96e0aa35653ec0c66084a7e9343465e16c1f769b - http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html - https://github.com/phpmyadmin/phpmyadmin/commit/cd229d718e8cb4bc8ba32446beaa82d27727b6f0 - https://www.phpmyadmin.net/security/PMASA-2016-23/ - https://github.com/phpmyadmin/phpmyadmin/commit/331c560fbfa0e7d2dce674b5e88e983c5f2a451d - https://github.com/phpmyadmin/phpmyadmin/commit/b0180f18c828706af3a6800f0fb01a536d3ef8c7 - https://github.com/phpmyadmin/phpmyadmin/commit/27664605b945b13e1d2b71adea822ace2099cc96 - https://security.gentoo.org/glsa/201701-32 - http://www.s
n/phpmyadmin/commit/27664605b945b13e1d2b71adea822ace2099cc96 - https://security.gentoo.org/glsa/201701-32 - http://www.securityfocus.com/bid/91379 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html
CVE ID: CVE-2016-5731 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-06T01:08:00.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in examples/openid.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving an OpenID error message. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-24/ - https://github.com/phpmyadmin/phpmyadmin/commit/94cf3864254ffaf3a69e97d8fc454888368b94ab - http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html
dmin/commit/94cf3864254ffaf3a69e97d8fc454888368b94ab - http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html - http://www.debian.org/security/2016/dsa-3627 - https://github.com/phpmyadmin/phpmyadmin/commit/418aeea3d83b0b6021bac311d849570acfc6e48c - https://security.gentoo.org/glsa/201701-32 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html
CVE ID: CVE-2016-5732 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-06T01:07:59.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the partition-range implementation in templates/table/structure/display_partitions.phtml in the table-structure page in phpMyAdmin 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via crafted table parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2016-25/ - https://github.com/phpmyadmin/phpmyadmin/commit/0815af37f483f329f0c0565d68821fea9c47b5f5 - https://github.com/phpmyad
- https://github.com/phpmyadmin/phpmyadmin/commit/0815af37f483f329f0c0565d68821fea9c47b5f5 - https://github.com/phpmyadmin/phpmyadmin/commit/792cd1262f012b9b13639519d414f2acaeb5e972 - https://security.gentoo.org/glsa/201701-32
CVE ID: CVE-2016-5733 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-06T01:08:00.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a crafted table name that is mishandled during privilege checking in table_row.phtml, (2) a crafted mysqld log_bin directive that is mishandled in log_selector.phtml, (3) the Transformation implementation, (4) AJAX error handling in js/ajax.js, (5) the Designer implementation, (6) the charts implementation