Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
RSAL.txt - http://www.securityfocus.com/bid/98069 - http://packetstormsecurity.com/files/137031/eXtplorer-2.1.9-Path-Traversal.html
CVE ID: CVE-2016-4314 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-06T00:25:14.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the logFile parameter to downloadgz-ajaxprocessor.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/138330/WSO2-Carbon-4.4.5-Local-File-Inclusion.html - http://www.securityfocus.com/bid/92473 - https://www.exploit-db.com/exploits/40240/ - http://www.securityfocus.com/archive/1/539200/100/0/threaded
m/bid/92473 - https://www.exploit-db.com/exploits/40240/ - http://www.securityfocus.com/archive/1/539200/100/0/threaded - http://hyp3rlinx.altervista.org/advisories/WSO2-CARBON-v4.4.5-LOCAL-FILE-INCLUSION.txt - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2016-0098
CVE ID: CVE-2016-4315 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-06T00:25:14.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in WSO2 Carbon 4.4.5 allows remote attackers to hijack the authentication of privileged users for requests that shutdown a server via a shutdown action to server-admin/proxy_ajaxprocessor.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2016-0101 - http://hyp3rlinx.altervista.org/advisories/WSO2-CARBON-v4.4.5-CSRF-DOS.txt - http://www.securityfocus.com/bid/92473 - http://www.securityfocus.com/archi
advisories/WSO2-CARBON-v4.4.5-CSRF-DOS.txt - http://www.securityfocus.com/bid/92473 - http://www.securityfocus.com/archive/1/539202/100/0/threaded - http://packetstormsecurity.com/files/138332/WSO2-Carbon-4.4.5-Cross-Site-Request-Forgery-Denial-Of-Service.html - https://www.exploit-db.com/exploits/40242/
CVE ID: CVE-2016-4316 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-06T00:25:14.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WSO2 Carbon 4.4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) setName parameter to identity-mgt/challenges-mgt.jsp; the (2) webappType or (3) httpPort parameter to webapp-list/webapp_info.jsp; the (4) dsName or (5) description parameter to ndatasource/newdatasource.jsp; the (6) phase parameter to viewflows/handlers.jsp; or the (7) url parameter to ndatasource/validateconnection-ajaxprocessor.jsp. Additional Analyst Notes: - CVE Program Contain
e (7) url parameter to ndatasource/validateconnection-ajaxprocessor.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/138331/WSO2-Carbon-4.4.5-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/92473 - http://www.securityfocus.com/archive/1/539201/100/0/threaded - https://www.exploit-db.com/exploits/40241/ - http://hyp3rlinx.altervista.org/advisories/WSO2-CARBON-v4.4.5-PERSISTENT-XSS-COOKIE-THEFT.txt
CVE ID: CVE-2016-4317 State: PUBLISHED Published: 2017-04-10T03:00:00 Last Updated: 2024-08-06T00:25:14.387Z Vendors: n/a Products: Atlassian Confluence Server before 5.9.11 Problem Types: XSS Description: Atlassian Confluence Server before 5.9.11 has XSS on the viewmyprofile.action page. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/CONF-42713 - http://www.securityfocus.com/bid/97513 - https://jira.atlassian.com/browse/CONFSERVER-42713 - https://confluence.atlassian.com/doc/confluence-5-9-11-release-notes-827123763.html
CVE ID: CVE-2016-4318 State: PUBLISHED Published: 2017-04-10T03:00:00 Last Updated: 2024-08-06T00:25:14.468Z Vendors: n/a Products: Atlassian JIRA Server before 7.1.9 Problem Types: XSS Description: Atlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a role name. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRA-61861 - https://jira.atlassian.com/secure/ReleaseNote.jspa?projectId=10240&version=62034 - https://jira.atlassian.com/browse/JRASERVER-61861 - http://www.securityfocus.com/bid/97516 - https://confluence.atlassian.com/jiracore/jira-core-7-1-x-release-notes-802161668.html#JIRACore7.1.xreleaseno
id/97516 - https://confluence.atlassian.com/jiracore/jira-core-7-1-x-release-notes-802161668.html#JIRACore7.1.xreleasenotes-v7.1.9v7.1.9-06July2016
CVE ID: CVE-2016-4319 State: PUBLISHED Published: 2017-04-10T03:00:00 Last Updated: 2024-08-06T00:25:14.139Z Vendors: n/a Products: Atlassian JIRA Server before 7.1.9 Problem Types: CSRF Description: Atlassian JIRA Server before 7.1.9 has CSRF in auditing/settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97517 - https://jira.atlassian.com/secure/ReleaseNote.jspa?projectId=10240&version=62034 - https://jira.atlassian.com/browse/JRASERVER-61803 - https://confluence.atlassian.com/jiracore/jira-core-7-1-x-release-notes-802161668.html#JIRACore7.1.xreleasenotes-v7.1.9v7.1.9-06July2016 - https://jira.atlassian.com/browse/JRA-61803
CVE ID: CVE-2016-4320 State: PUBLISHED Published: 2017-04-10T03:00:00 Last Updated: 2024-08-06T00:25:14.485Z Vendors: n/a Products: Atlassian Bitbucket Server before 4.7.1 Problem Types: directory traversal Description: Atlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an arbitrary file via a directory traversal attack on the pull requests resource. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/BSERV-8819 - http://www.securityfocus.com/bid/97515 - https://confluence.atlassian.com/bitbucketserver/bitbucket-server-4-7-release-notes-829052416.html
CVE ID: CVE-2016-4322 State: PUBLISHED Published: 2016-12-13T20:00:00 Last Updated: 2024-08-06T00:25:14.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: BMC BladeLogic Server Automation (BSA) before 8.7 Patch 3 allows remote attackers to bypass authentication and consequently read arbitrary files or possibly have unspecified other impact by leveraging a "logic flaw" in the authentication process. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/539351/100/0/threaded - http://packetstormsecurity.com/files/138600/BMC-BladeLogic-Server-Automation-For-Linux-8.7-Directory-Dump.html - http://www.securityfocus.com/bid/92736
CVE ID: CVE-2016-4323 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T00:25:14.526Z Vendors: Pidgin Products: Pidgin Problem Types: directory traversal Description: A directory traversal exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in an overwrite of files. A malicious server or someone with access to the network traffic can provide an invalid filename for a splash image triggering the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91335 - http://www.pidgin.im/news/security/?id=97 - http://www.debian.org/security/2016/d
tp://www.securityfocus.com/bid/91335 - http://www.pidgin.im/news/security/?id=97 - http://www.debian.org/security/2016/dsa-3620 - http://www.talosintelligence.com/reports/TALOS-2016-0128/ - https://security.gentoo.org/glsa/201701-38 - http://www.ubuntu.com/usn/USN-3031-1
CVE ID: CVE-2016-4324 State: PUBLISHED Published: 2016-07-08T19:00:00 Last Updated: 2024-08-06T00:25:14.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related to stylesheet and superscript tokens. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3608 - https://security.gentoo.org/glsa/201611-03 - http://www.securitytracker.com/id/1036209 - http://www.securityfocus.com/bid/91499 - http://www.libreoffice.org/about-us/security/advisories/cve-2016-4324/ - http://www.ubuntu.com/usn/USN-3022-1 - h
1499 - http://www.libreoffice.org/about-us/security/advisories/cve-2016-4324/ - http://www.ubuntu.com/usn/USN-3022-1 - http://www.talosintelligence.com/reports/TALOS-2016-0126/
CVE ID: CVE-2016-4325 State: PUBLISHED Published: 2016-05-14T16:00:00 Last Updated: 2024-08-06T00:25:14.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lantronix xPrintServer devices with firmware before 5.0.1-65 have hardcoded credentials, which allows remote attackers to obtain root access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/785823
CVE ID: CVE-2016-4326 State: PUBLISHED Published: 2016-06-10T01:00:00 Last Updated: 2024-08-06T00:25:14.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chef Manage (formerly opscode-manage) add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary code via crafted serialized data in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/586503
CVE ID: CVE-2016-4327 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-06T00:25:14.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WSO2 SOA Enablement Server for Java/6.6 build SSJ-6.6-20090827-1616 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/538413/100/0/threaded - http://packetstormsecurity.com/files/137073/WSO2-SOA-Enablement-Server-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/85893
CVE ID: CVE-2016-4328 State: PUBLISHED Published: 2016-06-10T01:00:00 Last Updated: 2024-08-06T00:25:14.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before 2015R1 has hardcoded credentials, which makes it easier for remote attackers to obtain sensitive information via direct requests to the application database server. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/482135
CVE ID: CVE-2016-4329 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T00:25:14.496Z Vendors: Kaspersky Products: Total Security Problem Types: unspecified Description: A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software. Sending certain unhandled window messages, an attacker can cause application termination and in the same way bypass KAV self-protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92771 - http://www.talosintelligence.com/reports/TALOS-2016-0175/
CVE ID: CVE-2016-4330 State: PUBLISHED Published: 2016-11-18T20:00:00 Last Updated: 2024-08-06T00:25:14.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the HDF5 1.8.16 library's failure to check if the number of dimensions for an array read from the file is within the bounds of the space allocated for it, a heap-based buffer overflow will occur, potentially leading to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0176/ - http://www.securityfocus.com/bid/94414 - https://security.gentoo.org/glsa/201701-13 - http://www.debian.org/security/2016/dsa-3727
CVE ID: CVE-2016-4331 State: PUBLISHED Published: 2016-11-18T20:00:00 Last Updated: 2024-08-06T00:25:14.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0177/ - http://www.securityfocus.com/bid/94411 - https://security.gentoo.org/glsa/201701-13 - http://www.debian.org/security/2016/dsa-3727
CVE ID: CVE-2016-4332 State: PUBLISHED Published: 2016-11-18T20:00:00 Last Updated: 2024-08-06T00:25:14.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: The library's failure to check if certain message types support a particular flag, the HDF5 1.8.16 library will cast the structure to an alternative structure and then assign to fields that aren't supported by the message type and the library will write outside the bounds of the heap buffer. This can lead to code execution under the context of the library. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94417 - https://security.gentoo.org/glsa/201701-13 - http://www.debian.org/
ferences: - http://www.securityfocus.com/bid/94417 - https://security.gentoo.org/glsa/201701-13 - http://www.debian.org/security/2016/dsa-3727 - http://www.talosintelligence.com/reports/TALOS-2016-0178/
CVE ID: CVE-2016-4333 State: PUBLISHED Published: 2016-11-18T20:00:00 Last Updated: 2024-08-06T00:25:14.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact within the loop for initializing said array allowing a value within the file to modify the loop's terminator. Due to this, an aggressor can cause the loop's index to point outside the bounds of the array when initializing it. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0179/ - http://www.securityfocus.com/bid/94416 - https://security.gentoo.org/glsa/201701-13
ence.com/reports/TALOS-2016-0179/ - http://www.securityfocus.com/bid/94416 - https://security.gentoo.org/glsa/201701-13 - http://www.debian.org/security/2016/dsa-3727
CVE ID: CVE-2016-4334 State: PUBLISHED Published: 2017-04-10T03:00:00 Last Updated: 2024-08-06T00:25:14.460Z Vendors: n/a Products: Jive before 2016.3.1 Problem Types: open redirect Description: Jive before 2016.3.1 has an open redirect from the external-link.jspa page. Additional Analyst Notes: - CVE Program Container: References: - http://www.ericgoldman.name/en/2016/vulnerability-report-jive-open-redirect/
CVE ID: CVE-2016-4335 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T00:25:14.524Z Vendors: Lexmark Products: Perceptive Document Filters Problem Types: stack-based buffer overflow Description: An exploitable buffer overflow exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a stack based buffer overflow resulting in remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0172/ - http://www.securityfocus.com/bid/92425
CVE ID: CVE-2016-4336 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T00:25:14.496Z Vendors: Lexmark Products: Perceptive Document Filters Problem Types: out-of-bounds write Description: An exploitable out-of-bounds write exists in the Bzip2 parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted Bzip2 document can lead to a stack-based buffer overflow causing an out-of-bounds write which under the right circumstance could potentially be leveraged by an attacker to gain arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0173/
CVE ID: CVE-2016-4337 State: PUBLISHED Published: 2017-04-12T22:00:00 Last Updated: 2024-08-06T00:25:14.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before 4.7.5 allows remote attackers to execute arbitrary SQL commands via the email parameter in a recover_login action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40046/ - http://packetstormsecurity.com/files/137734/Ktools-Photostore-4.7.5-Blind-SQL-Injection.html
CVE ID: CVE-2016-4338 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T00:25:14.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell other than bash, allows context-dependent attackers to execute arbitrary code or SQL commands via the mysql.size parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136898/Zabbix-Agent-3.0.1-mysql.size-Shell-Command-Injection.html - https://www.exploit-db.com/exploits/39769/ - http://www.sec
Zabbix-Agent-3.0.1-mysql.size-Shell-Command-Injection.html - https://www.exploit-db.com/exploits/39769/ - http://www.securityfocus.com/archive/1/538258/100/0/threaded - https://support.zabbix.com/browse/ZBX-10741 - https://www.zabbix.com/documentation/2.2/manual/introduction/whatsnew2213#miscellaneous_improvements - https://www.zabbix.com/documentation/3.0/manual/introduction/whatsnew303#miscellaneous_improvements - http://seclists.org/fulldisclosure/2016/May/9 - https://www.zabbix.com/documentation/2.0/manual/introduction/whatsnew2018#miscellaneous_improvements - http://www.securityfocus.com/bid/89631 - https://security.gentoo.org/glsa/201612-42
CVE ID: CVE-2016-4340 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T00:25:14.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: The impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7, 8.5.0 through 8.5.11, 8.4.0 through 8.4.9, 8.3.0 through 8.3.8, and 8.2.0 through 8.2.4 allows remote authenticated users to "log in" as any other user via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2016/05/02/cve-2016-4340-patches/ - https://www.exploit-db.com/exploits/40236/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/15548 - http://packetstormsecurity.com/files/138368/GitLab-Impersonate-Priv
tps://gitlab.com/gitlab-org/gitlab-ce/issues/15548 - http://packetstormsecurity.com/files/138368/GitLab-Impersonate-Privilege-Escalation.html
CVE ID: CVE-2016-4341 State: PUBLISHED Published: 2017-02-07T17:00:00 Last Updated: 2024-08-06T00:25:14.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/NTAP-20161028-0001
CVE ID: CVE-2016-4342 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T00:25:14.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/phar/phar_object.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles zero-length uncompressed data, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted (1) TAR, (2) ZIP, or (3) PHAR archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/89154 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - http://lists.opensuse.org/o
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.openwall.com/lists/oss-security/2016/04/28/2 - http://php.net/ChangeLog-5.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://php.net/ChangeLog-7.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - https://bugs.php.net/bug.php?id=71354 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html
CVE ID: CVE-2016-4343 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T00:25:14.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: The phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size ././@LongLink files, which allows remote attackers to cause a denial of service (uninitialized pointer dereference) or possibly have unspecified other impact via a crafted TAR archive. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - http://php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=71331
sc/public/kb/docDisplay?docId=emr_na-c05320149 - http://php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=71331 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://php.net/ChangeLog-7.php - http://www.openwall.com/lists/oss-security/2016/04/28/2 - http://www.securityfocus.com/bid/89179 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html
CVE ID: CVE-2016-4344 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T00:25:14.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the xml_utf8_encode function in ext/xml/xml.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long argument to the utf8_encode function, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=71637 - http://www.openwall.com/lists/oss-security/2016/04/28/2 - http://php.net/ChangeLog-7.php
CVE ID: CVE-2016-4345 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T00:25:14.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the php_filter_encode_url function in ext/filter/sanitizing_filters.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long string, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=71637 - http://www.openwall.com/lists/oss-security/2016/04/28/2 - http://php.net/ChangeLog-7.php
CVE ID: CVE-2016-4346 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T00:25:14.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the str_pad function in ext/standard/string.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long string, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html - https://bugs.php.net/bug.php?id=71637 - http://www.openwall.com/lists/oss-security/2016/04/28/2 - http://php.net/ChangeLog-7.php - http://lists.opensuse.org/op
http://www.openwall.com/lists/oss-security/2016/04/28/2 - http://php.net/ChangeLog-7.php - http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html
CVE ID: CVE-2016-4347 State: REJECTED Published: 2016-06-06T15:00:00 Last Updated: 2016-06-06T14:57:01 Description: No description available.