deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-6296
Published: 2016-07-25
Description: Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a long first argument to the PHP xmlrpc_encode_request function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=e6c48213c22ed50b2b987b479fcc1ac709394caa; http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html; http://openwall.com/lists/oss-security/2016/07/24/2
CVE: CVE-2016-6297
Published: 2016-07-25
Description: Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted zip:// URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://fortiguard.com/advisory/fortinet-discovers-php-stack-based-buffer-overflow-vulnerabilities; http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=81406c0c1d45f75fcc7972ed974d2597abb0b9e9; http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html
CVE: CVE-2016-6151
Published: 2016-07-26
Description: CA eHealth 6.2.x allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectors.
CVSS Score: 8.8 (HIGH)
References: http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160721-01-security-notice-for-ca-ehealth.aspx; http://www.securityfocus.com/bid/92107; http://www.securitytracker.com/id/1036433
CVE: CVE-2016-6152
Published: 2016-07-26
Description: CA eHealth 6.2.x and 6.3.x before 6.3.2.13 allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectors.
CVSS Score: 8.8 (HIGH)
References: http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160721-01-security-notice-for-ca-ehealth.aspx; http://www.securityfocus.com/bid/92107; http://www.securitytracker.com/id/1036433
CVE: CVE-2015-5738
Published: 2016-07-26
Description: The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://fortiguard.com/advisory/rsa-crt-key-leak-under-certain-conditions; https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf; https://support.f5.com/kb/en-us/solutions/public/k/91/sol91245485.html
CVE: CVE-2016-3992
Published: 2016-07-26
Description: cronic before 3 allows local users to write to arbitrary files via a symlink attack on a (1) cronic.out.$$, (2) cronic.err.$$, or (3) cronic.trace.$$ file in /tmp.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-updates/2016-07/msg00013.html; http://www.openwall.com/lists/oss-security/2016/04/09/4; http://www.openwall.com/lists/oss-security/2016/04/10/2
CVE: CVE-2016-1374
Published: 2016-07-28
Description: The web framework in Cisco Unified Computing System (UCS) Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request, aka Bug ID CSCuy07827.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160720-ucsperf; http://www.securityfocus.com/bid/92044; http://www.securitytracker.com/id/1036410
CVE: CVE-2016-1460
Published: 2016-07-28
Description: Cisco Wireless LAN Controller (WLC) devices 7.4(121.0) and 8.0(0.30220.385) allow remote attackers to cause a denial of service via crafted wireless management frames, aka Bug ID CSCun92979.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-wlc; http://www.securityfocus.com/bid/92158; http://www.securitytracker.com/id/1036468
CVE: CVE-2016-1462
Published: 2016-07-28
Description: Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Prime Service Catalog (PSC) 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-psc; http://www.securityfocus.com/bid/92156; http://www.securitytracker.com/id/1036472
CVE: CVE-2016-1463
Published: 2016-07-28
Description: Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in the header of an HTTP packet, aka Bug ID CSCuz20737.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-firesight; http://www.securityfocus.com/bid/92152; http://www.securitytracker.com/id/1036471
CVE: CVE-2016-1465
Published: 2016-07-28
Description: Cisco Nexus 1000v Application Virtual Switch (AVS) devices before 5.2(1)SV3(1.5i) allow remote attackers to cause a denial of service (ESXi hypervisor crash and purple screen) via a crafted Cisco Discovery Protocol packet that triggers an out-of-bounds memory access, aka Bug ID CSCuw57985.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-avs; http://www.securityfocus.com/bid/92154; http://www.securitytracker.com/id/1036469
CVE: CVE-2016-1467
Published: 2016-07-28
Description: Cisco Videoscape Session Resource Manager (VSRM) allows remote attackers to cause a denial of service (device restart) by sending a traffic flood to upstream devices, aka Bug ID CSCva01813.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-vsrm; http://www.securityfocus.com/bid/92151; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-vsrm
CVE: CVE-2016-4522
Published: 2016-07-28
Description: SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/92135; https://ics-cert.us-cert.gov/advisories/ICSA-16-173-03; http://www.securityfocus.com/bid/92135
CVE: CVE-2016-4531
Published: 2016-07-28
Description: Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 does not invalidate credentials upon a logout action, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
CVSS Score: 7.3 (HIGH)
CWE: CWE-285
References: http://www.securityfocus.com/bid/92135; https://ics-cert.us-cert.gov/advisories/ICSA-16-173-03; http://www.securityfocus.com/bid/92135
CVE: CVE-2016-4469
Published: 2016-07-28
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.3.9 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add new repository proxy connectors via the token parameter to admin/addProxyConnector_commit.action, (2) new repositories via the token parameter to admin/addRepository_commit.action, (3) edit existing repositories via the token parameter to admin/editRepository_commit.action, (4) add legacy artifact paths via the token parameter to admin/addLegacyArtifactPath_commit.action, (5) change the organizational appearance via the token parameter to admin/saveAppearance.action, or (6) upload new artifacts via the token parameter to upload_submit.action.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/137869/Apache-Archiva-1.3.9-Cross-Site-Request-Forgery.html; http://seclists.org/fulldisclosure/2016/Jul/37; http://www.securityfocus.com/archive/1/538877/100/0/threaded
CVE: CVE-2016-5005
Published: 2016-07-28
Description: Cross-site scripting (XSS) vulnerability in Apache Archiva 1.3.9 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via the connector.sourceRepoId parameter to admin/addProxyConnector_commit.action.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/137870/Apache-Archiva-1.3.9-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2016/Jul/38; http://www.securityfocus.com/archive/1/538878/100/0/threaded
CVE: CVE-2016-1461
Published: 2016-08-01
Description: Cisco AsyncOS on Email Security Appliance (ESA) devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka Bug ID CSCuz14932.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-esa; http://www.securityfocus.com/bid/92155; http://www.securitytracker.com/id/1036470
CVE: CVE-2016-1605
Published: 2016-08-01
Description: Directory traversal vulnerability in the ReportViewServlet servlet in the server in NetIQ Sentinel 7.4.x before 7.4.2 allows remote attackers to read arbitrary files via a PREVIEW value for the fileType field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://www.zerodayinitiative.com/advisories/ZDI-16-406; https://www.netiq.com/support/kb/doc.php?id=7017803; http://www.zerodayinitiative.com/advisories/ZDI-16-406
CVE: CVE-2016-1607
Published: 2016-08-01
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Security Update 2 allow remote attackers to hijack the authentication of administrators, as demonstrated by reconfiguring time settings via a vaconfig/time request.
CVSS Score: 7.2 (HIGH)
CWE: CWE-352
References: http://seclists.org/bugtraq/2016/Jul/119; http://www.securityfocus.com/bid/92113; https://download.novell.com/Download?buildid=3V-3ArYN85I~
CVE: CVE-2016-1608
Published: 2016-08-01
Description: vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ntpServer parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://seclists.org/bugtraq/2016/Jul/119; http://www.securityfocus.com/bid/92113; https://download.novell.com/Download?buildid=3V-3ArYN85I~
CVE: CVE-2016-1609
Published: 2016-08-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input, as demonstrated by a crafted attribute of an IMG element in the phone field of a user profile.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/bugtraq/2016/Jul/119; http://www.securityfocus.com/bid/92113; https://download.novell.com/Download?buildid=3V-3ArYN85I~
CVE: CVE-2016-1610
Published: 2016-08-01
Description: Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote attackers to bypass intended access restrictions and write to arbitrary files via a .. (dot dot) in a blob name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://seclists.org/bugtraq/2016/Jul/119; http://www.securityfocus.com/bid/92113; https://download.novell.com/Download?buildid=3V-3ArYN85I~
CVE: CVE-2016-1611
Published: 2016-08-01
Description: Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows local users to gain privileges by replacing this file's content with arbitrary shell commands.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://seclists.org/bugtraq/2016/Jul/119; http://www.securityfocus.com/bid/92113; https://www.exploit-db.com/exploits/40161/
CVE: CVE-2016-2180
Published: 2016-08-01
Description: The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the "openssl ts" command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759; http://rhn.redhat.com/errata/RHSA-2016-1940.html; http://www-01.ibm.com/support/docview.wss?uid=swg21995039
CVE: CVE-2016-3120
Published: 2016-08-01
Description: The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://krbdev.mit.edu/rt/Ticket/Display.html?id=8458; http://lists.opensuse.org/opensuse-updates/2016-09/msg00035.html; http://rhn.redhat.com/errata/RHSA-2016-2591.html
CVE: CVE-2016-4373
Published: 2016-08-01
Description: The AdminUI in HPE Operations Manager (OM) before 9.21.130 on Linux, Unix, and Solaris allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://www.securityfocus.com/bid/92122; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05206507; http://www.securityfocus.com/bid/92122
CVE: CVE-2016-4834
Published: 2016-08-01
Description: modules/Users/actions/Save.php in Vtiger CRM 6.4.0 and earlier does not properly restrict user-save actions, which allows remote authenticated users to create or modify user accounts via unspecified vectors.
CVSS Score: 8.1 (HIGH)
CWE: CWE-264
References: http://code.vtiger.com/vtiger/vtigercrm/commit/7cdf9941197b4aa58114eafce3ce88fb418eb68c; http://jvn.jp/en/jp/JVN01956993/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000126
CVE: CVE-2016-4837
Published: 2016-08-01
Description: SQL injection vulnerability in the Seed Coupon plugin before 1.6 for EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://jvn.jp/en/jp/JVN40696431/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000130; http://www.ec-cube.net/products/detail.php?product_id=493
CVE: CVE-2016-5138
Published: 2016-08-01
Description: Integer overflow in the kbasep_vinstr_attach_client function in midgard/mali_kbase_vinstr.c in Google Chrome before 52.0.2743.85 allows remote attackers to cause a denial of service (heap-based buffer overflow and use-after-free) by leveraging an unrestricted multiplication.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: http://googlechromereleases.blogspot.com/2016/07/stable-channel-update-for-chrome-os_26.html; http://www.securityfocus.com/bid/92139; http://www.securitytracker.com/id/1036484
CVE: CVE-2016-5672
Published: 2016-08-01
Description: Intel Crosswalk before 19.49.514.5, 20.x before 20.50.533.11, 21.x before 21.51.546.0, and 22.x before 22.51.549.0 interprets a user's acceptance of one invalid X.509 certificate to mean that all invalid X.509 certificates should be accepted without prompting, which makes it easier for man-in-the-middle attackers to spoof SSL servers and obtain sensitive information via a crafted certificate.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-310
References: http://packetstormsecurity.com/files/138107/Intel-Crosswalk-Project-Man-In-The-Middle.html; http://www.kb.cert.org/vuls/id/217871; http://www.securityfocus.com/archive/1/539051/100/0/threaded
CVE: CVE-2016-1238
Published: 2016-08-02
Description: (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/zipdetails, (13) cpan/JSON-PP/bin/json_pp, (14) cpan/Test-Harness/bin/prove, (15) dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16) dist/Module-CoreList/corelist, (17) ext/Pod-Html/bin/pod2html, (18) utils/c2ph.PL, (19) utils/h2ph.PL, (20) utils/h2xs.PL, (21) utils/libnetcfg.PL, (22) utils/perlbug.PL, (23) utils/perldoc.PL, (24) utils/perlivp.PL, and (25) utils/splain.PL in Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . (period) characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00002.html; http://perl5.git.perl.org/perl.git/commit/cee96d52c39b1e7b36e1c62d38bcd8d86e9a41ab; http://www.debian.org/security/2016/dsa-3628
CVE: CVE-2016-3737
Published: 2016-08-02
Description: The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2016-1519.html; http://www.securitytracker.com/id/1036507; https://bugzilla.redhat.com/show_bug.cgi?id=1333618
CVE: CVE-2016-6185
Published: 2016-08-02
Description: The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory.
CVSS Score: 7.8 (HIGH)
References: http://perl5.git.perl.org/perl.git/commitdiff/08e3451d7; http://www.debian.org/security/2016/dsa-3628; http://www.openwall.com/lists/oss-security/2016/07/07/1
CVE: CVE-2016-6257
Published: 2016-08-02
Description: The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM600 and Ultraslim Wireless mice, does not enforce incrementing AES counters, which allows remote attackers to inject encrypted keyboard input into the system by leveraging proximity to the dongle, aka a "KeyJack injection attack."
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-310
References: http://www.securityfocus.com/bid/92179; https://github.com/BastilleResearch/keyjack/blob/master/doc/advisories/bastille-13.lenovo-ultraslim.public.txt; https://support.lenovo.com/product_security/len_7267
CVE: CVE-2016-1712
Published: 2016-08-02
Description: Palo Alto Networks PAN-OS before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6.1.12, and 7.0.x before 7.0.8 might allow local users to gain privileges by leveraging improper sanitization of the root_reboot local invocation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-264
References: http://www.securitytracker.com/id/1036326; https://security.paloaltonetworks.com/CVE-2016-1712; http://www.securitytracker.com/id/1036326
CVE: CVE-2016-2408
Published: 2016-08-02
Description: Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted users to gain privileges via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/92692; http://www.securitytracker.com/id/1036474; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40241
CVE: CVE-2016-5229
Published: 2016-08-02
Description: Atlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted deserialized classes, which allows remote attackers to execute arbitrary code via vectors related to XStream Serialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://packetstormsecurity.com/files/138053/Bamboo-Deserialization-Issue.html; http://www.securityfocus.com/archive/1/539003/100/0/threaded; http://www.securityfocus.com/bid/92057
CVE: CVE-2016-5403
Published: 2016-08-02
Description: The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: http://rhn.redhat.com/errata/RHSA-2016-1585.html; http://rhn.redhat.com/errata/RHSA-2016-1586.html; http://rhn.redhat.com/errata/RHSA-2016-1606.html
CVE: CVE-2016-6178
Published: 2016-08-02
Description: Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with software before V800R006SPH018; and CloudEngine devices 12800 with software before V100R003SPH010 and V100R005 before V100R005SPH006 allow remote attackers with control plane access to cause a denial of service or execute arbitrary code via a crafted packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160713-01-multicast-ldp-fec-stack-en; http://www.securityfocus.com/bid/91772; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160713-01-multicast-ldp-fec-stack-en
CVE: CVE-2016-6192
Published: 2016-08-02
Description: Buffer overflow in the Wi-Fi driver in Huawei P8 smartphones with software before GRA-CL00C92B363 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2016-6193.
CVSS Score: 7.3 (HIGH)
CWE: CWE-264
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160708-01-smartphone-en; http://www.securityfocus.com/bid/91735; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160708-01-smartphone-en
CVE: CVE-2016-6193
Published: 2016-08-02
Description: Buffer overflow in the Wi-Fi driver in Huawei P8 smartphones with software before GRA-CL00C92B363 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2016-6192.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160708-01-smartphone-en; http://www.securityfocus.com/bid/91735; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160708-01-smartphone-en
CVE: CVE-2016-6232
Published: 2016-08-02
Description: Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ (dot dot slash) in a filename in an archive file, related to KNewsstuff downloads.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00000.html; http://www.debian.org/security/2016/dsa-3643
CVE: CVE-2016-6258
Published: 2016-08-02
Description: The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://support.citrix.com/article/CTX214954; http://www.debian.org/security/2016/dsa-3633; http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2[PII_REDACTED].html
CVE: CVE-2016-6259
Published: 2016-08-02
Description: Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: http://support.citrix.com/article/CTX214954; http://www.securityfocus.com/bid/92130; http://www.securitytracker.com/id/1036447