deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-6276
Published: 2016-04-13
Description: schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to obtain sensitive user information by viewing user details.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://hg.code.sf.net/p/roundup/code/rev/a403c29ffaf9; http://www.debian.org/security/2016/dsa-3502; https://sourceforge.net/p/roundup/code/ci/tip/tree/CHANGES.txt
CVE: CVE-2014-9766
Published: 2016-04-13
Description: Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via large height and stride values.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-189
References: http://www.debian.org/security/2016/dsa-3525; http://www.openwall.com/lists/oss-security/2016/02/24/13; http://www.openwall.com/lists/oss-security/2016/02/24/15
CVE: CVE-2015-8304
Published: 2016-04-13
Description: Integer overflow in Huawei P7 phones with software before P7-L07 V100R001C01B606 allows remote attackers to gain privileges via a crafted application with the system or camera permission.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-01-smartphone-en
CVE: CVE-2015-8620
Published: 2016-04-13
Description: Heap-based buffer overflow in the Avast virtualization driver (aswSnx.sys) in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus before 11.1.2253 allows local users to gain privileges via a Unicode file path in an IOCTL request.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/135859/Avast-11.1.2245-Heap-Overflow.html; http://seclists.org/fulldisclosure/2016/Feb/94; http://www.securitytracker.com/id/1035093
CVE: CVE-2015-8682
Published: 2016-04-13
Description: The Video0 driver in Huawei P8 smartphones with software GRA-UL00 before GRA-UL00C00B350, GRA-UL10 before GRA-UL10C00B350, GRA-TL00 before GRA-TL00C01B350, GRA-CL00 before GRA-CL00C92B350, and GRA-CL10 before GRA-CL10C92B350 and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to obtain sensitive information from stack memory or cause a denial of service (system crash) via a crafted application, which triggers an invalid memory access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160130-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160130-01-smartphone-en
CVE: CVE-2016-1495
Published: 2016-04-13
Description: Integer overflow in the graphics drivers in Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, which triggers a heap-based buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160203-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160203-01-smartphone-en
CVE: CVE-2016-1496
Published: 2016-04-13
Description: The graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 allows attackers to cause a denial of service (system crash) via a crafted application, aka a "semaphore deadlock issue."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-399
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-01-smartphone-en
CVE: CVE-2016-1577
Published: 2016-04-13
Description: Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137.
CVSS Score: 7.6 (HIGH)
References: http://www.debian.org/security/2016/dsa-3508; http://www.openwall.com/lists/oss-security/2016/03/03/12; http://www.securityfocus.com/bid/84133
CVE: CVE-2016-2116
Published: 2016-04-13
Description: Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-399
References: http://www.debian.org/security/2016/dsa-3508; http://www.openwall.com/lists/oss-security/2016/03/03/12; http://www.securityfocus.com/bid/84133
CVE: CVE-2016-2780
Published: 2016-04-13
Description: Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160302-01-utps-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160302-01-utps-en
CVE: CVE-2016-4007
Published: 2016-04-13
Description: Multiple unspecified vulnerabilities in the obs-service-extract_file package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with "illegal options."
CVSS Score: 9.8 (CRITICAL)
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00046.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00049.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00050.html
CVE: CVE-2015-0861
Published: 2016-04-13
Description: model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write to arbitrary fields via a sequence of records.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www.debian.org/security/2015/dsa-3425; http://www.tryton.org/posts/security-release-for-issue5167.html; https://bugs.tryton.org/issue5167
CVE: CVE-2015-7545
Published: 2016-04-13
Description: The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-284
References: http://lists.opensuse.org/opensuse-updates/2015-11/msg00066.html; http://rhn.redhat.com/errata/RHSA-2015-2515.html; http://www.debian.org/security/2016/dsa-3435
CVE: CVE-2015-7555
Published: 2016-04-13
Description: Heap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a denial of service (program crash) via crafted image and logical screen width fields in a GIF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174876.html; http://packetstormsecurity.com/files/135034/giflib-5.1.1-Heap-Overflow.html; http://seclists.org/fulldisclosure/2015/Dec/83
CVE: CVE-2015-8080
Published: 2016-04-13
Description: Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-updates/2016-05/msg00126.html; http://rhn.redhat.com/errata/RHSA-2016-0095.html; http://rhn.redhat.com/errata/RHSA-2016-0096.html
CVE: CVE-2015-8551
Published: 2016-04-13
Description: The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service (NULL pointer dereference and host OS crash) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and a crafted sequence of XEN_PCI_OP_* operations, aka "Linux pciback missing sanity checks."
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html
CVE: CVE-2015-8552
Published: 2016-04-13
Description: The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and XEN_PCI_OP_enable_msi operations, aka "Linux pciback missing sanity checks."
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html
CVE: CVE-2015-8553
Published: 2016-04-13
Description: Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0777.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://xenbits.xen.org/xsa/advisory-120.html; https://seclists.org/bugtraq/2019/Aug/18; https://www.debian.org/security/2019/dsa-4497
CVE: CVE-2015-8555
Published: 2016-04-13
Description: Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state, which allows local guest domains to obtain sensitive information from other domains via unspecified vectors.
CVSS Score: 8.6 (HIGH)
CWE: CWE-200
References: http://support.citrix.com/article/CTX203879; http://www.debian.org/security/2016/dsa-3519; http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2[PII_REDACTED].html
CVE: CVE-2015-8606
Published: 2016-04-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framework before 3.1.16 and 3.2.x before 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Locale or (2) FailedLoginCount parameter to admin/security/EditForm/field/Members/item/new/ItemEditForm.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2015/Dec/55; http://www.openwall.com/lists/oss-security/2015/12/17/1; http://www.openwall.com/lists/oss-security/2015/12/17/11
CVE: CVE-2015-8843
Published: 2016-04-13
Description: The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption.
CVSS Score: 7.4 (HIGH)
CWE: CWE-119
References: http://www.zerodayinitiative.com/advisories/ZDI-15-640; https://www.foxitsoftware.com/support/security-bulletins.php#FRD-35; http://www.zerodayinitiative.com/advisories/ZDI-15-640
CVE: CVE-2015-8807
Published: 2016-04-13
Description: Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers to inject arbitrary web script or HTML via vectors involving numeric form fields.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177484.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177584.html; http://lists.horde.org/archives/announce/2016/001148.html
CVE: CVE-2016-0740
Published: 2016-04-13
Description: Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2016/dsa-3499; https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst; https://github.com/python-pillow/Pillow/commit/6dcbf5bd96b717c58d7b642949da8d323099928e
CVE: CVE-2016-0775
Published: 2016-04-13
Description: Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2016/dsa-3499; https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst; https://github.com/python-pillow/Pillow/commit/893a40850c2d5da41537958e40569c029a6e127b
CVE: CVE-2016-2054
Published: 2016-04-13
Description: Multiple buffer overflows in xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a long filename, involving handling a "config" command.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.xymon.com/archive/2016-February/042986.html; http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html; http://www.debian.org/security/2016/dsa-3495
CVE: CVE-2016-2055
Published: 2016-04-13
Description: xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to read arbitrary files in the configuration directory via a "config" command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html; http://www.debian.org/security/2016/dsa-3495; http://www.securityfocus.com/archive/1/537522/100/0/threaded
CVE: CVE-2016-2056
Published: 2016-04-13
Description: xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument in (1) web/useradm.c or (2) web/chpasswd.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html; http://packetstormsecurity.com/files/153620/Xymon-useradm-Command-Execution.html; http://www.debian.org/security/2016/dsa-3495
CVE: CVE-2016-2057
Published: 2016-04-13
Description: lib/xymond_ipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions (666) for an unspecified IPC message queue, which allows local users to inject arbitrary messages by writing to that queue.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html; http://www.debian.org/security/2016/dsa-3495; http://www.securityfocus.com/archive/1/537522/100/0/threaded
CVE: CVE-2016-2058
Published: 2016-04-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow (1) remote Xymon clients to inject arbitrary web script or HTML via a status-message, which is not properly handled in the "detailed status" page, or (2) remote authenticated users to inject arbitrary web script or HTML via an acknowledgement message, which is not properly handled in the "status" page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html; http://www.debian.org/security/2016/dsa-3495; http://www.securityfocus.com/archive/1/537522/100/0/threaded
CVE: CVE-2016-2084
Published: 2016-04-13
Description: F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP AAM 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP DNS 12.0.0 before build 1.14.628; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.3.0; BIG-IP GTM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, and 11.6.0 before build 6.204.442; BIG-IP PSM 11.3.x and 11.4.x before 11.4.1 build 685-HF10; BIG-IQ Cloud, Device, and Security 4.2.0 through 4.5.0; and BIG-IQ ADC 4.5.0 do not properly regenerate certificates and keys when deploying cloud images in Amazon Web Services (AWS), Azure or Verizon cloud services environments, which allows attackers to obtain sensitive information or cause a denial of service (disruption) by leveraging a target instance configuration.
CVSS Score: 7.4 (HIGH)
CWE: CWE-200
References: http://www.securitytracker.com/id/1035520; https://support.f5.com/kb/en-us/solutions/public/k/11/sol11772107.html; http://www.securitytracker.com/id/1035520
CVE: CVE-2016-2191
Published: 2016-04-13
Description: The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2016-04/msg00061.html; http://lists.opensuse.org/opensuse-updates/2016-04/msg00065.html; http://packetstormsecurity.com/files/136553/Optipng-Invalid-Write.html
CVE: CVE-2016-2228
Published: 2016-04-13
Description: Cross-site scripting (XSS) vulnerability in horde/templates/topbar/_menubar.html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter, as demonstrated by a request to xplorer/gollem/manager.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://bugs.horde.org/ticket/14213; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177484.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177584.html
CVE: CVE-2016-2515
Published: 2016-04-13
Description: Hawk before 3.1.3 and 4.x before 4.1.1 allow remote attackers to cause a denial of service (CPU consumption or partial outage) via a long (1) header or (2) URI that is matched against an improper regular expression.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.openwall.com/lists/oss-security/2016/02/20/1; http://www.openwall.com/lists/oss-security/2016/02/20/2; https://bugzilla.redhat.com/show_bug.cgi?id=1309721
CVE: CVE-2016-2533
Published: 2016-04-13
Description: Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PhotoCD file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2016/dsa-3499; http://www.openwall.com/lists/oss-security/2016/02/02/5; http://www.openwall.com/lists/oss-security/2016/02/22/2
CVE: CVE-2016-3068
Published: 2016-04-13
Description: Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181505.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181542.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00016.html
CVE: CVE-2016-3069
Published: 2016-04-13
Description: Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181505.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181542.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00016.html
CVE: CVE-2016-3158
Published: 2016-04-13
Description: The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-2076.
CVSS Score: 3.8 (LOW)
CWE: CWE-200, CWE-284
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181699.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181729.html; http://support.citrix.com/article/CTX209443
CVE: CVE-2016-3159
Published: 2016-04-13
Description: The fpu_fxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-2076.
CVSS Score: 3.8 (LOW)
CWE: CWE-200, CWE-284
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181699.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181729.html; http://support.citrix.com/article/CTX209443
CVE: CVE-2016-3630
Published: 2016-04-13
Description: The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b) short records.
CVSS Score: 8.8 (HIGH)
CWE: CWE-19
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181505.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181542.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00016.html
CVE: CVE-2016-3686
Published: 2016-04-13
Description: The Single Sign-On (SSO) feature in F5 BIG-IP APM 11.x before 11.6.0 HF6 and BIG-IP Edge Gateway 11.0.0 through 11.3.0 might allow remote attackers to obtain sensitive SessionId information by leveraging access to the Location HTTP header in a redirect.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1035519; https://support.f5.com/kb/en-us/solutions/public/k/82/sol82679059.html; http://www.securitytracker.com/id/1035519
CVE: CVE-2016-3981
Published: 2016-04-13
Description: Heap-based buffer overflow in the bmp_read_rows function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write access and crash) or possibly execute arbitrary code via a crafted image file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://bugs.fi/media/afl/optipng/1/; http://lists.opensuse.org/opensuse-updates/2016-04/msg00061.html; http://lists.opensuse.org/opensuse-updates/2016-04/msg00065.html