deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-6344
Published: 2016-09-07
Description: Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2017-0248.html; http://rhn.redhat.com/errata/RHSA-2017-0249.html; http://www.securityfocus.com/bid/92714
CVE: CVE-2016-6345
Published: 2016-09-07
Description: RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/92746; https://bugzilla.redhat.com/show_bug.cgi?id=1372117; http://www.securityfocus.com/bid/92746
CVE: CVE-2016-6346
Published: 2016-09-07
Description: RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2017-0517.html; http://rhn.redhat.com/errata/RHSA-2017-0826.html; http://rhn.redhat.com/errata/RHSA-2017-0827.html
CVE: CVE-2016-6351
Published: 2016-09-07
Description: The esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP/NCR53C9x controller emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or execute arbitrary code on the QEMU host via vectors involving DMA read into ESP command buffer.
CVSS Score: 6.7 (MEDIUM)
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=926cde5f3e4d2504ed161ed0cb771ac7cad6fd11; http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=cc[PII_REDACTED]8bad3d[PII_REDACTED]5cf75db069e3; http://www.openwall.com/lists/oss-security/2016/07/25/14
CVE: CVE-2016-6855
Published: 2016-09-07
Description: Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-updates/2016-09/msg00021.html; http://packetstormsecurity.com/files/138486/Gnome-Eye-Of-Gnome-3.10.2-Out-Of-Bounds-Write.html; http://www.securityfocus.com/bid/92616
CVE: CVE-2016-7033
Published: 2016-09-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in the admin pages in dashbuilder in Red Hat JBoss BPM Suite 6.3.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://rhn.redhat.com/errata/RHSA-2017-0249.html; http://www.securityfocus.com/bid/92762; https://bugzilla.redhat.com/show_bug.cgi?id=1373344
CVE: CVE-2016-7034
Published: 2016-09-07
Description: The dashbuilder in Red Hat JBoss BPM Suite 6.3.2 does not properly handle CSRF tokens generated during an active session and includes them in query strings, which makes easier for remote attackers to (1) bypass CSRF protection mechanisms or (2) conduct cross-site request forgery (CSRF) attacks by obtaining an old token.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://rhn.redhat.com/errata/RHSA-2017-0557.html; http://www.securityfocus.com/bid/92760; https://access.redhat.com/errata/RHSA-2018:0296
CVE: CVE-2016-1241
Published: 2016-09-07
Description: Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.debian.org/security/2016/dsa-3656; http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html; https://bugs.tryton.org/issue5795
CVE: CVE-2016-1242
Published: 2016-09-07
Description: file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-200
References: http://www.debian.org/security/2016/dsa-3656; http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html; https://bugs.tryton.org/issue5808
CVE: CVE-2016-5022
Published: 2016-09-07
Description: F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1 HF1, and 12.x before 12.0.0 HF3; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1 HF1, and 12.x before 12.0.0 HF3; BIG-IP DNS 12.x before 12.0.0 HF3; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.2.x before 11.2.1 HF16 and 11.3.0; BIG-IP GTM 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x, 11.5.x before 11.5.4 HF2, and 11.6.x before 11.6.1 HF1; BIG-IP PSM 11.2.x before 11.2.1 HF16, 11.3.x, and 11.4.0 through 11.4.1; Enterprise Manager 3.1.1; BIG-IQ Cloud and Security 4.0.0 through 4.5.0; BIG-IQ Device 4.2.0 through 4.5.0; BIG-IQ ADC 4.5.0; BIG-IQ Centralized Management 5.0.0; BIG-IQ Cloud and Orchestration 1.0.0; and iWorkflow 2.0.0, when Packet Filtering is enabled on virtual servers and possibly self IP addresses, allow remote attackers to cause a denial of service (Traffic Management Microkernel restart) and possibly have unspecified other impact via crafted network traffic.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://www.securitytracker.com/id/1036709; http://www.securitytracker.com/id/1036710; https://support.f5.com/kb/en-us/solutions/public/k/06/sol06045217.html
CVE: CVE-2016-5422
Published: 2016-09-07
Description: The web console in Red Hat JBoss Operations Network (JON) before 3.3.7 does not properly authorize requests to add users with the super user role, which allows remote authenticated users to gain admin privileges via a crafted POST request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2016-1785.html; http://www.securityfocus.com/bid/92722; http://rhn.redhat.com/errata/RHSA-2016-1785.html
CVE: CVE-2016-6180
Published: 2016-09-07
Description: The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CHM-TL00C01B564, and CHM-TL00C00 before CHM-TL00HC00B564 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2016-6181, CVE-2016-6182, CVE-2016-6183, and CVE-2016-6184.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160716-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160716-01-smartphone-en
CVE: CVE-2016-6181
Published: 2016-09-07
Description: The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CHM-TL00C01B564, and CHM-TL00C00 before CHM-TL00HC00B564 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2016-6180, CVE-2016-6182, CVE-2016-6183, and CVE-2016-6184.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160716-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160716-01-smartphone-en
CVE: CVE-2016-6182
Published: 2016-09-07
Description: The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CHM-TL00C01B564, and CHM-TL00C00 before CHM-TL00HC00B564 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2016-6180, CVE-2016-6181, CVE-2016-6183, and CVE-2016-6184.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160716-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160716-01-smartphone-en
CVE: CVE-2016-6183
Published: 2016-09-07
Description: The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CHM-TL00C01B564, and CHM-TL00C00 before CHM-TL00HC00B564 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2016-6180, CVE-2016-6181, CVE-2016-6182, and CVE-2016-6184.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160716-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160716-01-smartphone-en
CVE: CVE-2016-6184
Published: 2016-09-07
Description: The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CHM-TL00C01B564, and CHM-TL00C00 before CHM-TL00HC00B564 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2016-6180, CVE-2016-6181, CVE-2016-6182, and CVE-2016-6183.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160716-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160716-01-smartphone-en
CVE: CVE-2016-6316
Published: 2016-09-07
Description: Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before 4.2.7.1, and 5.x before 5.0.0.1 might allow remote attackers to inject arbitrary web script or HTML via text declared as "HTML safe" and used as attribute values in tag handlers.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://rhn.redhat.com/errata/RHSA-2016-1855.html; http://rhn.redhat.com/errata/RHSA-2016-1856.html; http://rhn.redhat.com/errata/RHSA-2016-1857.html
CVE: CVE-2016-6317
Published: 2016-09-07
Description: Action Record in Ruby on Rails 4.2.x before 4.2.7.1 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain "[nil]" values, a related issue to CVE-2012-2660, CVE-2012-2694, and CVE-2013-0155.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284, CWE-476
References: http://rhn.redhat.com/errata/RHSA-2016-1855.html; http://weblog.rubyonrails.org/2016/8/11/Rails-5-0-0-1-4-2-7-2-and-3-2-22-3-have-been-released/; http://www.openwall.com/lists/oss-security/2016/08/11/4
CVE: CVE-2016-6318
Published: 2016-09-07
Description: Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) or gain privileges via a long GECOS field, involving longbuffer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-updates/2016-08/msg00122.html; http://www.openwall.com/lists/oss-security/2016/08/16/2; http://www.securityfocus.com/bid/92478
CVE: CVE-2016-6670
Published: 2016-09-07
Description: Huawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 use random numbers with insufficient entropy to generate self-signed certificates, which makes it easier for remote attackers to discover private keys by leveraging knowledge of a certificate.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160810-01-certificate-en; http://www.securityfocus.com/bid/92438; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160810-01-certificate-en
CVE: CVE-2016-6825
Published: 2016-09-07
Description: Huawei XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610, RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, and RH2288H V3 servers with software before V100R003C00SPC515 allow remote attackers to obtain passwords via a brute-force attack, related to "lack of authentication protection mechanisms."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-285
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-server-en; http://www.securityfocus.com/bid/92504; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-server-en
CVE: CVE-2016-6838
Published: 2016-09-07
Description: Huawei X6800 and XH620 V3 servers with software before V100R003C00SPC606, RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, CH140 V3 and CH226 V3 servers with software before V100R001C00SPC122, CH220 V3 servers with software before V100R001C00SPC201, and CH121 V3 and CH222 V3 servers with software before V100R001C00SPC202 might allow remote attackers to decrypt encrypted data and consequently obtain sensitive information by leveraging selection of an insecure SSH encryption algorithm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-310
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-02-server-en; http://www.securityfocus.com/bid/92503; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-02-server-en
CVE: CVE-2016-6839
Published: 2016-09-07
Description: CRLF injection vulnerability in Huawei FusionAccess before V100R006C00 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-113
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-fusionaccess-en; http://www.securityfocus.com/bid/92502; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-fusionaccess-en
CVE: CVE-2016-6876
Published: 2016-09-07
Description: The RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM, and Link Controller 10.2.1 through 10.2.4, 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0 before HF3; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0 before HF3; BIG-IP Analytics 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0 before HF3; BIG-IP DNS 12.0.0 before HF3; BIG-IP Edge Gateway, WebAccelerator, and WOM 10.2.1 through 10.2.4 and 11.2.1; BIG-IP GTM 10.2.1 through 10.2.4, 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, and 11.6.x before 11.6.1; and BIG-IP PSM 10.2.1 through 10.2.4 and 11.4.0 through 11.4.1 allows remote DNS servers to cause a denial of service (CPU consumption or Traffic Management Microkernel crash) via a crafted PTR response.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.securitytracker.com/id/1036725; https://support.f5.com/kb/en-us/solutions/public/k/52/sol52638558.html; http://www.securitytracker.com/id/1036725
CVE: CVE-2016-6898
Published: 2016-09-07
Description: XML external entity (XXE) vulnerability in the Hyper Management Module (HMM) in Huawei E9000 rack servers with software before V100R001C00SPC296 allows remote authenticated users to read arbitrary files or cause a denial of service (web service outage) via a crafted XML document.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-284
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-e9000-en; http://www.securityfocus.com/bid/92620; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-e9000-en
CVE: CVE-2016-6899
Published: 2016-09-07
Description: The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, RH2288H V3 servers with software before V100R003C00SPC515, RH5885 V3 servers with software before V100R003C10SPC102, and XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610 might allow remote attackers to decrypt encrypted data and consequently obtain sensitive information by leveraging selection of an insecure SSL encryption algorithm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-310
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-server-en; http://www.securityfocus.com/bid/92623; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-server-en
CVE: CVE-2016-6900
Published: 2016-09-07
Description: The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613; RH2288 V3 servers with software before V100R003C00SPC617; RH2288H V3 servers with software before V100R003C00SPC515; RH5885 V3 servers with software before V100R003C10SPC102; and XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610 allows local users to cause a denial of service (iBMC resource consumption) via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-399
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-server-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-server-en
CVE: CVE-2016-7107
Published: 2016-09-07
Description: Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user passwords and consequently affect system data integrity via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-uma-en; http://www.securityfocus.com/bid/92619; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-uma-en
CVE: CVE-2016-7108
Published: 2016-09-07
Description: Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-uma-en; http://www.securityfocus.com/bid/92619; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-uma-en
CVE: CVE-2016-7109
Published: 2016-09-07
Description: Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vulnerability than CVE-2016-7110.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-uma-en; http://www.securityfocus.com/bid/92617; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-uma-en
CVE: CVE-2016-7110
Published: 2016-09-07
Description: Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vulnerability than CVE-2016-7109.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-uma-en; http://www.securityfocus.com/bid/92617; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-uma-en
CVE: CVE-2015-8948
Published: 2016-09-07
Description: idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=570e68886c41c2e765e6218cb317d9a9a447a041; http://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html; http://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html
CVE: CVE-2016-5404
Published: 2016-09-07
Description: The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://rhn.redhat.com/errata/RHSA-2016-1797.html; http://www.openwall.com/lists/oss-security/2016/08/17/9; http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2[PII_REDACTED].html
CVE: CVE-2016-6179
Published: 2016-09-07
Description: The WiFi driver in Huawei Honor 6 smartphones with software H60-L01 before H60-L01C00B850, H60-L11 before H60-L11C00B850, H60-L21 before H60-L21C00B850, H60-L02 before H60-L02C00B850, H60-L12 before H60-L12C00B850, and H60-L03 before H60-L03C01B850 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160713-01-smartphone-en; http://www.securityfocus.com/bid/91773; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160713-01-smartphone-en
CVE: CVE-2016-6261
Published: 2016-09-07
Description: The idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via 64 bytes of input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=f20ce1128fb7f4d33297eee307dddaf0f92ac72d; http://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html; http://www.debian.org/security/2016/dsa-3658
CVE: CVE-2016-6262
Published: 2016-09-07
Description: idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=5e3cb9c7b5bf0ce665b9d68f5ddf095af5c9ba60; http://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html; http://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html
CVE: CVE-2016-6263
Published: 2016-09-07
Description: The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted UTF-8 data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=1fbee57ef3c72db2206dd87e4162108b2f425555; http://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html; http://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html
CVE: CVE-2016-4375
Published: 2016-09-08
Description: Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 (aka iLO 3) firmware before 1.88, Integrated Lights-Out 4 (aka iLO 4) firmware before 2.44, and Integrated Lights-Out 4 (aka iLO 4) mRCA firmware before 2.32 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/92484; http://www.securitytracker.com/id/1036629; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05236950
CVE: CVE-2016-4379
Published: 2016-09-08
Description: The TLS implementation in HPE Integrated Lights-Out 3 (aka iLO3) firmware before 1.88 does not properly use a MAC protection mechanism in conjunction with CBC padding, which allows remote attackers to obtain sensitive information via a padding-oracle attack, aka a Vaudenay attack.
CVSS Score: 3.7 (LOW)
CWE: CWE-310
References: http://www.securityfocus.com/bid/92696; http://www.securitytracker.com/id/1036707; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05249760
CVE: CVE-2016-4380
Published: 2016-09-08
Description: Cross-site scripting (XSS) vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/92698; http://www.securitytracker.com/id/1036716; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05249833