deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-1601
Published: 2016-04-26
Description: yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255
References: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00007.html; https://bugzilla.suse.com/show_bug.cgi?id=974220
CVE: CVE-2016-3074
Published: 2016-04-26
Description: Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-681
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183263.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183724.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html
CVE: CVE-2016-3081
Published: 2016-04-26
Description: Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.
CVSS Score: 8.1 (HIGH)
CWE: CWE-77
References: http://packetstormsecurity.com/files/136856/Apache-Struts-2.3.28-Dynamic-Method-Invocation-Remote-Code-Execution.html; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html
CVE: CVE-2016-3082
Published: 2016-04-26
Description: XSLTResult in Apache Struts 2.x before 2.3.20.2, 2.3.24.x before 2.3.24.2, and 2.3.28.x before 2.3.28.1 allows remote attackers to execute arbitrary code via the stylesheet location parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://struts.apache.org/docs/s2-031.html; http://www.securityfocus.com/bid/88826; http://www.securitytracker.com/id/1035664
CVE: CVE-2016-4002
Published: 2016-04-26
Description: Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183275.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183350.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184209.html
CVE: CVE-2015-1339
Published: 2016-04-27
Description: Memory leak in the cuse_channel_release function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service (memory consumption) or possibly have unspecified other impact by opening /dev/cuse many times.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-399
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2c5816b4beccc8ba709144539f6fdd764f8fa49c; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html
CVE: CVE-2015-7515
Published: 2016-04-27
Description: The aiptek_probe function in drivers/input/tablet/aiptek.c in the Linux kernel before 4.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device that lacks endpoints.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8e20cf2bce122ce9262d6034ee5d5b76fbb92f96; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
CVE: CVE-2015-8812
Published: 2016-04-27
Description: drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted packets.
CVSS Score: 9.8 (CRITICAL)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=67f1aee6f45059fd6b0f5b0ecb2c97ad0451f6b3; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html
CVE: CVE-2015-8816
Published: 2016-04-27
Description: The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device.
CVSS Score: 6.8 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e50293ef9775c5f1cf3fcc093037dd6a8c5684ea; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
CVE: CVE-2015-8844
Published: 2016-04-27
Description: The signal implementation in the Linux kernel before 4.3.5 on powerpc platforms does not check for an MSR with both the S and T bits set, which allows local users to cause a denial of service (TM Bad Thing exception and panic) via a crafted application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d2b9d2a5ad5ef04ff978c9923d19730cb05efd55; http://rhn.redhat.com/errata/RHSA-2016-2574.html; http://rhn.redhat.com/errata/RHSA-2016-2584.html
CVE: CVE-2015-8845
Published: 2016-04-27
Description: The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend mode exists before proceeding with a tm_reclaim call, which allows local users to cause a denial of service (TM Bad Thing exception and panic) via a crafted application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7f821fc9c77a9b01fe7b1d6e72717b33d8d64142; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html; http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE: CVE-2016-0774
Published: 2016-04-27
Description: The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux (RHEL) 7.1 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun." NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-1805.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.html
CVE: CVE-2016-2069
Published: 2016-04-27
Description: Race condition in arch/x86/mm/tlb.c in the Linux kernel before 4.4.1 allows local users to gain privileges by triggering access to a paging structure by a different CPU.
CVSS Score: 7.4 (HIGH)
CWE: CWE-362
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=71b3c126e61177eb693423f2e18a1914205b165e; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html
CVE: CVE-2016-2085
Published: 2016-04-27
Description: The evm_verify_hmac function in security/integrity/evm/evm_main.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local users to forge MAC values via a timing side-channel attack.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-19
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=613317bd212c585c20796c10afe5daaa95d4b0a1; http://www.ubuntu.com/usn/USN-2946-1; http://www.ubuntu.com/usn/USN-2946-2
CVE: CVE-2016-2143
Published: 2016-04-27
Description: The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted application, related to arch/s390/include/asm/mmu_context.h and arch/s390/include/asm/pgalloc.h.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3446c13b268af86391d[PII_REDACTED]6b059b8bab1; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
CVE: CVE-2016-2184
Published: 2016-04-27
Description: The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference or double free, and system crash) via a crafted endpoints value in a USB device descriptor.
CVSS Score: 4.6 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f886ca12765d20124bd06291c82951fd49a33be; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html
CVE: CVE-2016-2383
Published: 2016-04-27
Description: The adjust_branches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not consider the delta in the backward-jump case, which allows local users to obtain sensitive information from kernel memory by creating a packet filter and then loading crafted BPF instructions.
CVSS Score: 5.5 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a1b14d27ed[PII_REDACTED]f1377ff97c93ee383492; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html; http://www.openwall.com/lists/oss-security/2016/02/14/1
CVE: CVE-2016-2384
Published: 2016-04-27
Description: Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (panic) or possibly have unspecified other impact via vectors involving an invalid USB descriptor.
CVSS Score: 4.6 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=07d86ca93db7e5cdf4743564d98292042ec21af7; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html
CVE: CVE-2016-2543
Published: 2016-04-27
Description: The snd_seq_ioctl_remove_events function in sound/core/seq/seq_clientmgr.c in the Linux kernel before 4.4.1 does not verify FIFO assignment before proceeding with FIFO clearing, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted ioctl call.
CVSS Score: 6.2 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=030e2c78d3a91dd0d27fef37e91950dde333eba1; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
CVE: CVE-2016-2544
Published: 2016-04-27
Description: Race condition in the queue_delete function in sound/core/seq/seq_queue.c in the Linux kernel before 4.4.1 allows local users to cause a denial of service (use-after-free and system crash) by making an ioctl call at a certain time.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-362
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3567eb6af614dac436c4b16a8d426f9faed639b3; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
CVE: CVE-2016-2545
Published: 2016-04-27
Description: The snd_timer_interrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to cause a denial of service (race condition and system crash) via a crafted ioctl call.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-362
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee8413b01045c74340aa13ad5bdf905de32be736; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
CVE: CVE-2016-2546
Published: 2016-04-27
Description: sound/core/timer.c in the Linux kernel before 4.4.1 uses an incorrect type of mutex, which allows local users to cause a denial of service (race condition, use-after-free, and system crash) via a crafted ioctl call.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-362
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=af368027a49a751d6ff4ee9e3f9961f35bb4fede; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
CVE: CVE-2016-2547
Published: 2016-04-27
Description: sound/core/timer.c in the Linux kernel before 4.4.1 employs a locking approach that does not consider slave timer instances, which allows local users to cause a denial of service (race condition, use-after-free, and system crash) via a crafted ioctl call.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-362
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b5a663aa426f4884c71cd8580adae73f33570f0d; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
CVE: CVE-2016-2548
Published: 2016-04-27
Description: sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which allows local users to cause a denial of service (system crash) via a crafted ioctl call, related to the (1) snd_timer_close and (2) _snd_timer_stop functions.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b5a663aa426f4884c71cd8580adae73f33570f0d; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
CVE: CVE-2016-2549
Published: 2016-04-27
Description: sound/core/hrtimer.c in the Linux kernel before 4.4.1 does not prevent recursive callback access, which allows local users to cause a denial of service (deadlock) via a crafted ioctl call.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2ba1fe7a06d3624f9a7586d672b55f08f7c670f3; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
CVE: CVE-2016-2550
Published: 2016-04-27
Description: The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-4312.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-399
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=415e3d3e90ce9e18727e8843ae343eda5a58fad6; http://www.debian.org/security/2016/dsa-3503; http://www.openwall.com/lists/oss-security/2016/02/23/2
CVE: CVE-2016-2782
Published: 2016-04-27
Description: The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB device that lacks a (1) bulk-in or (2) interrupt-in endpoint.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cac9b50b0d75a1d50d6c056ff65c005f3224c8e0; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
CVE: CVE-2016-2847
Published: 2016-04-27
Description: fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory consumption) by creating many pipes with non-default sizes.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-399
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=759c01142a5d0f364a462346168a56de28a80f52; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
CVE: CVE-2016-3134
Published: 2016-04-27
Description: The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.
CVSS Score: 8.4 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54d83fc74aa9ec72794373cb47432c5f7fb1a309; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
CVE: CVE-2016-3135
Published: 2016-04-27
Description: Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d157bd761585605b7882935ffb86286919f62ea1; http://www.securityfocus.com/bid/84305; http://www.ubuntu.com/usn/USN-2930-1
CVE: CVE-2016-3139
Published: 2016-04-27
Description: The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
CVSS Score: 4.6 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=471d17148c8b4174ac5f5283a73316d12c4379bc; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
CVE: CVE-2016-3156
Published: 2016-04-27
Description: The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service (host OS networking outage) by arranging for a large number of IP addresses.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-399
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fbd40ea0180a2d328c5adc61414dc8bab9335ce2; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html
CVE: CVE-2016-3672
Published: 2016-04-27
Description: The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local users to defeat the intended restrictions on the ADDR_NO_RANDOMIZE flag, and bypass the ASLR protection mechanism for a setuid or setgid program, by disabling stack-consumption resource limits.
CVSS Score: 7.8 (HIGH)
CWE: CWE-254
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8b8addf891de8a00e4d39fc32f93f7c5eb8feceb; http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-dis; http://hmarco.org/bugs/CVE-2016-3672-Unlimiting-the-stack-not-longer-disables-ASLR.html
CVE: CVE-2016-0211
Published: 2016-04-28
Description: IBM DB2 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 through FP7 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) via a crafted DRDA message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IT12462; http://www-01.ibm.com/support/docview.wss?uid=swg1IT12487; http://www-01.ibm.com/support/docview.wss?uid=swg1IT12488
CVE: CVE-2016-1205
Published: 2016-04-28
Description: Cross-site scripting (XSS) vulnerability in the shiro8 (1) category_freearea_ addition_plugin plugin 1.0 and (2) itemdetail_freearea_ addition_plugin plugin 1.0 for EC-CUBE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN63384827/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000057; http://www.ec-cube.net/products/detail.php?product_id=505
CVE: CVE-2016-1386
Published: 2016-04-28
Description: The API in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1) allows remote attackers to spoof administrative notifications via crafted attribute-value pairs, aka Bug ID CSCux15521.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-apic; http://www.securitytracker.com/id/1035702; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-apic
CVE: CVE-2016-1389
Published: 2016-04-28
Description: Open redirect vulnerability in Cisco WebEx Meetings Server (CWMS) 2.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuy44695.
CVSS Score: 7.4 (HIGH)
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-cwms; http://www.securitytracker.com/id/1035703; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-cwms
CVE: CVE-2016-4349
Published: 2016-04-28
Description: Untrusted search path vulnerability in Cisco WebEx Productivity Tools 2.40.5001.10012 allows local users to gain privileges via a Trojan horse cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll, riched20.dll, rpcrtremote.dll, secur32.dll, sxs.dll, or uxtheme.dll file in the current working directory, aka Bug ID CSCuy56140.
CVSS Score: 7.8 (HIGH)
References: https://www.solutionary.com/threat-intelligence/vulnerability-disclosures/2016/04/webex-productivity-tools/; https://www.solutionary.com/threat-intelligence/vulnerability-disclosures/2016/04/webex-productivity-tools/
CVE: CVE-2014-8486
Published: 2016-04-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-8496.  Reason: This candidate is a duplicate of CVE-2014-8496.  A typo caused the wrong ID to be used.  Notes: All CVE users should reference CVE-2014-8496 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2016-1111
Published: 2016-04-30
Description: Double free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via a crafted Graphics State dictionary.
CVSS Score: 8.8 (HIGH)
References: http://www.zerodayinitiative.com/advisories/ZDI-16-273/; https://helpx.adobe.com/security/products/acrobat/apsb16-02.html; http://www.zerodayinitiative.com/advisories/ZDI-16-273/