deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-5684
Published: 2017-01-06
Description: An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library. A specially crafted XMP file can cause an arbitrary memory overwrite resulting in code execution. An attacker can provide a malicious image to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/93287; http://www.talosintelligence.com/reports/TALOS-2016-0189/; https://security.gentoo.org/glsa/201701-68
CVE: CVE-2016-8334
Published: 2017-01-06
Description: A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory layout and in bypassing ASLR.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/93799; http://www.talosintelligence.com/reports/TALOS-2016-0201/; http://www.securityfocus.com/bid/93799
CVE: CVE-2016-8704
Published: 2017-01-06
Description: An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://rhn.redhat.com/errata/RHSA-2016-2819.html; http://rhn.redhat.com/errata/RHSA-2016-2820.html; http://www.debian.org/security/2016/dsa-3704
CVE: CVE-2016-8705
Published: 2017-01-06
Description: Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://rhn.redhat.com/errata/RHSA-2016-2819.html; http://rhn.redhat.com/errata/RHSA-2016-2820.html; http://www.debian.org/security/2016/dsa-3704
CVE: CVE-2016-8706
Published: 2017-01-06
Description: An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-190
References: http://rhn.redhat.com/errata/RHSA-2016-2819.html; http://www.debian.org/security/2016/dsa-3704; http://www.securityfocus.com/bid/94083
CVE: CVE-2016-9874
Published: 2017-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-9875
Published: 2017-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-9876
Published: 2017-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-9886
Published: 2017-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-9867
Published: 2017-01-06
Description: An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may be able to modify the kernel memory in the SCINI driver and may achieve code execution to escalate privileges to root on ScaleIO Data Client (SDC) servers.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/archive/1/539983/30/0/threaded; http://www.securityfocus.com/bid/95300; http://www.securityfocus.com/archive/1/539983/30/0/threaded
CVE: CVE-2016-9868
Published: 2017-01-06
Description: An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may cause a denial-of-service by generating a kernel panic in the SCINI driver using IOCTL calls which may render the ScaleIO Data Client (SDC) server unavailable until the next reboot.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-254
References: http://www.securityfocus.com/archive/1/539983/30/0/threaded; http://www.securityfocus.com/bid/95301; http://www.securityfocus.com/archive/1/539983/30/0/threaded
CVE: CVE-2016-9869
Published: 2017-01-06
Description: An issue was discovered in EMC ScaleIO versions before 2.0.1.1. Incorrect permissions on the SCINI driver may allow a low-privileged local attacker to modify the configuration and render the ScaleIO Data Client (SDC) server unavailable.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-275
References: http://www.securityfocus.com/archive/1/539983/30/0/threaded; http://www.securityfocus.com/bid/95303; http://www.securityfocus.com/archive/1/539983/30/0/threaded
CVE: CVE-2016-9879
Published: 2017-01-06
Description: An issue was discovered in Pivotal Spring Security before 3.2.10, 4.1.x before 4.1.4, and 4.2.x before 4.2.1. Spring Security does not consider URL path parameters when processing security constraints. By adding a URL path parameter with an encoded "/" to a request, an attacker may be able to bypass a security constraint. The root cause of this issue is a lack of clarity regarding the handling of path parameters in the Servlet Specification. Some Servlet containers include path parameters in the value returned for getPathInfo() and some do not. Spring Security uses the value returned by getPathInfo() as part of the process of mapping requests to security constraints. The unexpected presence of path parameters can cause a constraint to be bypassed. Users of Apache Tomcat (all current versions) are not affected by this vulnerability since Tomcat follows the guidance previously provided by the Servlet Expert group and strips path parameters from the value returned by getContextPath(), getServletPath(), and getPathInfo(). Users of other Servlet containers based on Apache Tomcat may or may not be affected depending on whether or not the handling of path parameters has been modified. Users of IBM WebSphere Application Server 8.5.x are known to be affected. Users of other containers that implement the Servlet specification may be affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-417
References: http://www.securityfocus.com/bid/95142; https://access.redhat.com/errata/RHSA-2017:1832; https://pivotal.io/security/cve-2016-9879
CVE: CVE-2016-9885
Published: 2017-01-06
Description: An issue was discovered in Pivotal GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x versions prior to 1.7.1. The gfsh (Geode Shell) endpoint, used by operators and application developers to connect to their cluster, is unauthenticated and publicly accessible. Because HTTPS communications are terminated at the gorouter, communications from the gorouter to GemFire clusters are unencrypted. An attacker could run any command available on gfsh and could cause denial of service, lost confidentiality of data, escalate privileges, or eavesdrop on other communications between the gorouter and the cluster.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200, CWE-254
References: http://www.securityfocus.com/bid/95270; https://pivotal.io/security/cve-2016-9885; http://www.securityfocus.com/bid/95270
CVE: CVE-2016-10124
Published: 2017-01-09
Description: An issue was discovered in Linux Containers (LXC) before 2016-02-22. When executing a program via lxc-attach, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the container.
CVSS Score: 8.6 (HIGH)
CWE: CWE-284
References: http://www.openwall.com/lists/oss-security/2014/12/15/5; http://www.openwall.com/lists/oss-security/2015/09/03/5; http://www.securityfocus.com/bid/95404
CVE: CVE-2017-5216
Published: 2017-01-09
Description: Stack-based buffer overflow vulnerability in Netop Remote Control versions 11.53, 12.21 and prior. The affected module in the Guest client is the "Import to Phonebook" option. When a specially designed malicious file containing special characters is loaded, the overflow occurs. 12.51 is the fixed version. The Support case ref is 00109744.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.netop.com/fileadmin/netop/resources/products/administration/remote_control/release_notes/NetopRemoteControl_12.51_ModificationNotes_final.pdf; http://www.securityfocus.com/bid/95316; http://www.netop.com/fileadmin/netop/resources/products/administration/remote_control/release_notes/NetopRemoteControl_12.51_ModificationNotes_final.pdf
CVE: CVE-2017-5217
Published: 2017-01-09
Description: Installing a zero-permission Android application on certain Samsung Android devices with KK(4.4), L(5.0/5.1), and M(6.0) software can continually crash the system_server process in the Android OS. The zero-permission app will create an active install session for a separate app that it has embedded within it. The active install session of the embedded app is performed using the android.content.pm.PackageInstaller class and its nested classes in the Android API. The active install session will write the embedded APK file to the /data/app directory, but the app will not be installed since third-party applications cannot programmatically install apps. Samsung has modified AOSP in order to accelerate the parsing of APKs by introducing the com.android.server.pm.PackagePrefetcher class and its nested classes. These classes will parse the APKs present in the /data/app directory and other directories, even if the app is not actually installed. The embedded APK that was written to the /data/app directory via the active install session has a very large but valid AndroidManifest.xml file. Specifically, the AndroidManifest.xml file contains a very large string value for the name of a permission-tree that it declares. When system_server tries to parse the APK file of the embedded app from the active install session, it will crash due to an uncaught error (i.e., java.lang.OutOfMemoryError) or an uncaught exception (i.e., std::bad_alloc) because of memory constraints. The Samsung Android device will encounter a soft reboot due to a system_server crash, and this action will keep repeating since parsing the APKs in the /data/app directory as performed by the system_server process is part of the normal boot process. The Samsung ID is SVE-2016-6917.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-119
References: http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017; http://www.securityfocus.com/bid/95319; http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017
CVE: CVE-2016-10125
Published: 2017-01-09
Description: D-Link DGS-1100 devices with Rev.B firmware 1.01.018 have a hardcoded SSL private key, which allows man-in-the-middle attackers to spoof devices by hijacking an HTTPS session.
CVSS Score: 8.1 (HIGH)
CWE: CWE-798
References: http://www.securityfocus.com/bid/95329; https://labs.integrity.pt/advisories/dlink-dgs-1100-hardcoded-keys/; http://www.securityfocus.com/bid/95329
CVE: CVE-2016-8106
Published: 2017-01-09
Description: A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker to stop the controller from processing network traffic working under certain network use conditions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://www-01.ibm.com/support/docview.wss?uid=swg22002507; http://www.securityfocus.com/bid/95333; http://www.securitytracker.com/id/1037562
CVE: CVE-2016-10126
Published: 2017-01-10
Description: Splunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x before 6.2.12, 6.3.x before 6.3.8, and 6.4.x before 6.4.4 allows remote attackers to conduct HTTP request injection attacks and obtain sensitive REST API authentication-token information via unspecified vectors, aka SPL-128840.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95412; https://www.splunk.com/view/SP-CAAAPSR; http://www.securityfocus.com/bid/95412
CVE: CVE-2015-4591
Published: 2017-01-10
Description: eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remote unauthenticated users to inject arbitrary javascript via the strMessage parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/135533/eClinicalWorks-Population-Health-CCMR-SQL-Injection-CSRF-XSS.html; http://www.securityfocus.com/archive/1/537420/100/0/threaded; https://www.exploit-db.com/exploits/39402/
CVE: CVE-2015-4592
Published: 2017-01-10
Description: eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users to inject arbitrary malicious database commands as part of user input.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/135533/eClinicalWorks-Population-Health-CCMR-SQL-Injection-CSRF-XSS.html; http://www.securityfocus.com/archive/1/537420/100/0/threaded; https://www.exploit-db.com/exploits/39402/
CVE: CVE-2015-4593
Published: 2017-01-10
Description: eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserService.jsp which allows remote attackers to hijack the authentication of content administrators for requests that could lead to the creation, modification and deletion of users, appointments and employees.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/135533/eClinicalWorks-Population-Health-CCMR-SQL-Injection-CSRF-XSS.html; http://www.securityfocus.com/archive/1/537420/100/0/threaded; https://www.exploit-db.com/exploits/39402/
CVE: CVE-2015-4594
Published: 2017-01-10
Description: eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the application does not assign a new session ID, making it possible to use an existent session ID.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284, CWE-384
References: http://packetstormsecurity.com/files/135533/eClinicalWorks-Population-Health-CCMR-SQL-Injection-CSRF-XSS.html; http://www.securityfocus.com/archive/1/537420/100/0/threaded; https://www.exploit-db.com/exploits/39402/
CVE: CVE-2016-6286
Published: 2017-01-10
Description: The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTP_PROXY environment variable, which would allow attackers to direct CGI programs which use this environment variable to use an attacker-specified HTTP proxy server (also known as a "httpoxy" attack). This affects all versions of spiffy-cgi-handlers before 0.5.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: http://lists.gnu.org/archive/html/chicken-announce/2016-07/msg00000.html; http://www.securityfocus.com/bid/92105; http://lists.gnu.org/archive/html/chicken-announce/2016-07/msg00000.html
CVE: CVE-2016-6287
Published: 2017-01-10
Description: The "http-client" egg always used a HTTP_PROXY environment variable to determine whether HTTP traffic should be routed via a proxy, even when running as a CGI process. Under several web servers this would mean a user-supplied "Proxy" header could allow an attacker to direct all HTTP requests through a proxy (also known as a "httpoxy" attack). This affects all versions of http-client before 0.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: http://lists.gnu.org/archive/html/chicken-announce/2016-07/msg00000.html; http://www.securityfocus.com/bid/92105; http://lists.gnu.org/archive/html/chicken-announce/2016-07/msg00000.html
CVE: CVE-2016-6580
Published: 2017-01-10
Description: A HTTP/2 implementation built using any version of the Python priority library prior to version 1.2.0 could be targeted by a malicious peer by having that peer assign priority information for every possible HTTP/2 stream ID. The priority tree would happily continue to store the priority information for each stream, and would therefore allocate unbounded amounts of memory. Attempting to actually use a tree like this would also cause extremely high CPU usage to maintain the tree.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/92311; https://python-hyper.org/priority/en/latest/security/CVE-2016-6580.html; http://www.securityfocus.com/bid/92311
CVE: CVE-2016-6581
Published: 2017-01-10
Description: A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK dynamic header table into the dynamic header table. The attacker can then send a header block that is simply repeated requests to expand that field in the dynamic table. This can lead to a gigantic compression ratio of 4,096 or better, meaning that 16kB of data can decompress to 64MB of data on the target machine.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/92315; https://python-hyper.org/hpack/en/latest/security/CVE-2016-6581.html; http://www.securityfocus.com/bid/92315
CVE: CVE-2016-6830
Published: 2017-01-10
Description: The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments and environment variables to use in its execve() call. This would allow user-supplied argument/environment variable lists to trigger a buffer overrun. This affects all releases of CHICKEN up to and including 4.11 (it will be fixed in 4.12 and 5.0, which are not yet released).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.nongnu.org/archive/html/chicken-announce/2016-08/msg00001.html; http://www.securityfocus.com/bid/92550; http://lists.nongnu.org/archive/html/chicken-announce/2016-08/msg00001.html
CVE: CVE-2016-6831
Published: 2017-01-10
Description: The "process-execute" and "process-spawn" procedures did not free memory correctly when the execve() call failed, resulting in a memory leak. This could be abused by an attacker to cause resource exhaustion or a denial of service. This affects all releases of CHICKEN up to and including 4.11 (it will be fixed in 4.12 and 5.0, which are not yet released).
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://lists.nongnu.org/archive/html/chicken-announce/2016-08/msg00001.html; http://www.securityfocus.com/bid/92550; http://lists.nongnu.org/archive/html/chicken-announce/2016-08/msg00001.html
CVE: CVE-2016-6837
Published: 2017-01-10
Description: Cross-site scripting (XSS) vulnerability in MantisBT Filter API in MantisBT versions before 1.2.19, and versions 2.0.0-beta1, 1.3.0-beta1 allows remote attackers to inject arbitrary web script or HTML via the 'view_type' parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/92522; http://www.securitytracker.com/id/1036655; https://github.com/mantisbt/mantisbt/commit/7086c2d8b4b20ac14013b36761ac04f0abf21a4e
CVE: CVE-2016-9247
Published: 2017-01-10
Description: Under certain conditions for BIG-IP systems using a virtual server with an associated FastL4 profile and TCP analytics profile, a specific sequence of packets may cause the Traffic Management Microkernel (TMM) to restart.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/95405; http://www.securitytracker.com/id/1037581; https://support.f5.com/csp/#/article/K33500120
CVE: CVE-2016-6091
Published: 2017-01-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2015-1897, CVE-2015-0119.  Reason: This candidate is a duplicate of CVE-2015-1897 and CVE-2015-0119.  Notes: All CVE users should reference CVE-2015-1897 and/or CVE-2015-0119 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-0002
Published: 2017-01-10
Description: Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs, aka "Microsoft Edge Elevation of Privilege Vulnerability."
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/95284; http://www.securitytracker.com/id/1037573; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-001
CVE: CVE-2017-0003
Published: 2017-01-10
Description: Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://fortiguard.com/advisory/FG-VD-16-079; http://www.securityfocus.com/bid/95287; http://www.securitytracker.com/id/1037568
CVE: CVE-2017-0004
Published: 2017-01-10
Description: The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to cause a denial of service (reboot) via a crafted authentication request, aka "Local Security Authority Subsystem Service Denial of Service Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/95318; http://www.securitytracker.com/id/1037571; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-004
CVE: CVE-2017-2925
Published: 2017-01-11
Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability in the JPEG XR codec. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://rhn.redhat.com/errata/RHSA-2017-0057.html; http://www.securityfocus.com/bid/95350; http://www.securitytracker.com/id/1037570
CVE: CVE-2017-2926
Published: 2017-01-11
Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to processing of atoms in MP4 files. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://rhn.redhat.com/errata/RHSA-2017-0057.html; http://www.securityfocus.com/bid/95350; http://www.securitytracker.com/id/1037570
CVE: CVE-2017-2927
Published: 2017-01-11
Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://rhn.redhat.com/errata/RHSA-2017-0057.html; http://www.securityfocus.com/bid/95347; http://www.securitytracker.com/id/1037570
CVE: CVE-2017-2928
Published: 2017-01-11
Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to setting visual mode effects. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://rhn.redhat.com/errata/RHSA-2017-0057.html; http://www.securityfocus.com/bid/95350; http://www.securitytracker.com/id/1037570
CVE: CVE-2017-2930
Published: 2017-01-11
Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability due to a concurrency error when manipulating a display list. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/140463/Adobe-Flash-24.0.0.186-Code-Execution.html; http://rhn.redhat.com/errata/RHSA-2017-0057.html; http://www.securityfocus.com/bid/95350
CVE: CVE-2017-2931
Published: 2017-01-11
Description: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to the parsing of SWF metadata. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://rhn.redhat.com/errata/RHSA-2017-0057.html; http://www.securityfocus.com/bid/95350; http://www.securitytracker.com/id/1037570