deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-3991
Published: 2016-09-21
Description: Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image with zero tiles.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: http://bugzilla.maptools.org/show_bug.cgi?id=2543; http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html; http://rhn.redhat.com/errata/RHSA-2016-1546.html
CVE: CVE-2016-4464
Published: 2016-09-21
Description: The application plugins in Apache CXF Fediz 1.2.x before 1.2.3 and 1.3.x before 1.3.1 do not match SAML AudienceRestriction values against configured audience URIs, which might allow remote attackers to have bypass intended restrictions and have unspecified other impact via a crafted SAML token with a trusted signature.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://cxf.apache.org/security-advisories.data/CVE-2016-4464.txt.asc; http://www.openwall.com/lists/oss-security/2016/09/08/20; http://www.securityfocus.com/bid/92905
CVE: CVE-2016-5247
Published: 2016-09-22
Description: The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240, TS440, and TS540 devices; and ThinkStation E32, P300, and P310 devices might allow local users or physically proximate attackers to bypass the Secure Boot protection mechanism by leveraging an AMI test key.
CVSS Score: 7.8 (HIGH)
CWE: CWE-254
References: http://www.securityfocus.com/bid/92661; https://support.lenovo.com/product_security/PS500067; http://www.securityfocus.com/bid/92661
CVE: CVE-2016-6265
Published: 2016-09-22
Description: Use-after-free vulnerability in the pdf_load_xref function in pdf/pdf-xref.c in MuPDF allows remote attackers to cause a denial of service (crash) via a crafted PDF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: http://bugs.ghostscript.com/show_bug.cgi?id=696941; http://git.ghostscript.com/?p=mupdf.git%3Bh=fa1936405b6a84e5c9bb440912c23d532772f958; http://lists.opensuse.org/opensuse-updates/2016-08/msg00007.html
CVE: CVE-2016-6322
Published: 2016-09-22
Description: Red Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deployed system by reading the file.
CVSS Score: 8.4 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/92668; https://bugzilla.redhat.com/show_bug.cgi?id=1366413; http://www.securityfocus.com/bid/92668
CVE: CVE-2016-6340
Published: 2016-09-22
Description: The kickstart file in Red Hat QuickStart Cloud Installer (QCI) forces use of MD5 passwords on deployed systems, which makes it easier for attackers to determine cleartext passwords via a brute-force attack.
CVSS Score: 8.4 (HIGH)
CWE: CWE-254
References: http://www.securityfocus.com/bid/92655; https://bugzilla.redhat.com/show_bug.cgi?id=1370315; http://www.securityfocus.com/bid/92655
CVE: CVE-2016-6525
Published: 2016-09-22
Description: Heap-based buffer overflow in the pdf_load_mesh_params function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a large decode array.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://bugs.ghostscript.com/show_bug.cgi?id=696954; http://git.ghostscript.com/?p=mupdf.git%3Bh=39b0f07dd960f34e7e6bf230ffc3d87c41ef0f2e; http://www.debian.org/security/2016/dsa-3655
CVE: CVE-2016-6669
Published: 2016-09-22
Description: Buffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600 allows remote authenticated RADIUS servers to execute arbitrary code by sending a crafted EAP packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160810-01-usg-en; http://www.securityfocus.com/bid/92441; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160810-01-usg-en
CVE: CVE-2016-6824
Published: 2016-09-22
Description: Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service (device restart) via crafted CAPWAP packets.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-ac-en; http://www.securityfocus.com/bid/92506; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-ac-en
CVE: CVE-2014-2146
Published: 2016-09-22
Description: The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for existing sessions, which allows remote attackers to bypass intended resource-access restrictions via spoofed traffic that matches one of these sessions, aka Bug IDs CSCun94946 and CSCun96847.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/93126; https://tools.cisco.com/security/center/viewAlert.x?alertId=39129; http://www.securityfocus.com/bid/93126
CVE: CVE-2016-2827
Published: 2016-09-22
Description: The mozilla::net::IsValidReferrerPolicy function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a Content Security Policy (CSP) referrer directive with zero values.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/93052; http://www.securitytracker.com/id/1036852; https://bugzilla.mozilla.org/show_bug.cgi?id=1289085
CVE: CVE-2016-5256
Published: 2016-09-22
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.mozilla.org/security/announce/2016/mfsa2016-85.html; http://www.securityfocus.com/bid/93052; http://www.securitytracker.com/id/1036852
CVE: CVE-2016-5257
Published: 2016-09-22
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4 and Thunderbird < 45.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2016-1912.html; http://rhn.redhat.com/errata/RHSA-2016-1985.html; http://www.debian.org/security/2016/dsa-3674
CVE: CVE-2016-5270
Published: 2016-09-22
Description: Heap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to cause a denial of service (boolean out-of-bounds write) or possibly have unspecified other impact via Unicode characters that are mishandled during text conversion.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-787
References: http://rhn.redhat.com/errata/RHSA-2016-1912.html; http://www.debian.org/security/2016/dsa-3674; http://www.mozilla.org/security/announce/2016/mfsa2016-85.html
CVE: CVE-2016-5271
Published: 2016-09-22
Description: The PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via text runs in conjunction with a "display: contents" Cascading Style Sheets (CSS) property.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.mozilla.org/security/announce/2016/mfsa2016-85.html; http://www.securityfocus.com/bid/93052; http://www.securitytracker.com/id/1036852
CVE: CVE-2016-5272
Published: 2016-09-22
Description: The nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 does not properly perform a cast of an unspecified variable during handling of INPUT elements, which allows remote attackers to execute arbitrary code via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2016-1912.html; http://www.debian.org/security/2016/dsa-3674; http://www.mozilla.org/security/announce/2016/mfsa2016-85.html
CVE: CVE-2016-5273
Published: 2016-09-22
Description: The mozilla::a11y::HyperTextAccessible::GetChildOffset function in the accessibility implementation in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://www.mozilla.org/security/announce/2016/mfsa2016-85.html; http://www.securityfocus.com/bid/93052; http://www.securitytracker.com/id/1036852
CVE: CVE-2016-5274
Published: 2016-09-22
Description: Use-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code by leveraging improper interaction between restyling and the Web Animations model implementation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-1912.html; http://www.debian.org/security/2016/dsa-3674; http://www.mozilla.org/security/announce/2016/mfsa2016-85.html
CVE: CVE-2016-5275
Published: 2016-09-22
Description: Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code by leveraging improper interaction between empty filters and CANVAS element rendering.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.mozilla.org/security/announce/2016/mfsa2016-85.html; http://www.securityfocus.com/bid/93052; http://www.securitytracker.com/id/1036852
CVE: CVE-2016-5276
Published: 2016-09-22
Description: Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an aria-owns attribute.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-1912.html; http://www.debian.org/security/2016/dsa-3674; http://www.mozilla.org/security/announce/2016/mfsa2016-85.html
CVE: CVE-2016-5277
Published: 2016-09-22
Description: Use-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging improper interaction between timeline destruction and the Web Animations model implementation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-1912.html; http://www.debian.org/security/2016/dsa-3674; http://www.mozilla.org/security/announce/2016/mfsa2016-85.html
CVE: CVE-2016-5278
Published: 2016-09-22
Description: Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2016-1912.html; http://www.debian.org/security/2016/dsa-3674; http://www.mozilla.org/security/announce/2016/mfsa2016-85.html
CVE: CVE-2016-5279
Published: 2016-09-22
Description: Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during a local-file drag-and-drop operation via crafted JavaScript code.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.mozilla.org/security/announce/2016/mfsa2016-85.html; http://www.securityfocus.com/bid/93052; http://www.securitytracker.com/id/1036852
CVE: CVE-2016-5280
Published: 2016-09-22
Description: Use-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code via bidirectional text.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-1912.html; http://www.debian.org/security/2016/dsa-3674; http://www.mozilla.org/security/announce/2016/mfsa2016-85.html
CVE: CVE-2016-5281
Published: 2016-09-22
Description: Use-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code by leveraging improper interaction between JavaScript code and an SVG document.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-1912.html; http://www.debian.org/security/2016/dsa-3674; http://www.geeknik.net/7gr1u98b9
CVE: CVE-2016-5282
Published: 2016-09-22
Description: Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by a jar: URL for a favicon resource.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.mozilla.org/security/announce/2016/mfsa2016-85.html; http://www.securityfocus.com/bid/93052; http://www.securitytracker.com/id/1036852
CVE: CVE-2016-5283
Published: 2016-09-22
Description: Mozilla Firefox before 49.0 allows remote attackers to bypass the Same Origin Policy via a crafted fragment identifier in the SRC attribute of an IFRAME element, leading to insufficient restrictions on link-color information after a document is resized.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://www.mozilla.org/security/announce/2016/mfsa2016-85.html; http://www.securityfocus.com/bid/93052; http://www.securitytracker.com/id/1036852
CVE: CVE-2016-5284
Published: 2016-09-22
Description: Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org signed by an arbitrary built-in Certification Authority.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2016-1912.html; http://seclists.org/dailydave/2016/q3/51; http://www.debian.org/security/2016/dsa-3674
CVE: CVE-2016-6373
Published: 2016-09-22
Description: The web-based GUI in Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-csp2100-1; http://www.securityfocus.com/bid/93093; http://www.securitytracker.com/id/1036865
CVE: CVE-2016-6374
Published: 2016-09-22
Description: Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote attackers to execute arbitrary code via a crafted dnslookup command in an HTTP request, aka Bug ID CSCuz89093.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-csp2100-2; http://www.securityfocus.com/bid/93095; http://www.securitytracker.com/id/1036864
CVE: CVE-2016-6406
Published: 2016-09-22
Description: Cisco IronPort AsyncOS 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.7.2-046, 9.7.2-047, 9.7.2-054, 10.0.0-124, and 10.0.0-125 on Email Security Appliance (ESA) devices, when Enrollment Client before 1.0.2-065 is installed, allows remote attackers to obtain root access via a connection to the testing/debugging interface, aka Bug ID CSCvb26017.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160922-esa; http://www.securityfocus.com/bid/93116; http://www.securitytracker.com/id/1036881
CVE: CVE-2016-6414
Published: 2016-09-22
Description: iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbitrary IOx Linux commands on the guest OS via crafted iox command-line options, aka Bug ID CSCuz59223.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-iox; http://www.securityfocus.com/bid/93091; http://www.securitytracker.com/id/1036876
CVE: CVE-2016-6408
Published: 2016-09-24
Description: Cisco Prime Home 5.2.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCvb17814.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-cph; http://www.securityfocus.com/bid/93092; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-cph
CVE: CVE-2016-6409
Published: 2016-09-24
Description: The Data in Motion (DMo) component in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service (out-of-bounds access) via crafted traffic, aka Bug ID CSCuy54015.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-dmo; http://www.securityfocus.com/bid/93094; http://www.securitytracker.com/id/1036875
CVE: CVE-2016-6410
Published: 2016-09-24
Description: The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuy19856.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-caf; http://www.securityfocus.com/bid/93090; http://www.securitytracker.com/id/1036873
CVE: CVE-2016-6411
Published: 2016-09-24
Description: Cisco Firepower Management Center and FireSIGHT System Software 6.0.1 mishandle comparisons between URLs and X.509 certificates, which allows remote attackers to bypass intended do-not-decrypt settings via a crafted URL, aka Bug ID CSCva50585.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-fmc; http://www.securitytracker.com/id/1036877; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-fmc
CVE: CVE-2016-6412
Published: 2016-09-24
Description: The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers, aka Bug ID CSCuz84773.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-caf1; http://www.securityfocus.com/bid/93088; http://www.securitytracker.com/id/1036874
CVE: CVE-2016-6413
Published: 2016-09-24
Description: The installation procedure on Cisco Application Policy Infrastructure Controller (APIC) devices 1.3(2f) mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCva50496.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-apic; http://www.securitytracker.com/id/1036872; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-apic
CVE: CVE-2016-0918
Published: 2016-09-24
Description: EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Governance before 7.0.0 P04 allow remote authenticated users to obtain User Detail Popup information via a modified URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/bugtraq/2016/Sep/52; http://www.securityfocus.com/bid/93108; http://www.securitytracker.com/id/1036896
CVE: CVE-2016-4845
Published: 2016-09-24
Description: Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0, HVL-AT4.0, HVL-AT2.0A, HVL-AT3.0A, and HVL-AT4.0A devices with firmware before 2.04 allows remote attackers to hijack the authentication of arbitrary users for requests that delete content.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN35062083/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000134; http://www.iodata.jp/support/information/2016/hvl-a_csrf/
CVE: CVE-2016-5793
Published: 2016-09-24
Description: Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-428
References: http://www.securityfocus.com/bid/93046; https://ics-cert.us-cert.gov/advisories/ICSA-16-264-01; http://www.securityfocus.com/bid/93046
CVE: CVE-2016-6531
Published: 2016-09-24
Description: Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows remote attackers to obtain administrative access by leveraging access to intranet TCP port 3306.  NOTE: the vendor disputes this issue, stating that the "vulnerability note ... is factually false ... there is indeed a default blank password, but it can be changed ... We recommend that users change it, each customer receives direction.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255
References: http://www.kb.cert.org/vuls/id/619767; http://www.kb.cert.org/vuls/id/GWAN-ACVSBM; http://www.securityfocus.com/bid/92780
CVE: CVE-2016-6532
Published: 2016-09-24
Description: DEXIS Imaging Suite 10 has a hardcoded password for the sa account, which allows remote attackers to obtain administrative access by entering this password in a DEXIS_DATA SQL Server session.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://www.kb.cert.org/vuls/id/282991; http://www.securityfocus.com/bid/92823; http://www.kb.cert.org/vuls/id/282991
CVE: CVE-2016-4611
Published: 2016-09-25
Description: WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4730, CVE-2016-4733, CVE-2016-4734, and CVE-2016-4735.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html; http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html; http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html
CVE: CVE-2016-4618
Published: 2016-09-25
Description: Cross-site scripting (XSS) vulnerability in Safari Reader in Apple iOS before 10 and Safari before 10 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS (UXSS)."
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html; http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html; http://www.securityfocus.com/bid/93053
CVE: CVE-2016-4658
Published: 2016-09-25
Description: xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html; http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html; http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html