deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-10131
Published: 2017-01-12
Description: system/libraries/Email.php in CodeIgniter before 3.1.3 allows remote attackers to execute arbitrary code by leveraging control over the email->from field to insert sendmail command-line arguments.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: http://www.securityfocus.com/bid/96851; https://gist.github.com/Zenexer/40d02da5e07f151adeaeeaa11af9ab36; https://github.com/bcit-ci/CodeIgniter/issues/4963
CVE: CVE-2016-9131
Published: 2017-01-12
Description: named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2017-0062.html; http://www.debian.org/security/2017/dsa-3758; http://www.securityfocus.com/bid/95386
CVE: CVE-2016-9147
Published: 2017-01-12
Description: named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing an inconsistency among the DNSSEC-related RRsets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2017-0062.html; http://rhn.redhat.com/errata/RHSA-2017-0063.html; http://rhn.redhat.com/errata/RHSA-2017-0064.html
CVE: CVE-2016-9444
Published: 2017-01-12
Description: named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2017-0062.html; http://www.debian.org/security/2017/dsa-3758; http://www.securityfocus.com/bid/95393
CVE: CVE-2017-5345
Published: 2017-01-12
Description: SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/95660; https://github.com/semplon/GeniXCMS/commit/6e21c01d87672d81080450e6913e0093a02bfab8; https://github.com/semplon/GeniXCMS/issues/60
CVE: CVE-2017-5346
Published: 2017-01-12
Description: SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin/index.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://code610.blogspot.com/2017/01/genixcms-sql-injection-quick-autopsy.html; http://www.securityfocus.com/bid/95655; https://github.com/semplon/GeniXCMS/issues/61
CVE: CVE-2017-5347
Published: 2017-01-12
Description: SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the recipient parameter to gxadmin/index.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/95684; https://github.com/semplon/GeniXCMS/issues/61; http://www.securityfocus.com/bid/95684
CVE: CVE-2017-5350
Published: 2017-01-12
Description: Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leveraging incomplete exception handling. The Samsung ID is SVE-2016-7122.
CVSS Score: 7.5 (HIGH)
References: http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017; http://www.securityfocus.com/bid/95424; http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017
CVE: CVE-2017-5351
Published: 2017-01-12
Description: Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) software allow attackers to crash the system by creating an arbitrarily large number of active VR service threads. The Samsung ID is SVE-2016-7650.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017; http://www.securityfocus.com/bid/95418; http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017
CVE: CVE-2017-5225
Published: 2017-01-12
Description: LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-122
References: http://bugzilla.maptools.org/show_bug.cgi?id=2656; http://bugzilla.maptools.org/show_bug.cgi?id=2657; http://www.debian.org/security/2017/dsa-3844
CVE: CVE-2016-6755
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-30740545. References: QC-CR#1065916.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94676; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94676
CVE: CVE-2016-6756
Published: 2017-01-12
Description: An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-29464815. References: QC-CR#1042068.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94693; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94693
CVE: CVE-2016-6757
Published: 2017-01-12
Description: An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-30148242. References: QC-CR#1052821.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94693; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94693
CVE: CVE-2016-6758
Published: 2017-01-12
Description: An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-30148882. References: QC-CR#1071731.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94677; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94677
CVE: CVE-2016-6759
Published: 2017-01-12
Description: An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-29982686. References: QC-CR#1055766.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94677; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94677
CVE: CVE-2016-6760
Published: 2017-01-12
Description: An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-29617572. References: QC-CR#1055783.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94677; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94677
CVE: CVE-2016-6761
Published: 2017-01-12
Description: An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-29421682. References: QC-CR#1055792.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94677; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94677
CVE: CVE-2016-6762
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the libziparchive library could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0. Android ID: A-31251826.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94700; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94700
CVE: CVE-2016-6763
Published: 2017-01-12
Description: A denial of service vulnerability in Telephony could enable a local malicious application to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of local permanent denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0. Android ID: A-31530456.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94711; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94711
CVE: CVE-2016-6764
Published: 2017-01-12
Description: A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0. Android ID: A-31681434.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-399
References: http://www.securityfocus.com/bid/94688; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94688
CVE: CVE-2016-6765
Published: 2017-01-12
Description: A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 7.0. Android ID: A-31449945.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-19
References: http://www.securityfocus.com/bid/94688; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94688
CVE: CVE-2016-6766
Published: 2017-01-12
Description: A denial of service vulnerability in libmedia and libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0. Android ID: A-31318219.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-19
References: http://www.securityfocus.com/bid/94688; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94688
CVE: CVE-2016-6767
Published: 2017-01-12
Description: A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4. Android ID: A-31833604.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-399
References: http://www.securityfocus.com/bid/94688; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94688
CVE: CVE-2016-6768
Published: 2017-01-12
Description: A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0. Android ID: A-31631842.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94704; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94704
CVE: CVE-2016-6769
Published: 2017-01-12
Description: An elevation of privilege vulnerability in Smart Lock could enable a local malicious user to access Smart Lock settings without a PIN. This issue is rated as Moderate because it first requires physical access to an unlocked device where Smart Lock was the last settings pane accessed by the user. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1. Android ID: A-29055171.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94703; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94703
CVE: CVE-2016-6770
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access system functions beyond its access level. This issue is rated as Moderate because it is a local bypass of restrictions on a constrained process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0. Android ID: A-30202228.
CVSS Score: 3.3 (LOW)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94702; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94702
CVE: CVE-2016-6771
Published: 2017-01-12
Description: An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its access level. This issue is rated as Moderate because it is a local bypass of restrictions on a constrained process. Product: Android. Versions: 6.0, 6.0.1, 7.0. Android ID: A-31566390.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94706; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94706
CVE: CVE-2016-6772
Published: 2017-01-12
Description: An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0. Android ID: A-31856351.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94701; https://bugs.chromium.org/p/project-zero/issues/detail?id=958; https://source.android.com/security/bulletin/2016-12-01.html
CVE: CVE-2016-6773
Published: 2017-01-12
Description: An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0. Android ID: A-30481714.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94707; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94707
CVE: CVE-2016-6774
Published: 2017-01-12
Description: An information disclosure vulnerability in Package Manager could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: 7.0. Android ID: A-31251489.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94705; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94705
CVE: CVE-2016-6775
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31222873. References: N-CVE-2016-6775.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/94674; https://source.android.com/security/bulletin/2016-12-01.html
CVE: CVE-2016-6776
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31680980. References: N-CVE-2016-6776.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/94674; https://source.android.com/security/bulletin/2016-12-01.html
CVE: CVE-2016-6777
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31910462. References: N-CVE-2016-6777.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://www.securityfocus.com/bid/94674; https://source.android.com/security/bulletin/2016-12-01.html
CVE: CVE-2016-6778
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31384646.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94675; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94675
CVE: CVE-2016-6779
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31386004.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94675; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94675
CVE: CVE-2016-6780
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31251496.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94675; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94675
CVE: CVE-2016-6781
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31095175. References: MT-ALPS02943455.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94683; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94683
CVE: CVE-2016-6782
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31224389. References: MT-ALPS02943506.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94683; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94683
CVE: CVE-2016-6783
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31350044. References: MT-ALPS02943437.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94683; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94683
CVE: CVE-2016-6784
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31350755. References: MT-ALPS02961424.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94683; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94683
CVE: CVE-2016-6785
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31748056. References: MT-ALPS02961400.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94683; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94683
CVE: CVE-2016-6788
Published: 2017-01-12
Description: An elevation of privilege vulnerability in the MediaTek I2C driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31224428. References: MT-ALPS02943467.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94687; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94687