deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-1171
Published: 2016-04-06
Description: Cross-site scripting (XSS) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN13288761/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000040; https://hiniarata.jp/news/archives/55
CVE: CVE-2016-1172
Published: 2016-04-06
Description: Cross-site request forgery (CSRF) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN13288761/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000041; https://hiniarata.jp/news/archives/55
CVE: CVE-2016-1173
Published: 2016-04-06
Description: Cross-site scripting (XSS) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN26627848/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000042; https://hiniarata.jp/news/archives/55
CVE: CVE-2016-1174
Published: 2016-04-06
Description: Cross-site request forgery (CSRF) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN26627848/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000043; https://hiniarata.jp/news/archives/55
CVE: CVE-2016-1290
Published: 2016-04-06
Description: The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC restrictions and gain privileges via an HTTP request that is inconsistent with a pattern filter, aka Bug ID CSCuy10227.
CVSS Score: 8.1 (HIGH)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-privauth; http://www.securitytracker.com/id/1035498; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-privauth
CVE: CVE-2016-1291
Published: 2016-04-06
Description: Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-remcode; http://www.securitytracker.com/id/1035497; https://blogs.securiteam.com/index.php/archives/2727
CVE: CVE-2016-1313
Published: 2016-04-06
Description: Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store a default SSH private key, which allows remote attackers to obtain root access via unspecified vectors, aka Bug ID CSCun71294.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-ucs; http://www.securitytracker.com/id/1035496; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-ucs
CVE: CVE-2016-1346
Published: 2016-04-06
Description: The kernel in Cisco TelePresence Server 3.0 through 4.2(4.18) on Mobility Services Engine (MSE) 8710 devices allows remote attackers to cause a denial of service (panic and reboot) via a crafted sequence of IPv6 packets, aka Bug ID CSCuu46673.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-cts; http://www.securitytracker.com/id/1035499; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-cts
CVE: CVE-2016-2272
Published: 2016-04-06
Description: Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-061-03; https://ics-cert.us-cert.gov/advisories/ICSA-16-061-03
CVE: CVE-2016-2277
Published: 2016-04-06
Description: IAB.exe in Rockwell Automation Integrated Architecture Builder (IAB) before 9.6.0.8 and 9.7.x before 9.7.0.2 allows remote attackers to execute arbitrary code via a crafted project file.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-056-01; https://ics-cert.us-cert.gov/advisories/ICSA-16-056-01
CVE: CVE-2016-2290
Published: 2016-04-06
Description: Heap-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01; https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01
CVE: CVE-2016-2291
Published: 2016-04-06
Description: Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allow remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01; https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01
CVE: CVE-2016-2292
Published: 2016-04-06
Description: Stack-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01; https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01
CVE: CVE-2016-0888
Published: 2016-04-07
Description: EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors.
CVSS Score: 8.8 (HIGH)
References: http://seclists.org/bugtraq/2016/Apr/20; http://www.securitytracker.com/id/1035459; http://seclists.org/bugtraq/2016/Apr/20
CVE: CVE-2016-1019
Published: 2016-04-07
Description: Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.
CVSS Score: 9.8 (CRITICAL)
References: http://blogs.adobe.com/psirt/?p=1330; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html
CVE: CVE-2016-1563
Published: 2016-04-07
Description: NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20, CWE-200
References: https://kb.netapp.com/support/index?page=content&id=9010064; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://kb.netapp.com/support/index?page=content&id=9010064
CVE: CVE-2016-7921
Published: 2016-04-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2015-7921.  Reason: This candidate is a duplicate of CVE-2015-7921.  A typo caused the wrong ID to be used.  Notes: All CVE users should reference CVE-2015-7921 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2016-3947
Published: 2016-04-07
Description: Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log files via an ICMPv6 packet.
CVSS Score: 8.2 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html; http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html
CVE: CVE-2016-3948
Published: 2016-04-07
Description: Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP response, related to Vary headers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html; http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html
CVE: CVE-2015-8305
Published: 2016-04-07
Description: Huawei Sophia-L10 smartphones with software before P7-L10C900B852 allow attackers to cause a denial of service (system panic) via a crafted application with the system or camera privilege.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-02-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-02-smartphone-en
CVE: CVE-2016-0734
Published: 2016-04-07
Description: The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-254
References: http://activemq.apache.org/security-advisories.data/CVE-2016-0734-announcement.txt; http://www.openwall.com/lists/oss-security/2016/03/10/11; http://www.securityfocus.com/bid/84321
CVE: CVE-2016-1714
Published: 2016-04-07
Description: The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2016-0081.html; http://rhn.redhat.com/errata/RHSA-2016-0082.html; http://rhn.redhat.com/errata/RHSA-2016-0083.html
CVE: CVE-2016-2858
Published: 2016-04-07
Description: QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request, which triggers arbitrary stack based allocation and memory corruption.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-331
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=60253ed1e6ec6d8e5ef2efe7bf755f475dce9956; http://www.openwall.com/lists/oss-security/2016/03/04/1; http://www.openwall.com/lists/oss-security/2016/03/07/4
CVE: CVE-2016-3973
Published: 2016-04-07
Description: The chat feature in the Real-Time Collaboration (RTC) services 7.3 and 7.4 in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to obtain sensitive user information by visiting webdynpro/resources/sap.com/tc~rtc~coll.appl.rtc~wd_chat/Chat#, pressing "Add users", and doing a search, aka SAP Security Note 2255990.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/137579/SAP-NetWeaver-AS-JAVA-7.5-Information-Disclosure.html; http://seclists.org/fulldisclosure/2016/Jun/46; https://erpscan.io/advisories/erpscan-16-016-sap-netweaver-7-4-information-disclosure-wd_chat/
CVE: CVE-2016-3974
Published: 2016-04-07
Description: XML external entity (XXE) vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to cause a denial of service, conduct SMB Relay attacks, or access arbitrary files via a crafted XML request to _tc~monitoring~webservice~web/ServerNodesWSService, aka SAP Security Note 2235994.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: http://packetstormsecurity.com/files/137527/SAP-NetWeaver-AS-JAVA-7.5-XXE-Injection.html; http://seclists.org/fulldisclosure/2016/Jun/41; https://erpscan.io/advisories/erpscan-16-013-sap-netweaver-7-4-ctcprotocol-servlet-xxe/
CVE: CVE-2016-3975
Published: 2016-04-07
Description: Cross-site scripting (XSS) vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to inject arbitrary web script or HTML via the navigationTarget parameter to irj/servlet/prt/portal/prteventname/XXX/prtroot/com.sapportals.navigation.testComponent.NavigationURLTester, aka SAP Security Note 2238375.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/137529/SAP-NetWeaver-AS-JAVA-7.5-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2016/Jun/42; https://erpscan.io/advisories/erpscan-16-014-sap-netweaver-7-4-navigationurltester/
CVE: CVE-2015-8307
Published: 2016-04-07
Description: The Graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230, and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application with the graphics permission, aka an "interface access control vulnerability," a different vulnerability than CVE-2015-8680.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-04-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-04-smartphone-en
CVE: CVE-2015-8318
Published: 2016-04-07
Description: Heap-based buffer overflow in the HIFI driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230, and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2015-8319.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-04-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-04-smartphone-en
CVE: CVE-2015-8319
Published: 2016-04-07
Description: Heap-based buffer overflow in the HIFI driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230, and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2015-8318.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-04-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-04-smartphone-en
CVE: CVE-2015-8679
Published: 2016-04-07
Description: The Maxim_smartpa_dev driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allow attackers to cause a denial of service (system crash) via a crafted application, which triggers an invalid memory access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160105-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160105-01-smartphone-en
CVE: CVE-2015-8680
Published: 2016-04-07
Description: The Graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230, and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application with the graphics permission, aka an "interface access control vulnerability," a different vulnerability than CVE-2015-8307.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-04-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-04-smartphone-en
CVE: CVE-2015-8681
Published: 2016-04-07
Description: The ovisp driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230, and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application with the camera permission, aka an "interface access control vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-04-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-04-smartphone-en
CVE: CVE-2016-2510
Published: 2016-04-07
Description: BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler.
CVSS Score: 8.1 (HIGH)
CWE: CWE-19
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00056.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00078.html; http://rhn.redhat.com/errata/RHSA-2016-0539.html
CVE: CVE-2015-2774
Published: 2016-04-07
Description: Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-updates/2016-02/msg00124.html; http://openwall.com/lists/oss-security/2015/03/27/6; http://openwall.com/lists/oss-security/2015/03/27/9
CVE: CVE-2016-0729
Published: 2016-04-07
Description: Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182062.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182131.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182597.html
CVE: CVE-2016-2086
Published: 2016-04-07
Description: Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177184.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177673.html; http://www.securityfocus.com/bid/83282
CVE: CVE-2016-2216
Published: 2016-04-07
Description: The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters in the HTTP header, as demonstrated by %c4%8d%c4%8a.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://blog.safebreach.com/2016/02/09/http-response-splitting-in-node-js-root-cause-analysis/; http://info.safebreach.com/hubfs/Node-js-Response-Splitting.pdf; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177184.html
CVE: CVE-2016-2511
Published: 2016-04-07
Description: Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179168.html; http://packetstormsecurity.com/files/135886/WebSVN-2.3.3-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2016/Feb/99
CVE: CVE-2016-0788
Published: 2016-04-07
Description: The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2016-1773.html; https://access.redhat.com/errata/RHSA-2016:0711; https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24
CVE: CVE-2016-0789
Published: 2016-04-07
Description: CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2016-1773.html; https://access.redhat.com/errata/RHSA-2016:0711; https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24
CVE: CVE-2016-0790
Published: 2016-04-07
Description: Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API tokens, which makes it easier for remote attackers to determine API tokens via a brute-force approach.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-254
References: http://rhn.redhat.com/errata/RHSA-2016-1773.html; https://access.redhat.com/errata/RHSA-2016:0711; https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24
CVE: CVE-2016-0791
Published: 2016-04-07
Description: Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force approach.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2016-1773.html; https://access.redhat.com/errata/RHSA-2016:0711; https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24
CVE: CVE-2016-0792
Published: 2016-04-07
Description: Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and groovy.util.Expando.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2016-1773.html; https://access.redhat.com/errata/RHSA-2016:0711; https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24
CVE: CVE-2016-1531
Published: 2016-04-07
Description: Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00026.html; http://packetstormsecurity.com/files/136124/Exim-4.84-3-Local-Root-Privilege-Escalation.html; http://www.debian.org/security/2016/dsa-3517