deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-6923
Published: 2016-09-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, CVE-2016-6931, and CVE-2016-6932.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-1865.html; http://www.securityfocus.com/bid/92927; http://www.securitytracker.com/id/1036791
CVE: CVE-2016-6924
Published: 2016-09-14
Description: Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, and CVE-2016-6922.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://rhn.redhat.com/errata/RHSA-2016-1865.html; http://www.securityfocus.com/bid/92930; http://www.securitytracker.com/id/1036791
CVE: CVE-2016-6925
Published: 2016-09-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, CVE-2016-6931, and CVE-2016-6932.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-1865.html; http://www.securityfocus.com/bid/92927; http://www.securitytracker.com/id/1036791
CVE: CVE-2016-6926
Published: 2016-09-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923, CVE-2016-6925, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, CVE-2016-6931, and CVE-2016-6932.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-1865.html; http://www.securityfocus.com/bid/92927; http://www.securitytracker.com/id/1036791
CVE: CVE-2016-6927
Published: 2016-09-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923, CVE-2016-6925, CVE-2016-6926, CVE-2016-6929, CVE-2016-6930, CVE-2016-6931, and CVE-2016-6932.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-1865.html; http://www.securityfocus.com/bid/92927; http://www.securitytracker.com/id/1036791
CVE: CVE-2016-6929
Published: 2016-09-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6930, CVE-2016-6931, and CVE-2016-6932.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-1865.html; http://www.securityfocus.com/bid/92927; http://www.securitytracker.com/id/1036791
CVE: CVE-2016-6930
Published: 2016-09-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6931, and CVE-2016-6932.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-1865.html; http://www.securityfocus.com/bid/92927; http://www.securitytracker.com/id/1036791
CVE: CVE-2016-6931
Published: 2016-09-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, and CVE-2016-6932.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-1865.html; http://www.securityfocus.com/bid/92927; http://www.securitytracker.com/id/1036791
CVE: CVE-2016-6932
Published: 2016-09-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, and CVE-2016-6931.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2016-1865.html; http://www.securityfocus.com/bid/92927; http://www.securitytracker.com/id/1036791
CVE: CVE-2016-2179
Published: 2016-09-16
Description: The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759; http://rhn.redhat.com/errata/RHSA-2016-1940.html; http://www-01.ibm.com/support/docview.wss?uid=swg21995039
CVE: CVE-2016-2181
Published: 2016-09-16
Description: The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html
CVE: CVE-2016-2182
Published: 2016-09-16
Description: The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html
CVE: CVE-2016-4256
Published: 2016-09-16
Description: Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4257, CVE-2016-4258, CVE-2016-4259, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/92928; http://www.securitytracker.com/id/1036793; https://helpx.adobe.com/security/products/Digital-Editions/apsb16-28.html
CVE: CVE-2016-4257
Published: 2016-09-16
Description: Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4258, CVE-2016-4259, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/92928; http://www.securitytracker.com/id/1036793; https://helpx.adobe.com/security/products/Digital-Editions/apsb16-28.html
CVE: CVE-2016-4258
Published: 2016-09-16
Description: Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-2016-4259, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/92928; http://www.securitytracker.com/id/1036793; https://helpx.adobe.com/security/products/Digital-Editions/apsb16-28.html
CVE: CVE-2016-4259
Published: 2016-09-16
Description: Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-2016-4258, CVE-2016-4260, CVE-2016-4261, and CVE-2016-4262.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/92928; http://www.securitytracker.com/id/1036793; https://helpx.adobe.com/security/products/Digital-Editions/apsb16-28.html
CVE: CVE-2016-4260
Published: 2016-09-16
Description: Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-2016-4258, CVE-2016-4259, CVE-2016-4261, and CVE-2016-4262.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/92928; http://www.securitytracker.com/id/1036793; https://helpx.adobe.com/security/products/Digital-Editions/apsb16-28.html
CVE: CVE-2016-4261
Published: 2016-09-16
Description: Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-2016-4258, CVE-2016-4259, CVE-2016-4260, and CVE-2016-4262.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/92928; http://www.securitytracker.com/id/1036793; https://helpx.adobe.com/security/products/Digital-Editions/apsb16-28.html
CVE: CVE-2016-4262
Published: 2016-09-16
Description: Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-2016-4258, CVE-2016-4259, CVE-2016-4260, and CVE-2016-4261.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/92928; http://www.securitytracker.com/id/1036793; https://helpx.adobe.com/security/products/Digital-Editions/apsb16-28.html
CVE: CVE-2016-4263
Published: 2016-09-16
Description: Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/92925; http://www.securitytracker.com/id/1036793; https://helpx.adobe.com/security/products/Digital-Editions/apsb16-28.html
CVE: CVE-2016-6302
Published: 2016-09-16
Description: The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759; http://rhn.redhat.com/errata/RHSA-2016-1940.html; http://www-01.ibm.com/support/docview.wss?uid=swg21995039
CVE: CVE-2016-6303
Published: 2016-09-16
Description: Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759; http://www-01.ibm.com/support/docview.wss?uid=swg21995039; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html
CVE: CVE-2016-6936
Published: 2016-09-16
Description: Adobe AIR SDK & Compiler before 23.0.0.257 on Windows does not support Android runtime-analytics transport security, which might allow remote attackers to obtain sensitive information by leveraging access to a network over which analytics data is sent.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/92926; http://www.securitytracker.com/id/1036792; https://helpx.adobe.com/security/products/air/apsb16-31.html
CVE: CVE-2016-7420
Published: 2016-09-16
Description: Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory after an assertion failure, as demonstrated by reading a core dump.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2016/09/15/12; http://www.openwall.com/lists/oss-security/2016/09/16/1; http://www.openwall.com/lists/oss-security/2023/09/28/2
CVE: CVE-2016-5843
Published: 2016-09-17
Description: Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL commands via crafted search parameters.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/93019; https://github.com/OTRS/FAQ/commit/3700f75c67f6ed1d39bc213445c6d12a458e1af9; https://github.com/OTRS/FAQ/commit/8c9d63bd0297adda760330805c31afc130861557
CVE: CVE-2016-6401
Published: 2016-09-17
Description: Cisco Carrier Routing System (CRS) 5.1 and 5.1.4, as used in CRS Carrier Grade Services for CRS-1 and CRS-3 devices, allows remote attackers to cause a denial of service (line-card reload) via crafted IPv6-over-MPLS packets, aka Bug ID CSCva32494.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-crs; http://www.securityfocus.com/bid/92964; http://www.securitytracker.com/id/1036830
CVE: CVE-2016-6407
Published: 2016-09-17
Description: Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (link saturation) by making many HTTP requests for overlapping byte ranges simultaneously, aka Bug ID CSCuz27219.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-wsa; http://www.securityfocus.com/bid/92955; http://www.securitytracker.com/id/1036829
CVE: CVE-2016-6937
Published: 2016-09-17
Description: Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4208, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, CVE-2016-4254, CVE-2016-4265, CVE-2016-4266, CVE-2016-4267, CVE-2016-4268, CVE-2016-4269, and CVE-2016-4270.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93014; http://www.securitytracker.com/id/1036986; http://www.securitytracker.com/id/1037574
CVE: CVE-2016-6938
Published: 2016-09-17
Description: Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4255.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/93016; http://www.zerodayinitiative.com/advisories/ZDI-16-591; https://helpx.adobe.com/security/products/acrobat/apsb16-26.html
CVE: CVE-2016-1482
Published: 2016-09-17
Description: Cisco WebEx Meetings Server 2.6 allows remote attackers to execute arbitrary commands by injecting these commands into an application script, aka Bug ID CSCuy83130.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-wem; http://www.securityfocus.com/bid/92959; http://www.securitytracker.com/id/1036809
CVE: CVE-2016-6644
Published: 2016-09-17
Description: EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an r_object_id value.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-264
References: http://seclists.org/bugtraq/2016/Sep/18; http://www.securityfocus.com/bid/92906; http://www.securitytracker.com/id/1036796
CVE: CVE-2016-7411
Published: 2016-09-17
Description: ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an unserialize call that references a partially constructed object.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/09/15/10; http://www.php.net/ChangeLog-5.php; http://www.securityfocus.com/bid/93009
CVE: CVE-2016-7412
Published: 2016-09-17
Description: ext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the UNSIGNED_FLAG flag, which allows remote MySQL servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted field metadata.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/09/15/10; http://www.php.net/ChangeLog-5.php; http://www.php.net/ChangeLog-7.php
CVE: CVE-2016-7413
Published: 2016-09-17
Description: Use-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a wddxPacket XML document that lacks an end-tag for a recordset field element, leading to mishandling in a wddx_deserialize call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2016/09/15/10; http://www.php.net/ChangeLog-5.php; http://www.php.net/ChangeLog-7.php
CVE: CVE-2016-7414
Published: 2016-09-17
Description: The ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure that the uncompressed_filesize field is large enough, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via a crafted PHAR archive, related to ext/phar/util.c and ext/phar/zip.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/09/15/10; http://www.php.net/ChangeLog-5.php; http://www.php.net/ChangeLog-7.php
CVE: CVE-2016-7415
Published: 2016-09-17
Description: Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long locale string.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/09/15/10; http://www.securityfocus.com/bid/93022; https://bugs.php.net/bug.php?id=73007
CVE: CVE-2016-7416
Published: 2016-09-17
Description: ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a MessageFormatter::formatMessage call with a long first argument.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/09/15/10; http://www.php.net/ChangeLog-5.php; http://www.php.net/ChangeLog-7.php
CVE: CVE-2016-7417
Published: 2016-09-17
Description: ext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray unserialization without validating a return value and data type, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2016/09/15/10; http://www.php.net/ChangeLog-5.php; http://www.php.net/ChangeLog-7.php
CVE: CVE-2016-7418
Published: 2016-09-17
Description: The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service (invalid pointer access and out-of-bounds read) or possibly have unspecified other impact via an incorrect boolean element in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/09/15/10; http://www.php.net/ChangeLog-5.php; http://www.php.net/ChangeLog-7.php
CVE: CVE-2016-7419
Published: 2016-09-17
Description: Cross-site scripting (XSS) vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nextcloud Server before 9.0.52 allows remote authenticated users to inject arbitrary web script or HTML via a crafted directory name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/92373; https://github.com/nextcloud/gallery/commit/6933d27afe518967bd1b60e6a7eacd88288929fc; https://hackerone.com/reports/145355
CVE: CVE-2016-0883
Published: 2016-09-18
Description: Pivotal Cloud Foundry (PCF) Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie-encryption key across different customers' installations, which allows remote attackers to bypass session authentication by leveraging knowledge of this key from another installation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://pivotal.io/security/pcf-ops-manager-weak-authentication-scheme; https://pivotal.io/security/pcf-ops-manager-weak-authentication-scheme
CVE: CVE-2016-0896
Published: 2016-09-18
Description: Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.34 and 1.7.x before 1.7.12 places 169.254.0.0/16 in the all_open Application Security Group, which might allow remote attackers to bypass intended network-connectivity restrictions by leveraging access to the 169.254.169.254 address.
CVSS Score: 7.3 (HIGH)
CWE: CWE-254
References: http://www.securityfocus.com/bid/92161; https://pivotal.io/security/cve-2016-0896; http://www.securityfocus.com/bid/92161