deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-7982
Published: 2017-04-20
Description: Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted plist file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/libimobiledevice/libplist/issues/103; https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html; https://github.com/libimobiledevice/libplist/issues/103
CVE: CVE-2017-5190
Published: 2017-04-20
Description: NetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 HF1, when configured as a SAML 2.0 Identity Server with Virtual Attributes, has a concurrency issue causing information leakage, related to a stale profile.
CVSS Score: 3.1 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97965; http://www.securitytracker.com/id/1038338; https://www.novell.com/support/kb/doc.php?id=7018792
CVE: CVE-2016-1219
Published: 2017-04-20
Description: Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://jvn.jp/en/jp/JVN89211736/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000148.html; http://www.securityfocus.com/bid/92598
CVE: CVE-2016-4293
Published: 2017-04-20
Description: Multiple heap-based buffer overflows in the (1) CBookBase::SetDefTableStyle and (2) CBookBase::SetDefPivotStyle functions in Hancom Office 2014 VP allow remote attackers to execute arbitrary code via a crafted Hangul Hcell Document (.cell) file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/92327; http://www.talosintelligence.com/reports/TALOS-2016-0148/; http://www.securityfocus.com/bid/92327
CVE: CVE-2016-4650
Published: 2017-04-20
Description: Heap-based buffer overflow in IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/92034; http://www.securitytracker.com/id/1036348; http://www.zerodayinitiative.com/advisories/ZDI-16-494
CVE: CVE-2016-4847
Published: 2017-04-20
Description: Cross-site scripting (XSS) vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbitrary web script or HTML by leveraging an unanchored regex.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN58455472/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000141.html; http://www.securityfocus.com/bid/92536
CVE: CVE-2016-4849
Published: 2017-04-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in Geeklog IVYWE edition 2.1.1 allow remote attackers to inject arbitrary web script or HTML by leveraging use of the COM_getCurrentURL function in (1) public_html/layout/default/header.thtml, (2) public_html/layout/bento/header.thtml, (3) public_html/layout/fotos/header.thtml, or (4) public_html/layout/default/article/article.thtml.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN09836883/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000150.html; http://www.securityfocus.com/bid/92545
CVE: CVE-2016-5409
Published: 2017-04-20
Description: Red Hat OpenShift Enterprise 2 does not include the HTTPOnly flag in a Set-Cookie header for the GEARID cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97988; https://bugzilla.redhat.com/show_bug.cgi?id=1366461; http://www.securityfocus.com/bid/97988
CVE: CVE-2016-5760
Published: 2017-04-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allow remote attackers to inject arbitrary web script or HTML via the (1) token parameter to gwadmin-console/install/login.jsp or (2) PATH_INFO to gwadmin-console/index.jsp.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/138503/Micro-Focus-GroupWise-Cross-Site-Scripting-Overflows.html; http://seclists.org/fulldisclosure/2016/Aug/123; http://www.securityfocus.com/archive/1/539296/100/0/threaded
CVE: CVE-2016-5761
Published: 2017-04-20
Description: Cross-site scripting (XSS) vulnerability in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allows remote attackers to inject arbitrary web script or HTML via a crafted email.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/138503/Micro-Focus-GroupWise-Cross-Site-Scripting-Overflows.html; http://seclists.org/fulldisclosure/2016/Aug/123; http://www.securityfocus.com/archive/1/539296/100/0/threaded
CVE: CVE-2016-5762
Published: 2017-04-20
Description: Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 might allow remote attackers to execute arbitrary code via a long (1) username or (2) password, which triggers a heap-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://packetstormsecurity.com/files/138503/Micro-Focus-GroupWise-Cross-Site-Scripting-Overflows.html; http://seclists.org/fulldisclosure/2016/Aug/123; http://www.securityfocus.com/archive/1/539296/100/0/threaded
CVE: CVE-2016-6331
Published: 2017-04-20
Description: ApiParse in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to bypass intended per-title read restrictions via a parse action to api.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://bugzilla.redhat.com/show_bug.cgi?id=1369613; https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html; https://phabricator.wikimedia.org/T115333
CVE: CVE-2016-6332
Published: 2017-04-20
Description: MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1, when $wgBlockDisablesLogin is true, might allow remote attackers to obtain sensitive information by leveraging failure to terminate sessions when a user account is blocked.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=1369613; https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html; https://phabricator.wikimedia.org/T129738
CVE: CVE-2016-6333
Published: 2017-04-20
Description: Cross-site scripting (XSS) vulnerability in the CSS user subpage preview feature in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbitrary web script or HTML via the edit box in Special:MyPage/common.css.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/98053; https://bugzilla.redhat.com/show_bug.cgi?id=1369613; https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
CVE: CVE-2016-6334
Published: 2017-04-20
Description: Cross-site scripting (XSS) vulnerability in the Parser::replaceInternalLinks2 method in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving replacement of percent encoding in unclosed internal links.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/98057; https://bugzilla.redhat.com/show_bug.cgi?id=1369613; https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
CVE: CVE-2016-6335
Published: 2017-04-20
Description: MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 does not generate head items in the context of a given title, which allows remote attackers to obtain sensitive information via a parse action to api.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=1369613; https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html; https://phabricator.wikimedia.org/T139565
CVE: CVE-2016-6336
Published: 2017-04-20
Description: MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote authenticated users with undelete permissions to bypass intended suppressrevision and deleterevision restrictions and remove the revision deletion status of arbitrary file revisions by using Special:Undelete.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://bugzilla.redhat.com/show_bug.cgi?id=1369613; https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html; https://phabricator.wikimedia.org/T132926
CVE: CVE-2016-6337
Published: 2017-04-20
Description: MediaWiki 1.27.x before 1.27.1 might allow remote attackers to bypass intended session access restrictions by leveraging a call to the UserGetRights function after Session::getAllowedUserRights.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html; https://phabricator.wikimedia.org/T139670; https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
CVE: CVE-2016-6338
Published: 2017-04-20
Description: ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M) for Servers and RHEV-M 4.0, allows physically proximate attackers to bypass a webadmin session timeout restriction via vectors related to UI selections, which trigger repeating queries.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/92666; https://access.redhat.com/errata/RHSA-2017:3427; https://bugzilla.redhat.com/show_bug.cgi?id=1369285
CVE: CVE-2016-6341
Published: 2017-04-20
Description: oVirt Engine before 4.0.3 does not include DWH_DB_PASSWORD in the list of keys to hide in log files, which allows local users to obtain sensitive password information by reading engine log files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/92665; https://bugzilla.redhat.com/show_bug.cgi?id=1363816; https://bugzilla.redhat.com/show_bug.cgi?id=1369793
CVE: CVE-2016-6347
Published: 2017-04-20
Description: Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/92759; https://bugzilla.redhat.com/show_bug.cgi?id=1372124; http://www.securityfocus.com/bid/92759
CVE: CVE-2017-7718
Published: 2017-04-20
Description: hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=215902d7b6fb50c6fc216fc74f770858278ed904; http://www.openwall.com/lists/oss-security/2017/04/19/4; http://www.securityfocus.com/bid/97957
CVE: CVE-2015-8957
Published: 2017-04-20
Description: Buffer overflow in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (application crash) via a crafted SUN file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26838; http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93125
CVE: CVE-2015-8958
Published: 2017-04-20
Description: coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted SUN file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26857; http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93124
CVE: CVE-2015-8959
Published: 2017-04-20
Description: coders/dds.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (CPU consumption) via a crafted DDS file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26861; http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93230
CVE: CVE-2016-1213
Published: 2017-04-20
Description: The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://jvn.jp/en/jp/JVN67266823/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000142; http://www.securityfocus.com/bid/92596
CVE: CVE-2016-1214
Published: 2017-04-20
Description: Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN67595539/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000143.html; http://www.securityfocus.com/bid/92601
CVE: CVE-2016-1215
Published: 2017-04-20
Description: Cross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4.2.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN67595539/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000144.html; http://www.securityfocus.com/bid/92601
CVE: CVE-2016-1216
Published: 2017-04-20
Description: Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN67595539/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000145.html; http://www.securityfocus.com/bid/92601
CVE: CVE-2016-1217
Published: 2017-04-20
Description: Cross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon before 4.2.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN67595539/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000146.html; http://www.securityfocus.com/bid/92601
CVE: CVE-2016-1218
Published: 2017-04-20
Description: SQL injection vulnerability in Cybozu Garoon before 4.2.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://jvn.jp/en/jp/JVN83568336/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000147.html; http://www.securityfocus.com/bid/92600
CVE: CVE-2016-1220
Published: 2017-04-20
Description: Cybozu Garoon before 4.2.2 does not properly restrict access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: http://jvn.jp/en/jp/JVN93411577/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000149.html; http://www.securityfocus.com/bid/92599
CVE: CVE-2016-4818
Published: 2017-04-20
Description: DMMFX Trade for Android 1.5.0 and earlier, DMMFX DEMO Trade for Android 1.5.0 and earlier, and GAITAMEJAPAN FX Trade for Android 1.4.0 and earlier do not verify SSL certificates.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://fx.dmm.com/information/press/2016/[PII_REDACTED]/; http://jvn.jp/en/jp/JVN40898764/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000092.html
CVE: CVE-2016-4842
Published: 2017-04-20
Description: Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN02576342/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000136.html; http://www.securityfocus.com/bid/92460
CVE: CVE-2016-4843
Published: 2017-04-20
Description: Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN03052683/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000137.html; http://www.securityfocus.com/bid/92461
CVE: CVE-2016-4844
Published: 2017-04-20
Description: Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN04125292/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000138.html; http://www.securityfocus.com/bid/92462
CVE: CVE-2016-4850
Published: 2017-04-20
Description: LINE for Windows before 4.8.3 allows man-in-the-middle attackers to execute arbitrary code.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: http://jvn.jp/en/jp/JVN05924524/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000153.html; http://www.securityfocus.com/bid/92644
CVE: CVE-2016-4862
Published: 2017-04-20
Description: Twigmo bundled with CS-Cart 4.3.9 and earlier and Twigmo bundled with CS-Cart Multi-Vendor 4.3.9 and earlier allow remote authenticated users to execute arbitrary PHP code on the servers.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN55389065/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000157.html; http://tips.cs-cart.jp/fix-twigmo-vulnerability-20160914.html
CVE: CVE-2016-5010
Published: 2017-04-20
Description: coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://git.imagemagick.org/repos/ImageMagick/commit/c20de102cc57f3739a8870f79e728e3b0bea18c0; https://bugzilla.redhat.com/show_bug.cgi?id=1354500; https://security.gentoo.org/glsa/201611-21
CVE: CVE-2016-7513
Published: 2017-04-20
Description: Off-by-one error in magick/cache.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-189
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93121; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=832455
CVE: CVE-2016-7514
Published: 2017-04-20
Description: The ReadPSDChannelPixels function in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93122; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1533442
CVE: CVE-2016-7516
Published: 2017-04-20
Description: The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted VIFF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93129; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1533452
CVE: CVE-2016-7517
Published: 2017-04-20
Description: The EncodeImage function in coders/pict.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PICT file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93128; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1533449
CVE: CVE-2016-7518
Published: 2017-04-20
Description: The ReadSUNImage function in coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SUN file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93130; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1533447
CVE: CVE-2016-7520
Published: 2017-04-20
Description: Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted HDR file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93131; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537213
CVE: CVE-2016-7521
Published: 2017-04-20
Description: Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93131; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537418
CVE: CVE-2016-7525
Published: 2017-04-20
Description: Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93131; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537424
CVE: CVE-2016-7526
Published: 2017-04-20
Description: coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93131; https://bugs.launchpad.net/bugs/1539050
CVE: CVE-2016-7527
Published: 2017-04-20
Description: coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93220; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1542115
CVE: CVE-2016-7530
Published: 2017-04-20
Description: The quantum handling code in ImageMagick allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds write) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93131; https://bugs.launchpad.net/bugs/1539053
CVE: CVE-2016-7532
Published: 2017-04-20
Description: coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93131; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1539066
CVE: CVE-2016-7534
Published: 2017-04-20
Description: The generic decoder in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93131; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1542785
CVE: CVE-2016-7535
Published: 2017-04-20
Description: coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PSD file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93131; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1545180
CVE: CVE-2016-7536
Published: 2017-04-20
Description: magick/profile.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted profile.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93225; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1545367
CVE: CVE-2016-7538
Published: 2017-04-20
Description: coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2016/09/22/2; http://www.securityfocus.com/bid/93131; https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1556273