deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-7571
Published: 2016-10-03
Description: Cross-site scripting (XSS) vulnerability in Drupal 8.x before 8.1.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an HTTP exception.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/93101; http://www.securitytracker.com/id/1036886; https://www.drupal.org/SA-CORE-2016-004
CVE: CVE-2016-7572
Published: 2016-10-03
Description: The system.temporary route in Drupal 8.x before 8.1.10 does not properly check for "Export configuration" permission, which allows remote authenticated users to bypass intended access restrictions and read a full config export via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/93101; http://www.securitytracker.com/id/1036886; https://www.drupal.org/SA-CORE-2016-004
CVE: CVE-2013-4118
Published: 2016-10-03
Description: FreeRDP before 1.1.0-beta1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-updates/2016-09/msg00101.html; http://lists.opensuse.org/opensuse-updates/2016-09/msg00102.html; http://www.openwall.com/lists/oss-security/2013/07/11/12
CVE: CVE-2013-4119
Published: 2016-10-03
Description: FreeRDP before 1.1.0-beta[PII_REDACTED] allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by disconnecting before authentication has finished.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2013/07/11/12; http://www.openwall.com/lists/oss-security/2013/07/12/2; http://www.securityfocus.com/bid/61072
CVE: CVE-2015-1832
Published: 2016-10-03
Description: XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving XmlVTI and the XML datatype.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-399, CWE-611
References: http://www-01.ibm.com/support/docview.wss?uid=swg21990100; http://www.securityfocus.com/bid/93132; https://issues.apache.org/jira/browse/DERBY-6807
CVE: CVE-2015-8085
Published: 2016-10-03
Description: Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 make it easier for remote authenticated administrators to obtain and decrypt passwords by leveraging selection of a reversible encryption algorithm.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-326
References: http://www.huawei.com/en/psirt/security-advisories/hw-455876; http://www.securityfocus.com/bid/76897; http://www.huawei.com/en/psirt/security-advisories/hw-455876
CVE: CVE-2015-8086
Published: 2016-10-03
Description: Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 makes it easier for remote authenticated administrators to obtain encryption keys and ciphertext passwords via vectors related to key storage.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-326
References: http://www.huawei.com/en/psirt/security-advisories/hw-455876; http://www.securityfocus.com/bid/76897; http://www.huawei.com/en/psirt/security-advisories/hw-455876
CVE: CVE-2016-6905
Published: 2016-10-03
Description: The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA image.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://libgd.github.io/release-2.2.3.html; http://lists.opensuse.org/opensuse-updates/2016-08/msg00121.html; http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html
CVE: CVE-2016-7046
Published: 2016-10-03
Description: Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service (CPU and disk consumption) via a long URL.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-399
References: http://rhn.redhat.com/errata/RHSA-2016-2640.html; http://rhn.redhat.com/errata/RHSA-2016-2641.html; http://rhn.redhat.com/errata/RHSA-2016-2642.html
CVE: CVE-2016-7141
Published: 2016-10-03
Description: curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://lists.opensuse.org/opensuse-updates/2016-09/msg00094.html; http://rhn.redhat.com/errata/RHSA-2016-2575.html; http://rhn.redhat.com/errata/RHSA-2016-2957.html
CVE: CVE-2016-8276
Published: 2016-10-03
Description: Buffer overflow in the Point-to-Point Protocol over Ethernet (PPPoE) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600, when CHAP authentication is configured on the server, allows remote attackers to cause a denial of service (server restart) or execute arbitrary code via crafted packets sent during authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160914-01-usg-en; http://www.securityfocus.com/bid/92962; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160914-01-usg-en
CVE: CVE-2016-8277
Published: 2016-10-03
Description: Huawei USG9520, USG9560, and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote authenticated users to cause a denial of service (device restart) via an unspecified command parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160921-01-firewall-en; http://www.securityfocus.com/bid/93097; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160921-01-firewall-en
CVE: CVE-2016-8278
Published: 2016-10-03
Description: Huawei USG9520, USG9560, and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote attackers to cause a denial of service (device restart) via an unspecified URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160921-02-firewall-en; http://www.securityfocus.com/bid/93099; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160921-02-firewall-en
CVE: CVE-2016-8280
Published: 2016-10-03
Description: Directory traversal vulnerability in Huawei eSight before V300R003C20SPC005 allows remote authenticated users to read arbitrary files via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160928-01-pathtraversal-en; http://www.securityfocus.com/bid/93190; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160928-01-pathtraversal-en
CVE: CVE-2016-4990
Published: 2016-10-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2016-0913
Published: 2016-10-05
Description: The client in EMC Replication Manager (RM) before 5.5.3.0_01-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://seclists.org/bugtraq/2016/Oct/6; http://www.securityfocus.com/bid/93348; http://www.securitytracker.com/id/1036940
CVE: CVE-2016-6550
Published: 2016-10-05
Description: The U by BB&T app 1.5.4 and earlier for iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/338624; http://www.securityfocus.com/bid/93259; http://www.kb.cert.org/vuls/id/338624
CVE: CVE-2016-6645
Published: 2016-10-05
Description: The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the (1) GeneralCmdRequest, (2) PersistantDataRequest, or (3) GetCommandExecRequest class.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://seclists.org/bugtraq/2016/Oct/7; http://www.securityfocus.com/bid/93343; http://www.securitytracker.com/id/1036941
CVE: CVE-2016-6646
Published: 2016-10-05
Description: The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the (1) GetSymmCmdRequest or (2) RemoteServiceHandler class.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://seclists.org/bugtraq/2016/Oct/7; http://www.securityfocus.com/bid/93343; http://www.securitytracker.com/id/1036941
CVE: CVE-2014-5414
Published: 2016-10-05
Description: Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components do not restrict the number of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-307, CWE-254
References: http://www.securityfocus.com/bid/93349; https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-001.pdf; https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-002.pdf
CVE: CVE-2014-5415
Published: 2016-10-05
Description: Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components might allow remote attackers to obtain access via the (1) Windows CE Remote Configuration Tool, (2) CE Remote Display service, or (3) TELNET service.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-749, CWE-264
References: http://www.securityfocus.com/bid/93349; https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-001.pdf; https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-002.pdf
CVE: CVE-2016-2307
Published: 2016-10-05
Description: American Auto-Matrix Aspect-Nexus Building Automation Front-End Solutions application before 3.0.0 and Aspect-Matrix Building Automation Front-End Solutions application allow remote attackers to read arbitrary files via unspecified vectors, as demonstrated by the configuration file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-273-01-0; https://ics-cert.us-cert.gov/advisories/ICSA-16-273-01-0
CVE: CVE-2016-2308
Published: 2016-10-05
Description: American Auto-Matrix Aspect-Nexus Building Automation Front-End Solutions application before 3.0.0 and Aspect-Matrix Building Automation Front-End Solutions application store passwords in cleartext, which allows remote attackers to obtain sensitive information by reading a file.
CVSS Score: 8.6 (HIGH)
References: https://ics-cert.us-cert.gov/advisories/ICSA-16-273-01-0; https://ics-cert.us-cert.gov/advisories/ICSA-16-273-01-0
CVE: CVE-2016-4387
Published: 2016-10-05
Description: The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4388, CVE-2016-4389, and CVE-2016-4390.
CVSS Score: 8.1 (HIGH)
References: http://www.securityfocus.com/bid/93424; http://www.securitytracker.com/id/1036935; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05297477
CVE: CVE-2016-4388
Published: 2016-10-05
Description: The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4389, and CVE-2016-4390.
CVSS Score: 8.1 (HIGH)
References: http://www.securityfocus.com/bid/93424; http://www.securitytracker.com/id/1036935; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05297477
CVE: CVE-2016-4389
Published: 2016-10-05
Description: The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4388, and CVE-2016-4390.
CVSS Score: 8.1 (HIGH)
References: http://www.securityfocus.com/bid/93424; http://www.securitytracker.com/id/1036935; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05297477
CVE: CVE-2016-4390
Published: 2016-10-05
Description: The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4388, and CVE-2016-4389.
CVSS Score: 8.1 (HIGH)
References: http://www.securityfocus.com/bid/93424; http://www.securitytracker.com/id/1036935; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05297477
CVE: CVE-2016-5084
Published: 2016-10-05
Description: Johnson & Johnson Animas OneTouch Ping devices do not use encryption for certain data, which might allow remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/884840; http://www.kb.cert.org/vuls/id/BLUU-A9SQRS; http://www.securityfocus.com/bid/93351
CVE: CVE-2016-5085
Published: 2016-10-05
Description: Johnson & Johnson Animas OneTouch Ping devices do not properly generate random numbers, which makes it easier for remote attackers to spoof meters by sniffing the network and then engaging in an authentication handshake.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: http://www.kb.cert.org/vuls/id/884840; http://www.kb.cert.org/vuls/id/BLUU-A9SQRS; http://www.securityfocus.com/bid/93351
CVE: CVE-2016-5086
Published: 2016-10-05
Description: Johnson & Johnson Animas OneTouch Ping devices allow remote attackers to bypass authentication via replay attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.kb.cert.org/vuls/id/884840; http://www.kb.cert.org/vuls/id/BLUU-A9SQRS; http://www.securityfocus.com/bid/93351
CVE: CVE-2016-5686
Published: 2016-10-05
Description: Johnson & Johnson Animas OneTouch Ping devices mishandle acknowledgements, which makes it easier for remote attackers to bypass authentication via a custom communication protocol.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.kb.cert.org/vuls/id/884840; http://www.kb.cert.org/vuls/id/BLUU-A9SQRS; http://www.securityfocus.com/bid/93351
CVE: CVE-2016-5892
Published: 2016-10-05
Description: Cross-site scripting (XSS) vulnerability in IBM 10x, as used in Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications before 1.0.0.5_2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21991148; http://www.securityfocus.com/bid/93277; http://www-01.ibm.com/support/docview.wss?uid=swg21991148
CVE: CVE-2016-5901
Published: 2016-10-05
Description: Cross-site scripting (XSS) vulnerability in a test page in IBM Business Process Manager Advanced 8.5.6.0 through 8.5.7.0 before cumulative fix 2016.09 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1JR56391; http://www-01.ibm.com/support/docview.wss?uid=swg21990852; http://www.securityfocus.com/bid/93353
CVE: CVE-2016-5983
Published: 2016-10-05
Description: IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI62375; http://www.securityfocus.com/bid/93162; https://www-01.ibm.com/support/docview.wss?uid=swg21990060
CVE: CVE-2016-6419
Published: 2016-10-05
Description: SQL injection vulnerability in Cisco Firepower Management Center 4.10.3 through 5.4.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCur25485.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-fpmc; http://www.securityfocus.com/bid/93206; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-fpmc
CVE: CVE-2016-6420
Published: 2016-10-05
Description: Cisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote authenticated users to bypass authorization checks and gain privileges via a crafted HTTP request, aka Bug ID CSCur25467.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-fmc1; http://www.securityfocus.com/bid/93204; http://www.securitytracker.com/id/1036919
CVE: CVE-2016-8343
Published: 2016-10-05
Description: Directory traversal vulnerability in INDAS Web SCADA before 3 allows remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/93352; https://ics-cert.us-cert.gov/advisories/ICSA-16-278-01; http://www.securityfocus.com/bid/93352
CVE: CVE-2016-1246
Published: 2016-10-05
Description: Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service (crash) via vectors related to an error message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://blogs.perl.org/users/mike_b/2016/10/security-release---buffer-overflow-in-dbdmysql-perl-library.html; http://www.debian.org/security/2016/dsa-3684; http://www.securityfocus.com/bid/93337
CVE: CVE-2016-4551
Published: 2016-10-05
Description: The (1) SAP_BASIS and (2) SAP_ABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might allow remote attackers to spoof IP addresses written to the Security Audit Log via vectors related to the network landscape, aka SAP Security Note 2190621.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://seclists.org/fulldisclosure/2016/Oct/3; http://www.securityfocus.com/bid/93288; https://www.onapsis.com/research/security-advisories/sap-security-audit-log-invalid-address-logging
CVE: CVE-2016-5745
Published: 2016-10-05
Description: F5 BIG-IP LTM systems 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF11, 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2 allow remote attackers to modify or extract system configuration files via vectors involving NAT64.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94240; http://www.securitytracker.com/id/1036927; https://support.f5.com/kb/en-us/solutions/public/k/64/sol64743453.html
CVE: CVE-2016-6652
Published: 2016-10-05
Description: SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands via a sort instance with a function call.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-89
References: http://www.securityfocus.com/bid/93276; https://github.com/spring-projects/spring-data-jpa/commit/b8e7fe; https://jira.spring.io/browse/DATAJPA-965
CVE: CVE-2016-7161
Published: 2016-10-05
Description: Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=a0d1cbdacff5df4ded16b753b38fdd9da6092968; http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html; http://www.openwall.com/lists/oss-security/2016/09/23/6
CVE: CVE-2016-7435
Published: 2016-10-05
Description: The (1) SCTC_REFRESH_EXPORT_TAB_COMP, (2) SCTC_REFRESH_CHECK_ENV, and (3) SCTC_TMS_MAINTAIN_ALOG functions in the SCTC subpackage in SAP Netweaver 7.40 SP 12 allow remote authenticated users with certain permissions to execute arbitrary commands via vectors involving a CALL 'SYSTEM' statement, aka SAP Security Note 2260344.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-264
References: http://seclists.org/fulldisclosure/2016/Oct/0; http://seclists.org/fulldisclosure/2016/Oct/1; http://seclists.org/fulldisclosure/2016/Oct/2
CVE: CVE-2016-7560
Published: 2016-10-05
Description: The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read or write to arbitrary files via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://fortiguard.com/advisory/FG-IR-16-029; http://www.securityfocus.com/bid/93286; http://fortiguard.com/advisory/FG-IR-16-029
CVE: CVE-2016-7561
Published: 2016-10-05
Description: Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by reading the pam.log file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-200
References: http://fortiguard.com/advisory/FG-IR-16-030; http://www.securityfocus.com/bid/93282; http://fortiguard.com/advisory/FG-IR-16-030
CVE: CVE-2016-7907
Published: 2016-10-05
Description: The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20, CWE-399
References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html; http://www.openwall.com/lists/oss-security/2016/10/03/1; http://www.openwall.com/lists/oss-security/2016/10/03/4
CVE: CVE-2016-7908
Published: 2016-10-05
Description: The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-835
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=070c4b92b8cd[PII_REDACTED]677a0b92444d6e087a; http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html; http://www.openwall.com/lists/oss-security/2016/10/03/2
CVE: CVE-2016-7909
Published: 2016-10-05
Description: The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) transmit descriptor ring length to 0.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-835
References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html; http://www.openwall.com/lists/oss-security/2016/10/03/3; http://www.openwall.com/lists/oss-security/2016/10/03/6