deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-1846
Published: 2016-05-20
Description: The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference and memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://packetstormsecurity.com/files/137403/OS-X-GeForce.kext-NULL-Pointer-Dereference.html; http://www.securityfocus.com/bid/90696
CVE: CVE-2016-1847
Published: 2016-05-20
Description: OpenGL, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1848
Published: 2016-05-20
Description: QuickTime in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://protekresearchlab.com/cosig-2016-19/; http://www.securityfocus.com/bid/90696
CVE: CVE-2016-1849
Published: 2016-05-20
Description: The "Clear History and Website Data" feature in Apple Safari before 9.1.1, as used in iOS before 9.3.2 and other products, mishandles the deletion of browsing history, which might allow local users to obtain sensitive information by leveraging read access to a Safari directory.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00005.html; http://www.securitytracker.com/id/1035888
CVE: CVE-2016-1850
Published: 2016-05-20
Description: SceneKit in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1851
Published: 2016-05-20
Description: The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1852
Published: 2016-05-20
Description: Siri in Apple iOS before 9.3.2 does not block data detectors within results in the lock-screen state, which allows physically proximate attackers to obtain sensitive contact and photo information via unspecified vectors.
CVSS Score: 2.4 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://www.securitytracker.com/id/1035890; https://support.apple.com/HT206568
CVE: CVE-2016-1853
Published: 2016-05-20
Description: Tcl in Apple OS X before 10.11.5 allows remote attackers to obtain sensitive information by leveraging SSLv2 support.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1854
Published: 2016-05-20
Description: WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1855, CVE-2016-1856, and CVE-2016-1857.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00005.html
CVE: CVE-2016-1855
Published: 2016-05-20
Description: WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1856, and CVE-2016-1857.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00005.html
CVE: CVE-2016-1856
Published: 2016-05-20
Description: WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1855, and CVE-2016-1857.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00005.html
CVE: CVE-2016-1857
Published: 2016-05-20
Description: WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1855, and CVE-2016-1856.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00005.html
CVE: CVE-2016-1858
Published: 2016-05-20
Description: WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attributes, which allows remote attackers to obtain sensitive information via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00005.html
CVE: CVE-2016-1859
Published: 2016-05-20
Description: The WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00005.html
CVE: CVE-2016-4070
Published: 2016-05-20
Description: Integer overflow in the php_raw_url_encode function in ext/standard/url.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to cause a denial of service (application crash) via a long string to the rawurlencode function. NOTE: the vendor says "Not sure if this qualifies as security issue (probably not).
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00033.html
CVE: CVE-2016-4071
Published: 2016-05-20
Description: Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00033.html
CVE: CVE-2016-4072
Published: 2016-05-20
Description: The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as demonstrated by mishandling of \0 characters by the phar_analyze_path function in ext/phar/phar.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://rhn.redhat.com/errata/RHSA-2016-2750.html; http://www.debian.org/security/2016/dsa-3560
CVE: CVE-2016-4073
Published: 2016-05-20
Description: Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted mb_strcut call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00033.html
CVE: CVE-2015-7557
Published: 2016-05-20
Description: The _rsvg_node_poly_build_path function in rsvg-shapes.c in librsvg before 2.40.7 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via an odd number of elements in a coordinate pair in an SVG document.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2015/12/21/5; https://git.gnome.org/browse/librsvg/commit/rsvg-shapes.c?id=40af93e6eb1c94b90c3b9a0b87e0840e126bb8df; https://git.gnome.org/browse/librsvg/tree/NEWS
CVE: CVE-2015-7558
Published: 2016-05-20
Description: librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service (infinite loop, stack consumption, and application crash) via cyclic references in an SVG document.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.debian.org/security/2016/dsa-3584; http://www.openwall.com/lists/oss-security/2015/12/21/5; http://www.openwall.com/lists/oss-security/2016/04/30/3
CVE: CVE-2016-2100
Published: 2016-05-20
Description: Foreman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read, modify, or delete private bookmarks by leveraging the (1) edit_bookmarks or (2) destroy_bookmarks permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-284
References: http://projects.theforeman.org/issues/13828; http://theforeman.org/security.html#2016-2100; http://www.openwall.com/lists/oss-security/2016/03/31/2
CVE: CVE-2016-3693
Published: 2016-05-20
Description: The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.
CVSS Score: 8.1 (HIGH)
CWE: CWE-200, CWE-264
References: http://projects.theforeman.org/issues/14635; http://rubysec.com/advisories/CVE-2016-3693/; http://theforeman.org/security.html#2016-3693
CVE: CVE-2016-3728
Published: 2016-05-20
Description: Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows remote attackers to execute arbitrary code via the PXE template type portion of the PATH_INFO to tftp/.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://projects.theforeman.org/issues/14931; http://theforeman.org/security.html#2016-3728; http://www.openwall.com/lists/oss-security/2016/05/19/2
CVE: CVE-2016-3739
Published: 2016-05-20
Description: The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2024/03/27/4; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/90726
CVE: CVE-2016-4348
Published: 2016-05-20
Description: The _rsvg_css_normalize_font_size function in librsvg 2.40.2 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via circular definitions in an SVG document.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-updates/2016-05/msg00079.html; http://www.debian.org/security/2016/dsa-3584; http://www.openwall.com/lists/oss-security/2016/04/28/4
CVE: CVE-2016-4439
Published: 2016-05-20
Description: The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or potentially execute arbitrary code on the QEMU host via unspecified vectors.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/05/19/3; http://www.securityfocus.com/bid/90760; http://www.ubuntu.com/usn/USN-3047-1
CVE: CVE-2016-4441
Published: 2016-05-20
Description: The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/05/19/4; http://www.securityfocus.com/bid/90762; http://www.ubuntu.com/usn/USN-3047-1
CVE: CVE-2016-1401
Published: 2016-05-21
Description: Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Computing System (UCS) Central Software 1.4(1a) allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-ucs; http://www.securitytracker.com/id/1035933; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-ucs
CVE: CVE-2016-1402
Published: 2016-05-21
Description: The Active Directory (AD) integration component in Cisco Identity Service Engine (ISE) before 1.2.0.899 patch 7, when AD group-membership authorization is enabled, allows remote attackers to cause a denial of service (authentication outage) via a crafted Password Authentication Protocol (PAP) authentication request, aka Bug ID CSCun25815.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-287
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-ise; http://www.securitytracker.com/id/1035946; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160517-ise
CVE: CVE-2014-9767
Published: 2016-05-22
Description: Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html
CVE: CVE-2015-5714
Published: 2016-05-22
Description: Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web script or HTML by leveraging the mishandling of unclosed HTML elements during processing of shortcode tags.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.debian.org/security/2015/dsa-3375; http://www.debian.org/security/2015/dsa-3383; http://www.securityfocus.com/bid/76745
CVE: CVE-2015-5715
Published: 2016-05-22
Description: The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 allows remote authenticated users to bypass intended access restrictions, and arrange for a private post to be published and sticky, via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www.debian.org/security/2015/dsa-3375; http://www.debian.org/security/2015/dsa-3383; http://www.securityfocus.com/bid/76748
CVE: CVE-2015-7989
Published: 2016-05-22
Description: Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.debian.org/security/2015/dsa-3375; http://www.debian.org/security/2015/dsa-3383; http://www.securitytracker.com/id/1033979
CVE: CVE-2015-8834
Published: 2016-05-22
Description: Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3440.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.debian.org/security/2016/dsa-3639; https://codex.wordpress.org/Version_4.2.2; https://wordpress.org/news/2015/05/wordpress-4-2-2/
CVE: CVE-2015-8866
Published: 2016-05-22
Description: ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes in other threads, which allows remote attackers to conduct XML External Entity (XXE) and XML Entity Expansion (XEE) attacks via a crafted XML document, a related issue to CVE-2015-5161.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-611
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=de31324c221c1791b26350ba106cc26bad23ace9; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00033.html
CVE: CVE-2015-8867
Published: 2016-05-22
Description: The openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 incorrectly relies on the deprecated RAND_pseudo_bytes function, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=16023f3e3b9c06cf677c3c980e8d574e4c162827; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00033.html
CVE: CVE-2015-8876
Published: 2016-05-22
Description: Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not validate certain Exception objects, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger unintended method execution via crafted serialized data.
CVSS Score: 9.8 (CRITICAL)
References: http://rhn.redhat.com/errata/RHSA-2016-2750.html; http://www.php.net/ChangeLog-5.php; https://bugs.php.net/bug.php?id=70121
CVE: CVE-2015-8877
Published: 2016-05-22
Description: The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://rhn.redhat.com/errata/RHSA-2016-2750.html; http://www.debian.org/security/2016/dsa-3587; http://www.php.net/ChangeLog-5.php
CVE: CVE-2015-8878
Published: 2016-05-22
Description: main/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to cause a denial of service (race condition and heap memory corruption) by leveraging an application that performs many temporary-file accesses.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-119, CWE-362
References: http://www.php.net/ChangeLog-5.php; https://bugs.php.net/bug.php?id=70002; http://www.php.net/ChangeLog-5.php
CVE: CVE-2015-8879
Published: 2016-05-22
Description: The odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior for SQL_WVARCHAR columns, which allows remote attackers to cause a denial of service (application crash) in opportunistic circumstances by leveraging use of the odbc_fetch_array function to access a certain type of Microsoft SQL Server table.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2016-2750.html; http://www.php.net/ChangeLog-5.php; https://bugs.php.net/bug.php?id=69975
CVE: CVE-2015-8880
Published: 2016-05-22
Description: Double free vulnerability in the format printer in PHP 7.x before 7.0.1 allows remote attackers to have an unspecified impact by triggering an error.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: http://php.net/ChangeLog-7.php; http://php.net/ChangeLog-7.php
CVE: CVE-2016-1564
Published: 2016-05-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/class-wp-theme.php in WordPress before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a (1) stylesheet name or (2) template name to wp-admin/customize.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://twitter.com/brutelogic/statuses/[PII_REDACTED]97619713; http://www.debian.org/security/2016/dsa-3444; http://www.openwall.com/lists/oss-security/2016/01/08/4
CVE: CVE-2016-2221
Published: 2016-05-22
Description: Open redirect vulnerability in the wp_validate_redirect function in wp-includes/pluggable.php in WordPress before 4.4.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a malformed URL that triggers incorrect hostname parsing, as demonstrated by an https:example.com URL.
CVSS Score: 7.4 (HIGH)
References: http://www.debian.org/security/2016/dsa-3472; http://www.securityfocus.com/bid/82463; http://www.securitytracker.com/id/1034933
CVE: CVE-2016-2222
Published: 2016-05-22
Description: The wp_http_validate_url function in wp-includes/http.php in WordPress before 4.4.2 allows remote attackers to conduct server-side request forgery (SSRF) attacks via a zero value in the first octet of an IPv4 address in the u parameter to wp-admin/press-this.php.
CVSS Score: 8.6 (HIGH)
References: http://www.debian.org/security/2016/dsa-3472; http://www.securityfocus.com/bid/82454; http://www.securitytracker.com/id/1034933
CVE: CVE-2016-4342
Published: 2016-05-22
Description: ext/phar/phar_object.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles zero-length uncompressed data, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted (1) TAR, (2) ZIP, or (3) PHAR archive.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html; http://php.net/ChangeLog-5.php