deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-1894
Published: 2017-02-07
Description: NetApp OnCommand Workflow Automation before 3.1P2 allows remote attackers to bypass authentication via unspecified vectors.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: https://kb.netapp.com/support/s/article/cve-2016-1894-authentication-bypass-vulnerability-in-oncommand-workflow-automation; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://kb.netapp.com/support/s/article/cve-2016-1894-authentication-bypass-vulnerability-in-oncommand-workflow-automation
CVE: CVE-2016-2403
Published: 2017-02-07
Description: Symfony before 2.8.6 and 3.x before 3.0.6 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://symfony.com/blog/cve-2016-2403-unauthorized-access-on-a-misconfigured-ldap-server-when-using-an-empty-password; http://www.securityfocus.com/bid/96137; https://www.debian.org/security/2018/dsa-4262
CVE: CVE-2016-3063
Published: 2017-02-07
Description: Multiple functions in NetApp OnCommand System Manager before 8.3.2 do not properly escape special characters, which allows remote authenticated users to execute arbitrary API calls via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-116
References: https://kb.netapp.com/support/s/article/cve-2016-3063-zapi-injection-vulnerability-in-oncommand-system-manager; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://kb.netapp.com/support/s/article/cve-2016-3063-zapi-injection-vulnerability-in-oncommand-system-manager
CVE: CVE-2016-3124
Published: 2017-02-07
Description: The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote attackers to learn the PHP version on the system via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96134; https://simplesamlphp.org/security/201603-01; http://www.securityfocus.com/bid/96134
CVE: CVE-2016-3180
Published: 2017-02-07
Description: Tor Browser Launcher (aka torbrowser-launcher) before 0.2.4, during the initial run, allows man-in-the-middle attackers to bypass the PGP signature verification and execute arbitrary code via a Trojan horse tar file and a signature file with the valid tarball and signature.
CVSS Score: 8.1 (HIGH)
CWE: CWE-254
References: http://www.securityfocus.com/bid/96140; https://github.com/micahflee/torbrowser-launcher/issues/229; http://www.securityfocus.com/bid/96140
CVE: CVE-2016-4341
Published: 2017-02-07
Description: NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]; https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]
CVE: CVE-2016-5372
Published: 2017-02-07
Description: Cross-site request forgery (CSRF) vulnerability in NetApp Snap Creator Framework before 4.3.0P1 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-352
References: https://kb.netapp.com/support/s/article/cve-2016-5372-cross-site-request-forgery-vulnerability-in-snap-creator-framework; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://kb.netapp.com/support/s/article/cve-2016-5372-cross-site-request-forgery-vulnerability-in-snap-creator-framework
CVE: CVE-2016-5711
Published: 2017-02-07
Description: NetApp Virtual Storage Console for VMware vSphere before 6.2.1 uses a non-unique certificate, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
References: https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]; https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]
CVE: CVE-2016-6495
Published: 2017-02-07
Description: NetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain information about the volumes configured for HTTP access.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]; https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]
CVE: CVE-2016-6667
Published: 2017-02-07
Description: NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
References: https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]; https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]
CVE: CVE-2016-9639
Published: 2017-02-07
Description: Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284
References: http://www.openwall.com/lists/oss-security/2016/11/25/2; http://www.openwall.com/lists/oss-security/2016/11/25/3; http://www.securityfocus.com/bid/94553
CVE: CVE-2016-8414
Published: 2017-02-08
Description: An information disclosure vulnerability in the Qualcomm Secure Execution Environment Communicator could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31704078. References: QC-CR#1076407.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96111; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2016-8418
Published: 2017-02-08
Description: A remote code execution vulnerability in the Qualcomm crypto driver could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the context of the kernel. Product: Android. Versions: N/A. Android ID: A-32652894. References: QC-CR#1077457.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://www.securityfocus.com/bid/96058; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2016-8419
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32454494. References: QC-CR#1087209.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/96047; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2016-8420
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32451171. References: QC-CR#1087807.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/96047; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2016-8421
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32451104. References: QC-CR#1087797.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/96047; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2016-8476
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32879283. References: QC-CR#1091940.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/96047; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2016-8480
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31804432. References: QC-CR#1086186.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/96101; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2016-8481
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31906415. References: QC-CR#1078000.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/96053; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0405
Published: 2017-02-08
Description: A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinger process. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-31960359.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96048; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0406
Published: 2017-02-08
Description: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. This affects the libhevc library. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32915871.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96046; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0407
Published: 2017-02-08
Description: A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. This affects the libhevc library. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32873375.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96046; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0408
Published: 2017-02-08
Description: A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 7.1.1. Android ID: A-32769670.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96092; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0409
Published: 2017-02-08
Description: A remote code execution vulnerability in libstagefright could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-31999646.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96091; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0410
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-31929765.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/96056; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0411
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33042690.
CVSS Score: 7.8 (HIGH)
CWE: CWE-367
References: http://www.securityfocus.com/bid/96056; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0412
Published: 2017-02-08
Description: An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33039926.
CVSS Score: 7.8 (HIGH)
CWE: CWE-367
References: http://www.securityfocus.com/bid/96056; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0413
Published: 2017-02-08
Description: An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32161610.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96063; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0414
Published: 2017-02-08
Description: An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32807795.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96063; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0415
Published: 2017-02-08
Description: An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32706020.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96089; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0416
Published: 2017-02-08
Description: An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32886609.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/96055; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0417
Published: 2017-02-08
Description: An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32705438.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/96055; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0418
Published: 2017-02-08
Description: An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32703959.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/96055; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0419
Published: 2017-02-08
Description: An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32220769.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96055; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0420
Published: 2017-02-08
Description: An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32615212.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96093; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0421
Published: 2017-02-08
Description: An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32555637.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96096; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0422
Published: 2017-02-08
Description: A denial of service vulnerability in Bionic DNS could enable a remote attacker to use a specially crafted network packet to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32322088.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/96097; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0423
Published: 2017-02-08
Description: An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device. This issue is rated as Moderate because it first requires exploitation of a separate vulnerability in the Bluetooth stack. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32612586.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: http://www.securityfocus.com/bid/96102; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0424
Published: 2017-02-08
Description: An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission levels. This issue is rated as Moderate because it is a general bypass for a user level defense in depth or exploit mitigation technology in a privileged process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32322450.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96104; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0425
Published: 2017-02-08
Description: An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32720785.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96106; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html
CVE: CVE-2017-0426
Published: 2017-02-08
Description: An information disclosure vulnerability in the Filesystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-32799236.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96099; http://www.securitytracker.com/id/1037798; https://source.android.com/security/bulletin/2017-02-01.html