deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-7248
Published: 2016-11-10
Description: Microsoft Video Control in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Video Control Remote Code Execution Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94028; http://www.securitytracker.com/id/1037242; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-131
CVE: CVE-2016-7249
Published: 2016-11-10
Description: Microsoft SQL Server 2016 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privileges via unknown vectors, aka "SQL RDBMS Engine Elevation of Privilege Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94037; http://www.securitytracker.com/id/1037250; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-136
CVE: CVE-2016-7250
Published: 2016-11-10
Description: Microsoft SQL Server 2014 SP1, 2014 SP2, and 2016 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privileges via unknown vectors, aka "SQL RDBMS Engine Elevation of Privilege Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94060; http://www.securitytracker.com/id/1037250; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-136
CVE: CVE-2016-7251
Published: 2016-11-10
Description: Cross-site scripting (XSS) vulnerability in the MDS API in Microsoft SQL Server 2016 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "MDS API XSS Vulnerability."
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/94043; http://www.securitytracker.com/id/1037250; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-136
CVE: CVE-2016-7252
Published: 2016-11-10
Description: Microsoft SQL Server 2016 mishandles the FILESTREAM path, which allows remote authenticated users to gain privileges via unspecified vectors, aka "SQL Analysis Services Information Disclosure Vulnerability."
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94050; http://www.securitytracker.com/id/1037250; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-136
CVE: CVE-2016-7253
Published: 2016-11-10
Description: The agent in Microsoft SQL Server 2012 SP2, 2012 SP3, 2014 SP1, 2014 SP2, and 2016 does not properly check the atxcore.dll ACL, which allows remote authenticated users to gain privileges via unspecified vectors, aka "SQL Server Agent Elevation of Privilege Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94056; http://www.securitytracker.com/id/1037250; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-136
CVE: CVE-2016-7254
Published: 2016-11-10
Description: Microsoft SQL Server 2012 SP2 and 2012 SP3 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privileges via unknown vectors, aka "SQL RDBMS Engine Elevation of Privilege Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94061; http://www.securitytracker.com/id/1037250; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-136
CVE: CVE-2016-7255
Published: 2016-11-10
Description: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
CVSS Score: 7.8 (HIGH)
References: http://blog.trendmicro.com/trendlabs-security-intelligence/one-bit-rule-system-analyzing-cve-2016-7255-exploit-wild/; http://packetstormsecurity.com/files/140468/Microsoft-Windows-Kernel-win32k.sys-NtSetWindowLongPtr-Privilege-Escalation.html; http://www.securityfocus.com/bid/94064
CVE: CVE-2016-7256
Published: 2016-11-10
Description: atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Open Type Font Remote Code Execution Vulnerability."
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/94156; http://www.securitytracker.com/id/1037243; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-132
CVE: CVE-2016-4095
Published: 2016-11-10
Description: Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94253; https://helpx.adobe.com/security/products/acrobat/apsb16-33.html; http://www.securityfocus.com/bid/94253
CVE: CVE-2016-7488
Published: 2016-11-10
Description: Teradata Virtual Machine Community Edition v15.10 has insecure file permissions on /etc/luminex/pkgmgr. These could allow a local user to modify its contents and execute commands as root.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94262; http://www.vapidlabs.com/advisory.php?v=172; http://www.securityfocus.com/bid/94262
CVE: CVE-2016-7489
Published: 2016-11-10
Description: Teradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl creates files in /tmp in an insecure manner, this may lead to elevated code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94262; http://www.vapidlabs.com/advisory.php?v=173; http://www.securityfocus.com/bid/94262
CVE: CVE-2016-7490
Published: 2016-11-10
Description: The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. A malicious local user could create a symlink in /tmp and possibly clobber system files or perhaps elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59, CWE-264
References: http://www.securityfocus.com/bid/94255; http://www.vapidlabs.com/advisory.php?v=174; http://www.securityfocus.com/bid/94255
CVE: CVE-2016-7146
Published: 2016-11-10
Description: MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=fckdialog&dialog=attachment (via page name) component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.debian.org/security/2016/dsa-3715; http://www.securityfocus.com/bid/94259; http://www.ubuntu.com/usn/USN-3137-1
CVE: CVE-2016-7148
Published: 2016-11-10
Description: MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=AttachFile (via page name) component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.debian.org/security/2016/dsa-3715; http://www.securityfocus.com/bid/94259; http://www.ubuntu.com/usn/USN-3137-1
CVE: CVE-2016-9268
Published: 2016-11-10
Description: Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear through 2.10.4 allows remote authenticated super-administrators to execute arbitrary code by uploading a theme file with an zip extension, and then accessing it via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://dev.dotclear.org/2.0/changeset/445e9ff79a1fa[PII_REDACTED]1d6a340e219d159b2; http://dev.dotclear.org/2.0/ticket/2214; http://www.securityfocus.com/bid/94246
CVE: CVE-2016-5195
Published: 2016-11-10
Description: Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-362
References: http://fortiguard.com/advisory/FG-IR-16-063; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770
CVE: CVE-2016-9272
Published: 2016-11-11
Description: A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/94261; https://exponentcms.lighthouseapp.com/projects/61783/tickets/1394-blind-sql-injection-vulnerability-in-exponent-cms-240-4; https://exponentcms.lighthouseapp.com/projects/61783/tickets/1395-blind-sql-injection-vulnerability-in-exponent-cms-240-5
CVE: CVE-2016-9274
Published: 2016-11-11
Description: Untrusted search path vulnerability in Git 1.x for Windows allows local users to gain privileges via a Trojan horse git.exe file in the current working directory. NOTE: 2.x is unaffected.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.securityfocus.com/bid/94289; https://github.com/git-for-windows/git/issues/944; https://www.youtube.com/watch?v=S7jOLv0sul0
CVE: CVE-2016-9277
Published: 2016-11-11
Description: Integer overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Samsung Note devices allows attackers to cause a denial of service (UI restart) via vectors involving APIs and an activity that computes an out-of-bounds array index, aka SVE-2016-6906.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016; http://www.securityfocus.com/bid/94292; http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016
CVE: CVE-2016-9282
Published: 2016-11-11
Description: SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the search_string parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/94296; http://www.securitytracker.com/id/1037281; https://github.com/exponentcms/exponent-cms/commit/e83721a5b9fcc88e1141a8fb29c3d1bd522257c1
CVE: CVE-2016-9283
Published: 2016-11-11
Description: SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSearch/id/ and a trailing string, related to a "sef URL" issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/94296; http://www.securitytracker.com/id/1037281; https://github.com/exponentcms/exponent-cms/commit/559792be727f4e731bfcb3935f5beec7749e9ce9
CVE: CVE-2016-9284
Published: 2016-11-11
Description: getUsersByJSON in framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0 allows remote attackers to read user information via users/getUsersByJSON/sort/ and a trailing string.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94296; http://www.securitytracker.com/id/1037281; https://github.com/exponentcms/exponent-cms/commit/e7b6856ac384bf2b8ea7761a1e46d6e4186d36f4
CVE: CVE-2016-9285
Published: 2016-11-11
Description: framework/modules/addressbook/controllers/addressController.php in Exponent CMS v2.4.0 allows remote attackers to read user information via a modified id number, as demonstrated by address/edit/id/1, related to an "addresses, countries, and regions" issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94296; http://www.securitytracker.com/id/1037281; https://github.com/exponentcms/exponent-cms/commit/9eeed1e82fb9e6d0d41e7dd10672df48045a9b59
CVE: CVE-2016-9286
Published: 2016-11-11
Description: framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0patch1 does not properly restrict access to user records, which allows remote attackers to read address information, as demonstrated by an address/show/id/1 URI.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94296; http://www.securitytracker.com/id/1037281; https://github.com/exponentcms/exponent-cms/commit/e38aae66c785f08f3907aa121378caf71ca5f2d7
CVE: CVE-2016-9288
Published: 2016-11-11
Description: In framework/modules/navigation/controllers/navigationController.php in Exponent CMS v2.4.0 or older, the parameter "target" of function "DragnDropReRank" is directly used without any filtration which caused SQL injection. The payload can be used like this: /navigation/DragnDropReRank/target/1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/94296; http://www.securitytracker.com/id/1037280; https://github.com/exponentcms/exponent-cms/commit/2ddffb2e7eafe4830e3483a4b437873022c461ba
CVE: CVE-2016-9294
Published: 2016-11-12
Description: Artifex Software, Inc. MuJS before[PII_REDACTED]c0b0182ea6eda83ad5598f225be3ee allows context-dependent attackers to conduct "denial of service (application crash)" attacks by using the "malformed labeled break/continue in JavaScript" approach, related to a "NULL pointer dereference" issue affecting the jscompile.c component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://bugs.ghostscript.com/show_bug.cgi?id=697172; http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=[PII_REDACTED]c0b0182ea6eda83ad5598f225be3ee; http://www.securityfocus.com/bid/94293
CVE: CVE-2016-9296
Published: 2016-11-12
Description: A null pointer dereference bug affects the 16.02 and many old versions of p7zip. A lack of null pointer check for the variable folders.PackPositions in function CInArchive::ReadAndDecodePackedStreams in CPP/7zip/Archive/7z/7zIn.cpp, as used in the 7z.so library and in 7z applications, will cause a crash and a denial of service when decoding malformed 7z files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/94294; https://github.com/yangke/7zip-null-pointer-dereference; https://sourceforge.net/p/p7zip/bugs/185/
CVE: CVE-2016-8902
Published: 2016-11-14
Description: SQL injection vulnerability in the categoriesServlet servlet in dotCMS before 3.3.1 allows remote not authenticated attackers to execute arbitrary SQL commands via the sort parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2016/Nov/0; http://www.securityfocus.com/bid/94311; https://github.com/dotCMS/core/pull/8460/
CVE: CVE-2016-8903
Published: 2016-11-14
Description: SQL injection vulnerability in the "Site Browser > Templates pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2016/Nov/0; http://www.securityfocus.com/bid/94311; https://github.com/dotCMS/core/pull/8460/
CVE: CVE-2016-8904
Published: 2016-11-14
Description: SQL injection vulnerability in the "Site Browser > Containers pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2016/Nov/0; http://www.securityfocus.com/bid/94311; https://github.com/dotCMS/core/pull/8460/
CVE: CVE-2016-8905
Published: 2016-11-14
Description: SQL injection vulnerability in the JSONTags servlet in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the sort parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2016/Nov/0; http://www.securityfocus.com/bid/94311; https://github.com/dotCMS/core/pull/8460/
CVE: CVE-2016-8906
Published: 2016-11-14
Description: SQL injection vulnerability in the "Site Browser > Links pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2016/Nov/0; http://www.securityfocus.com/bid/94311; https://github.com/dotCMS/core/pull/8460/
CVE: CVE-2016-8907
Published: 2016-11-14
Description: SQL injection vulnerability in the "Content Types > Content Types" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2016/Nov/0; http://www.securityfocus.com/bid/94311; https://github.com/dotCMS/core/pull/8460/
CVE: CVE-2016-8908
Published: 2016-11-14
Description: SQL injection vulnerability in the "Site Browser > HTML pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2016/Nov/0; http://www.securityfocus.com/bid/94311; https://github.com/dotCMS/core/pull/8460/
CVE: CVE-2016-9287
Published: 2016-11-15
Description: In /framework/modules/notfound/controllers/notfoundController.php of Exponent CMS 2.4.0 patch1, untrusted input is passed into getSearchResults. The method getSearchResults is defined in the search model with the parameter '$term' used directly in SQL. Impact is a SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/94322; https://github.com/exponentcms/exponent-cms/commit/4327ea96b3de89440693e06d03038121aa1fdcea; http://www.securityfocus.com/bid/94322
CVE: CVE-2016-8661
Published: 2016-11-15
Description: Little Snitch version 3.0 through 3.6.1 suffer from a buffer overflow vulnerability that could be locally exploited which could lead to an escalation of privileges (EoP) and unauthorised ring0 access to the operating system. The buffer overflow is related to insufficient checking of parameters to the "OSMalloc" and "copyin" kernel API calls.
CVSS Score: 8.4 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94352; https://speakerdeck.com/patrickwardle/defcon-2016-i-got-99-problems-but-little-snitch-aint-one; http://www.securityfocus.com/bid/94352
CVE: CVE-2016-0909
Published: 2016-11-15
Description: EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3 and older contain a vulnerability that may expose the Avamar servers to potentially be compromised by malicious users.
CVSS Score: 8.4 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/archive/1/539613; http://www.securityfocus.com/bid/93788; http://www.securitytracker.com/id/1037066
CVE: CVE-2016-5763
Published: 2016-11-15
Description: Vulnerability in Novell Open Enterprise Server (OES2015 SP1 before Scheduled Maintenance Update 10992, OES2015 before Scheduled Maintenance Update 10990, OES11 SP3 before Scheduled Maintenance Update 10991, OES11 SP2 before Scheduled Maintenance Update 10989) might allow authenticated remote attackers to perform unauthorized file access and modification.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-254
References: http://download.novell.com/Download?buildid=3Ho1yp5JOXA~; http://download.novell.com/Download?buildid=Fj0Hdns7mxA~; http://download.novell.com/Download?buildid=dfqmrymc0Rg~
CVE: CVE-2016-7165
Published: 2016-11-15
Description: A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC IT Production Suite (All versions < V7.0 SP1 HFX 2), SIMATIC NET PC-Software (All versions < V14), SIMATIC PCS 7 V7.1 (All versions), SIMATIC PCS 7 V8.0 (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC STEP 7 (TIA Portal) V13 (All versions < V13 SP2), SIMATIC STEP 7 V5.X (All versions < V5.5 SP4 HF11), SIMATIC WinCC (TIA Portal) Basic, Comfort, Advanced (All versions < V14), SIMATIC WinCC (TIA Portal) Professional V13 (All versions < V13 SP2), SIMATIC WinCC (TIA Portal) Professional V14 (All versions < V14 SP1), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1), SIMATIC WinCC V7.0 SP2 and earlier versions (All versions < V7.0 SP2 Upd 12), SIMATIC WinCC V7.0 SP3 (All versions < V7.0 SP3 Upd 8), SIMATIC WinCC V7.2 (All versions < V7.2 Upd 14), SIMATIC WinCC V7.3 (All versions < V7.3 Upd 11), SIMATIC WinCC V7.4 (All versions < V7.4 SP1), SIMIT V9.0 (All versions < V9.0 SP1), SINEMA Remote Connect Client (All versions < V1.0 SP3), SINEMA Server (All versions < V13 SP2), SOFTNET Security Client V5.0 (All versions), Security Configuration Tool (SCT) (All versions < V4.3 HF1), TeleControl Server Basic (All versions < V3.0 SP2), WinAC RTX 2010 SP2 (All versions), WinAC RTX F 2010 SP2 (All versions). Unquoted service paths could allow local Microsoft Windows operating system users to escalate their privileges if the affected products are not installed under their default path ("C:\Program Files\*" or the localized equivalent).
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-254, CWE-284
References: http://securityaffairs.co/wordpress/53266/security/cve-2016-7165-siemens.html; http://www.securityfocus.com/bid/94158; https://cert-portal.siemens.com/productcert/pdf/ssa-701708.pdf
CVE: CVE-2016-9318
Published: 2016-11-16
Description: libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611, CWE-611
References: http://www.securityfocus.com/bid/94347; https://bugzilla.gnome.org/show_bug.cgi?id=772726; https://github.com/lsh123/xmlsec/issues/43
CVE: CVE-2015-8961
Published: 2016-11-16
Description: The __ext4_journal_stop function in fs/ext4/ext4_jbd2.c in the Linux kernel before 4.3.3 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging improper access to a certain error field.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6934da9238da947628be83635e365df41064b09b; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3; http://www.securityfocus.com/bid/94135
CVE: CVE-2015-8962
Published: 2016-11-16
Description: Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (memory corruption and system crash) by detaching a device during an SG_IO ioctl call.
CVSS Score: 7.3 (HIGH)
CWE: CWE-415
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f3951a3709ff50990bf3e188c27d[PII_REDACTED]32; http://www.securityfocus.com/bid/94187; https://github.com/torvalds/linux/commit/f3951a3709ff50990bf3e188c27d[PII_REDACTED]32
CVE: CVE-2015-8963
Published: 2016-11-16
Description: Race condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging incorrect handling of an swevent data structure during a CPU unplug operation.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416, CWE-362, CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=12ca6ad2e3a896256f086497a7c7406a547ee373; http://source.android.com/security/bulletin/2016-11-01.html; http://www.securityfocus.com/bid/94207