deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-7498
Published: 2016-09-27
Description: OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state.  NOTE: this vulnerability exists because of a CVE-2015-3280 regression.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://www.openwall.com/lists/oss-security/2016/09/21/8; http://www.openwall.com/lists/oss-security/2016/09/23/1; http://www.securityfocus.com/bid/93068
CVE: CVE-2016-2776
Published: 2016-09-28
Description: buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2016-1944.html; http://rhn.redhat.com/errata/RHSA-2016-1945.html; http://rhn.redhat.com/errata/RHSA-2016-2099.html
CVE: CVE-2016-7191
Published: 2016-09-28
Description: The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize the validateIssuer setting, which allows remote attackers to bypass authentication via a crafted token.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/93213; http://www.securitytracker.com/id/1036996; https://github.com/AzureAD/passport-azure-ad/blob/master/SECURITY-NOTICE.MD
CVE: CVE-2016-7568
Published: 2016-09-28
Description: Integer overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted imagewebp and imagedestroy calls.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://www.debian.org/security/2016/dsa-3693; http://www.securityfocus.com/bid/93184; https://bugs.php.net/bug.php?id=73003
CVE: CVE-2016-5061
Published: 2016-09-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in the web server in Aternity before 9.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTPAgent, (2) MacAgent, (3) getExternalURL, or (4) retrieveTrustedUrl page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.kb.cert.org/vuls/id/706359; http://www.securityfocus.com/bid/93210; http://www.kb.cert.org/vuls/id/706359
CVE: CVE-2016-5062
Published: 2016-09-29
Description: The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-669
References: http://www.kb.cert.org/vuls/id/706359; http://www.securityfocus.com/bid/93208; http://www.kb.cert.org/vuls/id/706359
CVE: CVE-2016-5176
Published: 2016-09-29
Description: Google Chrome before 53.0.2785.113 allows remote attackers to bypass the SafeBrowsing protection mechanism via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://rhn.redhat.com/errata/RHSA-2016-1905.html; http://www.securityfocus.com/bid/93234; https://crbug.com/595838
CVE: CVE-2016-7090
Published: 2016-09-29
Description: The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/93115; http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-342135.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-16-271-01
CVE: CVE-2016-4385
Published: 2016-09-29
Description: The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) and Commons BeanUtils libraries.
CVSS Score: 7.3 (HIGH)
CWE: CWE-502
References: http://www.securityfocus.com/bid/93109; http://www.zerodayinitiative.com/advisories/ZDI-16-523/; https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05279098
CVE: CVE-2016-4386
Published: 2016-09-29
Description: HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/93218; http://www.securitytracker.com/id/1036929; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05281739
CVE: CVE-2016-6636
Published: 2016-09-30
Description: The OAuth authorization implementation in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x before 12.5; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.1; and Ops Manager 1.7.x before 1.7.13 and 1.8.x before 1.8.1 mishandles redirect_uri subdomains, which allows remote attackers to obtain implicit access tokens via a modified subdomain.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-601
References: http://www.securityfocus.com/bid/93246; https://pivotal.io/security/cve-2016-6636; http://www.securityfocus.com/bid/93246
CVE: CVE-2016-6637
Published: 2016-09-30
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x before 12.5; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.2; and Ops Manager 1.7.x before 1.7.13 and 1.8.x before 1.8.1 allow remote attackers to hijack the authentication of unspecified victims for requests that approve or deny a scope via a profile or authorize approval page.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-352
References: http://www.securityfocus.com/bid/93245; https://pivotal.io/security/cve-2016-6637; http://www.securityfocus.com/bid/93245
CVE: CVE-2016-6647
Published: 2016-09-30
Description: Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/bugtraq/2016/Sep/62; http://www.securityfocus.com/bid/93187; http://www.securitytracker.com/id/1036904
CVE: CVE-2016-6651
Published: 2016-09-30
Description: The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8, 3.x before 3.3.0.6, and 3.4.x before 3.4.5; UAA BOSH before 11.7 and 12.x before 12.6; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.2; and Ops Manager 1.7.x before 1.7.13 and 1.8.x before 1.8.1 allows remote authenticated users to gain privileges by leveraging possession of a token.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/93241; https://pivotal.io/security/cve-2016-6651; http://www.securityfocus.com/bid/93241
CVE: CVE-2016-0617
Published: 2016-09-30
Description: Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1034968; http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2[PII_REDACTED].html
CVE: CVE-2016-3042
Published: 2016-10-01
Description: Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Application Server (WAS) Liberty before 16.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving OpenID Connect clients.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI64790; http://www-01.ibm.com/support/docview.wss?uid=swg21986716; http://www.securityfocus.com/bid/92985
CVE: CVE-2016-5986
Published: 2016-10-01
Description: IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, 8.5.x before 8.5.5.11, 9.0.x before 9.0.0.2, and Liberty before 16.0.0.3 mishandles responses, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI67093; http://www-01.ibm.com/support/docview.wss?uid=swg21990056; http://www.securityfocus.com/bid/93013
CVE: CVE-2016-5995
Published: 2016-10-01
Description: Untrusted search path vulnerability in IBM DB2 9.7 through FP11, 10.1 through FP5, 10.5 before FP8, and 11.1 GA on Linux, AIX, and HP-UX allows local users to gain privileges via a Trojan horse library that is accessed by a setuid or setgid program.
CVSS Score: 7.3 (HIGH)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IT16921; http://www-01.ibm.com/support/docview.wss?uid=swg1IT17010; http://www-01.ibm.com/support/docview.wss?uid=swg1IT17011
CVE: CVE-2016-1240
Published: 2016-10-03
Description: The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before 6.0.35-1ubuntu3.8 on Ubuntu 12.04 LTS, the tomcat7 and libtomcat7-java packages before 7.0.52-1ubuntu0.7 on Ubuntu 14.04 LTS, and tomcat8 and libtomcat8-java packages before 8.0.32-1ubuntu1.2 on Ubuntu 16.04 LTS allows local users with access to the tomcat account to gain root privileges via a symlink attack on the Catalina log file, as demonstrated by /var/log/tomcat7/catalina.out.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://legalhackers.com/advisories/Tomcat-DebPkgs-Root-Privilege-Escalation-Exploit-CVE-2016-1240.html; http://packetstormsecurity.com/files/170857/Apache-Tomcat-On-Ubuntu-Log-Init-Privilege-Escalation.html; http://rhn.redhat.com/errata/RHSA-2017-0457.html
CVE: CVE-2016-4436
Published: 2016-10-03
Description: Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up.
CVSS Score: 9.8 (CRITICAL)
References: http://www-01.ibm.com/support/docview.wss?uid=ssg1S1009282; http://www-01.ibm.com/support/docview.wss?uid=swg21987854; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html
CVE: CVE-2016-5180
Published: 2016-10-03
Description: Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://rhn.redhat.com/errata/RHSA-2017-0002.html; http://www.debian.org/security/2016/dsa-3682; http://www.securityfocus.com/bid/93243
CVE: CVE-2016-3619
Published: 2016-10-03
Description: The DumpModeEncode function in tif_dumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c none" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://bugzilla.maptools.org/show_bug.cgi?id=2567; http://www.openwall.com/lists/oss-security/2016/04/07/1; http://www.securityfocus.com/bid/85919
CVE: CVE-2016-3620
Published: 2016-10-03
Description: The ZIPEncode function in tif_zip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c zip" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://bugzilla.maptools.org/show_bug.cgi?id=2570; http://www.openwall.com/lists/oss-security/2016/04/07/2; http://www.securitytracker.com/id/1035508
CVE: CVE-2016-3621
Published: 2016-10-03
Description: The LZWEncode function in tif_lzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c lzw" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://bugzilla.maptools.org/show_bug.cgi?id=2565; http://www.openwall.com/lists/oss-security/2016/04/07/3; http://www.securitytracker.com/id/1035508
CVE: CVE-2016-3622
Published: 2016-10-03
Description: The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: http://www.debian.org/security/2017/dsa-3762; http://www.openwall.com/lists/oss-security/2016/04/07/4; http://www.securityfocus.com/bid/85917
CVE: CVE-2016-3623
Published: 2016-10-03
Description: The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-369
References: http://bugzilla.maptools.org/show_bug.cgi?id=2569; http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html; http://www.debian.org/security/2017/dsa-3762
CVE: CVE-2016-3624
Published: 2016-10-03
Description: The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) by setting the "-v" option to -1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://bugzilla.maptools.org/show_bug.cgi?id=2568; http://www.debian.org/security/2017/dsa-3762; http://www.openwall.com/lists/oss-security/2016/04/08/4
CVE: CVE-2016-3625
Published: 2016-10-03
Description: tif_read.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://bugzilla.maptools.org/show_bug.cgi?id=2566; http://www.openwall.com/lists/oss-security/2016/04/08/5; https://security.gentoo.org/glsa/201701-16
CVE: CVE-2016-3631
Published: 2016-10-03
Description: The (1) cpStrips and (2) cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the bytecounts[] array variable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/04/08/10; http://www.securitytracker.com/id/1035508; https://security.gentoo.org/glsa/201701-16
CVE: CVE-2016-3633
Published: 2016-10-03
Description: The setrow function in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the src variable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://bugzilla.maptools.org/show_bug.cgi?id=2548; http://www.openwall.com/lists/oss-security/2016/04/08/11; https://security.gentoo.org/glsa/201701-16
CVE: CVE-2016-3634
Published: 2016-10-03
Description: The tagCompare function in tif_dirinfo.c in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to field_tag matching.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://bugzilla.maptools.org/show_bug.cgi?id=2547; http://www.openwall.com/lists/oss-security/2016/04/08/13; http://www.securityfocus.com/bid/93335
CVE: CVE-2016-3658
Published: 2016-10-03
Description: The TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving the ma variable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://bugzilla.maptools.org/show_bug.cgi?id=2546; http://www.debian.org/security/2017/dsa-3844; http://www.openwall.com/lists/oss-security/2016/04/08/12
CVE: CVE-2016-5700
Published: 2016-10-03
Description: Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured with the HTTP Explicit Proxy functionality or SOCKS profile, allow remote attackers to modify the system configuration, read system files, and possibly execute arbitrary code via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://www.securityfocus.com/bid/93325; http://www.securitytracker.com/id/1036928; https://support.f5.com/kb/en-us/solutions/public/k/35/sol35520031.html
CVE: CVE-2016-7397
Published: 2016-10-03
Description: The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the SMTP user settings in the notifications configuration tab.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/archive/1/539518/100/0/threaded; http://www.securityfocus.com/bid/93266; http://www.securitytracker.com/id/1036931
CVE: CVE-2016-7442
Published: 2016-10-03
Description: The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the proxy user settings in "system settings / scan settings / anti spam" configuration tab.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/archive/1/539518/100/0/threaded; http://www.securityfocus.com/bid/93266; http://www.securitytracker.com/id/1036931
CVE: CVE-2016-7445
Published: 2016-10-03
Description: convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors involving the variable s.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-updates/2016-09/msg00109.html; http://www.openwall.com/lists/oss-security/2016/09/18/4; http://www.openwall.com/lists/oss-security/2016/09/18/6
CVE: CVE-2016-1243
Published: 2016-10-03
Description: Stack-based buffer overflow in the extractTree function in unADF allows remote attackers to execute arbitrary code via a long pathname.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://tmp.tjjr.fi/0001-Fix-unsafe-extraction-by-using-mkdir-instead-of-shel.patch; http://www.debian.org/security/2016/dsa-3676; http://www.securityfocus.com/bid/93329
CVE: CVE-2016-1244
Published: 2016-10-03
Description: The extractTree function in unADF allows remote attackers to execute arbitrary code via shell metacharacters in a directory name in an adf file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://tmp.tjjr.fi/0001-Fix-unsafe-extraction-by-using-mkdir-instead-of-shel.patch; http://www.debian.org/security/2016/dsa-3676; http://www.securityfocus.com/bid/93332
CVE: CVE-2016-1371
Published: 2016-10-03
Description: ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted mew packer executable.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://blog.clamav.net/2016/05/clamav-0992-has-been-released.html; http://www.securityfocus.com/bid/93222; http://www.ubuntu.com/usn/USN-3093-1
CVE: CVE-2016-1372
Published: 2016-10-03
Description: ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted 7z file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://blog.clamav.net/2016/05/clamav-0992-has-been-released.html; http://www.securityfocus.com/bid/93221; http://www.ubuntu.com/usn/USN-3093-1
CVE: CVE-2016-5019
Published: 2016-10-03
Description: CoreResponseStateManager in Apache MyFaces Trinidad 1.0.0 through 1.0.13, 1.2.x before 1.2.15, 2.0.x before 2.0.2, and 2.1.x before 2.1.2 might allow attackers to conduct deserialization attacks via a crafted serialized view state string.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://mail-archives.apache.org/mod_mbox/myfaces-users/201609.mbox/%3CCAM1yOjYM%2BEW3mLUfX0pNAVLfUFRAw-Bhvkp3UE5%3DEQzR8Yxsfw%40mail.gmail.com%3E; http://packetstormsecurity.com/files/138920/Apache-MyFaces-Trinidad-Information-Disclosure.html; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html
CVE: CVE-2016-5398
Published: 2016-10-03
Description: Cross-site scripting (XSS) vulnerability in Business Process Editor in Red Hat JBoss BPM Suite before 6.3.3 allows remote authenticated users to inject arbitrary web script or HTML by levering permission to create business processes.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://rhn.redhat.com/errata/RHSA-2016-1968.html; http://rhn.redhat.com/errata/RHSA-2016-1969.html; http://www.securityfocus.com/bid/93219
CVE: CVE-2016-5432
Published: 2016-10-03
Description: The ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization (RHEV) Engine 4.0 allows local users to obtain sensitive database provisioning information by reading log files.
CVSS Score: 3.3 (LOW)
CWE: CWE-532
References: http://rhn.redhat.com/errata/RHSA-2016-1967.html; http://www.securityfocus.com/bid/92694; https://bugzilla.redhat.com/show_bug.cgi?id=1371428
CVE: CVE-2016-6352
Published: 2016-10-03
Description: The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via crafted dimensions in an ICO file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-updates/2016-09/msg00040.html; http://www.openwall.com/lists/oss-security/2016/07/13/11; http://www.openwall.com/lists/oss-security/2016/07/26/11
CVE: CVE-2016-6494
Published: 2016-10-03
Description: The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2016/07/29/4; http://www.openwall.com/lists/oss-security/2016/07/29/8; http://www.securityfocus.com/bid/92204
CVE: CVE-2016-7031
Published: 2016-10-03
Description: The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-254
References: http://docs.ceph.com/docs/master/release-notes/#v10-0-1; http://rhn.redhat.com/errata/RHSA-2016-1972.html; http://rhn.redhat.com/errata/RHSA-2016-1973.html
CVE: CVE-2016-7401
Published: 2016-10-03
Description: The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.
CVSS Score: 7.5 (HIGH)
CWE: CWE-254
References: http://rhn.redhat.com/errata/RHSA-2016-2038.html; http://rhn.redhat.com/errata/RHSA-2016-2039.html; http://rhn.redhat.com/errata/RHSA-2016-2040.html
CVE: CVE-2016-7405
Published: 2016-10-03
Description: The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.openwall.com/lists/oss-security/2016/09/07/8; http://www.openwall.com/lists/oss-security/2016/09/15/1; http://www.securityfocus.com/bid/92969
CVE: CVE-2016-7570
Published: 2016-10-03
Description: Drupal 8.x before 8.1.10 does not properly check for "Administer comments" permission, which allows remote authenticated users to set the visibility of comments for arbitrary nodes by leveraging rights to edit those nodes.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/93101; http://www.securitytracker.com/id/1036886; https://www.drupal.org/SA-CORE-2016-004