rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-1000215 
Ruckus Wireless H500 web management interface denial of service
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-25T14:00:00.000Z
CVE-2016-1000216 
Ruckus Wireless H500 web management interface authenticated command injection
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-10T20:00:00.000Z
CVE-2016-1000217 
Zotpress plugin for WordPress SQLi in zp_get_account()
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-06T14:00:00.000Z
CVE-2016-1000218 
Kibana Reporting plugin version 2.4.0 is vulnerable to a CSRF vulnerability that could allow an attacker to generate superfluous reports whenever an authenticated Kibana user navigates to a specially-crafted page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-16T21:00:00.000Z
CVE-2016-1000219 
Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be used to hijack sessions of other users when using Kibana behind some form of authentication such as Shield.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-16T21:00:00.000Z
CVE-2016-1000220 
Kibana before 4.5.4 and 4.1.11 are vulnerable to an XSS attack that would allow an attacker to execute arbitrary JavaScript in users' browsers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-16T21:00:00.000Z
CVE-2016-1000221 
Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-16T21:00:00.000Z
CVE-2016-1000222 
Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will create malicious formulas in the CSV data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-16T21:00:00.000Z
CVE-2016-1000229 
swagger-ui has XSS in key names
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-20T13:02:44.000Z
CVE-2016-1000232 
NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service. This attack appear to be exploitable via Custom HTTP header passed by client. This vulnerability appears to have been fixed in 2.3.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-05T17:00:00.000Z
CVE-2016-1000236 
Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-19T17:01:15.000Z
CVE-2016-1000237 
sanitize-html before 1.4.3 has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-23T14:21:28.000Z
CVE-2016-1000271 
Joomla extension DT Register version before 3.1.12 (Joomla 3.x) / 2.8.18 (Joomla 2.5) contains an SQL injection in "/index.php?controller=calendar&format=raw&cat[0]=SQLi&task=events". This attack appears to be exploitable if the attacker can reach the web server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-04T21:00:00.000Z
CVE-2016-1000282 
Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-05T17:00:00.000Z
CVE-2016-1000307 
Multiple Cross Site Scripting (XSS) Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web script or HTML via (1) profile_desc, about_me, schools, occupation, companies, hobbies, fav_movies, fav_music, fav_books parameters to ProfileSettings page; (2) note parameter to PersonalNotes Section; (3) closed_msg, description, allowed_types parameters to WebsiteConfigurations Section. NOTE: the collection_description vector is already covered by CVE-2015-4673.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-06T23:00:00.000Z
CVE-2016-1000338 
In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-01T00:00:00.000Z
CVE-2016-1000339 
In the Bouncy Castle JCE Provider version 1.55 and earlier the primary engine class used for AES was AESFastEngine. Due to the highly table driven approach used in the algorithm it turns out that if the data channel on the CPU can be monitored the lookup table accesses are sufficient to leak information on the AES key being used. There was also a leak in AESEngine although it was substantially less. AESEngine has been modified to remove any signs of leakage (testing carried out on Intel X86-64) and is now the primary AES class for the BC JCE provider from 1.56. Use of AESFastEngine is now only recommended where otherwise deemed appropriate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T13:00:00.000Z
CVE-2016-1000340 
In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of squaring for several raw math classes have been fixed (org.bouncycastle.math.raw.Nat???). These classes are used by our custom elliptic curve implementations (org.bouncycastle.math.ec.custom.**), so there was the possibility of rare (in general usage) spurious calculations for elliptic curve scalar multiplications. Such errors would have been detected with high probability by the output validation for our scalar multipliers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T13:00:00.000Z
CVE-2016-1000341 
In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack. Where timings can be closely observed for the generation of signatures, the lack of blinding in 1.55, or earlier, may allow an attacker to gain information about the signature's k value and ultimately the private value as well.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T13:00:00.000Z
CVE-2016-1000342 
In the Bouncy Castle JCE Provider version 1.55 and earlier ECDSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T13:00:00.000Z
CVE-2016-1000343 
In the Bouncy Castle JCE Provider version 1.55 and earlier the DSA key pair generator generates a weak private key if used with default values. If the JCA key pair generator is not explicitly initialised with DSA parameters, 1.55 and earlier generates a private value assuming a 1024 bit key size. In earlier releases this can be dealt with by explicitly passing parameters to the key pair generator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T13:00:00.000Z
CVE-2016-1000344 
In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T21:00:00.000Z
CVE-2016-1000345 
In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For BC 1.55 and older, in an environment where timings can be easily observed, it is possible with enough observations to identify when the decryption is failing due to padding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T21:00:00.000Z
CVE-2016-1000346 
In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. This can cause issues as invalid keys can be used to reveal details about the other party's private key where static Diffie-Hellman is in use. As of release 1.56 the key parameters are checked on agreement calculation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T21:00:00.000Z
CVE-2016-1000352 
In the Bouncy Castle JCE Provider version 1.55 and earlier the ECIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-04T21:00:00.000Z
CVE-2016-10002 
Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to probe a cache for this information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-27T17:00:00.000Z
CVE-2016-10003 
Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-27T17:00:00.000Z
CVE-2016-10005 
Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/caf~eu~gp~example~timeoff~wd requests, aka SAP Security Note 2344524.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-19T06:55:00.000Z
CVE-2016-10006 
In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impact is XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-24T18:17:00.000Z
CVE-2016-10007 
SQL injection vulnerability in the "Marketing > Forms" screen in dotCMS before 3.7.2 and 4.x before 4.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the _EXT_FORM_HANDLER_orderBy parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-19T21:00:00.000Z
CVE-2016-10008 
SQL injection vulnerability in the "Content Types > Content Types" screen in dotCMS before 3.7.2 and 4.x before 4.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the _EXT_STRUCTURE_direction parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-19T21:00:00.000Z
CVE-2016-10009 
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-05T00:00:00.000Z
CVE-2016-10010 
sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-05T00:00:00.000Z
CVE-2016-10011 
authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-05T00:00:00.000Z
CVE-2016-10012 
The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-05T00:00:00.000Z
CVE-2016-10013 
Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL singlestep during emulation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-26T15:00:00.000Z
CVE-2016-10024 
Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the instruction stream asynchronously while performing certain kernel operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-26T15:00:00.000Z
CVE-2016-10025 
VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a denial of service (hypervisor crash) by leveraging a missing NULL pointer check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-26T15:00:00.000Z
CVE-2016-10026 
ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites with the git and recentchanges plugins and the CGI interface enabled, which allows remote attackers to revert certain changes by leveraging permissions to change the page before the revision was made.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-13T18:00:00.000Z
CVE-2016-10027 
Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle attackers to bypass TLS protections and trigger use of cleartext for client authentication by stripping the "starttls" feature from a server response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-12T23:00:00.000Z
CVE-2016-10028 
The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a VIRTIO_GPU_CMD_GET_CAPSET command with a maximum capabilities size with a value of 0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-27T22:00:00.000Z
CVE-2016-10029 
The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a scanout id in a VIRTIO_GPU_CMD_SET_SCANOUT command larger than num_scanouts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-27T22:00:00.000Z
CVE-2016-10030 
The _prolog_error function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 has a vulnerability in how the slurmd daemon informs users of a Prolog failure on a compute node. That vulnerability could allow a user to assume control of an arbitrary file on the system. Any exploitation of this is dependent on the user being able to cause or anticipate the failure (non-zero return code) of a Prolog script that their job would run on. This issue affects all Slurm versions from 0.6.0 (September 2005) to present. Workarounds to prevent exploitation of this are to either disable your Prolog script, or modify it such that it always returns 0 ("success") and adjust it to set the node as down using scontrol instead of relying on the slurmd to handle that automatically. If you do not have a Prolog set you are unaffected by this issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-05T11:00:00.000Z
CVE-2016-10031 
WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit this vulnerability, the local attacker must insert an executable file called mysqld.exe or httpd.exe and replace the original files. The next time the service starts, the malicious file will get executed as SYSTEM. NOTE: the vendor disputes the relevance of this report, taking the position that a configuration in which "'someone' (an attacker) is able to replace files on a PC" is not "the fault of WampServer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-27T07:25:00.000Z
CVE-2016-10033 
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-30T19:00:00.000Z
CVE-2016-10034 
The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-30T19:00:00.000Z
CVE-2016-10036 
Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16 allows remote attackers to (1) deploy an arbitrary servlet application and execute arbitrary code by uploading a war file or (2) possibly write to arbitrary files and cause a denial of service by uploading an HTML file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-01T19:00:00.000Z
CVE-2016-10037 
Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id (aka dir) parameter, related to browser/directory/getlist.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-24T11:00:00.000Z
CVE-2016-10038 
Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/remove.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-24T11:00:00.000Z
CVE-2016-10039 
Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/getfiles.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-24T11:00:00.000Z
CVE-2016-10040 
Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service (application crash) via a xml file with multiple nested open tags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-07T15:00:00.000Z
CVE-2016-10041 
An issue was discovered in Sprecher Automation SPRECON-E Service Program before 3.43 SP0. Under certain preconditions, it is possible to execute telegram simulation as a non-admin user. As prerequisites, a user must have created an online-connection, validly authenticated and authorized as administrator, and executed telegram simulation. After that, the online-connection must have been closed. Incorrect caching of client data then may lead to privilege escalation, where a subsequently acting non-admin user is permitted to do telegram simulation. In order to exploit this vulnerability, a potential attacker would need to have both a valid engineering-account in the SPRECON RBAC system as well as access to a service/maintenance computer with SPRECON-E Service Program running. Additionally, a valid admin-user must have closed the service connection beforehand without closing the program, having executed telegram simulation; the attacker then has access to the running software instance. Hence, there is no risk from external attackers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-25T06:50:00.000Z
CVE-2016-10042 
Authorization Bypass in the Web interface of Arcadyan SLT-00 Star* (aka Swisscom Internet-Box) devices before R7.7 allows unauthorized reconfiguration of the static routing table via an unauthenticated HTTP request, leading to denial of service and information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-29T00:00:00.000Z
CVE-2016-10043 
An issue was discovered in Radisys MRF Web Panel (SWMS) 9.0.1. The MSM_MACRO_NAME POST parameter in /swms/ms.cgi was discovered to be vulnerable to OS command injection attacks. It is possible to use the pipe character (|) to inject arbitrary OS commands and retrieve the output in the application's responses. Attackers could execute unauthorized commands, which could then be used to disable the software, or read, write, and modify data for which the attacker does not have permissions to access directly. Since the targeted application is directly executing the commands instead of the attacker, any malicious activities may appear to come from the application or the application's owner (apache user).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-31T18:00:00.000Z
CVE-2016-10044 
The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-07T07:02:00.000Z
CVE-2016-10045 
The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code by leveraging improper interaction between the escapeshellarg function and internal escaping performed in the mail function in PHP. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-10033.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-30T19:00:00.000Z
CVE-2016-10046 
Heap-based buffer overflow in the DrawImage function in magick/draw.c in ImageMagick before 6.9.5-5 allows remote attackers to cause a denial of service (application crash) via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T17:00:00.000Z
CVE-2016-10047 
Memory leak in the NewXMLTree function in magick/xml-tree.c in ImageMagick before 6.9.4-7 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T17:00:00.000Z