rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-1551 
ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks. Because reference clocks are treated like other peers and stored in the same structure, any packet with a source ip address of a reference clock (127.127.1.1 for example) that reaches the receive() function will match that reference clock's peer record and will be treated as a trusted peer. Any system that lacks the typical martian packet filtering which would block these packets is in danger of having its time controlled by an attacker.
Problem types: description: unspecified
Affected products: vendor: NTP Project
product: NTP
vendor: NTPsec Project
product: NTPSec
Published: 2017-01-27T17:00:00.000Z
CVE-2016-1555 
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-21T15:00:00.000Z
CVE-2016-1556 
Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0; and WND930 before 2.0.11 allows remote attackers to read the wireless WPS PIN or passphrase by visiting unauthenticated webpages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-21T15:00:00.000Z
CVE-2016-1557 
Netgear WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0 reveal wireless passwords and administrative usernames and passwords over SNMP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-21T15:00:00.000Z
CVE-2016-1558 
Buffer overflow in D-Link DAP-2310 2.06 and earlier, DAP-2330 1.06 and earlier, DAP-2360 2.06 and earlier, DAP-2553 H/W ver. B1 3.05 and earlier, DAP-2660 1.11 and earlier, DAP-2690 3.15 and earlier, DAP-2695 1.16 and earlier, DAP-3320 1.00 and earlier, and DAP-3662 1.01 and earlier allows remote attackers to have unspecified impact via a crafted 'dlink_uid' cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-21T15:00:00.000Z
CVE-2016-1559 
D-Link DAP-1353 H/W vers. B1 3.15 and earlier, D-Link DAP-2553 H/W ver. A1 1.31 and earlier, and D-Link DAP-3520 H/W ver. A1 1.16 and earlier reveal wireless passwords and administrative usernames and passwords over SNMP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-21T15:00:00.000Z
CVE-2016-1560 
ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-21T20:00:00.000Z
CVE-2016-1561 
ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, which allows remote attackers to obtain SSH access by leveraging knowledge of a private key from another installation or a firmware image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-21T20:00:00.000Z
CVE-2016-1562 
The REST API in the DTE Energy Insight application before 1.7.8 for Android allows remote authenticated users to obtain unspecified customer information via a SQL expression in the filter parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-03-12T02:00:00.000Z
CVE-2016-1563 
NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-07T10:00:00.000Z
CVE-2016-1564 
Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/class-wp-theme.php in WordPress before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a (1) stylesheet name or (2) template name to wp-admin/customize.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-22T01:00:00.000Z
CVE-2016-1565 
Cross-site scripting (XSS) vulnerability in the Field Group module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with permission to configure field display settings to inject arbitrary web script or HTML via an element attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-08T21:00:00.000Z
CVE-2016-1566 
Cross-site scripting (XSS) vulnerability in the file browser in Guacamole 0.9.8 and 0.9.9, when file transfer is enabled to a location shared by multiple users, allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename.  NOTE: this vulnerability was fixed in guacamole.war on 2016-01-13, but the version number was not changed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-02T15:00:00.000Z
CVE-2016-1567 
chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-26T19:00:00.000Z
CVE-2016-1568 
Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-08T16:00:00.000Z
CVE-2016-1569 
FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by using service manager to invoke the gbak utility with an invalid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-13T15:00:00.000Z
CVE-2016-1570 
The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-22T15:00:00.000Z
CVE-2016-1571 
The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-22T15:00:00.000Z
CVE-2016-1572 
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-22T15:00:00.000Z
CVE-2016-1573 Using a specially crafted fallback art property, scopes can execute arbitrary QML code in context of unity8-dash
Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope.
Problem types: description: Executing data as code.
Affected products: vendor: Ubuntu
product: Unity8
Published: 2019-04-22T15:35:59.410Z
CVE-2016-1575 
The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-02T10:00:00.000Z
CVE-2016-1576 
The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an overlayfs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-02T10:00:00.000Z
CVE-2016-1577 
Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-13T14:00:00.000Z
CVE-2016-1578 
Use-after-free vulnerability in Oxide allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors, related to responding synchronously to permission requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-13T14:00:00.000Z
CVE-2016-1579 UDM doesn't check for confinement before running post-processing commands
UDM provides support for running commands after a download is completed, this is currently made use of for click package installation. This functionality was not restricted to unconfined applications. Before UDM version 1.2+16.04.20160408-0ubuntu1 any confined application could make use of the UDM C++ API to run arbitrary commands in an unconfined environment as the phablet user.
Problem types: description: Missing access control checks.
Affected products: vendor: Ubuntu
product: Ubuntu Download Manager
Published: 2019-04-22T15:35:59.488Z
CVE-2016-1580 
The setup_snappy_os_mounts function in the ubuntu-core-launcher package before 1.0.27.1 improperly determines the mount point of bind mounts when using snaps, which might allow remote attackers to obtain sensitive information or gain privileges via a snap with a name starting with "ubuntu-core."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-13T14:00:00.000Z
CVE-2016-1581 
LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-09T16:00:00.000Z
CVE-2016-1582 
LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container directory via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-09T16:00:00.000Z
CVE-2016-1583 
The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-27T10:00:00.000Z
CVE-2016-1584 Unity8 converged application lifecycle allows background applications to use on-screen keyboard when not top-most
In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input.
Problem types: description: Lack of access controls.
Affected products: vendor: Ubuntu
product: Unity8
Published: 2019-04-22T15:35:59.533Z
CVE-2016-1585 AppArmor mount rules grant excessive permissions
In all versions of AppArmor mount rules are accidentally widened when compiled.
Problem types: description: Improper translation of access control rules to policy.
Affected products: vendor: AppArmor
product: apparmor
Published: 2019-04-22T15:35:59.573Z
CVE-2016-1586 
A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before 1.18.3.
Problem types: description: Imprecise garbage collection.
Affected products: vendor: Ubuntu
product: Oxide
Credits: lang: en
value: Chris Coulson
Published: 2019-04-22T15:35:59.609Z
CVE-2016-1587 
The Snapweb interface before version 0.21.2 was exposing controls to install or remove snap packages without controlling the identity of the user, nor the origin of the connection. An attacker could have used the controls to remotely add a valid, but malicious, snap package, from the Store, potentially using system resources without permission from the legitimate administrator of the system.
Problem types: description: Missing access controls.
Affected products: vendor: Ubuntu
product: snapweb
Published: 2019-04-22T15:35:59.648Z
CVE-2016-1592 
XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the nrfEntitlementReport.do CGI.
Problem types: description: unspecified
Affected products: vendor: n/a
product: NetIQ Designer for Identity Manager before 4.5.3
Published: 2016-10-27T20:00:00.000Z
CVE-2016-1593 
Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. (dot dot) in a filename within a multipart/form-data POST request to a LiveTime.woa URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-22T10:00:00.000Z
CVE-2016-1594 
Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request to a LiveTime.woa URL, as demonstrated by obtaining sensitive information via a (1) downloadLogFiles or (2) downloadFile action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-22T10:00:00.000Z
CVE-2016-1595 
LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to conduct Hibernate Query Language (HQL) injection attacks and obtain sensitive information via the entityName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-22T10:00:00.000Z
CVE-2016-1596 
Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenticated users to inject arbitrary web script or HTML via a certain (1) user name, (2) tf_aClientFirstName, (3) tf_aClientLastName, (4) ta_selectedTopicContent, (5) tf_orgUnitName, (6) tf_aManufacturerFullName, (7) tf_aManufacturerName, (8) tf_aManufacturerAddress, or (9) tf_aManufacturerCity parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-22T10:00:00.000Z
CVE-2016-1597 
A logged-in user in NetIQ Access Governance Suite 6.0 through 6.4 could escalate privileges to administrator.
Problem types: description: escalate privileges
Affected products: vendor: n/a
product: Access Governance Suite
Published: 2017-03-23T06:36:00.000Z
CVE-2016-1598 
XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages.
Problem types: description: unspecified
Affected products: vendor: n/a
product: NetIQ IDM 4.5 Identity Applications before 4.5.4
Published: 2016-10-27T20:00:00.000Z
CVE-2016-1599 
Cross-site scripting (XSS) vulnerability in NetIQ Self Service Password Reset (SSPR) 2.x and 3.x before 3.3.1 HF2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-03-24T01:00:00.000Z
CVE-2016-1600 
The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability.
Problem types: description: Information disclosure
Affected products: vendor: NetIQ
product: Identity Manager
Published: 2019-05-09T20:33:45.000Z
CVE-2016-1601 
yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-26T14:00:00.000Z
CVE-2016-1602 
A code injection in the supportconfig data collection tool in supportutils in SUSE Linux Enterprise Server 12 and 12-SP1 and SUSE Linux Enterprise Desktop 12 and 12-SP1 could be used by local attackers to execute code as the user running supportconfig (usually root).
Problem types: description: code injection
Affected products: vendor: n/a
product: supportconfig
Published: 2017-03-23T06:36:00.000Z
CVE-2016-1603 
An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users.
Problem types: description: expose cryptographic attributes
Affected products: vendor: n/a
product: NetIQ IDM ServiceNow
Published: 2017-03-23T06:36:00.000Z
CVE-2016-1605 
Directory traversal vulnerability in the ReportViewServlet servlet in the server in NetIQ Sentinel 7.4.x before 7.4.2 allows remote attackers to read arbitrary files via a PREVIEW value for the fileType field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-01T01:00:00.000Z
CVE-2016-1606 
Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code via (1) the NetworkName property value to ObjectXSNAConfig.ObjectXSNAConfig in iconfig.dll, (2) the CPName property value to ObjectXSNAConfig.ObjectXSNAConfig in iconfig.dll, (3) the PrinterName property value to ProfileEditor.PrintPasteControl in ProfEdit.dll, (4) the Data argument to the WriteRecords function in FTXBIFFLib.AS400FtxBIFF in FtxBIFF.dll, (5) the Serialized property value to NMSECCOMPARAMSLib.SSL3 in NMSecComParams.dll, (6) the UserName property value to NMSECCOMPARAMSLib.FirewallProxy in NMSecComParams.dll, (7) the LUName property value to ProfileEditor.MFSNAControl in ProfEdit.dll, (8) the newVal argument to the Load function in FTPSFTPLib.SFtpSession in FTPSFtp.dll, or (9) a long Host field in the FTP Client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-03T01:00:00.000Z
CVE-2016-1607 
Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Security Update 2 allow remote attackers to hijack the authentication of administrators, as demonstrated by reconfiguring time settings via a vaconfig/time request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-01T01:00:00.000Z
CVE-2016-1608 
vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ntpServer parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-01T01:00:00.000Z
CVE-2016-1609 
Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input, as demonstrated by a crafted attribute of an IMG element in the phone field of a user profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-01T01:00:00.000Z
CVE-2016-1610 
Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote attackers to bypass intended access restrictions and write to arbitrary files via a .. (dot dot) in a blob name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-01T01:00:00.000Z
CVE-2016-1611 
Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows local users to gain privileges by replacing this file's content with arbitrary shell commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-01T01:00:00.000Z
CVE-2016-1612 
The LoadIC::UpdateCaches function in ic/ic.cc in Google V8, as used in Google Chrome before 48.0.2564.82, does not ensure receiver compatibility before performing a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknown other impact via crafted JavaScript code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-25T11:00:00.000Z
CVE-2016-1613 
Multiple use-after-free vulnerabilities in the formfiller implementation in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to improper tracking of the destruction of (1) IPWL_FocusHandler and (2) IPWL_Provider objects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-25T11:00:00.000Z
CVE-2016-1614 
The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Blink, as used in Google Chrome before 48.0.2564.82, mishandles the initialization mode, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-25T11:00:00.000Z
CVE-2016-1615 
The Omnibox implementation in Google Chrome before 48.0.2564.82 allows remote attackers to spoof a document's origin via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-25T11:00:00.000Z
CVE-2016-1616 
The CustomButton::AcceleratorPressed function in ui/views/controls/button/custom_button.cc in Google Chrome before 48.0.2564.82 allows remote attackers to spoof URLs via vectors involving an unfocused custom button.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-25T11:00:00.000Z
CVE-2016-1617 
The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easier for remote attackers to determine whether a specific HSTS web site has been visited by reading a CSP report.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-25T11:00:00.000Z
CVE-2016-1618 
Blink, as used in Google Chrome before 48.0.2564.82, does not ensure that a proper cryptographicallyRandomValues random number generator is used, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-25T11:00:00.000Z