rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-5029 
The create_fullest_file_path function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted dwarf file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-17T17:00:00.000Z
CVE-2016-5030 
The _dwarf_calculate_info_section_end_ptr function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-17T17:00:00.000Z
CVE-2016-5031 
The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-17T17:00:00.000Z
CVE-2016-5032 
The dwarf_get_xu_hash_entry function in libdwarf before 20160923 allows remote attackers to cause a denial of service (crash) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-17T17:00:00.000Z
CVE-2016-5033 
The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-17T17:00:00.000Z
CVE-2016-5034 
dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file, related to relocation records.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-17T17:00:00.000Z
CVE-2016-5035 
The _dwarf_read_line_table_header function in dwarf_line_table_reader.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-17T17:00:00.000Z
CVE-2016-5036 
The dump_block function in print_sections.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted frame data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-17T17:00:00.000Z
CVE-2016-5037 
The _dwarf_load_section function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-17T17:00:00.000Z
CVE-2016-5038 
The dwarf_get_macro_startend_file function in dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted string offset for .debug_str.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-17T17:00:00.000Z
CVE-2016-5039 
The get_attr_value function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted object with all-bits on.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-17T17:00:00.000Z
CVE-2016-5040 
libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a large length value in a compilation unit header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-17T17:00:00.000Z
CVE-2016-5041 
dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a debugging information entry using DWARF5 and without a DW_AT_name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-10T16:00:00.000Z
CVE-2016-5042 
The dwarf_get_aranges_list function in libdwarf before 20160923 allows remote attackers to cause a denial of service (infinite loop and crash) via a crafted DWARF section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-17T17:00:00.000Z
CVE-2016-5043 
The dwarf_dealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted DWARF section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-17T17:00:00.000Z
CVE-2016-5044 
The WRITE_UNALIGNED function in dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted DWARF section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-17T17:00:00.000Z
CVE-2016-5045 
NetApp OnCommand System Manager before 9.0 allows remote attackers to obtain sensitive credentials via vectors related to cluster peering setup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-03T16:00:00.000Z
CVE-2016-5047 
NetApp OnCommand System Manager 8.3.x before 8.3.2P5 allows remote authenticated users to cause a denial of service via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-01T10:00:00.000Z
CVE-2016-5048 
SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-26T19:00:00.000Z
CVE-2016-5049 
Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the SESID parameter in conjunction with a filename in the FNAME parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-26T19:00:00.000Z
CVE-2016-5050 
Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-26T19:00:00.000Z
CVE-2016-5051 
OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 stores a PSK in cleartext under /private/var/mobile/Containers/Data/Application.
Problem types: description: Cleartext WPA2 PSK
Affected products: vendor: n/a
product: OSRAM SYLVANIA Osram Lightify Home before 2016-07-26
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5052 
OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 does not use SSL pinning.
Problem types: description: Lack of SSL Pinning
Affected products: vendor: n/a
product: OSRAM SYLVANIA Osram Lightify Home through 2016-07-26
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5053 
OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via TCP port 4000.
Problem types: description: Pre-Authentication Command Execution
Affected products: vendor: n/a
product: OSRAM SYLVANIA Osram Lightify Home before 2016-07-26
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5054 
OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 allows Zigbee replay.
Problem types: description: ZigBee Network Command Replay
Affected products: vendor: n/a
product: OSRAM SYLVANIA Osram Lightify Home through 2016-07-26
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5055 
OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 has XSS in the username field and Wireless Client Mode configuration page.
Problem types: description: XSS
Affected products: vendor: n/a
product: OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5056 
OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a PSK.
Problem types: description: Weak Default WPA2 PSKs
Affected products: vendor: n/a
product: OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5057 
OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 does not use SSL pinning.
Problem types: description: Lack of SSL Pinning
Affected products: vendor: n/a
product: OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5058 
OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 allows Zigbee replay.
Problem types: description: ZigBee Network Command Replay
Affected products: vendor: n/a
product: OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5059 
OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 allows attackers to obtain sensitive information by reading screenshots under /private/var/mobile/Containers/Data/Application.
Problem types: description: Cached Screenshot Information Leak
Affected products: vendor: n/a
product: OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5060 
Multiple cross-site scripting (XSS) vulnerabilities in nGrinder before 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) description, (2) email, or (3) username parameter to user/save.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-13T22:00:00.000Z
CVE-2016-5061 
Multiple cross-site scripting (XSS) vulnerabilities in the web server in Aternity before 9.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTPAgent, (2) MacAgent, (3) getExternalURL, or (4) retrieveTrustedUrl page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-29T10:00:00.000Z
CVE-2016-5062 
The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-29T10:00:00.000Z
CVE-2016-5063 
The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote attackers to bypass authorization checks and make an RPC call via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-02T14:00:00.000Z
CVE-2016-5065 
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command injection.
Problem types: description: command injection
Affected products: vendor: n/a
product: Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5066 
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user.
Problem types: description: weak passwords
Affected products: vendor: n/a
product: Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5067 
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection.
Problem types: description: command injection
Affected products: vendor: n/a
product: Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5068 
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi requests.
Problem types: description: no authentication
Affected products: vendor: n/a
product: Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5069 
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL.
Problem types: description: guessable session tokens
Affected products: vendor: n/a
product: Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5070 
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext.
Problem types: description: stored passwords in cleartext
Affected products: vendor: n/a
product: Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5071 
Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root.
Problem types: description: wrong privileges
Affected products: vendor: n/a
product: Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5072 
OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser class. Fixed versions are Enterprise Edition v5.1.12, Enterprise Edition v5.2.9, Professional Edition v4.8.12, Professional Edition v4.9.9, Community Edition v4.8.12, Community Edition v4.9.9.
Problem types: description: RCE
Affected products: vendor: n/a
product: OXID eShop before 2016-06-13
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5073 
CloudView NMS before 2.10a has XSS via SNMP.
Problem types: description: XSS
Affected products: vendor: n/a
product: CloudView NMS before 2.10a
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5074 
CloudView NMS before 2.10a has a format string issue exploitable over SNMP.
Problem types: description: format string
Affected products: vendor: n/a
product: CloudView NMS before 2.10a
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5075 
CloudView NMS before 2.10a has XSS via a TELNET login.
Problem types: description: XSS
Affected products: vendor: n/a
product: CloudView NMS before 2.10a
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5076 
CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def.
Problem types: description: DOA
Affected products: vendor: n/a
product: CloudView NMS before 2.10a
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5077 
Netikus EventSentry before 3.2.1.44 has XSS via SNMP.
Problem types: description: XSS
Affected products: vendor: n/a
product: Netikus EventSentry before 3.2.1.44
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5078 
Paessler PRTG before 16.2.24.4045 has XSS via SNMP.
Problem types: description: XSS
Affected products: vendor: n/a
product: Paessler PRTG before 16.2.24.4045
Published: 2017-04-10T03:00:00.000Z
CVE-2016-5080 
Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow), on a system running an application compiled by ASN1C, via crafted ASN.1 data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-19T22:00:00.000Z
CVE-2016-5081 
ZModo ZP-NE14-S and ZP-IBH-13W devices have a hardcoded root password, which makes it easier for remote attackers to obtain access via a TELNET session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-24T01:00:00.000Z
CVE-2016-5084 
Johnson & Johnson Animas OneTouch Ping devices do not use encryption for certain data, which might allow remote attackers to obtain sensitive information by sniffing the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T10:00:00.000Z
CVE-2016-5085 
Johnson & Johnson Animas OneTouch Ping devices do not properly generate random numbers, which makes it easier for remote attackers to spoof meters by sniffing the network and then engaging in an authentication handshake.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T10:00:00.000Z
CVE-2016-5086 
Johnson & Johnson Animas OneTouch Ping devices allow remote attackers to bypass authentication via replay attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T10:00:00.000Z
CVE-2016-5087 
Alertus Desktop Notification before 2.9.31.1710 on OS X uses weak permissions for configuration files and unspecified other files, which allows local users to suppress emergency notifications or change content via standard filesystem operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-26T01:00:00.000Z
CVE-2016-5091 
Extbase in TYPO3 4.3.0 before 6.2.24, 7.x before 7.6.8, and 8.1.1 allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted Extbase action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T21:00:00.000Z
CVE-2016-5092 
Directory traversal vulnerability in Fortinet FortiWeb before 5.5.3 allows remote authenticated administrators with read and write privileges to read arbitrary files by leveraging the autolearn feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-13T15:00:00.000Z
CVE-2016-5093 
The get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a '\0' character, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted locale_get_primary_language call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T10:00:00.000Z
CVE-2016-5094 
Integer overflow in the php_html_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from the htmlspecialchars function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T10:00:00.000Z
CVE-2016-5095 
Integer overflow in the php_escape_html_entities_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from a FILTER_SANITIZE_FULL_SPECIAL_CHARS filter_var call.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-5094.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T10:00:00.000Z
CVE-2016-5096 
Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer in the second argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T10:00:00.000Z
CVE-2016-5097 
phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by reading (1) HTTP requests or (2) server logs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-05T01:00:00.000Z
CVE-2016-5098 
Directory traversal vulnerability in libraries/error_report.lib.php in phpMyAdmin before 4.6.2-prerelease allows remote attackers to determine the existence of arbitrary files by triggering an error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-05T01:00:00.000Z
CVE-2016-5099 
Cross-site scripting (XSS) vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mishandled during double URL decoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-05T01:00:00.000Z
CVE-2016-5100 
Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attackers to guess the password reset token by predicting a value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-13T18:00:00.000Z
CVE-2016-5101 
Unspecified vulnerability in Opera Mail before 2016-02-16 on Windows allows user-assisted remote attackers to execute arbitrary code via a crafted e-mail message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-29T14:00:00.000Z
CVE-2016-5102 
Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (segmentation fault) via a crafted gif file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-06T17:00:00.000Z
CVE-2016-5104 
The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T14:00:00.000Z
CVE-2016-5105 
The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-02T14:00:00.000Z
CVE-2016-5106 
The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-02T14:00:00.000Z
CVE-2016-5107 
The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-02T14:00:00.000Z
CVE-2016-5108 
Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted QuickTime IMA file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-08T14:00:00.000Z
CVE-2016-5109 
Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-13T15:00:00.000Z
CVE-2016-5114 
sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return value, which allows attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and buffer overflow) via a long string, as demonstrated by a long URI in a configuration with custom REQUEST_URI logging.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T10:00:00.000Z
CVE-2016-5115 
The avcodec_decode_audio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-03T15:00:00.000Z
CVE-2016-5116 
gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service (stack-based buffer under-read and application crash) via a long name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T10:00:00.000Z