rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-10245 
Insufficient sanitization of the query parameter in templates/html/search_opensearch.php could lead to reflected cross-site scripting or iframe injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-24T16:24:38.000Z
CVE-2016-10246 
Buffer overflow in the main function in jstest_main.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-16T14:00:00.000Z
CVE-2016-10247 
Buffer overflow in the my_getline function in jstest_main.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-16T14:00:00.000Z
CVE-2016-10248 
The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) via vectors involving an empty sequence.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T14:00:00.000Z
CVE-2016-10249 
Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T14:00:00.000Z
CVE-2016-10250 
The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T14:00:00.000Z
CVE-2016-10251 
Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T14:00:00.000Z
CVE-2016-10252 
Memory leak in the IsOptionMember function in MagickCore/option.c in ImageMagick before 6.9.2-2, as used in ODR-PadEnc and other products, allows attackers to trigger memory consumption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-14T22:00:00.000Z
CVE-2016-10253 
An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions using a malformed extpattern can indirectly specify an offset that is used as an array index. This ordinal permits arbitrary regions within the erts_alloc arena to be both read and written to.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-18T20:10:00.000Z
CVE-2016-10254 
The allocate_elf function in common.h in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted ELF file, which triggers a memory allocation failure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T16:00:00.000Z
CVE-2016-10255 
The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted (1) sh_off or (2) sh_size ELF header value, which triggers a memory allocation failure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-23T16:00:00.000Z
CVE-2016-10256 
The Symantec ProxySG 6.5 (prior to 6.5.10.6), 6.6, and 6.7 (prior to 6.7.2.1) management console is susceptible to a reflected XSS vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to inject arbitrary JavaScript code into the management console web client application. This is a separate vulnerability from CVE-2016-10257.
Problem types: description: Reflected XSS
Affected products: vendor: Symantec Corporation
product: ProxySG
Published: 2018-01-10T02:00:00.000Z
CVE-2016-10257 
The Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 (prior to 6.7.2.1), ProxySG 6.5 (prior to 6.5.10.6), ProxySG 6.6, and ProxySG 6.7 (prior to 6.7.2.1) management console is susceptible to a reflected XSS vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to inject arbitrary JavaScript code into the management console web client application. This is a separate vulnerability from CVE-2016-10256.
Problem types: description: Reflected XSS
Affected products: vendor: Symantec Corporation
product: ASG
vendor: Symantec Corporation
product: ProxySG
Published: 2018-01-10T02:00:00.000Z
CVE-2016-10258 
Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can upload arbitrary malicious files to the management console and trick another administrator user into downloading and executing malicious code.
Problem types: description: Unrestricted file upload
Affected products: vendor: Symantec Corporation
product: Advanced Secure Gateway (ASG)
vendor: Symantec Corporation
product: ProxySG
Published: 2018-04-11T14:00:00.000Z
CVE-2016-10259 
Symantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.10.4.1, and 3.11 before 3.11.3.1 is susceptible to a denial-of-service vulnerability that impacts the SSL servers for intercepted SSL connections. A malicious SSL client can, under certain circumstances, temporarily exhaust the TCP connection pool of an SSL server.
Problem types: description: Denial of Service
Affected products: vendor: Symantec Corporation
product: SSL Visibility
Published: 2017-04-11T14:00:00.000Z
CVE-2016-10266 
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-24T19:00:00.000Z
CVE-2016-10267 
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-24T19:00:00.000Z
CVE-2016-10268 
tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 78490" and libtiff/tif_unix.c:115:23.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-24T19:00:00.000Z
CVE-2016-10269 
LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-24T19:00:00.000Z
CVE-2016-10270 
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 8" and libtiff/tif_read.c:523:22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-24T19:00:00.000Z
CVE-2016-10271 
tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 1" and libtiff/tif_fax3.c:413:13.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-24T19:00:00.000Z
CVE-2016-10272 
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "WRITE of size 2048" and libtiff/tif_next.c:64:9.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-24T19:00:00.000Z
CVE-2016-10273 
Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to execute arbitrary code or crash the web service via the (1) ateFunc, (2) ateGain, (3) ateTxCount, (4) ateChan, (5) ateRate, (6) ateMacID, (7) e2pTxPower1, (8) e2pTxPower2, (9) e2pTxPower3, (10) e2pTxPower4, (11) e2pTxPower5, (12) e2pTxPower6, (13) e2pTxPower7, (14) e2pTx2Power1, (15) e2pTx2Power2, (16) e2pTx2Power3, (17) e2pTx2Power4, (18) e2pTx2Power5, (19) e2pTx2Power6, (20) e2pTx2Power7, (21) ateTxFreqOffset, (22) ateMode, (23) ateBW, (24) ateAntenna, (25) e2pTxFreqOffset, (26) e2pTxPwDeltaB, (27) e2pTxPwDeltaG, (28) e2pTxPwDeltaMix, (29) e2pTxPwDeltaN, and (30) readE2P parameters of the /goform/formWlanMP endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-26T05:47:00.000Z
CVE-2016-10274 
An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-30202412. References: M-ALPS02897901.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10275 
An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-34514954. References: QC-CR#1009111.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10276 
An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-32952839. References: QC-CR#1094105.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10277 
An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33840490.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10280 
An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28175767. References: M-ALPS02696445.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10281 
An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28175647. References: M-ALPS02696475.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10282 
An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-33939045. References: M-ALPS03149189.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10283 
An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32094986. References: QC-CR#2002052.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10284 
An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32402303. References: QC-CR#2000664.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10285 
An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33752702. References: QC-CR#1104899.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10286 
An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-35400904. References: QC-CR#1090237.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10287 
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33784446. References: QC-CR#1112751.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10288 
An elevation of privilege vulnerability in the Qualcomm LED driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33863909. References: QC-CR#1109763.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10289 
An elevation of privilege vulnerability in the Qualcomm crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33899710. References: QC-CR#1116295.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10290 
An elevation of privilege vulnerability in the Qualcomm shared memory driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33898330. References: QC-CR#1109782.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10291 
An elevation of privilege vulnerability in the Qualcomm Slimbus driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-34030871. References: QC-CR#986837.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10292 
A denial of service vulnerability in the Qualcomm Wi-Fi driver could enable a proximate attacker to cause a denial of service in the Wi-Fi subsystem. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34514463. References: QC-CR#1065466.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10293 
An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-33352393. References: QC-CR#1101943.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10294 
An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33621829. References: QC-CR#1105481.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10295 
An information disclosure vulnerability in the Qualcomm LED driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33781694. References: QC-CR#1109326.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10296 
An information disclosure vulnerability in the Qualcomm shared memory driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33845464. References: QC-CR#1109782.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-05-12T15:00:00.000Z
CVE-2016-10297 
In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist.
Problem types: description: Time-of-Check Time-of-Use Race Condition Vulnerability in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: All Qualcomm products
Published: 2017-06-06T14:00:00.000Z
CVE-2016-10298 
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393252.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2016-10299 
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32577244.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2016-10304 
The SAP EP-RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to cause a denial of service (out-of-memory error and service instability) via a crafted serialized Java object, as demonstrated by serial.cc3, aka SAP Security Note 2315788.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-10T14:00:00.000Z
CVE-2016-10305 
Trango Apex <= 2.1.1, ApexLynx < 2.0, ApexOrion < 2.0, ApexPlus <= 3.2.0, Giga <= 2.6.1, GigaLynx < 2.0, GigaOrion < 2.0, GigaPlus <= 3.2.3, GigaPro <= 1.4.1, StrataLink < 3.0, and StrataPro devices have a built-in, hidden root account, with a default password that was once stored in cleartext within a software update package on a Trango FTP server. This account is accessible via SSH and/or TELNET, and grants access to the underlying embedded UNIX OS on the device, allowing full control over it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-30T07:00:00.000Z
CVE-2016-10306 
Trango Altum AC600 devices have a built-in, hidden root account, with a default password of abcd1234. This account is accessible via SSH and/or TELNET, and grants access to the underlying embedded UNIX OS on the device, allowing full control over it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-30T07:00:00.000Z
CVE-2016-10307 
Trango ApexLynx 2.0, ApexOrion 2.0, GigaLynx 2.0, GigaOrion 2.0, and StrataLink 3.0 devices have a built-in, hidden root account, with a default password for which the MD5 hash value is public (but the cleartext value is perhaps not yet public). This account is accessible via SSH and/or TELNET, and grants access to the underlying embedded UNIX OS on the device, allowing full control over it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-30T07:00:00.000Z
CVE-2016-10308 
Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the device, allowing full control over it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-30T07:00:00.000Z
CVE-2016-10309 
In the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, a remote attacker can bypass authentication by adding an ALBATROSS cookie with the value 0-4-11 to their browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-30T07:00:00.000Z