rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-8618 
The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on systems using 32 bit `size_t` variables.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: The Curl Project
product: curl
Published: 2018-07-31T21:00:00.000Z
CVE-2016-8619 
The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: The Curl Project
product: curl
Published: 2018-08-01T06:00:00.000Z
CVE-2016-8620 
The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled input.
Problem types: cwe_id: CWE-120
description: CWE-120
Affected products: vendor: The Curl Project
product: curl
Published: 2018-08-01T06:00:00.000Z
CVE-2016-8621 
The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: The Curl Project
product: curl
Published: 2018-07-31T22:00:00.000Z
CVE-2016-8622 
The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get either just truncated or both truncated and turned negative. That could then lead to libcurl writing outside of its heap based buffer.
Problem types: cwe_id: CWE-190
description: CWE-190
cwe_id: CWE-122
description: CWE-122
Affected products: vendor: The Curl Project
product: curl
Published: 2018-07-31T21:00:00.000Z
CVE-2016-8623 
A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other threads to trigger a use-after-free leading to information disclosure.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: The Curl Project
product: curl
Published: 2018-08-01T06:00:00.000Z
CVE-2016-8624 
curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '#' character, and could instead be tricked into connecting to a different host. This may have security implications if you for example use an URL parser that follows the RFC to check for allowed domains before using curl to request them.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: The Curl Project
product: curl
Published: 2018-07-31T21:00:00.000Z
CVE-2016-8625 
curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: The Curl Project
product: curl
Published: 2018-08-01T06:00:00.000Z
CVE-2016-8626 
A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: Red Hat
product: Ceph
Published: 2018-07-31T19:00:00.000Z
CVE-2016-8627 
admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download server log files that allows logs to be available via GET requests making them vulnerable to cross-origin attacks. An attacker could trigger the user's browser to request the log files consuming enough resources that normal server functioning could be impaired.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: [UNKNOWN]
product: admin-cli
Published: 2018-05-11T13:00:00.000Z
CVE-2016-8628 
Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as.
Problem types: cwe_id: CWE-77
description: CWE-77
Affected products: vendor: Red Hat
product: Ansible
Published: 2018-07-31T20:00:00.000Z
CVE-2016-8629 
Red Hat Keycloak before version 2.4.0 did not correctly check permissions when handling service account user deletion requests sent to the rest server. An attacker with service account authentication could use this flaw to bypass normal permissions and delete users in a separate realm.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: Red Hat, Inc.
product: Keycloak
Published: 2018-03-12T15:00:00.000Z
CVE-2016-8630 
The x86_decode_insn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service (host OS crash) via a certain use of a ModR/M byte in an undefined instruction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-28T03:01:00.000Z
CVE-2016-8631 
The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with access to create routes can potentially overwrite existing routes and redirect network traffic for other users to their own site.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Red Hat
product: Openshift Enterprise
Published: 2018-07-31T20:00:00.000Z
CVE-2016-8632 
The tipc_msg_build function in net/tipc/msg.c in the Linux kernel through 4.8.11 does not validate the relationship between the minimum fragment length and the maximum packet size, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) by leveraging the CAP_NET_ADMIN capability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-28T03:01:00.000Z
CVE-2016-8633 
drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary code via crafted fragmented packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-28T03:01:00.000Z
CVE-2016-8634 
A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman, if the name contains HTML then the second step of the wizard (/organizations/id/step2) will render the HTML. This occurs in the alertbox on the page. The result is a stored XSS attack if an organization/location with HTML in the name is created, then a user is linked directly to this URL.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: The Foreman Project
product: foreman
Published: 2018-08-01T12:00:00.000Z
CVE-2016-8635 
It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private keys by confining the client DH key to small subgroup of the desired group.
Problem types: cwe_id: CWE-358
description: CWE-358
Affected products: vendor: Mozilla
product: nss
Published: 2018-08-01T13:00:00.000Z
CVE-2016-8636 
Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read request involving the "RDMA protocol over infiniband" (aka Soft RoCE) technology.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-22T16:00:00.000Z
CVE-2016-8637 
A local information disclosure issue was found in dracut before 045 when generating initramfs images with world-readable permissions when 'early cpio' is used, such as when including microcode updates. Local attacker can use this to obtain sensitive information from these files, such as encryption keys or credentials.
Problem types: cwe_id: CWE-732
description: CWE-732
Affected products: vendor: The Dracut Project
product: dracut
Published: 2018-08-01T13:00:00.000Z
CVE-2016-8638 
A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users.  This issue is related to how it tracks sessions, and allows an unauthenticated attacker to view and terminate active sessions from other users. It is also called a "SAML2 multi-session vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-12T13:00:00.000Z
CVE-2016-8639 
It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could allow an attacker with privileges to set the organization or location name to display arbitrary HTML including scripting code within the web interface.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: The Foreman Project
product: foreman
Published: 2018-08-01T13:00:00.000Z
CVE-2016-8640 
A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL (at least) it is possible to perform updates/inserts/deletes and database modifications to any table the database user has access to.
Problem types: cwe_id: CWE-89
description: CWE-89
Affected products: vendor: https://github.com/geopython
product: pycsw
Published: 2018-08-01T18:00:00.000Z
CVE-2016-8641 
A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely changing the ownership afterwards. It's possible for the local attacker to create symbolic links before the files are to be created and possibly escalating the privileges with the ownership change.
Problem types: cwe_id: CWE-59
description: CWE-59
Affected products: vendor: Nagios Enterprises
product: nagios
Published: 2018-08-01T14:00:00.000Z
CVE-2016-8642 
In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.
Problem types: description: unspecified
Affected products: vendor: n/a
product: Moodle 2.x and 3.x
Published: 2017-01-20T08:39:00.000Z
CVE-2016-8643 
In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services.
Problem types: description: unspecified
Affected products: vendor: n/a
product: Moodle 2.x and 3.x
Published: 2017-01-20T08:39:00.000Z
CVE-2016-8644 
In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.
Problem types: description: unspecified
Affected products: vendor: n/a
product: Moodle 2.x and 3.x
Published: 2017-01-20T08:39:00.000Z
CVE-2016-8645 
The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial of service (system crash) via a crafted application that makes sendto system calls, related to net/ipv4/tcp_ipv4.c and net/ipv6/tcp_ipv6.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-28T03:01:00.000Z
CVE-2016-8646 
The hash_accept function in crypto/algif_hash.c in the Linux kernel before 4.3.6 allows local users to cause a denial of service (OOPS) by attempting to trigger use of in-kernel hash algorithms for a socket that has received zero bytes of data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-28T03:01:00.000Z
CVE-2016-8647 
An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Red Hat
product: Ansible
Published: 2018-07-26T14:00:00.000Z
CVE-2016-8648 
It was found that the Karaf container used by Red Hat JBoss Fuse 6.x, and Red Hat JBoss A-MQ 6.x, deserializes objects passed to MBeans via JMX operations. An attacker could use this flaw to execute remote code on the server as the user running the Java Virtual Machine if the target MBean contain deserialization gadgets in its classpath.
Problem types: cwe_id: CWE-502
description: CWE-502
Affected products: vendor: Apache Software Foundation
product: Karaf
Published: 2018-08-01T14:00:00.000Z
CVE-2016-8649 
lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls.
Problem types: description: container bypass
Affected products: vendor: n/a
product: LXC before 1.0.9 and 2.x before 2.0.6
Published: 2017-05-01T06:08:00.000Z
CVE-2016-8650 
The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and panic) via an add_key system call for an RSA key with a zero exponent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-28T03:01:00.000Z
CVE-2016-8651 
An input validation flaw was found in the way OpenShift 3 handles requests for images. A user, with a copy of the manifest associated with an image, can pull an image even if they do not have access to the image normally, resulting in the disclosure of any information contained within the image.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Red Hat
product: OpenShift Enterprise
Published: 2018-08-01T16:00:00.000Z
CVE-2016-8652 
The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without setting a username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-16T18:00:00.000Z
CVE-2016-8653 
It was found that the JMX endpoint of Red Hat JBoss Fuse 6, and Red Hat A-MQ 6 deserializes the credentials passed to it. An attacker could use this flaw to launch a denial of service attack.
Problem types: cwe_id: CWE-502
description: CWE-502
Affected products: vendor: Red Hat
product: Fuse
Published: 2018-08-01T14:00:00.000Z
CVE-2016-8654 
A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected.
Problem types: cwe_id: CWE-122
description: CWE-122
Affected products: vendor: The Jasper Project
product: jasper
Published: 2018-08-01T16:00:00.000Z
CVE-2016-8655 
Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version, related to the packet_set_ring and packet_setsockopt functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-08T08:08:00.000Z
CVE-2016-8656 
Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script which could result in local privilege escalation.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: jboss
product: jbossas
Published: 2018-05-22T17:00:00.000Z
CVE-2016-8657 
It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas configuration files. The file is writable to jboss group (root:jboss, 664). On systems using classic /etc/init.d init scripts (i.e. on Red Hat Enterprise Linux 6 and earlier), the file is sourced by the jboss init script and its content executed with root privileges when jboss service is started, stopped, or restarted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-31T19:00:00.000Z
CVE-2016-8658 
Stack-based buffer overflow in the brcmf_cfg80211_start_ap function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.7.5 allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a long SSID Information Element in a command to a Netlink socket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-16T21:00:00.000Z
CVE-2016-8659 
Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-13T18:00:00.000Z
CVE-2016-8660 
The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-16T21:00:00.000Z
CVE-2016-8661 
Little Snitch version 3.0 through 3.6.1 suffer from a buffer overflow vulnerability that could be locally exploited which could lead to an escalation of privileges (EoP) and unauthorised ring0 access to the operating system. The buffer overflow is related to insufficient checking of parameters to the "OSMalloc" and "copyin" kernel API calls.
Problem types: description: escalation of privileges
Affected products: vendor: n/a
product: Little Snitch version 3.0 through 3.6.1
Published: 2016-11-15T15:00:00.000Z
CVE-2016-8666 
The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4 headers and GRE headers, a related issue to CVE-2016-7039.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-16T21:00:00.000Z
CVE-2016-8667 
The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via a large interval timer reload value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-04T21:00:00.000Z
CVE-2016-8668 
The rocker_io_writel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging failure to limit DMA buffer size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-04T21:00:00.000Z
CVE-2016-8669 
The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving a value of divider greater than baud base.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-04T21:00:00.000Z
CVE-2016-8670 
Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted imagecreatefromstring call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-04T20:00:00.000Z
CVE-2016-8671 
The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-6887.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-13T16:00:00.000Z
CVE-2016-8672 
A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.0.53), SIMATIC CP 443-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.2.17), SIMATIC S7-300 PN/DP CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP CPU family (incl. SIPLUS variants) (All versions). The integrated web server delivers cookies without the "secure" flag. Modern browsers interpreting the flag would mitigate potential data leakage in case of clear text transmission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-23T11:00:00.000Z
CVE-2016-8673 
A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.0.53), SIMATIC CP 443-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.2.17), SIMATIC S7-300 PN/DP CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP CPU family (incl. SIPLUS variants) (All versions). The integrated web server at port 80/TCP or port 443/TCP of the affected devices could allow remote attackers to perform actions with the permissions of an authenticated user, provided the targeted user has an active session and is induced to trigger the malicious request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-23T11:00:00.000Z
CVE-2016-8674 
The pdf_to_num function in pdf-object.c in MuPDF before 1.10 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T21:00:00.000Z
CVE-2016-8675 
The get_vlc2 function in get_bits.h in Libav before 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted mp3 file, possibly related to startcode sequences during m4v detection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T21:00:00.000Z
CVE-2016-8676 
The get_vlc2 function in get_bits.h in Libav 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted mp3 file.  NOTE: this issue exists due to an incomplete fix for CVE-2016-8675.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T21:00:00.000Z
CVE-2016-8677 
The AcquireQuantumPixels function in MagickCore/quantum.c in ImageMagick before 7.0.3-1 allows remote attackers to have unspecified impact via a crafted image file, which triggers a memory allocation failure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T21:00:00.000Z
CVE-2016-8678 
The IsPixelMonochrome function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.0 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted file.  NOTE: the vendor says "This is a Q64 issue and we do not support Q64."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T21:00:00.000Z
CVE-2016-8679 
The _dwarf_get_size_of_val function in libdwarf/dwarf_util.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T21:00:00.000Z
CVE-2016-8680 
The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T21:00:00.000Z