rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-8452 
An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32506396. References: QC-CR#1050323.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8453 
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-24739315. References: B-RB#73392.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8454 
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32174590. References: B-RB#107142.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android Kernel-3.10 Kernel-3.18
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8455 
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-32219121. References: B-RB#106311.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8456 
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32219255. References: B-RB#105580.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8457 
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32219453. References: B-RB#106116.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8458 
An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31968442.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8459 
Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead to buffer overflow. Product: Android. Versions: Kernel 3.18. Android ID: A-32577972. References: QC-CR#988462.
Problem types: description: Buffer Overflow
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8460 
An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10. Android ID: A-31668540. References: N-CVE-2016-8460.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8461 
An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as High because it could be used to access sensitive data. Product: Android. Versions: Kernel-3.18. Android ID: A-32369621.
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Android Kernel-3.18
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8462 
An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as High because it could be used to access sensitive data. Product: Android. Versions: N/A. Android ID: A-32510383.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8463 
A denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-30786860. References: QC-CR#586855.
Problem types: description: Denial of service
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8464 
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-29000183. References: B-RB#106314.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8465 
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32474971. References: B-RB#106053.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8466 
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31822524. References: B-RB#105268.
Problem types: description: Elevation of privilege
Affected products: vendor: n/a
product: Android Kernel-3.10 Kernel-3.18
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8467 
An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. This issue is rated as High because it is a local permanent denial of service (device interoperability: completely permanent or requiring re-flashing the entire operating system). Product: Android. Versions: N/A. Android ID: A-30308784.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-13T16:00:00.000Z
CVE-2016-8468 
An elevation of privilege vulnerability in Binder could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: Kernel-3.18. Android ID: A-32394425.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8469 
An information disclosure vulnerability in the camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31351206. References: N-CVE-2016-8469.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8470 
An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31528889. References: MT-ALPS02961395.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8471 
An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31528890. References: MT-ALPS02961380.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8472 
An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31531758. References: MT-ALPS02961384.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8473 
An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31795790.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8474 
An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31799972.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8475 
An information disclosure vulnerability in the HTC input driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32591129.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-01-12T20:00:00.000Z
CVE-2016-8476 
An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32879283. References: QC-CR#1091940.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-02-08T15:00:00.000Z
CVE-2016-8477 
An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32720522. References: QC-CR#1090007.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-03-08T01:00:00.000Z
CVE-2016-8478 
An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32511270. References: QC-CR#1088206.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-03-08T01:00:00.000Z
CVE-2016-8479 
An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31824853. References: QC-CR#1093687.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-03-08T01:00:00.000Z
CVE-2016-8480 
An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31804432. References: QC-CR#1086186.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-02-08T15:00:00.000Z
CVE-2016-8481 
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31906415. References: QC-CR#1078000.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2017-02-08T15:00:00.000Z
CVE-2016-8482 
An elevation of privilege vulnerability in the NVIDIA GPU driver. Product: Android. Versions: Android kernel. Android ID: A-31799863. References: N-CVE-2016-8482.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-05T18:00:00.000Z
CVE-2016-8483 
An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10. Android ID: A-33745862. References: QC-CR#1035099.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2017-03-08T01:00:00.000Z
CVE-2016-8484 
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823575.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2016-8485 
An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823681.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2016-8486 
An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823691.
Problem types: description: Information disclosure
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2016-8487 
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823724.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-04T18:00:00.000Z
CVE-2016-8488 
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-31625756.
Problem types: description: Elevation of privilege
Affected products: vendor: Google Inc.
product: Android
Published: 2018-04-04T18:00:00.000Z
CVE-2016-8491 
The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell.
Problem types: description: Remote shell access
Affected products: vendor: Fortinet
product: Fortinet FortiWLC
Published: 2017-02-01T17:00:00.000Z
CVE-2016-8492 
The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the device via IPSec/TLS decryption.
Problem types: description: Disclosure of information
Affected products: vendor: Fortinet
product: Fortinet FortiGate
Published: 2017-02-08T16:00:00.000Z
CVE-2016-8493 
In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability.
Problem types: description: Privilege escalation
Affected products: vendor: Fortinet
product: Fortinet FortiClient
Published: 2017-06-26T17:00:00.000Z
CVE-2016-8494 
Insufficient verification of uploaded files allows attackers with webui administrators privileges to perform arbitrary code execution by uploading a new webui theme.
Problem types: description: Privilege escalation
Affected products: vendor: Fortinet
product: Fortinet Connect
Published: 2017-02-09T15:00:00.000Z
CVE-2016-8495 
An improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1 allows remote attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack via the Fortisandbox devices probing feature.
Problem types: description: Credentials exposure
Affected products: vendor: Fortinet
product: FortiManager
Published: 2017-02-13T15:00:00.000Z
CVE-2016-8501 
Security WiFi bypass in Yandex Browser from version 15.10 to 15.12 allows remote attacker to sniff traffic in open or WEP-protected wi-fi networks despite of special security mechanism is enabled.
Problem types: description: Security WiFi bypass
Affected products: vendor: n/a
product: Yandex Browser for desktop Versions from 15.10 to 15.12
Published: 2016-10-26T18:00:00.000Z
CVE-2016-8502 
Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.
Problem types: description: Password brute-force through Yandex Protect Anti-phishing message
Affected products: vendor: Yandex N.V.
product: Yandex Browser for desktop
Published: 2016-10-26T18:00:00.000Z
CVE-2016-8503 
Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript.
Problem types: description: Password brute-force through Yandex Protect Anti-phishing message
Affected products: vendor: Yandex N.V.
product: Yandex Browser for desktop
Published: 2016-10-26T18:00:00.000Z
CVE-2016-8504 
CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in browser profile.
Problem types: description: Profile synchronization form CSRF
Affected products: vendor: Yandex N.V.
product: Yandex Browser for desktop
Published: 2016-10-26T18:00:00.000Z
CVE-2016-8505 
XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code.
Problem types: description: Yandex Browser BookReader XSS
Affected products: vendor: Yandex N.V.
product: Yandex Browser for desktop
Published: 2016-10-26T18:00:00.000Z
CVE-2016-8506 
XSS in Yandex Browser Translator in Yandex browser for desktop for versions from 15.12 to 16.2 could be used by remote attacker for evaluation arbitrary javascript code.
Problem types: description: Yandex Browser Translater XSS
Affected products: vendor: Yandex N.V.
product: Yandex Browser for desktop
Published: 2016-10-26T18:00:00.000Z
CVE-2016-8507 
Yandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime:// URLs, which allows remote attackers to initiate facetime-call without user's approval and obtain video and audio data from a device via a crafted web site.
Problem types: description: Insecure pocessing of facetime URL schemes
Affected products: vendor: Yandex N.V.
product: Yandex Browser for iOS
Published: 2017-03-01T15:00:00.000Z
CVE-2016-8508 
Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site.
Problem types: description: Yandex Browser Protect mechanism bypass
Affected products: vendor: Yandex N.V.
product: Yandex Browser for desktop
Published: 2017-03-01T15:00:00.000Z
CVE-2016-8511 
A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20 was found.
Problem types: description: Remote Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: Network Automation
Published: 2018-02-15T22:00:00.000Z
CVE-2016-8512 
A Remote Code Execution vulnerability in all versions of HPE LoadRunner and Performance Center was found.
Problem types: description: Remote Code Execution
Affected products: vendor: Hewlett Packard Enterprise
product: LoadRunner and Performance Center
Published: 2018-02-15T22:00:00.000Z
CVE-2016-8513 
A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.
Problem types: description: CSRF
Affected products: vendor: Hewlett Packard Enterprise
product: Version Control Repository Manager (VCRM)
Published: 2018-02-15T22:00:00.000Z
CVE-2016-8514 
A remote information disclosure in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.
Problem types: description: remote information disclosure
Affected products: vendor: Hewlett Packard Enterprise
product: Version Control Repository Manager (VCRM)
Published: 2018-02-15T22:00:00.000Z
CVE-2016-8515 
A remote malicious file upload vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.
Problem types: description: remote malicious file upload
Affected products: vendor: Hewlett Packard Enterprise
product: Version Control Repository Manager (VCRM)
Published: 2018-02-15T22:00:00.000Z