rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-7861 
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Type Confusion
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier
Published: 2016-11-08T17:45:00.000Z
CVE-2016-7862 
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use after free
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier
Published: 2016-11-08T17:45:00.000Z
CVE-2016-7863 
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use after free
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier
Published: 2016-11-08T17:45:00.000Z
CVE-2016-7864 
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use after free
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier
Published: 2016-11-08T17:45:00.000Z
CVE-2016-7865 
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Type Confusion
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier
Published: 2016-11-08T17:45:00.000Z
CVE-2016-7866 
Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Memory Corruption
Affected products: vendor: n/a
product: Adobe Animate 15.2.1.95 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7867 
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to bookmarking in searches. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Buffer Overflow / Underflow
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7868 
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to alternation functionality. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Buffer Overflow / Underflow
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7869 
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to backtrack search functionality. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Buffer Overflow / Underflow
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7870 
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class for specific search strategies. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Buffer Overflow / Underflow
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7871 
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Worker class. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Memory Corruption
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7872 
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClip class related to objects at multiple presentation levels. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7873 
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the PSDK class related to ad policy functionality method. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Memory Corruption
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7874 
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the NetConnection class when handling the proxy types. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Memory Corruption
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7875 
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow vulnerability in the BitmapData class. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Integer Overflow
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7876 
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Clipboard class related to data handling functionality. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Memory Corruption
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7877 
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the Action Message Format serialization (AFM0). Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7878 
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the PSDK's MediaPlayer class. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7879 
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the NetConnection class when handling an attached script object. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7880 
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability when setting the length property of an array object. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7881 
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClip class when handling conversion to an object. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7882 
Adobe Experience Manager versions 6.2 and earlier have an input validation issue in the WCMDebug filter that could be used in cross-site scripting attacks.
Problem types: description: Cross Site Scripting
Affected products: vendor: n/a
product: Adobe Experience Manager 6.2 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7883 
Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attacks.
Problem types: description: Cross Site Scripting
Affected products: vendor: n/a
product: Adobe Experience Manager 6.2
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7884 
Adobe Experience Manager versions 6.1 and earlier have an input validation issue in the DAM create assets that could be used in cross-site scripting attacks.
Problem types: description: Cross Site Scripting
Affected products: vendor: n/a
product: Adobe Experience Manager 6.1 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7885 
Adobe Experience Manager versions 6.2 and earlier have a vulnerability that could be used in Cross-Site Request Forgery attacks.
Problem types: description: Cross Site Request Frogery
Affected products: vendor: n/a
product: Adobe Experience Manager 6.2 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7886 
Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Memory Corruption
Affected products: vendor: n/a
product: Adobe InDesign 11.4.1 and earlier, InDesign Server 11.0.0 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7887 
Adobe ColdFusion Builder versions 2016 update 2 and earlier, 3.0.3 and earlier have an important vulnerability that could lead to information disclosure.
Problem types: description: Weak Encryption
Affected products: vendor: n/a
product: Adobe ColdFusion Builder 2016 update 2 and earlier, 3.0.3 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7888 
Adobe Digital Editions versions 4.5.2 and earlier has an important vulnerability that could lead to memory address leak.
Problem types: description: Memory Leak
Affected products: vendor: n/a
product: Adobe Digital Editions 4.5.2 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7889 
Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that could lead to information disclosure.
Problem types: description: Code Injection
Affected products: vendor: n/a
product: Adobe Digital Editions 4.5.2 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7890 
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of the same origin policy.
Problem types: description: Security Bypass
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7891 
Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used in cross-site scripting attacks.
Problem types: description: Cross Site Scripting
Affected products: vendor: n/a
product: Adobe RoboHelp 2015.0.3 and earlier, RoboHelp 11 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7892 
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7902 
Unrestricted file upload vulnerability in the fileUnzip->unzip method in Dotclear before 2.10.3 allows remote authenticated users with permissions to manage media items to execute arbitrary code by uploading a ZIP file containing a file with a crafted extension, as demonstrated by .php.txt or .php%20.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-04T21:00:00.000Z
CVE-2016-7903 
Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-04T21:00:00.000Z
CVE-2016-7904 
Cross-site request forgery (CSRF) vulnerability in CMS Made Simple before 2.1.6 allows remote attackers to hijack the authentication of administrators for requests that create accounts via an admin/adduser.php request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-16T06:00:00.000Z
CVE-2016-7905 
The read_gab2_sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (NULL pointer used) via a crafted AVI file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-23T05:00:00.000Z
CVE-2016-7906 
magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service (use-after-free) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T17:00:00.000Z
CVE-2016-7907 
The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T16:00:00.000Z
CVE-2016-7908 
The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T16:00:00.000Z
CVE-2016-7909 
The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) transmit descriptor ring length to 0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T16:00:00.000Z
CVE-2016-7910 
Use-after-free vulnerability in the disk_seqf_stop function in block/genhd.c in the Linux kernel before 4.7.1 allows local users to gain privileges by leveraging the execution of a certain stop operation even if the corresponding start operation had failed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-16T04:49:00.000Z
CVE-2016-7911 
Race condition in the get_task_ioprio function in block/ioprio.c in the Linux kernel before 4.6.6 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted ioprio_get system call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-16T04:49:00.000Z
CVE-2016-7912 
Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-16T04:49:00.000Z
CVE-2016-7913 
The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) via vectors involving omission of the firmware name from a certain data structure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-16T04:49:00.000Z
CVE-2016-7914 
The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.5.3 does not check whether a slot is a leaf, which allows local users to obtain sensitive information from kernel memory or cause a denial of service (invalid pointer dereference and out-of-bounds read) via an application that uses associative-array data structures, as demonstrated by the keyutils test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-16T04:49:00.000Z
CVE-2016-7915 
The hid_input_field function in drivers/hid/hid-core.c in the Linux kernel before 4.6 allows physically proximate attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) by connecting a device, as demonstrated by a Logitech DJ receiver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-16T04:49:00.000Z
CVE-2016-7916 
Race condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a /proc/*/environ file during a process-setup time interval in which environment-variable copying is incomplete.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-16T04:49:00.000Z
CVE-2016-7917 
The nfnetlink_rcv_batch function in net/netfilter/nfnetlink.c in the Linux kernel before 4.5 does not check whether a batch message's length field is large enough, which allows local users to obtain sensitive information from kernel memory or cause a denial of service (infinite loop or out-of-bounds read) by leveraging the CAP_NET_ADMIN capability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-16T04:49:00.000Z
CVE-2016-7919 
Moodle 3.1.2 allows remote attackers to obtain sensitive information via unspecified vectors, related to a "SQL Injection" issue affecting the Administration panel function in the installation process component.  NOTE: the vendor disputes the relevance of this report, noting that "the person who is installing Moodle must know database access credentials and they can access the database directly; there is no need for them to create a SQL injection in one of the installation dialogue fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-28T15:00:00.000Z
CVE-2016-7922 
The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7923 
The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7924 
The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7925 
The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:sl_if_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7926 
The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertype_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7927 
The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802_11.c:ieee802_11_radio_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7928 
The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7929 
The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniper_parse_header().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7930 
The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7931 
The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7932 
The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7933 
The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_hdlc_if_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7934 
The RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtcp_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7935 
The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtp_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7936 
The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udp_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7937 
The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7938 
The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1_print_frame().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7939 
The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7940 
The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-28T01:33:00.000Z
CVE-2016-7942 
The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, which triggers out-of-bounds read operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-13T20:00:00.000Z