rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-7462 
The Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload that is mishandled during deserialization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-29T09:02:00.000Z
CVE-2016-7463 
Cross-site scripting (XSS) vulnerability in the Host Client in VMware vSphere Hypervisor (aka ESXi) 5.5 and 6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted VM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-29T09:02:00.000Z
CVE-2016-7466 
Memory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when the xhci uses msix, allows local guest OS administrators to cause a denial of service (memory consumption and possibly QEMU process crash) by repeatedly unplugging a USB device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-10T00:00:00.000Z
CVE-2016-7467 
The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider (SP) connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an authenticated user is sent via the SP connector.
Problem types: description: TMM SSO plugin
Affected products: vendor: F5 Networks
product: F5 BIG-IP APM
Published: 2017-04-11T14:00:00.000Z
CVE-2016-7468 
An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system's tm.tcpprogressive db variable value is set to non-default setting "enabled". The default value for the tm.tcpprogressive db variable is "negotiate". An attacker may be able to disrupt traffic or cause the BIG-IP system to fail over to another device in the device group.
Problem types: description: denial of service
Affected products: vendor: F5 Networks
product: F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, PEM, PSM,
Published: 2017-03-23T14:00:00.000Z
CVE-2016-7469 
A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 12.1.2, 11.4.0 - 11.6.1, and 11.2.1 allows an authenticated user to inject arbitrary web script or HTML. Exploitation requires Resource Administrator or Administrator privileges, and it could cause the Configuration utility client to become unstable.
Problem types: description: cross-site scripting (XSS)
Affected products: vendor: F5 Networks, Inc.
product: BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM,WebAccelerator,WOM,WebSafe
Published: 2017-06-09T15:00:00.000Z
CVE-2016-7472 
F5 BIG-IP ASM version 12.1.0 - 12.1.1 may allow remote attackers to cause a denial of service (DoS) via a crafted HTTP request.
Problem types: description: BIG-IP ASM vulnerability
Affected products: vendor: F5 Networks, Inc.
product: BIG-IP ASM
Published: 2018-04-03T13:00:00.000Z
CVE-2016-7474 
In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally unrecoverable information.
Problem types: description: MCPD data on disk may expose sensitive parameters
Affected products: vendor: F5 Networks
product: F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM
Published: 2017-03-27T15:00:00.000Z
CVE-2016-7475 
Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkernel (TMM) may not properly clean-up pool member network connections when using SPDY or HTTP/2 virtual server profiles.
Problem types: description: DoS
Affected products: vendor: F5 Networks, Inc.
product: BIG-IP
Published: 2018-10-08T19:00:00.000Z
CVE-2016-7476 
The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link Controller, PEM, PSM, and WebSafe 11.6.0 before 11.6.0 HF6, 11.5.0 before 11.5.3 HF2, and 11.3.0 before 11.4.1 HF10 may suffer from a memory leak while handling certain types of TCP traffic. Remote attackers may cause a denial of service (DoS) by way of a crafted TCP packet.
Problem types: description: Traffic Management Microkernel (TMM) memory leak
Affected products: vendor: F5 Networks, Inc.
product: BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link Controller, PEM, PSM, WebSafe
Published: 2017-05-11T16:00:00.000Z
CVE-2016-7477 
The ff_put_pixels8_xy2_mmx function in rnd_template.c in Libav 11.7 allows remote attackers to cause a denial of service (invalid memory access and crash) via a crafted mp3 file.  NOTE: this issue was originally reported as involving a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T21:00:00.000Z
CVE-2016-7478 
Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.
Problem types: description: infinite loop
Affected products: vendor: n/a
product: PHP before 5.6.28
Published: 2017-01-11T06:02:00.000Z
CVE-2016-7479 
In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-after-free. A remote attacker may exploit this bug to gain arbitrary code execution.
Problem types: description: Remote Code Execution
Affected products: vendor: n/a
product: PHP 7.x
Published: 2017-01-12T00:00:00.000Z
CVE-2016-7480 
The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12 does not verify that a key is an object, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access) via crafted serialized data.
Problem types: description: missing data-type validation
Affected products: vendor: n/a
product: PHP before 7.0.12
Published: 2017-01-11T06:45:00.000Z
CVE-2016-7488 
Teradata Virtual Machine Community Edition v15.10 has insecure file permissions on /etc/luminex/pkgmgr. These could allow a local user to modify its contents and execute commands as root.
Problem types: description: perm
Affected products: vendor: Teradata
product: Virtual Machine Community Edition
Published: 2016-11-10T16:00:00.000Z
CVE-2016-7489 
Teradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl creates files in /tmp in an insecure manner, this may lead to elevated code execution.
Problem types: description: perm
Affected products: vendor: Teradata
product: Virtual Machine Community Edition
Published: 2016-11-10T16:00:00.000Z
CVE-2016-7490 
The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. A malicious local user could create a symlink in /tmp and possibly clobber system files or perhaps elevate privileges.
Problem types: description: symlink
Affected products: vendor: Teradata
product: Studio Express
Published: 2016-11-10T16:00:00.000Z
CVE-2016-7498 
OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state.  NOTE: this vulnerability exists because of a CVE-2015-3280 regression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-27T15:00:00.000Z
CVE-2016-7499 
The sbr_make_f_master function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp3 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T21:00:00.000Z
CVE-2016-7502 
The cavs_idct8_add_c function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavs_decode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-23T05:00:00.000Z
CVE-2016-7504 
A use-after-free vulnerability was observed in Rp_toString function of Artifex Software, Inc. MuJS before 5c337af4b3df80cf967e4f9f6a21522de84b392a. A successful exploitation of this issue can lead to code execution or denial of service condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-29T01:00:00.000Z
CVE-2016-7505 
A buffer overflow vulnerability was observed in divby function of Artifex Software, Inc. MuJS before 8c805b4eb19cf2af689c860b77e6111d2ee439d5. A successful exploitation of this issue can lead to code execution or denial of service condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-29T01:00:00.000Z
CVE-2016-7506 
An out-of-bounds read vulnerability was observed in Sp_replace_regexp function of Artifex Software, Inc. MuJS before 5000749f5afe3b956fc916e407309de840997f4a. A successful exploitation of this issue can lead to code execution or denial of service condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-29T01:00:00.000Z
CVE-2016-7507 
Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an admin account in the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T13:00:00.000Z
CVE-2016-7508 
Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-21T20:00:00.000Z
CVE-2016-7509 
Cross-site scripting (XSS) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to inject arbitrary web script or HTML by attaching a crafted HTML file to a ticket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T13:00:00.000Z
CVE-2016-7510 
The read_line_table_program function in dwarf_line_table_reader_common.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-17T17:00:00.000Z
CVE-2016-7511 
Integer overflow in the dwarf_die_deliv.c in libdwarf 20160613 allows remote attackers to cause a denial of service (crash) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-17T17:00:00.000Z
CVE-2016-7513 
Off-by-one error in magick/cache.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z
CVE-2016-7514 
The ReadPSDChannelPixels function in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z
CVE-2016-7515 
The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the number of pixels.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T14:00:00.000Z
CVE-2016-7516 
The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted VIFF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z
CVE-2016-7517 
The EncodeImage function in coders/pict.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PICT file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z
CVE-2016-7518 
The ReadSUNImage function in coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SUN file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z
CVE-2016-7519 
The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T14:00:00.000Z
CVE-2016-7520 
Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted HDR file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z
CVE-2016-7521 
Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z
CVE-2016-7522 
The ReadPSDImage function in MagickCore/locale.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T14:00:00.000Z
CVE-2016-7523 
coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
Problem types: description: Buffer Overflow
Affected products: vendor: ImageMagick
product: ImageMagick
Published: 2020-02-06T13:37:33.000Z
CVE-2016-7524 
coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
Problem types: description: Other
Affected products: vendor: ImageMagick
product: ImageMagick
Published: 2020-02-06T13:37:34.000Z
CVE-2016-7525 
Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z
CVE-2016-7526 
coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z
CVE-2016-7527 
coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z
CVE-2016-7528 
The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted VIFF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T14:00:00.000Z
CVE-2016-7529 
coders/xcf.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted XCF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T14:00:00.000Z
CVE-2016-7530 
The quantum handling code in ImageMagick allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds write) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z
CVE-2016-7531 
MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PDB file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T14:00:00.000Z
CVE-2016-7532 
coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z
CVE-2016-7533 
The ReadWPGImage function in coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WPG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T14:00:00.000Z
CVE-2016-7534 
The generic decoder in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z
CVE-2016-7535 
coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PSD file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z
CVE-2016-7536 
magick/profile.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z
CVE-2016-7537 
MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted PDB file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T14:00:00.000Z
CVE-2016-7538 
coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z
CVE-2016-7539 
Memory leak in AcquireVirtualMemory in ImageMagick before 7 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T14:00:00.000Z
CVE-2016-7540 
coders/rgf.c in ImageMagick before 6.9.4-10 allows remote attackers to cause a denial of service (assertion failure) by converting an image to rgf format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z
CVE-2016-7541 
Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mode) are not affected.
Problem types: description: Protection bypass
Affected products: vendor: Fortinet
product: FortiOS
Published: 2017-03-30T14:00:00.000Z
CVE-2016-7542 
A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x before 5.4.2 GA may have access to read-write administrators password hashes (not including super-admins) stored on the appliance via the webui REST API, and may therefore be able to crack them.
Problem types: description: Information leak
Affected products: vendor: Fortinet
product: FortiOS
Published: 2017-03-30T14:00:00.000Z
CVE-2016-7543 
Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-19T20:00:00.000Z
CVE-2016-7544 
Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based _malloca and _freea functions. The library will request a block of memory to align a table in memory. If the table is later reallocated, then the wrong pointer could be freed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T21:00:00.000Z
CVE-2016-7545 
SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-19T20:00:00.000Z
CVE-2016-7547 
A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.cgi interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T10:00:00.000Z
CVE-2016-7549 
Google Chrome before 53.0.2785.113 does not ensure that the recipient of a certain IPC message is a valid RenderFrame or RenderWidget, which allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) or possibly have unspecified other impact by leveraging access to a renderer process, related to render_frame_host_impl.cc and render_widget_host_impl.cc, as demonstrated by a Password Manager message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-25T20:00:00.000Z
CVE-2016-7550 
asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service (remote).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-23T18:23:59.000Z
CVE-2016-7551 
chain_sip in Asterisk Open Source 11.x before 11.23.1 and 13.x 13.11.1 and Certified Asterisk 11.6 before 11.6-cert15 and 13.8 before 13.8-cert3 allows remote attackers to cause a denial of service (port exhaustion).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-17T16:00:00.000Z
CVE-2016-7552 
On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cause a DoS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-12T10:00:00.000Z
CVE-2016-7553 
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-27T22:00:00.000Z
CVE-2016-7555 
The avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-23T05:00:00.000Z
CVE-2016-7560 
The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read or write to arbitrary files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T16:00:00.000Z
CVE-2016-7561 
Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by reading the pam.log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-05T16:00:00.000Z
CVE-2016-7562 
The ff_draw_pc_font function in libavcodec/cga_data.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (buffer overflow) via a crafted AVI file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-23T05:00:00.000Z
CVE-2016-7563 
The chartorune function in Artifex Software MuJS allows attackers to cause a denial of service (out-of-bounds read) via a * (asterisk) at the end of the input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T17:00:00.000Z