rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-7798 
The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T22:00:00.000Z
CVE-2016-7799 
MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T17:00:00.000Z
CVE-2016-7800 
Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM chunk, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-06T17:00:00.000Z
CVE-2016-7801 
Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to bypass access restrictions to delete other users' To-Dos via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7802 
Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7803 
SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitrary SQL commands via "MultiReport" function.
Problem types: description: SQL Injection
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7804 
Untrusted search path vulnerability in 7 Zip for Windows 16.02 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Igor Pavlov
product: 7 Zip for Windows
Published: 2017-05-22T16:00:00.000Z
CVE-2016-7805 
The mobiGate App for Android version 2.2.1.2 and earlier and mobiGate App for iOS version 2.2.4.1 and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: Fails to verify SSL certificates
Affected products: vendor: Nihon Unisys, Ltd.
product: mobiGate App for Android
vendor: Nihon Unisys, Ltd.
product: mobiGate App for iOS
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7806 
I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: I-O DATA DEVICE, INC.
product: WFS-SR01
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7807 
I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to bypass access restriction to access data on storage devices inserted into the product via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: I-O DATA DEVICE, INC.
product: WFS-SR01
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7808 
Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Corega Inc
product: CG-WLBARGMH
vendor: Corega Inc
product: CG-WLBARGNL
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7809 
Cross-site request forgery (CSRF) vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows remote attackers to hijack the authentication of logged in user to conduct unintended operations via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: Corega Inc
product: CG-WLR300NX
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7810 
Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Corega Inc
product: CG-WLR300NX
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7811 
Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment to bypass access restriction to perform arbitrary operations via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Corega Inc
product: CG-WLR300NX
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7812 
The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to SSL v3.0, which may result in the attacker to eavesdrop on an encrypted communication.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: The Bank of Tokyo-Mitsubishi UFJ, Ltd.
product: The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android
vendor: The Bank of Tokyo-Mitsubishi UFJ, Ltd.
product: The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android
Published: 2017-08-02T16:00:00.000Z
CVE-2016-7813 
Cross-site scripting vulnerability in DERAEMON-CMS version 0.8.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the parameters hostname, database and username.
Problem types: description: Cross-site scripting
Affected products: vendor: TEAM DERAEMONS
product: DERAEMON-CMS
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7814 
I-O DATA DEVICE TS-WRLP firmware version 1.00.01 and earlier and TS-WRLA firmware version 1.00.01 and earlier allow remote attackers to obtain authentication credentials via unspecified vectors.
Problem types: description: Information Disclosure
Affected products: vendor: I-O DATA DEVICE, INC.
product: TS-WRLP
vendor: I-O DATA DEVICE, INC.
product: TS-WRLA
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7815 
Remote Service Manager 3.0.0 to 3.1.4 fails to verify client certificates, which may allow remote attackers to gain access to systems on the network.
Problem types: description: Fails to verify client certificates
Affected products: vendor: Cybozu, Inc.
product: Remote Service Manager
Published: 2017-04-28T16:00:00.000Z
CVE-2016-7816 
The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: Fails to verify SSL certificates
Affected products: vendor: Cybozu, Inc.
product: kintone mobile for Android
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7817 
Cross-site scripting vulnerability in Simple keitai chat 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: LEMON-S PHP
product: Simple keitai chat
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7818 
Untrusted search path vulnerability in Installers for Specification check program (social insurance) Ver. 9.00 and earlier, TODOKESHO print program Ver. 5.00 and earlier, Device data encryption program Ver. 1.00 and earlier, and TODOKESHO creation program Ver. 15.00 and earlier available prior to October 17, 2016 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Japan Pension Service
product: Intstaller for Specification check program(social insurance)
vendor: Japan Pension Service
product: Intstaller for TODOKESHO print program
vendor: Japan Pension Service
product: Intstaller for Device data encryption program
vendor: Japan Pension Service
product: Intstaller for TODOKESHO creation program
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7819 
I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: I-O DATA DEVICE, INC.
product: TS-WRLP
vendor: I-O DATA DEVICE, INC.
product: TS-WRLA
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7820 
Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to cause a denial-of-service (DoS) or execute arbitrary code via unspecified vectors.
Problem types: description: Buffer Overflow
Affected products: vendor: I-O DATA DEVICE, INC.
product: TS-WRLP
vendor: I-O DATA DEVICE, INC.
product: TS-WRLA
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7821 
Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allow remote attackers to cause a denial of service against the management screen via unspecified vectors.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: BUFFALO INC.
product: WNC01WH
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7822 
Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers to hijack the authentication of a logged in user to perform unintended operations via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: BUFFALO INC.
product: WNC01WH
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7823 
Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: BUFFALO INC.
product: WNC01WH
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7824 
Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: BUFFALO INC.
product: WNC01WH
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7825 
Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted commands.
Problem types: description: Directory traversal
Affected products: vendor: BUFFALO INC.
product: WNC01WH
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7826 
Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted POST requests.
Problem types: description: Directory traversal
Affected products: vendor: BUFFALO INC.
product: WNC01WH
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7830 
Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware version prior to Ver.1.22 allow an attacker on the same network segment to bypass authentication to perform administrative operations via unspecified vectors.
Problem types: description: Authentication bypass
Affected products: vendor: Sony Corporation
product: PCS-XG100
vendor: Sony Corporation
product: PCS-XG100S
vendor: Sony Corporation
product: PCS-XG100C
vendor: Sony Corporation
product: PCS-XG77
vendor: Sony Corporation
product: PCS-XG77S
vendor: Sony Corporation
product: PCS-XG77C
vendor: Sony Corporation
product: PCS-XC1
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7831 
Sleipnir 4 Black Edition for Mac 4.5.3 and earlier and Sleipnir 4 for Mac 4.5.3 and earlier (Mac App Store) may allow a remote attacker to spoof the URL display via a specially crafted webpage.
Problem types: description: User Interface (UI) Misrepresentation of Information
Affected products: vendor: Fenrir Inc.
product: Sleipnir 4 Black Edition for Mac
vendor: Fenrir Inc.
product: Sleipnir 4 for Mac
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7832 
Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Dezie
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7833 
Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Dezie
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7834 
SONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC-DH220, SNC-DH220T, SNC-DH260, SNC-EB520, SNC-EM520, SNC-EM521, SNC-ZB550, SNC-ZM550, SNC-ZM551, SNC-EP550, SNC-EP580, SNC-ER550, SNC-ER550C, SNC-ER580, SNC-ER585, SNC-ER585H, SNC-ZP550, SNC-ZR550, SNC-EP520, SNC-EP521, SNC-ER520, SNC-ER521, SNC-ER521C network cameras with firmware before Ver.1.86.00 and SONY SNC-CX600, SNC-CX600W, SNC-EB600, SNC-EB600B, SNC-EB602R, SNC-EB630, SNC-EB630B, SNC-EB632R, SNC-EM600, SNC-EM601, SNC-EM602R, SNC-EM602RC, SNC-EM630, SNC-EM631, SNC-EM632R, SNC-EM632RC, SNC-VB600, SNC-VB600B, SNC-VB600B5, SNC-VB630, SNC-VB6305, SNC-VB6307, SNC-VB632D, SNC-VB635, SNC-VM600, SNC-VM600B, SNC-VM600B5, SNC-VM601, SNC-VM601B, SNC-VM602R, SNC-VM630, SNC-VM6305, SNC-VM6307, SNC-VM631, SNC-VM632R, SNC-WR600, SNC-WR602, SNC-WR602C, SNC-WR630, SNC-WR632, SNC-WR632C, SNC-XM631, SNC-XM632, SNC-XM636, SNC-XM637, SNC-VB600L, SNC-VM600L, SNC-XM631L, SNC-WR602CL network cameras with firmware before Ver.2.7.2 are prone to sensitive information disclosure. This may allow an attacker on the same local network segment to login to the device with administrative privileges and perform operations on the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-13T17:00:00.000Z
CVE-2016-7835 
Use-after-free vulnerability in H2O allows remote attackers to cause a denial-of-service (DoS) or obtain server certificate private keys and possibly other information.
Problem types: description: Use-after-free
Affected products: vendor: Kazuho Oku
product: H2O
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7836 
SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.
Problem types: description: Remote code execution
Affected products: vendor: Sky Co., LTD.
product: SKYSEA Client View
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7837 
Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.
Problem types: description: Buffer Overflow
Affected products: vendor: BlueZ Project
product: BlueZ
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7838 
Untrusted search path vulnerability in WinSparkle versions prior to 0.5.3 allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: WinSparkle
product: WinSparkle
Published: 2017-06-09T16:00:00.000Z
CVE-2016-7839 
Cross-site scripting vulnerability in Olive Blog allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Problem types: description: Cross-site scripting
Affected products: vendor: Olive Design
product: Olive Blog
Published: 2017-04-28T16:00:00.000Z
CVE-2016-7840 
Cross-site scripting vulnerability in WEB SCHEDULE allows remote attackers to inject arbitrary web script or HTML via the month parameter.
Problem types: description: Cross-site scripting
Affected products: vendor: Olive Design
product: WEB SCHEDULE
Published: 2017-04-28T16:00:00.000Z
CVE-2016-7841 
Cross-site scripting vulnerability in Olive Diary DX allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Problem types: description: Cross-site scripting
Affected products: vendor: Olive Design
product: Olive Diary DX
Published: 2017-04-28T16:00:00.000Z
CVE-2016-7842 
Directory traversal vulnerability in AttacheCase 2.8.2.8 and earlier and 3.2.0.4 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file.
Problem types: description: Directory traversal
Affected products: vendor: HiBARA Software
product: AttacheCase
Published: 2017-04-28T16:00:00.000Z
CVE-2016-7843 
Directory traversal vulnerability in AttacheCase for Java 0.60 and earlier, AttacheCase Lite 1.4.6 and earlier, and AttacheCase Pro 1.5.7 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file.
Problem types: description: Directory traversal
Affected products: vendor: MaruUo Factory
product: AttacheCase for Java
vendor: MaruUo Factory
product: AttacheCase Lite
vendor: MaruUo Factory
product: AttacheCase Pro
Published: 2017-04-28T16:00:00.000Z
CVE-2016-7844 
GigaCC OFFICE ver.2.3 and earlier allows remote attackers to execute arbitrary OS commands via specially crafted mail template.
Problem types: description: OS Command Injection
Affected products: vendor: WAM!NET Japan K.K.
product: GigaCC OFFICE
Published: 2017-08-02T16:00:00.000Z
CVE-2016-7845 
GigaCC OFFICE ver.2.3 and earlier allows remote attackers to upload arbitrary files as a user profile image, which may be exploited for unauthorized file sharing.
Problem types: description: Unrestricted Upload of File with Dangerous Type
Affected products: vendor: WAM!NET Japan K.K.
product: GigaCC OFFICE
Published: 2017-08-02T16:00:00.000Z
CVE-2016-7851 
Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks.
Problem types: description: Cross-site scripting
Affected products: vendor: n/a
product: Adobe Connect 9.5.6 and earlier versions
Published: 2016-11-08T17:45:00.000Z
CVE-2016-7852 
Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-6940, CVE-2016-6941, CVE-2016-6942, CVE-2016-6943, CVE-2016-6947, CVE-2016-6948, CVE-2016-6950, CVE-2016-6951, CVE-2016-6954, CVE-2016-6955, CVE-2016-6956, CVE-2016-6959, CVE-2016-6960, CVE-2016-6966, CVE-2016-6970, CVE-2016-6972, CVE-2016-6973, CVE-2016-6974, CVE-2016-6975, CVE-2016-6976, CVE-2016-6977, CVE-2016-6978, CVE-2016-6995, CVE-2016-6996, CVE-2016-6997, CVE-2016-6998, CVE-2016-7000, CVE-2016-7001, CVE-2016-7002, CVE-2016-7003, CVE-2016-7004, CVE-2016-7005, CVE-2016-7006, CVE-2016-7007, CVE-2016-7008, CVE-2016-7009, CVE-2016-7010, CVE-2016-7011, CVE-2016-7012, CVE-2016-7013, CVE-2016-7014, CVE-2016-7015, CVE-2016-7016, CVE-2016-7017, CVE-2016-7018, CVE-2016-7019, CVE-2016-7853, and CVE-2016-7854.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-21T17:00:00.000Z
CVE-2016-7853 
Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-6940, CVE-2016-6941, CVE-2016-6942, CVE-2016-6943, CVE-2016-6947, CVE-2016-6948, CVE-2016-6950, CVE-2016-6951, CVE-2016-6954, CVE-2016-6955, CVE-2016-6956, CVE-2016-6959, CVE-2016-6960, CVE-2016-6966, CVE-2016-6970, CVE-2016-6972, CVE-2016-6973, CVE-2016-6974, CVE-2016-6975, CVE-2016-6976, CVE-2016-6977, CVE-2016-6978, CVE-2016-6995, CVE-2016-6996, CVE-2016-6997, CVE-2016-6998, CVE-2016-7000, CVE-2016-7001, CVE-2016-7002, CVE-2016-7003, CVE-2016-7004, CVE-2016-7005, CVE-2016-7006, CVE-2016-7007, CVE-2016-7008, CVE-2016-7009, CVE-2016-7010, CVE-2016-7011, CVE-2016-7012, CVE-2016-7013, CVE-2016-7014, CVE-2016-7015, CVE-2016-7016, CVE-2016-7017, CVE-2016-7018, CVE-2016-7019, CVE-2016-7852, and CVE-2016-7854.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-21T17:00:00.000Z
CVE-2016-7854 
Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-6940, CVE-2016-6941, CVE-2016-6942, CVE-2016-6943, CVE-2016-6947, CVE-2016-6948, CVE-2016-6950, CVE-2016-6951, CVE-2016-6954, CVE-2016-6955, CVE-2016-6956, CVE-2016-6959, CVE-2016-6960, CVE-2016-6966, CVE-2016-6970, CVE-2016-6972, CVE-2016-6973, CVE-2016-6974, CVE-2016-6975, CVE-2016-6976, CVE-2016-6977, CVE-2016-6978, CVE-2016-6995, CVE-2016-6996, CVE-2016-6997, CVE-2016-6998, CVE-2016-7000, CVE-2016-7001, CVE-2016-7002, CVE-2016-7003, CVE-2016-7004, CVE-2016-7005, CVE-2016-7006, CVE-2016-7007, CVE-2016-7008, CVE-2016-7009, CVE-2016-7010, CVE-2016-7011, CVE-2016-7012, CVE-2016-7013, CVE-2016-7014, CVE-2016-7015, CVE-2016-7016, CVE-2016-7017, CVE-2016-7018, CVE-2016-7019, CVE-2016-7852, and CVE-2016-7853.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-21T17:00:00.000Z
CVE-2016-7855 
Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-01T22:46:00.000Z
CVE-2016-7856 
Adobe DNG Converter versions 9.7 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Memory Corruption
Affected products: vendor: n/a
product: Adobe DNG Converter 9.7 and earlier
Published: 2016-12-15T06:31:00.000Z
CVE-2016-7857 
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use after free
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier
Published: 2016-11-08T17:45:00.000Z
CVE-2016-7858 
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use after free
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier
Published: 2016-11-08T17:45:00.000Z
CVE-2016-7859 
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use after free
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier
Published: 2016-11-08T17:45:00.000Z
CVE-2016-7860 
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Type Confusion
Affected products: vendor: n/a
product: Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier
Published: 2016-11-08T17:45:00.000Z