rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-9588 
arch/x86/kvm/vmx.c in the Linux kernel through 4.9 mismanages the #BP and #OF exceptions, which allows guest OS users to cause a denial of service (guest OS crash) by declining to handle an exception thrown by an L2 guest.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-28T07:42:00.000Z
CVE-2016-9589 
Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service. Undertow keeps a cache of seen HTTP headers in persistent connections. It was found that this cache can easily exploited to fill memory with garbage, up to "max-headers" (default 200) * "max-header-size" (default 1MB) per active TCP connection.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: Red Hat, Inc.
product: wildfly
Published: 2018-03-12T15:00:00.000Z
CVE-2016-9590 
puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage (swift). During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf file with world-readable permissions.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: unspecified
product: puppet-swift
Published: 2018-04-26T17:00:00.000Z
CVE-2016-9591 
JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: JasPer Project
product: jasper
Published: 2018-03-09T20:00:00.000Z
CVE-2016-9592 
openshift before versions 3.3.1.11, 3.2.1.23, 3.4 is vulnerable to a flaw when a volume fails to detach, which causes the delete operation to fail with 'VolumeInUse' error. Since the delete operation is retried every 30 seconds for each volume, this could lead to a denial of service attack as the number of API requests being sent to the cloud-provider exceeds the API's rate-limit.
Problem types: cwe_id: CWE-460
description: CWE-460
Affected products: vendor: unspecified
product: openshift
Published: 2018-04-16T14:00:00.000Z
CVE-2016-9593 
foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging. An attacker with access to the foreman log file would be able to view passwords, allowing them to access those systems.
Problem types: cwe_id: CWE-522
description: CWE-522
Affected products: vendor: unspecified
product: foreman-debug
Published: 2018-04-16T14:00:00.000Z
CVE-2016-9594 
curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function that returns a good 32bit random value.  Having a weak or virtually non-existent random value makes the operations that use it vulnerable.
Problem types: cwe_id: CWE-665
description: CWE-665
Affected products: vendor: unspecified
product: curl
Published: 2018-04-23T19:00:00.000Z
CVE-2016-9595 
A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.
Problem types: cwe_id: CWE-377
description: CWE-377
Affected products: vendor: Foreman
product: katello-debug
Published: 2018-07-27T18:00:00.000Z
CVE-2016-9596 
libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML document.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-3627.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-16T20:00:00.000Z
CVE-2016-9597 
It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for the same issue as CVE-2016-3705.
Problem types: cwe_id: CWE-674
description: CWE-674
Affected products: vendor: Red Hat
product: libxml2
Published: 2018-07-30T14:00:00.000Z
CVE-2016-9598 
libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted XML document. NOTE: this vulnerability exists because of a missing fix for CVE-2016-4483.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-16T20:00:00.000Z
CVE-2016-9599 
puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, which allowed the creation of TCP/UDP rules with empty port values. If SSL is enabled, a malicious user could use these open ports to gain access to unauthorized resources.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: unspecified
product: puppet-tripleo
Published: 2018-04-23T21:00:00.000Z
CVE-2016-9600 
JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: JasPer
product: jasper
Published: 2018-03-12T15:00:00.000Z
CVE-2016-9601 
ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2_decode_gray_scale_image function which is used to decode halftone segments in a JBIG2 image. A document (PostScript or PDF) with an embedded, specially crafted, jbig2 image could trigger a segmentation fault in ghostscript.
Problem types: cwe_id: CWE-190
description: CWE-190->CWE-122
Affected products: vendor: unspecified
product: ghostscript
Published: 2018-04-23T21:00:00.000Z
CVE-2016-9602 
Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.
Problem types: cwe_id: CWE-59
description: CWE-59
Affected products: vendor: unspecified
product: Qemu
Published: 2018-04-26T19:00:00.000Z
CVE-2016-9603 
A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process.
Problem types: cwe_id: CWE-122
description: CWE-122
Affected products: vendor: QEMU
product: Qemu:
Published: 2018-07-27T21:00:00.000Z
CVE-2016-9604 
It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or '.builtin_trusted_keys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyring.
Problem types: cwe_id: CWE-732
description: CWE-732
Affected products: vendor: kernel
product: security
Published: 2018-07-11T13:00:00.000Z
CVE-2016-9605 
A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installation.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: The cobbler Project
product: cobbler
Published: 2018-08-22T21:00:00.000Z
CVE-2016-9606 
JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy application permissions.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Red Hat, Inc.
product: RESTEasy
Published: 2018-03-09T20:00:00.000Z
CVE-2016-9622 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9623 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9624 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9625 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9626 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9627 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (heap buffer overflow and crash) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9628 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9629 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9630 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (global buffer overflow and crash) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9631 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9632 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (global buffer overflow and crash) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9633 
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (infinite loop and resource consumption) via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-12T02:00:00.000Z
CVE-2016-9634 
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via the start_line parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-27T22:01:00.000Z
CVE-2016-9635 
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-27T22:01:00.000Z
CVE-2016-9636 
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'write count' that goes beyond the initialized buffer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-27T22:01:00.000Z
CVE-2016-9637 
The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow local x86 HVM guest OS administrators to gain qemu process privileges via vectors involving an out-of-range ioport access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-16T18:00:00.000Z
CVE-2016-9638 
In BMC Patrol before 9.13.10.02, the binary "listguests64" is configured with the setuid bit. However, when executing it, it will look for a binary named "virsh" using the PATH environment variable. The "listguests64" program will then run "virsh" using root privileges. This allows local users to elevate their privileges to root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-02T17:00:00.000Z
CVE-2016-9639 
Salt before 2015.8.11 allows deleted minions to read or write to minions with the same id, related to caching.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-07T17:00:00.000Z
CVE-2016-9642 
JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted Javascript file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-03T15:00:00.000Z
CVE-2016-9643 
The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service (memory consumption) as demonstrated in a large number of ($ (open parenthesis and dollar) followed by {-2,16} and a large number of +) (plus close parenthesis).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-07T16:00:00.000Z
CVE-2016-9644 
The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel 4.4.22 through 4.4.28 contains extended asm statements that are incompatible with the exception table, which allows local users to obtain root access on non-SMEP platforms via a crafted application.  NOTE: this vulnerability exists because of incorrect backporting of the CVE-2016-9178 patch to older kernels.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-11-28T03:01:00.000Z
CVE-2016-9645 Editing restriction bypass for git revert
The fix for ikiwiki for CVE-2016-10026 was incomplete resulting in editing restriction bypass for git revert when using git versions older than 2.8.0. This has been fixed in 3.20161229.
Problem types: description: restriction bypass
Affected products: vendor: ikiwiki
product: ikiwiki
Published: 2018-04-10T22:00:00.000Z
CVE-2016-9646 Commit metadata forgery via CGI::FormBuilder context-dependent APIs
ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder->field method (similar to the CGI->param API that led to Bugzilla's CVE-2014-1572), which can be abused to lead to commit metadata forgery.
Problem types: description: commit metadata forgery
Affected products: vendor: ikiwiki
product: ikiwiki
Published: 2018-04-13T15:00:00.000Z
CVE-2016-9650 
Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled iframes, which allowed a remote attacker to bypass a no-referrer policy via a crafted HTML page.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Published: 2017-01-19T05:43:00.000Z
CVE-2016-9651 
A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Problem types: description: Insufficient policy enforcement
Affected products: vendor: Google
product: Chrome
Published: 2019-01-09T19:00:00.000Z
CVE-2016-9652 
Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.
Problem types: description: mixed
Affected products: vendor: Google
product: Chrome
Published: 2019-11-20T14:56:30.000Z
CVE-2016-9675 
openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause the application to crash, or potentially execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-22T21:00:00.000Z
CVE-2016-9676 
Buffer overflow in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-9677 
Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive kernel address information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-9678 
Use-after-free vulnerability in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-9679 
Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-9680 
Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive information from kernel memory via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-18T22:00:00.000Z
CVE-2016-9681 
Multiple cross-site scripting (XSS) vulnerabilities in Serendipity before 2.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a category or directory name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-25T17:00:00.000Z
CVE-2016-9682 
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI (/cgi-bin/diagnostics) component responsible for emailing out information about the state of the system. The application doesn't properly escape the information passed in the 'tsrDeleteRestartedFile' or 'currentTSREmailTo' variables before making a call to system(), allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-22T05:00:00.000Z
CVE-2016-9683 
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI (/cgi-bin/extensionsettings) component responsible for handling some of the server's internal configurations. The CGI application doesn't properly escape the information it's passed when processing a particular multi-part form request involving scripts. The filename of the 'scriptname' variable is read in unsanitized before a call to system() is performed - allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account. This is SonicWall Issue ID 181195.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-22T05:00:00.000Z
CVE-2016-9684 
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI (/cgi-bin/viewcert) component responsible for processing SSL certificate information. The CGI application doesn't properly escape the information it's passed in the 'CERT' variable before a call to system() is performed - allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-22T05:00:00.000Z
CVE-2016-9685 
Multiple memory leaks in error paths in fs/xfs/xfs_attr_list.c in the Linux kernel before 4.5.1 allow local users to cause a denial of service (memory consumption) via crafted XFS filesystem operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-28T07:42:00.000Z
CVE-2016-9686 
The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2.
Problem types: description: Denial of Service
Affected products: vendor: Puppet
product: Puppet Enterprise
Published: 2017-02-08T22:00:00.000Z
CVE-2016-9691 
IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 119515.
Problem types: description: Obtain Information
Affected products: vendor: IBM Corporation
product: WebSphere Cast Iron Cloud integration
Published: 2017-05-05T19:00:00.000Z
CVE-2016-9692 
IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with. IBM X-Force ID: 119516.
Problem types: description: Denial of Service
Affected products: vendor: IBM Corporation
product: WebSphere Cast Iron Cloud integration
Published: 2017-05-05T19:00:00.000Z
CVE-2016-9693 
IBM Business Process Manager 7.5, 8.0, and 8.5 has a file download capability that is vulnerable to a set of attacks. Ultimately, an attacker can cause an unauthenticated victim to download a malicious payload. An existing file type restriction can be bypassed so that the payload might be considered executable and cause damage on the victim's machine. IBM Reference #: 1998655.
Problem types: description: Gain Access
Affected products: vendor: IBM Corporation
product: Business Process Manager Advanced
Published: 2017-03-07T17:00:00.000Z