Provide references for further information: Can you share references or external links related to CVE-2016-0701?

{'name': 'FEDORA-2016-527018d2ff', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176373.html'}, {'name': '1034849', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1034849'}, {'name': 'GLSA-201601-05', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201601-05'}, {'name': '82233', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/82233'}, {'name': '91787', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/91787'}, {'name': 'VU#257823', 'tags': ['third-party-advisory'], 'url': 'https://www.kb.cert.org/vuls/id/257823'}, {'name': 'openSUSE-SU-2016:0637', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html'}, {'name': 'USN-2883-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2883-1'}, {'url': 'https://www.oracle.com/security-alerts/cpuapr2020.html'}, {'url': 'https://www.oracle.com/security-alerts/cpujul2020.html'}, {'url': 'https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html'}, {'url': 'https://www.oracle.com/security-alerts/cpujan2020.html'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c5b831f21d0d29d1e517d139d9d101763f60c9a2'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=878e2c5b13010329c203f309ed0c8f2113f85648'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164821'}, {'url': 'http://www.openssl.org/news/secadv/20160128.txt'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390893'}, {'url': 'http://intothesymmetry.blogspot.com/2016/01/openssl-key-recovery-attack-on-dh-small.html'}, {'url': 'https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03724en_us'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759'}, {'url': 'https://www.oracle.com/security-alerts/cpuoct2020.html'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0701?


Explain the CVE ID: What does the identifier CVE-2016-0702 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0702.

The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a "CacheBleed" attack.


Provide references for further information: Can you share references or external links related to CVE-2016-0702?

{'name': 'FEDORA-2016-2802690366', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html'}, {'name': 'openSUSE-SU-2016:1242', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html'}, {'name': 'SUSE-SU-2016:1267', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html'}, {'name': 'FEDORA-2016-e6807b3394', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html'}, {'name': 'openSUSE-SU-2016:0638', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917'}, {'name': 'FreeBSD-SA-16:12', 'tags': ['vendor-advisory'], 'url': 'https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc'}, {'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html'}, {'name': 'openSUSE-SU-2016:1239', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html'}, {'name': 'SUSE-SU-2016:0621', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html'}, {'name': 'HPSBGN03563', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=145889460330120&w=2'}, {'name': 'USN-2914-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2914-1'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'name': 'SUSE-SU-2016:1057', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html'}, {'name': 'openSUSE-SU-2016:1566', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html'}, {'url': 'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168'}, {'name': 'openSUSE-SU-2016:1241', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html'}, {'url': 'http://openssl.org/news/secadv/20160301.txt'}, {'name': 'SUSE-SU-2016:1360', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html'}, {'name': '20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016', 'tags': ['vendor-advisory'], 'url': 'http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl'}, {'name': 'openSUSE-SU-2016:0720', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722'}, {'name': 'SUSE-SU-2016:0624', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html'}, {'name': 'DSA-3500', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2016/dsa-3500'}, {'url': 'https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us'}, {'name': 'SUSE-SU-2016:0631', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html'}, {'url': 'https://www.openssl.org/news/secadv/20160301.txt'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html'}, {'name': 'SUSE-SU-2016:0617', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html'}, {'name': 'SUSE-SU-2016:1290', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html'}, {'name': 'openSUSE-SU-2016:1273', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html'}, {'name': 'RHSA-2016:2957', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2957.html'}, {'name': 'GLSA-201603-15', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201603-15'}, {'name': 'openSUSE-SU-2016:0628', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html'}, {'name': '1035133', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1035133'}, {'url': 'http://cachebleed.info'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=708dc2f1291e104fe4eef810bb8ffc1fae5b19c1'}, {'name': 'SUSE-SU-2016:0620', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html'}, {'name': 'openSUSE-SU-2016:0637', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html'}, {'name': 'openSUSE-SU-2016:0627', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html'}, {'name': 'SUSE-SU-2016:0641', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0702?


Explain the CVE ID: What does the identifier CVE-2016-0703 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0703.

The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.


Provide references for further information: Can you share references or external links related to CVE-2016-0703?

{'url': 'http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html'}, {'name': '83743', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/83743'}, {'name': 'openSUSE-SU-2016:0638', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html'}, {'name': 'FreeBSD-SA-16:12', 'tags': ['vendor-advisory'], 'url': 'https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc'}, {'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html'}, {'name': 'SUSE-SU-2016:0621', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'name': 'SUSE-SU-2016:1057', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html'}, {'url': 'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168'}, {'url': 'https://drownattack.com'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97'}, {'url': 'http://openssl.org/news/secadv/20160301.txt'}, {'name': '20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016', 'tags': ['vendor-advisory'], 'url': 'http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl'}, {'name': 'openSUSE-SU-2016:0720', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html'}, {'name': 'SUSE-SU-2016:0624', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441'}, {'url': 'https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us'}, {'name': 'SUSE-SU-2016:0631', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html'}, {'url': 'https://www.openssl.org/news/secadv/20160301.txt'}, {'name': 'SUSE-SU-2016:0617', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html'}, {'name': 'GLSA-201603-15', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201603-15'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html'}, {'name': 'openSUSE-SU-2016:0628', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html'}, {'name': '1035133', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1035133'}, {'name': 'SUSE-SU-2016:0678', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html'}, {'name': 'SUSE-SU-2016:0620', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html'}, {'name': 'openSUSE-SU-2016:0637', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html'}, {'name': 'SUSE-SU-2016:0641', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759'}, {'url': 'https://www.arista.com/en/support/advisories-notices/security-advisories/1260-security-advisory-18'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0703?


Explain the CVE ID: What does the identifier CVE-2016-0704 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0704.

An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.


Provide references for further information: Can you share references or external links related to CVE-2016-0704?

{'url': 'http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html'}, {'name': 'openSUSE-SU-2016:0638', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html'}, {'name': 'FreeBSD-SA-16:12', 'tags': ['vendor-advisory'], 'url': 'https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc'}, {'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html'}, {'name': 'SUSE-SU-2016:0621', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html'}, {'name': '83764', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/83764'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'name': 'SUSE-SU-2016:1057', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html'}, {'url': 'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168'}, {'url': 'https://drownattack.com'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97'}, {'url': 'http://openssl.org/news/secadv/20160301.txt'}, {'name': '20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016', 'tags': ['vendor-advisory'], 'url': 'http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl'}, {'name': 'openSUSE-SU-2016:0720', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html'}, {'name': 'SUSE-SU-2016:0624', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html'}, {'url': 'https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us'}, {'name': 'SUSE-SU-2016:0631', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html'}, {'url': 'https://www.openssl.org/news/secadv/20160301.txt'}, {'name': 'SUSE-SU-2016:0617', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html'}, {'name': 'GLSA-201603-15', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201603-15'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html'}, {'name': 'openSUSE-SU-2016:0628', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html'}, {'name': '1035133', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1035133'}, {'name': 'SUSE-SU-2016:0678', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html'}, {'name': 'SUSE-SU-2016:0620', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html'}, {'name': 'openSUSE-SU-2016:0637', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html'}, {'name': 'SUSE-SU-2016:0641', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0704?


Explain the CVE ID: What does the identifier CVE-2016-0705 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0705.

Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.


Provide references for further information: Can you share references or external links related to CVE-2016-0705?

{'name': 'FEDORA-2016-2802690366', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085'}, {'url': 'http://source.android.com/security/bulletin/2016-05-01.html'}, {'name': 'RHSA-2018:2713', 'tags': ['vendor-advisory'], 'url': 'https://access.redhat.com/errata/RHSA-2018:2713'}, {'name': 'FEDORA-2016-e6807b3394', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html'}, {'name': 'HPSBMU03575', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=146108058503441&w=2'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=6c88c71b4e4825c7bc0489306d062d017634eb88'}, {'name': 'openSUSE-SU-2016:1332', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html'}, {'name': 'openSUSE-SU-2016:0638', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917'}, {'name': 'FreeBSD-SA-16:12', 'tags': ['vendor-advisory'], 'url': 'https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc'}, {'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html'}, {'name': 'SUSE-SU-2016:0621', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617'}, {'name': 'HPSBGN03563', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=145889460330120&w=2'}, {'name': 'HPSBGN03569', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=145983526810210&w=2'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380'}, {'name': 'RHSA-2018:2575', 'tags': ['vendor-advisory'], 'url': 'https://access.redhat.com/errata/RHSA-2018:2575'}, {'name': 'USN-2914-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2914-1'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'name': 'SUSE-SU-2016:1057', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html'}, {'name': 'openSUSE-SU-2016:1566', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html'}, {'url': 'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404'}, {'url': 'http://openssl.org/news/secadv/20160301.txt'}, {'name': '20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016', 'tags': ['vendor-advisory'], 'url': 'http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722'}, {'name': 'RHSA-2018:2568', 'tags': ['vendor-advisory'], 'url': 'https://access.redhat.com/errata/RHSA-2018:2568'}, {'name': 'SUSE-SU-2016:0624', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176716'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441'}, {'name': 'DSA-3500', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2016/dsa-3500'}, {'url': 'https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us'}, {'name': 'SUSE-SU-2016:0631', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html'}, {'url': 'https://www.openssl.org/news/secadv/20160301.txt'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html'}, {'name': '91787', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/91787'}, {'name': 'SUSE-SU-2016:0617', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html'}, {'name': 'RHSA-2016:2957', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2957.html'}, {'name': 'GLSA-201603-15', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201603-15'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681'}, {'name': 'openSUSE-SU-2016:0628', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html'}, {'name': '1035133', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1035133'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800'}, {'name': 'SUSE-SU-2016:0620', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html'}, {'name': 'openSUSE-SU-2016:0637', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html'}, {'name': 'openSUSE-SU-2016:0627', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990'}, {'name': '83754', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/83754'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0705?


Explain the CVE ID: What does the identifier CVE-2016-0706 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0706.

Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allows remote authenticated users to bypass intended SecurityManager restrictions and read arbitrary HTTP requests, and consequently discover session ID values, via a crafted web application.


Provide references for further information: Can you share references or external links related to CVE-2016-0706?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1722800'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html'}, {'name': 'GLSA-201705-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201705-09'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html'}, {'name': 'openSUSE-SU-2016:0865', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tomcat.apache.org/security-9.html'}, {'name': 'USN-3024-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3024-1'}, {'name': 'SUSE-SU-2016:0769', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html'}, {'name': 'RHSA-2016:2045', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2045.html'}, {'name': 'DSA-3530', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3530'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tomcat.apache.org/security-7.html'}, {'name': 'HPSBUX03561', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=145974991225029&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1722802'}, {'name': 'RHSA-2016:1089', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1089.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tomcat.apache.org/security-8.html'}, {'name': 'RHSA-2016:1087', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1087'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': '1035069', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035069'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bto.bluecoat.com/security-advisory/sa118'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442'}, {'name': 'RHSA-2016:2807', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2807.html'}, {'name': 'RHSA-2016:1088', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1088'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20180531-0001/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tomcat.apache.org/security-6.html'}, {'name': 'RHSA-2016:2808', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2808.html'}, {'name': 'SUSE-SU-2016:0822', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html'}, {'name': '83324', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/83324'}, {'name': 'RHSA-2016:2599', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2599.html'}, {'name': 'DSA-3609', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3609'}, {'name': 'SUSE-SU-2016:0839', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.html'}, {'name': '20160222 [SECURITY] CVE-2016-0706 Apache Tomcat Security Manager bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2016/Feb/144'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1722799'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626'}, {'name': 'DSA-3552', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3552'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1722801'}, {'name': '[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0706?


Explain the CVE ID: What does the identifier CVE-2016-0707 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0707.

The agent in Apache Ambari before 2.1.2 uses weak permissions for the (1) /var/lib/ambari-agent/data and (2) /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive information by reading files in the directories.


Provide references for further information: Can you share references or external links related to CVE-2016-0707?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0707?


Explain the CVE ID: What does the identifier CVE-2016-0708 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0708.

Applications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote disclosure of information, including, but not limited to environment variables and bound service details. For applications to be vulnerable, they must have been staged using automatic buildpack detection, passed through the Java Buildpack detection script, and allow the serving of static content from within the deployed artifact. The default Apache Tomcat configuration in the affected java buildpack versions for some basic web application archive (WAR) packaged applications are vulnerable to this issue.


Provide references for further information: Can you share references or external links related to CVE-2016-0708?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cloudfoundry.org/blog/cve-2016-0708/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0708?


Explain the CVE ID: What does the identifier CVE-2016-0709 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0709.

Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3.1 allows remote authenticated administrators to write to arbitrary files, and consequently execute arbitrary code, via a .. (dot dot) in a ZIP archive entry, as demonstrated by "../../webapps/x.jsp."


Provide references for further information: Can you share references or external links related to CVE-2016-0709?

{'name': '39643', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39643/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0709'}, {'name': '[portals-jetspeed-user] 20160303 [CVE-2016-0709] Apache Jetspeed information disclosure vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3C281D02D0-6A03-4421-9D86-E73B001C8677%40bluesunrise.com%3E'}, {'tags': ['x_refsource_MISC'], 'url': 'http://haxx.ml/post/140552592371/remote-code-execution-in-apache-jetspeed-230-and'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/db/modules/exploit/multi/http/apache_jetspeed_file_upload'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/136489/Apache-Jetspeed-Arbitrary-File-Upload.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0709?


Explain the CVE ID: What does the identifier CVE-2016-0710 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0710.

Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitrary SQL commands via the (1) role or (2) user parameter to services/usermanager/users/.


Provide references for further information: Can you share references or external links related to CVE-2016-0710?

{'name': '39643', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39643/'}, {'name': '[portals-jetspeed-user] 20160303 [CVE-2016-0710] Apache Jetspeed information disclosure vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3C046318A1-226E-453F-9394-B84F1A33E6A4%40bluesunrise.com%3E'}, {'tags': ['x_refsource_MISC'], 'url': 'http://haxx.ml/post/140552592371/remote-code-execution-in-apache-jetspeed-230-and'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/db/modules/exploit/multi/http/apache_jetspeed_file_upload'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/136489/Apache-Jetspeed-Arbitrary-File-Upload.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0710'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0710?


Explain the CVE ID: What does the identifier CVE-2016-0711 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0711.

Multiple cross-site scripting (XSS) vulnerabilities in Apache Jetspeed before 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the title parameter when adding a (1) link, (2) page, or (3) folder resource.


Provide references for further information: Can you share references or external links related to CVE-2016-0711?

{'name': '[portals-jetspeed-user] 20160303 [CVE-2016-0711] Apache Jetspeed information disclosure vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3C73AC0763-D44B-4BDF-867C-05AD4674A62F%40bluesunrise.com%3E'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0711'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0711?


Explain the CVE ID: What does the identifier CVE-2016-0712 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0712.

Cross-site scripting (XSS) vulnerability in Apache Jetspeed before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to portal.


Provide references for further information: Can you share references or external links related to CVE-2016-0712?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0712'}, {'name': '[portals-jetspeed-user] 20160303 [CVE-2016-0712] Apache Jetspeed information disclosure vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3CF868DBFC-A05C-4ABB-8B91-17CA54C174B9%40bluesunrise.com%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0712?


Explain the CVE ID: What does the identifier CVE-2016-0713 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0713.

Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.


Provide references for further information: Can you share references or external links related to CVE-2016-0713?

{'name': '[cf-dev] 20160201 CVE-2016-0713 Gorouter XSS', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.cloudfoundry.org/archives/list/cf-dev%40lists.cloudfoundry.org/thread/VWDLUNTDKW5CW5JWEM5BOHLJ3J32TAFF/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bosh.io/releases/github.com/cloudfoundry/cf-release?version=229'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0713?


Explain the CVE ID: What does the identifier CVE-2016-0714 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0714.

The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.


Provide references for further information: Can you share references or external links related to CVE-2016-0714?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html'}, {'name': 'GLSA-201705-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201705-09'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1726196'}, {'name': '20160222 [SECURITY] CVE-2016-0714 Apache Tomcat Security Manager Bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2016/Feb/145'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html'}, {'name': 'openSUSE-SU-2016:0865', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tomcat.apache.org/security-9.html'}, {'name': 'USN-3024-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3024-1'}, {'name': 'SUSE-SU-2016:0769', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html'}, {'name': 'RHSA-2016:2045', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2045.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1725263'}, {'name': 'DSA-3530', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3530'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1726923'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1727166'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1727034'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tomcat.apache.org/security-7.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1725914'}, {'name': 'HPSBUX03561', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=145974991225029&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html'}, {'name': '1037640', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037640'}, {'name': 'RHSA-2016:1089', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1089.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tomcat.apache.org/security-8.html'}, {'name': 'RHSA-2016:1087', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1087'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': '1035069', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035069'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bto.bluecoat.com/security-advisory/sa118'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442'}, {'name': 'RHSA-2016:2807', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2807.html'}, {'name': 'RHSA-2016:1088', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1088'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20180531-0001/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tomcat.apache.org/security-6.html'}, {'name': 'RHSA-2016:2808', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2808.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1726203'}, {'name': 'SUSE-SU-2016:0822', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1727182'}, {'name': '83327', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/83327'}, {'name': 'RHSA-2016:2599', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2599.html'}, {'name': 'DSA-3609', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3609'}, {'name': 'SUSE-SU-2016:0839', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626'}, {'name': 'DSA-3552', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3552'}, {'name': '[tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0714?


Explain the CVE ID: What does the identifier CVE-2016-0715 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0715.

Pivotal Cloud Foundry Elastic Runtime version 1.4.0 through 1.4.5, 1.5.0 through 1.5.11 and 1.6.0 through 1.6.11 is vulnerable to a remote information disclosure. It was found that original mitigation configuration instructions provided as part of CVE-2016-0708 were incomplete and could leave PHP Buildpack, Staticfile Buildpack and potentially other custom Buildpack applications vulnerable to remote information disclosure. Affected applications use automated buildpack detection, serve files directly from the root of the application and have a buildpack that matched after the Java Buildpack in the system buildpack priority when Java Buildpack versions 2.0 through 3.4 were present.


Provide references for further information: Can you share references or external links related to CVE-2016-0715?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://pivotal.io/security/cve-2016-0715'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0715?


Explain the CVE ID: What does the identifier CVE-2016-0716 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0716.


Provide references for further information: Can you share references or external links related to CVE-2016-0716?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0716?


Explain the CVE ID: What does the identifier CVE-2016-0717 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0717.


Provide references for further information: Can you share references or external links related to CVE-2016-0717?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0717?


Explain the CVE ID: What does the identifier CVE-2016-0718 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0718.

Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2016-0718?

{'name': 'RHSA-2016:2824', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2824.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2016-20'}, {'name': '1037705', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037705'}, {'name': '1036415', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036415'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html'}, {'name': 'USN-2983-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2983-1'}, {'name': 'openSUSE-SU-2016:1523', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.eset.com/ca6333/'}, {'name': '90729', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90729'}, {'name': 'USN-3044-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3044-1'}, {'name': '[oss-security] 20160517 CVE-2016-0718: Expat XML Parser Crashes on Malformed Input', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/05/17/12'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html'}, {'name': 'APPLE-SA-2016-07-18-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html'}, {'name': 'SUSE-SU-2016:1508', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1236923'}, {'name': '20170227 CVE-2016-9892 - Remote Code Execution as Root via ESET Endpoint Antivirus 6', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2017/Feb/68'}, {'name': 'GLSA-201701-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201701-21'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2016-11-01.html'}, {'name': 'DSA-3582', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3582'}, {'name': 'SUSE-SU-2016:1512', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1296102'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2016/mfsa2016-68.html'}, {'name': 'openSUSE-SU-2016:1964', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html'}, {'name': 'RHSA-2018:2486', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:2486'}, {'name': '1036348', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036348'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206903'}, {'name': 'openSUSE-SU-2016:1441', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html'}, {'name': 'openSUSE-SU-2016:2026', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10365'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0718?


Explain the CVE ID: What does the identifier CVE-2016-0719 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0719.


Provide references for further information: Can you share references or external links related to CVE-2016-0719?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0719?


Explain the CVE ID: What does the identifier CVE-2016-0720 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0720.

Cross-site request forgery (CSRF) vulnerability in pcsd web UI in pcs before 0.9.149.


Provide references for further information: Can you share references or external links related to CVE-2016-0720?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1299614'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ClusterLabs/pcs/commit/b9e7f061788c3b86a0c67d2d4158f067ec5eb625'}, {'name': 'FEDORA-2016-cdd4228cc7', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178384.html'}, {'name': '97984', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/97984'}, {'name': 'RHSA-2016:2596', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2596.html'}, {'name': 'FEDORA-2016-3b20c4ec9d', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178261.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0720?


Explain the CVE ID: What does the identifier CVE-2016-0721 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0721.

Session fixation vulnerability in pcsd in pcs before 0.9.157.


Provide references for further information: Can you share references or external links related to CVE-2016-0721?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ClusterLabs/pcs/commit/bc6ad9086857559db57f4e3e6de66762291c0774'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1299615'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ClusterLabs/pcs/commit/e9b28833d54a47ec441f6dbad0db96e1fc662a5b'}, {'name': 'FEDORA-2016-cdd4228cc7', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178384.html'}, {'name': '97977', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/97977'}, {'name': 'RHSA-2016:2596', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2596.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ClusterLabs/pcs/commit/acdbbe8307e6f4a36b2c7754765e732e43fe8d17'}, {'name': 'FEDORA-2016-3b20c4ec9d', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178261.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0721?


Explain the CVE ID: What does the identifier CVE-2016-0722 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0722.


Provide references for further information: Can you share references or external links related to CVE-2016-0722?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0722?


Explain the CVE ID: What does the identifier CVE-2016-0723 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0723.

Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free and system crash) by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl call.


Provide references for further information: Can you share references or external links related to CVE-2016-0723?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2016-0723'}, {'name': 'USN-2930-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2930-1'}, {'name': 'USN-2967-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2967-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1296253'}, {'name': 'USN-2930-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2930-2'}, {'name': 'DSA-3503', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3503'}, {'name': 'USN-2967-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2967-2'}, {'name': 'SUSE-SU-2016:1764', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c17c861a357e9458001f021a7afa7aab9937439'}, {'name': 'USN-2930-3', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2930-3'}, {'name': 'SUSE-SU-2016:1102', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-07-01.html'}, {'name': 'USN-2929-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2929-1'}, {'name': 'USN-2932-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2932-1'}, {'name': '82950', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/82950'}, {'name': 'FEDORA-2016-5d43766e33', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html'}, {'name': 'SUSE-SU-2016:2074', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html'}, {'name': '1035695', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035695'}, {'name': 'USN-2948-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2948-1'}, {'name': 'DSA-3448', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3448'}, {'name': 'openSUSE-SU-2016:1008', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html'}, {'name': 'USN-2929-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2929-2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/5c17c861a357e9458001f021a7afa7aab9937439'}, {'name': 'USN-2948-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2948-2'}, {'name': 'FEDORA-2016-2f25d12c51', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176464.html'}, {'name': 'SUSE-SU-2016:0911', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.f5.com/csp/article/K43650115'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0723?


Explain the CVE ID: What does the identifier CVE-2016-0724 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0724.

The (1) core_enrol_get_course_enrolment_methods and (2) enrol_self_get_instance_info web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated users to obtain sensitive information via a web-service request.


Provide references for further information: Can you share references or external links related to CVE-2016-0724?

{'name': '1034694', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034694'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://moodle.org/mod/forum/discuss.php?d=326205'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52072'}, {'name': '[oss-security] 20160118 [vs] moodle security release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/18/1'}, {'name': 'FEDORA-2016-fb2597f4eb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html'}, {'name': 'FEDORA-2016-1c10ab3c35', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0724?


Explain the CVE ID: What does the identifier CVE-2016-0725 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0725.

Cross-site scripting (XSS) vulnerability in the search_pagination function in course/classes/management_renderer.php in Moodle 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted search string.


Provide references for further information: Can you share references or external links related to CVE-2016-0725?

{'name': '1034694', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034694'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52552'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://moodle.org/mod/forum/discuss.php?d=326206'}, {'name': '[oss-security] 20160118 [vs] moodle security release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/18/1'}, {'name': 'FEDORA-2016-fb2597f4eb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html'}, {'name': 'FEDORA-2016-1c10ab3c35', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0725?


Explain the CVE ID: What does the identifier CVE-2016-0726 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0726.

The Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin" administrator account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials.


Provide references for further information: Can you share references or external links related to CVE-2016-0726?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1295446'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0726?


Explain the CVE ID: What does the identifier CVE-2016-0727 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0727.

The crontab script in the ntp package before 1:4.2.6.p3+dfsg-1ubuntu3.11 on Ubuntu 12.04 LTS, before 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10 on Ubuntu 14.04 LTS, on Ubuntu Wily, and before 1:4.2.8p4+dfsg-3ubuntu5.3 on Ubuntu 16.04 LTS allows local users with access to the ntp account to write to arbitrary files and consequently gain privileges via vectors involving statistics directory cleanup.


Provide references for further information: Can you share references or external links related to CVE-2016-0727?

{'name': 'USN-3096-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3096-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1382369'}, {'name': '1034808', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034808'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/141913/NTP-Privilege-Escalation.html'}, {'name': '81552', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81552'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/ubuntu/+source/ntp/+bug/1528050'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0727?


Explain the CVE ID: What does the identifier CVE-2016-0728 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0728.

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands.


Provide references for further information: Can you share references or external links related to CVE-2016-0728?

{'name': '1034701', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034701'}, {'name': 'SUSE-SU-2016:0750', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00038.html'}, {'name': 'USN-2871-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2871-1'}, {'name': 'RHSA-2016:0068', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0068.html'}, {'name': 'SUSE-SU-2016:0205', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00026.html'}, {'name': 'USN-2870-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2870-2'}, {'name': 'SUSE-SU-2016:0751', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00039.html'}, {'name': 'USN-2872-3', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2872-3'}, {'name': 'SUSE-SU-2016:0747', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00035.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1'}, {'name': 'SUSE-SU-2016:0755', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00043.html'}, {'name': 'USN-2872-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2872-1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://perception-point.io/2016/01/14/analysis-and-exploitation-of-a-linux-kernel-vulnerability-cve-2016-0728/'}, {'name': 'SUSE-SU-2016:0757', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00045.html'}, {'name': 'USN-2871-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2871-2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=23567fd052a9abb6d67fe8e7a9ccdd9800a540f2'}, {'name': 'SUSE-SU-2016:0753', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00041.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380'}, {'name': '39277', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39277/'}, {'name': 'FEDORA-2016-b59fd603be', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176194.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}, {'name': 'SUSE-SU-2016:0746', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00034.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/23567fd052a9abb6d67fe8e7a9ccdd9800a540f2'}, {'name': '81054', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81054'}, {'name': 'USN-2873-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2873-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1297475'}, {'name': 'FEDORA-2016-5d43766e33', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html'}, {'name': 'SUSE-SU-2016:0745', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00033.html'}, {'name': 'RHSA-2016:0065', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0065.html'}, {'name': 'USN-2870-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2870-1'}, {'name': 'SUSE-SU-2016:0756', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00044.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bto.bluecoat.com/security-advisory/sa112'}, {'name': 'USN-2872-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2872-2'}, {'name': 'DSA-3448', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3448'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20160211-0001/'}, {'name': 'RHSA-2016:0064', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0064.html'}, {'name': 'HPSBHF03436', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05018265'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05130958'}, {'name': 'SUSE-SU-2016:0752', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00040.html'}, {'name': 'SUSE-SU-2016:0341', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00012.html'}, {'name': '[oss-security] 20160119 Linux kernel: use after free in keyring facility.', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/19/2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0728?


Explain the CVE ID: What does the identifier CVE-2016-0729 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0729.

Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.


Provide references for further information: Can you share references or external links related to CVE-2016-0729?

{'name': 'FEDORA-2016-880b91c090', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182597.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/135949/Apache-Xerces-C-XML-Parser-Buffer-Overflow.html'}, {'name': '1035113', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035113'}, {'name': '83423', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/83423'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xerces.apache.org/xerces-c/secadv/CVE-2016-0729.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1727978'}, {'name': 'FEDORA-2016-ae9ac16cf3', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182131.html'}, {'name': 'openSUSE-SU-2016:1121', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-04/msg00086.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html'}, {'name': '20160225 CVE-2016-0729: Apache Xerces-C XML Parser Crashes on Malformed Input', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537620/100/0/threaded'}, {'name': 'GLSA-201612-46', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201612-46'}, {'name': 'openSUSE-SU-2016:0966', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-04/msg00012.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.apache.org/jira/browse/XERCESC-2061'}, {'name': 'FEDORA-2016-9ff972ca42', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182062.html'}, {'name': 'DSA-3493', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3493'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html'}, {'name': 'openSUSE-SU-2016:1808', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-07/msg00053.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0729?


Explain the CVE ID: What does the identifier CVE-2016-0730 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0730.


Provide references for further information: Can you share references or external links related to CVE-2016-0730?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0730?


Explain the CVE ID: What does the identifier CVE-2016-0731 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0731.

The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration.


Provide references for further information: Can you share references or external links related to CVE-2016-0731?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.apache.org/jira/browse/AMBARI-14780'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://docs.hortonworks.com/HDPDocuments/Ambari-2.2.1.0/bk_releasenotes_ambari_2.2.1.0/content/ambari_relnotes-2.2.1.0-cves.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.2.1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0731?


Explain the CVE ID: What does the identifier CVE-2016-0732 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0732.

The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0.0; UAA-Release 2 through 4, when configured with multiple identity zones; and Elastic Runtime 1.6.0 through 1.6.13 allows remote authenticated users with privileges in one zone to gain privileges and perform operations on a different zone via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0732?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://pivotal.io/security/cve-2016-0732'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0732?


Explain the CVE ID: What does the identifier CVE-2016-0733 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0733.

The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid username.


Provide references for further information: Can you share references or external links related to CVE-2016-0733?

{'name': '82871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/82871'}, {'name': '[ranger-dev] 20160205 CVE update (CVE-2015-5167 & CVE-2016-0733) - Fixed in Ranger 0.5.1', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://mail-archives.apache.org/mod_mbox/ranger-dev/201602.mbox/%3CD2D9A4C5.114ECA%25vel%40apache.org%3E'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.apache.org/jira/browse/RANGER-835'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0733?


Explain the CVE ID: What does the identifier CVE-2016-0734 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0734.

The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.


Provide references for further information: Can you share references or external links related to CVE-2016-0734?

{'name': 'RHSA-2016:1424', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1424'}, {'name': '1035327', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035327'}, {'name': '[oss-security] 20160310 [ANNOUNCE] CVE-2016-0734: ActiveMQ Web Console - Clickjacking', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/03/10/11'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://activemq.apache.org/security-advisories.data/CVE-2016-0734-announcement.txt'}, {'name': '84321', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84321'}, {'name': '[activemq-commits] 20190327 svn commit: r1042639 - in /websites/production/activemq/content/activemq-website: ./ projects/artemis/download/ projects/classic/download/ projects/cms/download/ security-advisories.data/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0734?


Explain the CVE ID: What does the identifier CVE-2016-0735 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0735.

Apache Ranger 0.5.x before 0.5.2 allows remote authenticated users to bypass intended parent resource-level access restrictions by leveraging mishandling of a resource-level exclude policy.


Provide references for further information: Can you share references or external links related to CVE-2016-0735?

{'name': '[ranger-dev] 20160328 CVE update (CVE-2016-0735) - Fixed in Ranger 0.5.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail-archives.apache.org/mod_mbox/ranger-dev/201603.mbox/%3CD31EE434.14B879%25vel%40apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0735?


Explain the CVE ID: What does the identifier CVE-2016-0736 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0736.

In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation (AES256-CBC by default), hence no selectable or builtin authenticated encryption. This made it vulnerable to padding oracle attacks, particularly with CBC.


Provide references for further information: Can you share references or external links related to CVE-2016-0736?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT208221'}, {'name': 'DSA-3796', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2017/dsa-3796'}, {'name': '40961', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/40961/'}, {'name': '1037508', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037508'}, {'name': 'RHSA-2017:1413', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:1413'}, {'name': 'RHSA-2017:1161', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:1161'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2017-04'}, {'name': 'RHSA-2017:1414', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:1414'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us'}, {'name': '95078', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95078'}, {'name': 'RHSA-2017:1415', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2017-1415.html'}, {'name': 'RHSA-2017:0906', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:0906'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-0736'}, {'name': 'GLSA-201701-36', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201701-36'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20180423-0001/'}, {'name': '[httpd-cvs] 20190815 svn commit: r1048743 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20190815 svn commit: r1048742 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20200401 svn commit: r1058586 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20200401 svn commit: r1058587 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073140 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1888194 [10/13] - /httpd/site/trunk/content/security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [10/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073146 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [10/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210606 svn commit: r1075470 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0736?


Explain the CVE ID: What does the identifier CVE-2016-0737 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0737.

OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.


Provide references for further information: Can you share references or external links related to CVE-2016-0737?

{'name': 'RHSA-2016:0329', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0329.html'}, {'name': '81432', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81432'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'name': 'RHSA-2016:0128', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0128.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://review.openstack.org/#/c/217750/'}, {'name': 'RHSA-2016:0155', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0155.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/swift/+bug/1466549'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.openstack.org/ossa/OSSA-2016-004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.net/swift/+milestone/2.4.0'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0737?


Explain the CVE ID: What does the identifier CVE-2016-0738 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0738.

OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.


Provide references for further information: Can you share references or external links related to CVE-2016-0738?

{'name': 'RHSA-2016:0329', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0329.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/openstack/swift/blob/master/CHANGELOG'}, {'name': '81432', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81432'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/cloud-archive/+bug/1493303'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'name': 'RHSA-2016:0128', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0128.html'}, {'name': 'FEDORA-2016-2256c80a94', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176713.html'}, {'name': 'RHSA-2016:0155', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0155.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.openstack.org/ossa/OSSA-2016-004.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0738?


Explain the CVE ID: What does the identifier CVE-2016-0739 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0739.

libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-hellman-group14 key exchange methods to 128 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."


Provide references for further information: Can you share references or external links related to CVE-2016-0739?

{'name': 'FEDORA-2016-d9f950c779', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178058.html'}, {'name': 'USN-2912-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2912-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.libssh.org/security/advisories/CVE-2016-0739.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://puppet.com/security/cve/CVE-2016-0739'}, {'name': 'FEDORA-2016-dc9e8da03c', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178822.html'}, {'name': 'GLSA-201606-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201606-12'}, {'name': 'DSA-3488', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3488'}, {'name': 'RHSA-2016:0566', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0566.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.libssh.org/2016/02/23/libssh-0-7-3-security-and-bugfix-release/'}, {'name': 'openSUSE-SU-2016:0880', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-03/msg00111.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0739?


Explain the CVE ID: What does the identifier CVE-2016-0740 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0740.

Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.


Provide references for further information: Can you share references or external links related to CVE-2016-0740?

{'name': 'GLSA-201612-52', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201612-52'}, {'name': 'DSA-3499', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3499'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/python-pillow/Pillow/commit/6dcbf5bd96b717c58d7b642949da8d323099928e'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0740?


Explain the CVE ID: What does the identifier CVE-2016-0741 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0741.

slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection.


Provide references for further information: Can you share references or external links related to CVE-2016-0741?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://fedorahosted.org/389/ticket/48412'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://fedorahosted.org/389/changeset/cd45d032421b0ecf76d8cbb9b1c3aeef7680d9a2/'}, {'name': 'RHSA-2016:0204', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0204.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-4-7.html'}, {'name': '82343', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/82343'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0741?