# CVEs published 2016-10-10

108 CVEs were published on October 10, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-1000126](https://cve.now/CVE-2016-1000126.md): Reflected XSS in wordpress plugin admin-font-editor v1.8 (no CVSS)
- [CVE-2016-1000127](https://cve.now/CVE-2016-1000127.md): Reflected XSS in wordpress plugin ajax-random-post v2.00 (no CVSS)
- [CVE-2016-1000128](https://cve.now/CVE-2016-1000128.md): Reflected XSS in wordpress plugin anti-plagiarism v3.60 (no CVSS)
- [CVE-2016-1000129](https://cve.now/CVE-2016-1000129.md): Reflected XSS in wordpress plugin defa-online-image-protector v3.3 (no CVSS)
- [CVE-2016-1000130](https://cve.now/CVE-2016-1000130.md): Reflected XSS in wordpress plugin e-search v1.0 (no CVSS)
- [CVE-2016-1000131](https://cve.now/CVE-2016-1000131.md): Reflected XSS in wordpress plugin e-search v1.0 (no CVSS)
- [CVE-2016-1000132](https://cve.now/CVE-2016-1000132.md): Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8 (no CVSS)
- [CVE-2016-1000133](https://cve.now/CVE-2016-1000133.md): Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1 (no CVSS)
- [CVE-2016-1000134](https://cve.now/CVE-2016-1000134.md): Reflected XSS in wordpress plugin hdw-tube v1.2 (no CVSS)
- [CVE-2016-1000135](https://cve.now/CVE-2016-1000135.md): Reflected XSS in wordpress plugin hdw-tube v1.2 (no CVSS)
- [CVE-2016-1000136](https://cve.now/CVE-2016-1000136.md): Reflected XSS in wordpress plugin heat-trackr v1.0 (no CVSS)
- [CVE-2016-1000137](https://cve.now/CVE-2016-1000137.md): Reflected XSS in wordpress plugin hero-maps-pro v2.1.0 (no CVSS)
- [CVE-2016-1000138](https://cve.now/CVE-2016-1000138.md): Reflected XSS in wordpress plugin indexisto v1.0.5 (no CVSS)
- [CVE-2016-1000139](https://cve.now/CVE-2016-1000139.md): Reflected XSS in wordpress plugin infusionsoft v1.5.11 (no CVSS)
- [CVE-2016-1000140](https://cve.now/CVE-2016-1000140.md): Reflected XSS in wordpress plugin new-year-firework v1.1.9 (no CVSS)
- [CVE-2016-1000141](https://cve.now/CVE-2016-1000141.md): Reflected XSS in wordpress plugin page-layout-builder v1.9.3 (no CVSS)
- [CVE-2016-1000142](https://cve.now/CVE-2016-1000142.md): Reflected XSS in wordpress plugin parsi-font v4.2.5 (no CVSS)
- [CVE-2016-1000143](https://cve.now/CVE-2016-1000143.md): Reflected XSS in wordpress plugin photoxhibit v2.1.8 (no CVSS)
- [CVE-2016-1000144](https://cve.now/CVE-2016-1000144.md): Reflected XSS in wordpress plugin photoxhibit v2.1.8 (no CVSS)
- [CVE-2016-1000145](https://cve.now/CVE-2016-1000145.md): Reflected XSS in wordpress plugin pondol-carousel v1.0 (no CVSS)
- [CVE-2016-1000146](https://cve.now/CVE-2016-1000146.md): Reflected XSS in wordpress plugin pondol-formmail v1.1 (no CVSS)
- [CVE-2016-1000147](https://cve.now/CVE-2016-1000147.md): Reflected XSS in wordpress plugin recipes-writer v1.0.4 (no CVSS)
- [CVE-2016-1000148](https://cve.now/CVE-2016-1000148.md): Reflected XSS in wordpress plugin s3-video v0.983 (no CVSS)
- [CVE-2016-1000149](https://cve.now/CVE-2016-1000149.md): Reflected XSS in wordpress plugin simpel-reserveren v3.5.2 (no CVSS)
- [CVE-2016-1000150](https://cve.now/CVE-2016-1000150.md): Reflected XSS in wordpress plugin simplified-content v1.0.0 (no CVSS)
- [CVE-2016-1000151](https://cve.now/CVE-2016-1000151.md): Reflected XSS in wordpress plugin tera-charts v1.0 (no CVSS)
- [CVE-2016-1000152](https://cve.now/CVE-2016-1000152.md): Reflected XSS in wordpress plugin tidio-form v1.0 (no CVSS)
- [CVE-2016-1000153](https://cve.now/CVE-2016-1000153.md): Reflected XSS in wordpress plugin tidio-gallery v1.1 (no CVSS)
- [CVE-2016-1000154](https://cve.now/CVE-2016-1000154.md): Reflected XSS in wordpress plugin whizz v1.0.7 (no CVSS)
- [CVE-2016-1000155](https://cve.now/CVE-2016-1000155.md): Reflected XSS in wordpress plugin wpsolr-search-engine v7.6 (no CVSS)
- [CVE-2016-1000216](https://cve.now/CVE-2016-1000216.md): Ruckus Wireless H500 web management interface authenticated command injection (no CVSS)
- [CVE-2016-5325](https://cve.now/CVE-2016-5325.md): CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4. (no CVSS)
- [CVE-2016-7099](https://cve.now/CVE-2016-7099.md): The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does no (no CVSS)
- [CVE-2016-7423](https://cve.now/CVE-2016-7423.md): The mptsas\_process\_scsi\_io\_request function in QEMU (aka Quick Emulator), when built with LSI SAS1068 Host Bus emulation support, allows loc (no CVSS)
- [CVE-2016-8100](https://cve.now/CVE-2016-8100.md): Intel Integrated Performance Primitives (aka IPP) Cryptography before 9.0.4 makes it easier for local users to discover RSA private keys via (no CVSS)
- [CVE-2016-8101](https://cve.now/CVE-2016-8101.md): The updater subsystem in Intel SSD Toolbox before 3.3.7 allows local users to gain privileges via unspecified vectors. (no CVSS)
- [CVE-2015-0572](https://cve.now/CVE-2015-0572.md): Multiple race conditions in drivers/char/adsprpc.c and drivers/char/adsprpc\_compat.c in the ADSPRPC driver for the Linux kernel 3.x, as used (no CVSS)
- [CVE-2015-8950](https://cve.now/CVE-2015-8950.md): arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initializ (no CVSS)
- [CVE-2015-8951](https://cve.now/CVE-2015-8951.md): Multiple use-after-free vulnerabilities in sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm sound driver in Android before 2016-10-05 (no CVSS)
- [CVE-2015-8955](https://cve.now/CVE-2015-8955.md): arch/arm64/kernel/perf\_event.c in the Linux kernel before 4.1 on arm64 platforms allows local users to gain privileges or cause a denial of (no CVSS)
- [CVE-2015-8956](https://cve.now/CVE-2015-8956.md): The rfcomm\_sock\_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive informati (no CVSS)
- [CVE-2016-3860](https://cve.now/CVE-2016-3860.md): sound/soc/msm/qdsp6v2/audio\_calibration.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One d (no CVSS)
- [CVE-2016-3882](https://cve.now/CVE-2016-3882.md): Off-by-one error in server/wifi/anqp/VenueNameElement.java in Wi-Fi in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows remote (no CVSS)
- [CVE-2016-3900](https://cve.now/CVE-2016-3900.md): cmds/servicemanager/service\_manager.c in ServiceManager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 be (no CVSS)
- [CVE-2016-3901](https://cve.now/CVE-2016-3901.md): Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus (no CVSS)
- [CVE-2016-3902](https://cve.now/CVE-2016-3902.md): drivers/platform/msm/ipa/ipa\_qmi\_service.c in the Qualcomm IPA driver in Android before 2016-10-05 on Nexus 5X and 6P devices allows attacke (no CVSS)
- [CVE-2016-3903](https://cve.now/CVE-2016-3903.md): drivers/media/platform/msm/camera\_v2/sensor/csid/msm\_csid.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, (no CVSS)
- [CVE-2016-3905](https://cve.now/CVE-2016-3905.md): CORE/HDD/src/wlan\_hdd\_main.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileg (no CVSS)
- [CVE-2016-3908](https://cve.now/CVE-2016-3908.md): The Lock Settings Service in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to remove a device's PIN or password, (no CVSS)
- [CVE-2016-3909](https://cve.now/CVE-2016-3909.md): The SoftMPEG4 component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 201 (no CVSS)
- [CVE-2016-3910](https://cve.now/CVE-2016-3910.md): services/soundtrigger/SoundTriggerHwService.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and (no CVSS)
- [CVE-2016-3911](https://cve.now/CVE-2016-3911.md): core/java/android/os/Process.java in Zygote in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and (no CVSS)
- [CVE-2016-3912](https://cve.now/CVE-2016-3912.md): The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 all (no CVSS)
- [CVE-2016-3913](https://cve.now/CVE-2016-3913.md): media/libmediaplayerservice/MediaPlayerService.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x b (no CVSS)
- [CVE-2016-3914](https://cve.now/CVE-2016-3914.md): Race condition in providers/telephony/MmsProvider.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x (no CVSS)
- [CVE-2016-3915](https://cve.now/CVE-2016-3915.md): camera/src/camera\_metadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-0 (no CVSS)
- [CVE-2016-3916](https://cve.now/CVE-2016-3916.md): camera/src/camera\_metadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-0 (no CVSS)
- [CVE-2016-3917](https://cve.now/CVE-2016-3917.md): The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authen (no CVSS)
- [CVE-2016-3918](https://cve.now/CVE-2016-3918.md): email/provider/AttachmentProvider.java in AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10- (no CVSS)
- [CVE-2016-3920](https://cve.now/CVE-2016-3920.md): id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-1 (no CVSS)
- [CVE-2016-3921](https://cve.now/CVE-2016-3921.md): libsysutils/src/FrameworkListener.cpp in Framework Listener in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before (no CVSS)
- [CVE-2016-3922](https://cve.now/CVE-2016-3922.md): libril/RilSapSocket.cpp in Telephony in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 relies on variable-length arrays, which allo (no CVSS)
- [CVE-2016-3923](https://cve.now/CVE-2016-3923.md): The Accessibility services in Android 7.0 before 2016-10-01 mishandle motion events, which allows attackers to conduct touchjacking attacks (no CVSS)
- [CVE-2016-3924](https://cve.now/CVE-2016-3924.md): services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, (no CVSS)
- [CVE-2016-3925](https://cve.now/CVE-2016-3925.md): server/wifi/anqp/ANQPFactory.java in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to cause a denial of service ( (no CVSS)
- [CVE-2016-3926](https://cve.now/CVE-2016-3926.md): Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5, 5X, 6, and 6P devices has unknown impact and atta (no CVSS)
- [CVE-2016-3927](https://cve.now/CVE-2016-3927.md): Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vect (no CVSS)
- [CVE-2016-3928](https://cve.now/CVE-2016-3928.md): The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal b (no CVSS)
- [CVE-2016-3929](https://cve.now/CVE-2016-3929.md): Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vect (no CVSS)
- [CVE-2016-3930](https://cve.now/CVE-2016-3930.md): The NVIDIA MMC test driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, ak (no CVSS)
- [CVE-2016-3931](https://cve.now/CVE-2016-3931.md): drivers/misc/qseecom.c in the Qualcomm QSEE Communicator driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One (no CVSS)
- [CVE-2016-3932](https://cve.now/CVE-2016-3932.md): mediaserver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 29161895 an (no CVSS)
- [CVE-2016-3933](https://cve.now/CVE-2016-3933.md): mediaserver in Android before 2016-10-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka i (no CVSS)
- [CVE-2016-3934](https://cve.now/CVE-2016-3934.md): drivers/media/platform/msm/camera\_v2/sensor/io/msm\_camera\_cci\_i2c.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, N (no CVSS)
- [CVE-2016-3935](https://cve.now/CVE-2016-3935.md): Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus (no CVSS)
- [CVE-2016-3936](https://cve.now/CVE-2016-3936.md): The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal b (no CVSS)
- [CVE-2016-3937](https://cve.now/CVE-2016-3937.md): The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal b (no CVSS)
- [CVE-2016-3938](https://cve.now/CVE-2016-3938.md): drivers/video/msm/mdss/mdss\_mdp\_overlay.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Andr (no CVSS)
- [CVE-2016-3939](https://cve.now/CVE-2016-3939.md): drivers/video/msm/mdss/mdss\_debug.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android On (no CVSS)
- [CVE-2016-3940](https://cve.now/CVE-2016-3940.md): The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 6P and Android One devices allows attackers to gain privileges via a (no CVSS)
- [CVE-2016-5343](https://cve.now/CVE-2016-5343.md): drivers/soc/qcom/qdsp6v2/voice\_svc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (Qu (no CVSS)
- [CVE-2016-5348](https://cve.now/CVE-2016-5348.md): The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allo (no CVSS)
- [CVE-2016-6672](https://cve.now/CVE-2016-6672.md): The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted applicat (no CVSS)
- [CVE-2016-6673](https://cve.now/CVE-2016-6673.md): The NVIDIA camera driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka (no CVSS)
- [CVE-2016-6674](https://cve.now/CVE-2016-6674.md): system\_server in Android before 2016-10-05 on Nexus devices allows attackers to gain privileges via a crafted application, aka internal bug (no CVSS)
- [CVE-2016-6675](https://cve.now/CVE-2016-6675.md): Off-by-one error in CORE/HDD/src/wlan\_hdd\_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One de (no CVSS)
- [CVE-2016-6676](https://cve.now/CVE-2016-6676.md): Off-by-one error in CORE/HDD/src/wlan\_hdd\_cfg.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One device (no CVSS)
- [CVE-2016-6677](https://cve.now/CVE-2016-6677.md): The NVIDIA GPU driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted applica (no CVSS)
- [CVE-2016-6678](https://cve.now/CVE-2016-6678.md): The Motorola USBNet driver in Android before 2016-10-05 on Nexus 6 devices allows attackers to obtain sensitive information via a crafted ap (no CVSS)
- [CVE-2016-6679](https://cve.now/CVE-2016-6679.md): CORE/HDD/src/wlan\_hdd\_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attacke (no CVSS)
- [CVE-2016-6680](https://cve.now/CVE-2016-6680.md): CORE/HDD/src/wlan\_hdd\_wext.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers (no CVSS)
- [CVE-2016-6681](https://cve.now/CVE-2016-6681.md): drivers/misc/qcom/qdsp6v2/audio\_utils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One dev (no CVSS)
- [CVE-2016-6682](https://cve.now/CVE-2016-6682.md): drivers/misc/qcom/qdsp6v2/audio\_utils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One dev (no CVSS)
- [CVE-2016-6683](https://cve.now/CVE-2016-6683.md): The kernel in Android before 2016-10-05 on Nexus devices allows attackers to obtain sensitive information via a crafted application, aka int (no CVSS)
- [CVE-2016-6684](https://cve.now/CVE-2016-6684.md): The kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Android One devices allows attac (no CVSS)
- [CVE-2016-6685](https://cve.now/CVE-2016-6685.md): The kernel in Android before 2016-10-05 on Nexus 6P devices allows attackers to obtain sensitive information via a crafted application, aka (no CVSS)
- [CVE-2016-6686](https://cve.now/CVE-2016-6686.md): The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted applicati (no CVSS)
- [CVE-2016-6687](https://cve.now/CVE-2016-6687.md): The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted applicati (no CVSS)
- [CVE-2016-6688](https://cve.now/CVE-2016-6688.md): The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted applicati (no CVSS)
- [CVE-2016-6689](https://cve.now/CVE-2016-6689.md): Binder in the kernel in Android before 2016-10-05 on Nexus devices allows attackers to obtain sensitive information via a crafted applicatio (no CVSS)
- [CVE-2016-6690](https://cve.now/CVE-2016-6690.md): The sound driver in the kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Nexus Player devices allows attacke (no CVSS)
- [CVE-2016-6691](https://cve.now/CVE-2016-6691.md): service/jni/com\_android\_server\_wifi\_Gbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android before 2016-10-05 allows remote attackers to (no CVSS)
- [CVE-2016-6692](https://cve.now/CVE-2016-6692.md): drivers/video/msm/mdss/mdss\_mdp\_pp.c in the Qualcomm MDSS driver in Android before 2016-10-05 allows attackers to cause a denial of service (no CVSS)
- [CVE-2016-6693](https://cve.now/CVE-2016-6693.md): sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of s (no CVSS)
- [CVE-2016-6694](https://cve.now/CVE-2016-6694.md): sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of s (no CVSS)
- [CVE-2016-6695](https://cve.now/CVE-2016-6695.md): sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of s (no CVSS)
- [CVE-2016-6696](https://cve.now/CVE-2016-6696.md): sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of s (no CVSS)
- [CVE-2016-7117](https://cve.now/CVE-2016-7117.md): Use-after-free vulnerability in the \_\_sys\_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to exec (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-10-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.