Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e5ddb2cd3d970c - http://www.securitytracker.com/id/1033094 - http://www.securityfocus.com/bid/76052 - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htm - http://www.huawei.com/en/psirt/security-advisories/hw-448928 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ
CVE ID: CVE-2015-1541 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T04:47:16.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AppWidgetServiceImpl implementation in com/android/server/appwidget/AppWidgetServiceImpl.java in the Settings application in Android before 5.1.1 LMY48I allows attackers to obtain a URI permission via an application that sends an Intent with a (1) FLAG_GRANT_READ_URI_PERMISSION or (2) FLAG_GRANT_WRITE_URI_PERMISSION flag, as demonstrated by bypassing intended restrictions on reading contacts, aka internal bug 19618745. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platfor
bug 19618745. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/0b98d304c467184602b4c6bce76fda0b0274bc07 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ
CVE ID: CVE-2015-1545 State: PUBLISHED Published: 2015-02-12T16:00:00 Last Updated: 2024-08-06T04:47:16.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72519 - http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commit%3Bh=c32e74763f77675b9e144126e375977ed6dc562c - https://support.apple.com/HT204659 - https://exchange.xfo
.git%3Ba=commit%3Bh=c32e74763f77675b9e144126e375977ed6dc562c - https://support.apple.com/HT204659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100937 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776988 - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://www.debian.org/security/2015/dsa-3209 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://lists.opensuse.org/opensuse-updates/2015-07/msg00069.html - http://www.securitytracker.com/id/1032399 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:073 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:074 - http://www.openldap.org/its/?find
ame=MDVSA-2015:073 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:074 - http://www.openldap.org/its/?findid=8027 - http://secunia.com/advisories/62787 - http://www.openwall.com/lists/oss-security/2015/02/07/3 - https://support.apple.com/kb/HT210788 - https://seclists.org/bugtraq/2019/Dec/23 - http://seclists.org/fulldisclosure/2019/Dec/26
CVE ID: CVE-2015-1546 State: PUBLISHED Published: 2015-02-12T16:00:00 Last Updated: 2024-08-06T04:47:16.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service (crash) via a crafted search query with a matched values control. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776991 - https://support.apple.com/HT204659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100938 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://lists.op
.com/vulnerabilities/100938 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://lists.opensuse.org/opensuse-updates/2015-07/msg00069.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:073 - http://www.openldap.org/its/?findid=8046 - http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commit%3Bh=2f1a2dd329b91afe561cd06b872d09630d4edb6a - http://secunia.com/advisories/62787 - http://www.openwall.com/lists/oss-security/2015/02/07/3
CVE ID: CVE-2015-1547 State: PUBLISHED Published: 2016-04-13T17:00:00 Last Updated: 2024-08-06T04:47:16.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff5.tif. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://security.gentoo.org/glsa/201701-16 - http://www
/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://security.gentoo.org/glsa/201701-16 - http://www.securityfocus.com/bid/73438 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://rhn.redhat.com/errata/RHSA-2016-1546.html - http://openwall.com/lists/oss-security/2015/02/07/5 - http://www.debian.org/security/2016/dsa-3467 - http://openwall.com/lists/oss-security/2015/01/24/16
CVE ID: CVE-2015-1548 State: PUBLISHED Published: 2015-02-10T19:00:00 Last Updated: 2024-08-06T04:47:17.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73450 - http://itinsight.hu/en/posts/articles/2015-01-23-mini-httpd/
CVE ID: CVE-2015-1550 State: PUBLISHED Published: 2015-05-28T14:00:00 Last Updated: 2024-08-06T04:47:16.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote administrators to execute arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-006.txt
CVE ID: CVE-2015-1551 State: PUBLISHED Published: 2015-05-28T14:00:00 Last Updated: 2024-08-06T04:47:17.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.4 allows remote administrators to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-006.txt
CVE ID: CVE-2015-1554 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-06T04:47:17.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: kgb-bot 1.33-2 allows remote attackers to cause a denial of service (crash). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1186590 - http://www.openwall.com/lists/oss-security/2015/02/08/1
CVE ID: CVE-2015-1555 State: PUBLISHED Published: 2017-08-07T17:00:00 Last Updated: 2024-08-06T04:47:16.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session validators. Additional Analyst Notes: - CVE Program Container: References: - http://framework.zend.com/security/advisory/ZF2015-01
CVE ID: CVE-2015-1558 State: PUBLISHED Published: 2015-02-09T11:00:00 Last Updated: 2024-08-06T04:47:17.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service (file descriptor consumption) via an SDP offer containing only incompatible codecs. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.asterisk.org/pub/security/AST-2015-001.html - http://www.securitytracker.com/id/1031661 - http://seclists.org/fulldisclosure/2015/Jan/116 - http://www.security
html - http://www.securitytracker.com/id/1031661 - http://seclists.org/fulldisclosure/2015/Jan/116 - http://www.securityfocus.com/archive/1/534573/100/0/threaded
CVE ID: CVE-2015-1559 State: PUBLISHED Published: 2015-02-10T17:00:00 Last Updated: 2024-08-06T04:47:16.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in administrator.php in Epignosis eFront Open Source Edition before 3.6.15.3 build 18022 allow remote attackers to hijack the authentication of administrators for requests that (1) delete modules via the delete_module parameter, (2) deactivate modules via the deactivate_module parameter, (3) activate modules via the activate_module parameter, (4) delete users via the delete_user parameter, (5) deactivate users via the deactivate_user parameter, (6) activate users via t
te users via the delete_user parameter, (5) deactivate users via the deactivate_user parameter, (6) activate users via the activate_user parameter, (7) activate themes via the set_theme parameter, (8) deactivate themes via the set_theme parameter, (9) delete themes via the delete parameter, (10) deactivate events (user registration or email activation) via the deactivate_notification parameter, (11) activate events via the activate_notification parameter, (12) delete events via the delete_notification parameter, (13) deactivate language settings via the deactivate_language parameter, (14) activate language settings via the activate_language parameter, (15) delete language settings via the de
parameter, (14) activate language settings via the activate_language parameter, (15) delete language settings via the delete_language parameter, or (16) activate or deactivate the autologin feature for a user via a crafted maintenance request. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2015/q1/468 - http://seclists.org/oss-sec/2015/q1/475 - http://seclists.org/fulldisclosure/2015/Feb/30 - http://sroesemann.blogspot.de/2015/01/sroeadv-2015-09.html - http://www.securityfocus.com/bid/72533 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100735 - http://www.efrontlearning.net/download
CVE ID: CVE-2015-1560 State: PUBLISHED Published: 2015-07-14T16:00:00 Last Updated: 2024-08-06T04:47:17.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon web 2.7.0) allows remote attackers to execute arbitrary SQL commands via the sid parameter to include/common/XmlTree/GetXmlTree.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132607/Merethis-Centreon-2.5.4-SQL-Injection-Remote-Command-Execution.html - https://forge.centreon.com/projects/centreon/reposit
rethis-Centreon-2.5.4-SQL-Injection-Remote-Command-Execution.html - https://forge.centreon.com/projects/centreon/repository/revisions/d14f213b9c60de1bad0b464fd6403c828cf12582 - http://www.securityfocus.com/archive/1/535961/100/0/threaded - https://github.com/centreon/centreon/commit/668a928f34dc0f67723d3db138c042eb7f979f28#diff-f69d4a3d3d177d024c22419357c1f4f4
CVE ID: CVE-2015-1561 State: PUBLISHED Published: 2015-07-14T16:00:00 Last Updated: 2024-08-06T04:47:17.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: The escape_command function in include/Administration/corePerformance/getStats.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon 19.10.0) uses an incorrect regular expression, which allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ns_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132607/Merethis-Centreon-2.5.4-SQL-Injection-Remote-Command-Execution.html - https://forge.centreon.com
curity.com/files/132607/Merethis-Centreon-2.5.4-SQL-Injection-Remote-Command-Execution.html - https://forge.centreon.com/projects/centreon/repository/revisions/387dffdd051dbc7a234e1138a9d06f3089bb55bb - http://www.securityfocus.com/archive/1/535961/100/0/threaded - https://github.com/centreon/centreon/commit/a78c60aad6fd5af9b51a6d5de5d65560ea37a98a#diff-27550b563fa8d660b64bca871a219cb1
CVE ID: CVE-2015-1562 State: PUBLISHED Published: 2015-02-09T11:00:00Z Last Updated: 2024-09-17T02:37:19.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to admin/user_management.php, (2) data_search parameter to /admin/profile_data.php, or (3) filter parameter to error_log.php. Additional Analyst Notes: - CVE Program Container: References: - http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-05.html - http://sroesemann.blogspot.de/2015/01/sroeadv-2015-05.html - http://seclists.org/fulldisclosure/
-sroeadv-2015-05.html - http://sroesemann.blogspot.de/2015/01/sroeadv-2015-05.html - http://seclists.org/fulldisclosure/2015/Jan/112 - http://www.openwall.com/lists/oss-security/2015/01/28/8 - https://github.com/sauruscms/Saurus-CMS-Community-Edition/commit/8dec044d0fdabcb9b04e58037623385a97b0d288
CVE ID: CVE-2015-1563 State: PUBLISHED Published: 2015-02-09T11:00:00 Last Updated: 2024-08-06T04:47:16.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ARM GIC distributor virtualization in Xen 4.4.x and 4.5.x allows local guests to cause a denial of service by causing a large number messages to be logged. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.html - http://www.securitytracker.com/id/1031663 - http://www.openwall.com/lists/oss-security/2015/01/29/9 - http://xenbits.xen.org/xsa/advisory-118.html - http://www.securityfocus.com/bid/72766
CVE ID: CVE-2015-1564 State: PUBLISHED Published: 2015-02-09T17:00:00Z Last Updated: 2024-09-17T04:14:36.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in style-underground/search in Plain Black WebGUI 7.10.29 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search field. Additional Analyst Notes: - CVE Program Container: References: - http://secupent.com/exploit/WebGUI-7.10.29-XSS.txt - http://seclists.org/fulldisclosure/2015/Jan/79
CVE ID: CVE-2015-1565 State: PUBLISHED Published: 2015-02-09T17:00:00Z Last Updated: 2024-09-17T02:15:44.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and 8.x before 8.1.2-00, as used in Hitachi Command Suite, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62579 - http://secunia.com/advisories/62584 - http://www.hitachi.co.jp/P
er: References: - http://secunia.com/advisories/62579 - http://secunia.com/advisories/62584 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS15-001/index.html
CVE ID: CVE-2015-1566 State: PUBLISHED Published: 2015-02-09T17:00:00Z Last Updated: 2024-09-16T20:51:57.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.dnnsoftware.com/platform/manage/security-center - http://secunia.com/advisories/62832
CVE ID: CVE-2015-1567 State: PUBLISHED Published: 2015-02-09T17:00:00 Last Updated: 2024-08-06T04:47:17.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the admin page in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote authenticated users with the "edit gd infinite scroll settings" permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2415219 - https://www.drupal.org/node/2415885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100629
CVE ID: CVE-2015-1568 State: PUBLISHED Published: 2015-02-09T17:00:00 Last Updated: 2024-08-06T04:47:16.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote attackers to hijack the authentication of users with the "edit gd infinite scroll settings" permission for requests that delete settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2415219 - https://www.drupal.org/node/2415885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100628
CVE ID: CVE-2015-1569 State: PUBLISHED Published: 2015-02-10T20:00:00Z Last Updated: 2024-09-17T03:33:01.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof SSL VPN servers via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiClient_Multiple_Vulnerabilities.pdf - http://seclists.org/fulldisclosure/2015/Jan/124
CVE ID: CVE-2015-1570 State: PUBLISHED Published: 2015-02-10T20:00:00Z Last Updated: 2024-09-16T19:19:32.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiClient_Multiple_Vulnerabilities.pdf - http://seclists.org/fulldisclosure/2015/Jan/124
CVE ID: CVE-2015-1571 State: PUBLISHED Published: 2015-02-10T20:00:00 Last Updated: 2024-08-06T04:47:17.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CAPWAP DTLS protocol implementation in Fortinet FortiOS 5.0 Patch 7 build 4457 uses the same certificate and private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the Fortinet_Factory certificate and private key. NOTE: FG-IR-15-002 says "The Fortinet_Factory certificate is unique to each device ... An attacker cannot therefore stage a MitM attack. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/ful
therefore stage a MitM attack. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jan/125 - http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiOS_Multiple_Vulnerabilities.pdf - http://www.fortiguard.com/advisory/FG-IR-15-002/
CVE ID: CVE-2015-1572 State: PUBLISHED Published: 2015-02-24T15:00:00 Last Updated: 2024-08-06T04:47:16.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72709 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150606.html - http://www.debian.org/security/2015/dsa-3166 - http://www.
oject.org/pipermail/package-announce/2015-March/150606.html - http://www.debian.org/security/2015/dsa-3166 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:068 - http://lists.opensuse.org/opensuse-updates/2015-06/msg00010.html - https://git.kernel.org/cgit/fs/ext2/e2fsprogs.git/commit/?id=49d0fe2a14f2a23da2fe299643379b8c1d37df73 - https://security.gentoo.org/glsa/201507-22 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150805.html - http://www.ubuntu.com/usn/USN-2507-1 - http://advisories.mageia.org/MGASA-2015-0088.html - http://lists.opensuse.org/opensuse-updates/2015-06/msg00006.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:067 - ht
ensuse.org/opensuse-updates/2015-06/msg00006.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:067 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00019.html
CVE ID: CVE-2015-1573 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-06T04:47:17.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nft_flush_table function in net/netfilter/nf_tables_api.c in the Linux kernel before 3.18.5 mishandles the interaction between cross-chain jumps and ruleset flushes, which allows local users to cause a denial of service (panic) by leveraging the CAP_NET_ADMIN capability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1190966 - https://github.com/torvalds/linux/commit/a2f18db0c68fec96631c10cad9384c196e9008ac - http://git.kernel.org/cgit/linux/kernel/git/torvalds/
m/torvalds/linux/commit/a2f18db0c68fec96631c10cad9384c196e9008ac - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a2f18db0c68fec96631c10cad9384c196e9008ac - http://rhn.redhat.com/errata/RHSA-2015-1138.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5 - http://www.securityfocus.com/bid/72552 - http://www.openwall.com/lists/oss-security/2015/02/10/13 - http://rhn.redhat.com/errata/RHSA-2015-1137.html
CVE ID: CVE-2015-1574 State: PUBLISHED Published: 2015-02-15T20:00:00 Last Updated: 2024-08-06T04:47:17.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Google Email application 4.2.2.0200 for Android allows remote attackers to cause a denial of service (persistent application crash) via a "Content-Disposition: ;" header in an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Feb/58 - http://hmarco.org/bugs/google_email_app_4.2.2_denial_of_service.html - http://openwall.com/lists/oss-security/2015/02/10/9 - http://packetstormsecurity.com/files/130388/Google-Email-4.4.2.0200-Denial-Of-Service.html - http
ecurity/2015/02/10/9 - http://packetstormsecurity.com/files/130388/Google-Email-4.4.2.0200-Denial-Of-Service.html - http://openwall.com/lists/oss-security/2015/02/12/15 - http://www.securityfocus.com/archive/1/534703/100/0/threaded
CVE ID: CVE-2015-1575 State: PUBLISHED Published: 2015-02-11T19:00:00Z Last Updated: 2024-09-16T19:46:56.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in u5CMS before 3.9.4 allow remote attackers to inject arbitrary web script or HTML via the (1) c, (2) i, (3) l, or (4) p parameter to index.php; the (5) a or (6) b parameter to u5admin/cookie.php; the name parameter to (7) copy.php or (8) delete.php in u5admin/; the (9) f or (10) typ parameter to u5admin/deletefile.php; the (11) n parameter to u5admin/done.php; the (12) c parameter to u5admin/editor.php; the (13) uri parameter to u5admin/meta2.php; the (14) n parameter to u