Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-7468 State: PUBLISHED Published: 2016-01-17T02:00:00 Last Updated: 2024-08-06T07:51:27.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to bypass intended restrictions on administrator tasks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21972485
CVE ID: CVE-2015-7469 State: PUBLISHED Published: 2016-01-17T02:00:00 Last Updated: 2024-08-06T07:51:28.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to bypass intended read-only restrictions by leveraging a JazzGuest role. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21972485
CVE ID: CVE-2015-7470 State: PUBLISHED Published: 2016-01-17T02:00:00 Last Updated: 2024-08-06T07:51:28.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors, as demonstrated by login information. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21972485
CVE ID: CVE-2015-7471 State: PUBLISHED Published: 2018-03-15T22:00:00 Last Updated: 2024-08-06T07:51:27.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Quality Manager (RQM) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Team Concert (RTC) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix
.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; and Rational Software Architect Design Manager (RSA DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4 allows remote authenticated users with project administrator privileges to inject arbitrary web script or HTML via a crafted project. IBM X-Force ID: 108429. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21982747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/108429
CVE ID: CVE-2015-7472 State: PUBLISHED Published: 2016-02-15T02:00:00 Last Updated: 2024-08-06T07:51:27.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF10 allows remote attackers to conduct LDAP injection attacks, and consequently read or write to repository data, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035324 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI53426 - http://www-01.ibm.com/support/docview.wss?uid=swg21972736
CVE ID: CVE-2015-7473 State: PUBLISHED Published: 2016-06-26T14:00:00 Last Updated: 2024-08-06T07:51:28.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass intended queue-manager command access restrictions by leveraging authority for +connect and +dsp. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21984555 - http://www.securitytracker.com/id/1036180
CVE ID: CVE-2015-7474 State: PUBLISHED Published: 2018-01-16T19:00:00 Last Updated: 2024-08-06T07:51:27.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jazz Foundation in IBM Rational Engineering Lifecycle Manager 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108501. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/108501 - http://www-01.ibm.com/support/docview.wss?uid=swg21983720
CVE ID: CVE-2015-7484 State: PUBLISHED Published: 2018-01-16T19:00:00 Last Updated: 2024-08-06T07:51:27.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Engineering Lifecycle Manager 3.0 before 3.0.1.6 iFix7 Interim Fix 1 and 4.0 before 4.0.7 iFix10 allow remote authenticated users with access to lifecycle projects to obtain sensitive information by sending a crafted URL to the Lifecycle Query Engine. IBM X-Force ID: 108619. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/108619 - http://www-01.ibm.com/support/docview.wss?uid=swg21983720
CVE ID: CVE-2015-7485 State: PUBLISHED Published: 2018-01-16T19:00:00 Last Updated: 2024-08-06T07:51:27.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Engineering Lifecycle Manager 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108626. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21983720 - https://exchange.xforce.ibmcloud.com/vulnerabilities/108626
CVE ID: CVE-2015-7486 State: PUBLISHED Published: 2018-01-16T19:00:00 Last Updated: 2024-08-06T07:51:27.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Rational Engineering Lifecycle Manager 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108633. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/108633 - http://www-01.ibm.com/support/docview.wss?uid=swg21983720
CVE ID: CVE-2015-7487 State: PUBLISHED Published: 2016-01-27T02:00:00 Last Updated: 2024-08-06T07:51:28.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX002, 7.5.1, and 7.6.0 before 7.6.0.3 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allow local users to obtain sensitive information by leveraging administrative privileges and reading log files. Additional Analyst Notes: - CVE Program Container: Reference
leveraging administrative privileges and reading log files. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21974537
CVE ID: CVE-2015-7488 State: PUBLISHED Published: 2016-01-27T02:00:00 Last Updated: 2024-08-06T07:51:27.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4.2.0.1, in certain LDAP File protocol configurations, allows remote attackers to discover an LDAP password via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005580
CVE ID: CVE-2015-7489 State: PUBLISHED Published: 2016-01-01T00:00:00 Last Updated: 2024-08-06T07:51:28.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM SPSS Statistics 22.0.0.2 before IF10 and 23.0.0.2 before IF7 uses weak permissions (Everyone: Write) for Python scripts, which allows local users to gain privileges by modifying a script. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21973502 - http://www.securitytracker.com/id/1034546
CVE ID: CVE-2015-7490 State: PUBLISHED Published: 2016-03-03T22:00:00 Last Updated: 2024-08-06T07:51:27.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035125 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54787 - http://www-01.ibm.com/support/docview.wss?uid=swg21975827
CVE ID: CVE-2015-7491 State: PUBLISHED Published: 2016-02-29T11:00:00 Last Updated: 2024-08-06T07:51:28.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21975358 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI56433
CVE ID: CVE-2015-7492 State: PUBLISHED Published: 2016-02-15T02:00:00 Last Updated: 2024-08-06T07:51:28.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Reference Data Management (RDM) in IBM InfoSphere Master Data Management 10.1, 11.0 before FP5, 11.3, 11.4, and 11.5 before FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21974981
CVE ID: CVE-2015-7493 State: PUBLISHED Published: 2017-02-08T22:00:00 Last Updated: 2024-08-06T07:51:28.060Z Vendors: IBM Corporation Products: InfoSphere Information Server Problem Types: Gain Privileges Description: IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes that could expose sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90529 - http://www.ibm.com/support/docview.wss?uid=swg21982034
CVE ID: CVE-2015-7494 State: PUBLISHED Published: 2017-02-08T22:00:00 Last Updated: 2024-08-06T07:51:28.123Z Vendors: IBM Corporation Products: Cloud Orchestrator Problem Types: Gain Access Description: A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API. An authenticated domain admin user might modify cross domain resources via a /services/[action]/launch API call, provided it would have been possible for the domain admin user to gain access to a resource identifier of the other domain. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg2C1000140 - http://www.securityfocus.com/bid/94438
CVE ID: CVE-2015-7496 State: PUBLISHED Published: 2015-11-24T20:00:00 Last Updated: 2024-08-06T07:51:28.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172328.html - http://www.openwall.com/lists/oss-security/2015/11/17/10 - https://access.redhat.com/errata/RHSA-2017:2128 - https://download.gnome.org/sources/gdm/3.18/gdm-3.18.2.news - https://bugzilla.gnome.org/show_bug.cgi?id=758032 - http://www.openwall.com/l
ome.org/sources/gdm/3.18/gdm-3.18.2.news - https://bugzilla.gnome.org/show_bug.cgi?id=758032 - http://www.openwall.com/lists/oss-security/2015/11/17/8
CVE ID: CVE-2015-7497 State: PUBLISHED Published: 2015-12-15T21:00:00 Last Updated: 2024-08-06T07:51:28.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2550.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html - https://bugzilla.redhat.com/show_bug.cgi?id=1281862 - http://www.debian.org/security/2015/dsa-3430 - http://xmlsoft.org/news.html - http://www.securityfocus.com
?id=1281862 - http://www.debian.org/security/2015/dsa-3430 - http://xmlsoft.org/news.html - http://www.securityfocus.com/bid/79508 - http://rhn.redhat.com/errata/RHSA-2016-1089.html - https://git.gnome.org/browse/libxml2/commit/?id=6360a31a84efe69d155ed96306b9a931a40beab9 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.ubuntu.com/usn/USN-2834-1 - http://www.securitytracker.com/id/1034243 - http://rhn.redhat.com/errata/RHSA-2015-2549.html - http://marc.info/?l=bugtraq&m=145382616617563&w=2 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172 - https://security.gentoo.org/glsa/201701-37 - http://lists.open
l/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172 - https://security.gentoo.org/glsa/201701-37 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html
CVE ID: CVE-2015-7498 State: PUBLISHED Published: 2015-12-15T21:00:00 Last Updated: 2024-08-06T07:51:28.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2550.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html - https://git.gnome.org/browse/libxml2/commit/?id=afd27c21f6b36e22682b7da20d726bce2dcb2f43 - http://w
6-01/msg00031.html - https://git.gnome.org/browse/libxml2/commit/?id=afd27c21f6b36e22682b7da20d726bce2dcb2f43 - http://www.debian.org/security/2015/dsa-3430 - https://bugzilla.redhat.com/show_bug.cgi?id=1281879 - http://xmlsoft.org/news.html - http://rhn.redhat.com/errata/RHSA-2016-1089.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.ubuntu.com/usn/USN-2834-1 - http://www.securityfocus.com/bid/79548 - http://www.securitytracker.com/id/1034243 - http://rhn.redhat.com/errata/RHSA-2015-2549.html - http://marc.info/?l=bugtraq&m=145382616617563&w=2 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172 - h
raq&m=145382616617563&w=2 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172 - https://security.gentoo.org/glsa/201701-37 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html
CVE ID: CVE-2015-7499 State: PUBLISHED Published: 2015-12-15T21:00:00 Last Updated: 2024-08-06T07:51:27.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2550.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html - https://support.apple.com/HT206167 - https://support.apple.com/HT206168 - http:/
pensuse-updates/2016-01/msg00031.html - https://support.apple.com/HT206167 - https://support.apple.com/HT206168 - http://www.debian.org/security/2015/dsa-3430 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://xmlsoft.org/news.html - https://git.gnome.org/browse/libxml2/commit/?id=35bcb1d758ed70aa7b257c9c3b3ff55e54e3d0da - http://rhn.redhat.com/errata/RHSA-2016-1089.html - https://git.gnome.org/browse/libxml2/commit/?id=28cd9cb747a94483f4aea7f0968d202c20bb4cfc - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - http://www.ubuntu.com/usn/USN-2834-1 -
tml - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - http://www.ubuntu.com/usn/USN-2834-1 - http://www.securitytracker.com/id/1034243 - http://rhn.redhat.com/errata/RHSA-2015-2549.html - https://bugzilla.redhat.com/show_bug.cgi?id=1281925 - http://marc.info/?l=bugtraq&m=145382616617563&w=2 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172 - https://security.gentoo.org/glsa/201701-37 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html - http://www.securityfocus.com/bid/79509 - https://support.apple.com/HT206169 - https://support.apple.c
ar/msg00002.html - http://www.securityfocus.com/bid/79509 - https://support.apple.com/HT206169 - https://support.apple.com/HT206166
CVE ID: CVE-2015-7500 State: PUBLISHED Published: 2015-12-15T21:00:00 Last Updated: 2024-08-06T07:51:28.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2550.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html - https://support.apple.com/HT206167 - http
0004.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html - https://support.apple.com/HT206167 - https://support.apple.com/HT206168 - http://www.debian.org/security/2015/dsa-3430 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://xmlsoft.org/news.html - https://git.gnome.org/browse/libxml2/commit/?id=f1063fdbe7fa66332bbb76874101c2a7b51b519f - http://rhn.redhat.com/errata/RHSA-2016-1089.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - http://www.ubuntu.com/usn/USN-2834-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1281943
nce/2016/Mar/msg00001.html - http://www.ubuntu.com/usn/USN-2834-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1281943 - http://www.securitytracker.com/id/1034243 - http://rhn.redhat.com/errata/RHSA-2015-2549.html - http://marc.info/?l=bugtraq&m=145382616617563&w=2 - http://www.securityfocus.com/bid/79562 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://security.gentoo.org/glsa/201701-37 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html - https://support.apple.com/HT206
g00120.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html - https://support.apple.com/HT206169 - https://support.apple.com/HT206166
CVE ID: CVE-2015-7501 State: PUBLISHED Published: 2017-11-09T00:00:00 Last Updated: 2024-08-06T07:51:28.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
ecute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0040.html - http://rhn.redhat.com/errata/RHSA-2015-2670.html - http://rhn.redhat.com/errata/RHSA-2015-2501.html - http://rhn.redhat.com/errata/RHSA-2015-2517.html - http://www.securityfocus.com/bid/78215 - http://www.securitytracker.com/id/1034097 - http://rhn.redhat.com/errata/RHSA-2015-2671.html - http://www.securitytracker.com/id/1037052 - http://www.securitytracker.com/id/1037640 - http://rhn.redhat.com/errata/RHSA-2015-2522.html - http://rhn.redhat.com/errata/RHSA-20
securitytracker.com/id/1037640 - http://rhn.redhat.com/errata/RHSA-2015-2522.html - http://rhn.redhat.com/errata/RHSA-2015-2521.html - http://rhn.redhat.com/errata/RHSA-2015-2516.html - http://rhn.redhat.com/errata/RHSA-2015-2500.html - http://rhn.redhat.com/errata/RHSA-2015-2514.html - http://rhn.redhat.com/errata/RHSA-2015-2502.html - https://rhn.redhat.com/errata/RHSA-2015-2536.html - http://rhn.redhat.com/errata/RHSA-2016-1773.html - http://rhn.redhat.com/errata/RHSA-2015-2524.html - http://www.securitytracker.com/id/1037053 - https://bugzilla.redhat.com/show_bug.cgi?id=1279330 - https://access.redhat.com/solutions/2045023 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-
=1279330 - https://access.redhat.com/solutions/2045023 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://access.redhat.com/security/vulnerabilities/2059393 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://security.netapp.com/advisory/ntap-20240216-0010/
CVE ID: CVE-2015-7502 State: PUBLISHED Published: 2016-04-11T21:00:00 Last Updated: 2024-08-06T07:51:28.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat CloudForms 3.2 Management Engine (CFME) 5.4.4 and CloudForms 4.0 Management Engine (CFME) 5.5.0 do not properly encrypt data in the backend PostgreSQL database, which might allow local users to obtain sensitive data and consequently gain privileges by leveraging access to (1) database exports or (2) log files. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2015:2551 - http://rhn.redhat.com/errata/RHSA-2015-2620.html - https://bugzilla.redhat.com/show_bug.cgi?id=12
rrata/RHSA-2015:2551 - http://rhn.redhat.com/errata/RHSA-2015-2620.html - https://bugzilla.redhat.com/show_bug.cgi?id=1283019
CVE ID: CVE-2015-7503 State: PUBLISHED Published: 2017-10-10T16:00:00 Last Updated: 2024-08-06T07:51:28.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zend Framework before 2.4.9, zend-framework/zend-crypt 2.4.x before 2.4.9, and 2.5.x before 2.5.2 allows remote attackers to recover the RSA private key. Additional Analyst Notes: - CVE Program Container: References: - https://framework.zend.com/security/advisory/ZF2015-10 - https://bugzilla.redhat.com/show_bug.cgi?id=1283137