Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-1130 State: PUBLISHED Published: 2015-04-10T14:00:00.000Z Last Updated: 2025-10-22T00:05:32.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.osvdb.org/120418 - https://www.exploit-db.com/exploits/36692/ - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1131 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: fontd in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1132, CVE-2015-1133, CVE-2015-1134, and CVE-2015-1135. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1132 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: fontd in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1133, CVE-2015-1134, and CVE-2015-1135. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1133 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: fontd in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1134, and CVE-2015-1135. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1134 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: fontd in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1133, and CVE-2015-1135. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1135 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: fontd in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1133, and CVE-2015-1134. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1136 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in CoreAnimation in Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code by leveraging improper use of a mutex. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1137 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA graphics driver in Apple OS X before 10.10.3 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via an unspecified IOService userclient type. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1138 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hypervisor in Apple OS X before 10.10.3 allows local users to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1139 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageIO in Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .sgi file. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1140 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IOHIDFamily in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1141 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mach_vm_read functionality in the kernel in Apple OS X before 10.10.3 allows local users to cause a denial of service (system crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1142 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: LaunchServices in Apple OS X before 10.10.3 allows local users to cause a denial of service (Finder crash) via crafted localization data. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1143 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: LaunchServices in Apple OS X before 10.10.3 allows local users to gain privileges via a crafted localized string, related to a "type confusion" issue. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1144 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the UniformTypeIdentifiers component in Apple OS X before 10.10.3 allows local users to gain privileges via a crafted Uniform Type Identifier. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1145 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Code Signing implementation in Apple OS X before 10.10.3 does not properly validate signatures, which allows local users to bypass intended access restrictions via a crafted bundle, a different vulnerability than CVE-2015-1146. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1146 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Code Signing implementation in Apple OS X before 10.10.3 does not properly validate signatures, which allows local users to bypass intended access restrictions via a crafted bundle, a different vulnerability than CVE-2015-1145. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1147 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Directory Client in Apple OS X before 10.10.3 sends unencrypted password-change requests in certain circumstances involving missing certificates, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1148 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Screen Sharing in Apple OS X before 10.10.3 stores the password of a user in a log file, which might allow context-dependent attackers to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/73982 - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
CVE ID: CVE-2015-1149 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the simulator in Swift in Apple Xcode before 6.3 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact by triggering an incorrect result of a type conversion. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204663 - http://www.securitytracker.com/id/1032049 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00004.html
CVE ID: CVE-2015-1150 State: PUBLISHED Published: 2015-04-28T22:00:00 Last Updated: 2024-08-06T04:33:20.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to bypass network-access restrictions by sending packets for which custom-rule blocking was intended. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204201 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00006.html - http://www.securitytracker.com/id/1032197
CVE ID: CVE-2015-1151 State: PUBLISHED Published: 2015-04-28T22:00:00 Last Updated: 2024-08-06T04:33:20.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages by connecting from an iPad client. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032196 - https://support.apple.com/HT204201 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00006.html
CVE ID: CVE-2015-1152 State: PUBLISHED Published: 2015-05-08T00:00:00 Last Updated: 2024-08-06T04:33:20.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-1153 and CVE-2015-1154. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205221 - https://support.apple.com/HT204826 - http://support.apple.com/kb/HT204941 - http://lists.apple.com/archives/security-announce/2015/Jun/
.apple.com/HT204826 - http://support.apple.com/kb/HT204941 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html - http://www.securityfocus.com/bid/74525 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html - http://www.securitytracker.com/id/1032270 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html - https://support.apple.com/kb/HT204949 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html - http://lists.apple.com/archives/security-announce/2015/May/msg00000.html
CVE ID: CVE-2015-1153 State: PUBLISHED Published: 2015-05-08T00:00:00 Last Updated: 2024-08-06T04:33:20.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-1152 and CVE-2015-1154. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205221 - https://support.apple.com/HT204826 - http://www.securityfocus.com/bid/74523 - http://support.apple.com/kb/HT204941 - http://lists.apple
.apple.com/HT204826 - http://www.securityfocus.com/bid/74523 - http://support.apple.com/kb/HT204941 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html - http://www.securitytracker.com/id/1032270 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html - https://support.apple.com/kb/HT204949 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html - http://lists.apple.com/archives/security-announce/2015/May/msg00000.html - http://www.ubuntu.com/usn/USN-2937-1
CVE ID: CVE-2015-1154 State: PUBLISHED Published: 2015-05-08T00:00:00 Last Updated: 2024-08-06T04:33:20.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-1152 and CVE-2015-1153. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204826 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html - http://www.securitytracker.com/id/1032270 - http://www.secur
ple.com/archives/security-announce/2015/Jun/msg00006.html - http://www.securitytracker.com/id/1032270 - http://www.securityfocus.com/bid/74526 - https://support.apple.com/kb/HT204949 - http://lists.apple.com/archives/security-announce/2015/May/msg00000.html
CVE ID: CVE-2015-1155 State: PUBLISHED Published: 2015-05-08T00:00:00 Last Updated: 2024-08-06T04:33:20.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to bypass the Same Origin Policy and read arbitrary files via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204826 - http://support.apple.com/kb/HT204941 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html - http://www.securitytracker.com/id/1032270 - http://www.securityfocus.com/bid/74527 - http://lists.open
3/msg00054.html - http://www.securitytracker.com/id/1032270 - http://www.securityfocus.com/bid/74527 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html - http://lists.apple.com/archives/security-announce/2015/May/msg00000.html - http://www.ubuntu.com/usn/USN-2937-1
CVE ID: CVE-2015-1156 State: PUBLISHED Published: 2015-05-08T00:00:00 Last Updated: 2024-08-06T04:33:20.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: The page-loading implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, does not properly handle the rel attribute in an A element, which allows remote attackers to bypass the Same Origin Policy for a link's target, and spoof the user interface, via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204826 - http://support.apple.com/kb/HT204941 - http://www.securityfocus.com/bid/74524 - http://www.securitytracker.com/
204826 - http://support.apple.com/kb/HT204941 - http://www.securityfocus.com/bid/74524 - http://www.securitytracker.com/id/1032270 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html - http://lists.apple.com/archives/security-announce/2015/May/msg00000.html
CVE ID: CVE-2015-1157 State: PUBLISHED Published: 2015-05-28T01:00:00 Last Updated: 2024-08-06T04:33:20.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in (1) an SMS message or (2) a WhatsApp message. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205221 - http://www.securityfocus.com/bid/75491 - http://support.apple.com/kb/HT204941 - http://www.reddit.com/r/apple
HT205221 - http://www.securityfocus.com/bid/75491 - http://support.apple.com/kb/HT204941 - http://www.reddit.com/r/apple/comments/37e8c1/malicious_text_message/ - https://ghostbin.com/paste/zws9m - http://www.reddit.com/r/apple/comments/37enow/about_the_latest_iphone_security_vulnerability/ - http://www.securitytracker.com/id/1032408 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://9to5mac.com/2015/05/27/how-to-fix-ios-text-message-bug-crash-reboot/ - http://www.reddit.com/r/explainlikeimfive/comments/37edde/eli5_how_that_text_you_can_send_to_friends_turns/ - http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html - http://support.apple.com
_to_friends_turns/ - http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html - http://support.apple.com/kb/HT204942 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html - http://zanzebek.com/a-simple-text-message-can-ruin-any-iphone/ - http://www.ibtimes.co.uk/apple-ios-bug-sees-message-app-crash-iphone-reboot-simply-by-receiving-message-1503083
CVE ID: CVE-2015-1158 State: PUBLISHED Published: 2015-06-26T10:00:00 Last Updated: 2024-08-06T04:33:20.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1221641 - http:/
ional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1221641 - http://www.debian.org/security/2015/dsa-3283 - http://rhn.redhat.com/errata/RHSA-2015-1123.html - https://bugzilla.opensuse.org/show_bug.cgi?id=924208 - http://www.ubuntu.com/usn/USN-2629-1 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10702 - http://www.securitytracker.com/id/1032556 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html - http://www.cups.org/blog.php?L1082 - http://www.kb.cert.org/vuls/id/810572 - http://www.securityfocus.com/bid/75098 - https://github.com/0x00string/oldays/blob/master/CVE-2015-1158.py - https://www.cups.org/
.securityfocus.com/bid/75098 - https://github.com/0x00string/oldays/blob/master/CVE-2015-1158.py - https://www.cups.org/str.php?L4609 - https://security.gentoo.org/glsa/201510-07 - https://code.google.com/p/google-security-research/issues/detail?id=455 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html - https://www.exploit-db.com/exploits/37336/ - http://googleprojectzero.blogspot.in/2015/06/owning-internet-printing-case-study-in.html - https://www.exploit-db.com/exploits/41233/ - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html
CVE ID: CVE-2015-1159 State: PUBLISHED Published: 2015-06-26T10:00:00 Last Updated: 2024-08-06T04:33:20.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3283 - http://rhn.redhat.com/errata/RHSA-2015-1123.html - https://bugzilla.opensuse.org/show_bug.cgi?id=924208 - http://www.ubuntu.com/usn/USN-2629-1 - http://kb.juniper.net/InfoCenter/index?page=co
nsuse.org/show_bug.cgi?id=924208 - http://www.ubuntu.com/usn/USN-2629-1 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10702 - http://www.securitytracker.com/id/1032556 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html - http://www.cups.org/blog.php?L1082 - https://bugzilla.redhat.com/show_bug.cgi?id=1221642 - http://www.kb.cert.org/vuls/id/810572 - https://www.cups.org/str.php?L4609 - http://www.securityfocus.com/bid/75106 - https://security.gentoo.org/glsa/201510-07 - https://code.google.com/p/google-security-research/issues/detail?id=455 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html - http://googleprojectzero.blogspot.