Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
x/kernel/v4.x/ChangeLog-4.3.4 - http://www.openwall.com/lists/oss-security/2015/12/16/3 - http://www.ubuntu.com/usn/USN-2886-1 - http://www.ubuntu.com/usn/USN-2890-3 - https://github.com/torvalds/linux/commit/5233252fce714053f0151680933571a2da9cbfb4 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5233252fce714053f0151680933571a2da9cbfb4 - http://www.securityfocus.com/bid/79724 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.ubuntu.com/usn/USN-2890-2 - http://www.
lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.ubuntu.com/usn/USN-2890-2 - http://www.ubuntu.com/usn/USN-2890-1 - http://www.debian.org/security/2016/dsa-3434 - http://www.ubuntu.com/usn/USN-2888-1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
CVE ID: CVE-2015-8576 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:39 Description: No description available.
CVE ID: CVE-2015-8577 State: PUBLISHED Published: 2015-12-16T18:00:00 Last Updated: 2024-08-06T08:20:43.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Buffer Overflow Protection (BOP) feature in McAfee VirusScan Enterprise before 8.8 Patch 6 allocates memory with Read, Write, Execute (RWX) permissions at predictable addresses on 32-bit platforms when protecting another application, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/78810 - http://breakingmalware.com/vulnerabilities/sedating-watchdog-abusing-security-products-bypa
ecurityfocus.com/bid/78810 - http://breakingmalware.com/vulnerabilities/sedating-watchdog-abusing-security-products-bypass-mitigations/ - http://blog.ensilo.com/the-av-vulnerability-that-bypasses-mitigations - https://kc.mcafee.com/corporate/index?page=content&id=SB10142
CVE ID: CVE-2015-8578 State: PUBLISHED Published: 2015-12-16T18:00:00 Last Updated: 2024-08-06T08:20:43.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: AVG Internet Security 2015 allocates memory with Read, Write, Execute (RWX) permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://breakingmalware.com/vulnerabilities/sedating-watchdog-abusing-security-products-bypass-mitigations/ - http://www.securityfocus.com/bid/78813 - http://blog.ensilo.com/the-av-vulnerability-that-bypasses-mitigations
tions/ - http://www.securityfocus.com/bid/78813 - http://blog.ensilo.com/the-av-vulnerability-that-bypasses-mitigations - http://breakingmalware.com/vulnerabilities/vulnerability-patching-learning-from-avg-on-doing-it-right/
CVE ID: CVE-2015-8579 State: PUBLISHED Published: 2015-12-16T18:00:00 Last Updated: 2024-08-06T08:20:43.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute (RWX) permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://breakingmalware.com/vulnerabilities/sedating-watchdog-abusing-security-products-bypass-mitigations/ - http://www.securityfocus.com/bid/78815 - http://blog.ensilo.com/the-av-vulnerability-that-bypasse
-bypass-mitigations/ - http://www.securityfocus.com/bid/78815 - http://blog.ensilo.com/the-av-vulnerability-that-bypasses-mitigations
CVE ID: CVE-2015-8580 State: PUBLISHED Published: 2015-12-16T21:00:00Z Last Updated: 2024-09-16T18:59:20.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple use-after-free vulnerabilities in the (1) Print method and (2) App object handling in Foxit Reader before 7.2.2 and Foxit PhantomPDF before 7.2.2 allow remote attackers to execute arbitrary code via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-622 - http://www.zerodayinitiative.com/advisories/ZDI-15-623 - https://www.foxitsoftware.com/support/security-bulletins.php#FRD-34
CVE ID: CVE-2015-8581 State: REJECTED Published: 2015-12-16T21:00:00 Last Updated: 2017-04-11T15:57:02 Description: No description available.
CVE ID: CVE-2015-8582 State: REJECTED Published: 2017-03-16T15:00:00 Last Updated: 2017-03-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-8583 State: REJECTED Published: 2017-03-16T15:00:00 Last Updated: 2017-03-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-8584 State: REJECTED Published: 2017-03-16T15:00:00 Last Updated: 2017-03-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-8585 State: REJECTED Published: 2017-03-16T15:00:00 Last Updated: 2017-03-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-8586 State: REJECTED Published: 2017-03-16T15:00:00 Last Updated: 2017-03-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-8587 State: REJECTED Published: 2017-03-16T15:00:00 Last Updated: 2017-03-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-8588 State: REJECTED Published: 2017-03-16T15:00:00 Last Updated: 2017-03-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-8589 State: REJECTED Published: 2017-03-16T15:00:00 Last Updated: 2017-03-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-8590 State: REJECTED Published: 2017-03-16T15:00:00 Last Updated: 2017-03-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-8591 State: REJECTED Published: 2017-03-16T15:00:00 Last Updated: 2017-03-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-8592 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T16:48:54.071Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Untrusted Pointer Dereference in Diag Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not validated prior to being dereferenced potentially resulting in Guest-OS memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2015-8593 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-17T00:46:24.530Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Copy without Checking Size of Input in 1x Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-8594 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T22:45:33.633Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Over-read in RFA Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in RFA-1x. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-8595 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T20:58:34.152Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Buffer Over-read in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in digital television/digital radio DRM. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2015-8596 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-17T01:35:45.573Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Input Validation in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths is missing in malware protection. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2015-8597 State: PUBLISHED Published: 2016-01-08T19:00:00 Last Updated: 2024-08-06T08:20:43.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway (ASG) 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in conjunction with a "clear text" one in a coaching page, as demonstrated by "http://www.%humbug-URL%.local/bluecoat-splash-API?%BASE64-URL%." Additional Analyst Notes: - CVE Program Container: References: - https://bto.bluecoat.com/security-advisory/sa107 - http://knowitsecure.se/2015/12/18/
E Program Container: References: - https://bto.bluecoat.com/security-advisory/sa107 - http://knowitsecure.se/2015/12/18/knowit-secure-sakrar-bluecoat/ - http://www.securitytracker.com/id/1034506
CVE ID: CVE-2015-8600 State: PUBLISHED Published: 2015-12-17T19:00:00 Last Updated: 2024-08-06T08:20:43.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication and obtain sensitive information, gain privileges, or have unspecified other impact via unknown vectors, aka SAP Security Note 2227855. Additional Analyst Notes: - CVE Program Container: References: - http://scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--review - https://erpscan.io/advisories/10761/
CVE ID: CVE-2015-8601 State: PUBLISHED Published: 2015-12-17T19:00:00Z Last Updated: 2024-09-17T02:00:36.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chat Room module 7.x-2.x before 7.x-2.2 for Drupal does not properly check permissions when setting up a websocket for chat messages, which allows remote attackers to bypass intended access restrictions and read messages from arbitrary Chat Rooms via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2627478 - https://www.drupal.org/node/2627428
CVE ID: CVE-2015-8602 State: PUBLISHED Published: 2015-12-17T19:00:00Z Last Updated: 2024-09-17T02:56:51.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Token Insert Entity module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permissions, which allows remote authenticated users with certain permissions to bypass intended access restrictions and possibly obtain sensitive information by inserting a token, which embeds a rendered entity in the main node. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2627638 - https://www.drupal.org/node/2571905
CVE ID: CVE-2015-8603 State: PUBLISHED Published: 2016-01-12T19:00:00 Last Updated: 2024-08-06T08:20:43.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Serendipity before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the serendipity[entry_id] parameter in an "edit" admin action to serendipity_admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/537248/100/0/threaded - http://packetstormsecurity.com/files/135164/Serendipity-2.0.2-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2016/Jan/18 - http://blog.s9y.org/archives/266-Serendip
2-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2016/Jan/18 - http://blog.s9y.org/archives/266-Serendipity-2.0.3-released.html
CVE ID: CVE-2015-8604 State: PUBLISHED Published: 2016-04-11T21:00:00 Last Updated: 2024-08-06T08:20:43.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the host_new_graphs function in graphs_new.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via the cg_g parameter in a save action. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201607-05 - http://bugs.cacti.net/view.php?id=2652 - http://www.securitytracker.com/id/1034573 - http://www.openwall.com/lists/oss-security/2016/01/04/8 - http://packetstormsecurity.com/files/135191/Cacti-0.8.8f-graphs_
tp://www.openwall.com/lists/oss-security/2016/01/04/8 - http://packetstormsecurity.com/files/135191/Cacti-0.8.8f-graphs_new.php-SQL-Injection.html - http://seclists.org/fulldisclosure/2016/Jan/16 - http://www.openwall.com/lists/oss-security/2016/01/04/9 - http://www.debian.org/security/2016/dsa-3494
CVE ID: CVE-2015-8605 State: PUBLISHED Published: 2016-01-14T22:00:00 Last Updated: 2024-08-06T08:20:43.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034657 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00168.html - https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/ - https://kb.isc.org/article/AA-01334 - https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-releas
ate-9-354-released/ - https://kb.isc.org/article/AA-01334 - https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/ - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175594.html - http://www.debian.org/security/2016/dsa-3442 - http://www.ubuntu.com/usn/USN-2868-1 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176031.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://www.securityfocus.com/bid/80703 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00162.html
CVE ID: CVE-2015-8606 State: PUBLISHED Published: 2016-04-13T15:00:00 Last Updated: 2024-08-06T08:20:43.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framework before 3.1.16 and 3.2.x before 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Locale or (2) FailedLoginCount parameter to admin/security/EditForm/field/Members/item/new/ItemEditForm. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/12/17/1 - http://www.openwall.com/lists/oss-security/2015/12/17/11 - http://www.openwall.com/lists/oss-security/2015/12
/12/17/1 - http://www.openwall.com/lists/oss-security/2015/12/17/11 - http://www.openwall.com/lists/oss-security/2015/12/18/5 - http://www.silverstripe.org/download/security-releases/ss-2015-026 - http://seclists.org/fulldisclosure/2015/Dec/55 - https://cybersecurityworks.com/zerodays/cve-2015-8606-silverstripe.html
CVE ID: CVE-2015-8607 State: PUBLISHED Published: 2016-01-13T15:00:00 Last Updated: 2024-08-06T08:20:43.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-75 - http://www.securityfocus.com/bid/80504 - http://www.securitytracker.com/id/1034772 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176228.htm
//www.securitytracker.com/id/1034772 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176228.html - http://www.debian.org/security/2016/dsa-3441 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175494.html - http://www.ubuntu.com/usn/USN-2878-1 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00112.html - https://www.oracle.com/security-alerts/cpujul2020.html - http://cpansearch.perl.org/src/RJBS/PathTools-3.62/Changes - https://rt.perl.org/Public/Bug/Display.html?id=126862 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.ht
/public/kb/docDisplay?docId=emr_na-c05240731 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
CVE ID: CVE-2015-8608 State: PUBLISHED Published: 2017-02-07T15:00:00 Last Updated: 2024-08-06T08:20:43.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service (out-of-bounds read) and possibly execute arbitrary code via a crafted (1) drive letter or (2) pInName argument. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpujul2020.html - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - https://packetstormsecurity.com/files/136649/Perl-5.22-VDir-MapPathA-W-Out-Of-Bounds-Reads-Buffer-Over-Rea
236622.html - https://packetstormsecurity.com/files/136649/Perl-5.22-VDir-MapPathA-W-Out-Of-Bounds-Reads-Buffer-Over-Reads.html - https://rt.perl.org/Public/Bug/Display.html?id=126755
CVE ID: CVE-2015-8611 State: PUBLISHED Published: 2016-01-12T20:00:00 Last Updated: 2024-08-06T08:20:43.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the 2000, 4000, 5000, 7000, and 10000 platforms do not properly sync passwords with the Always-On Management (AOM) subsystem, which might allow remote attackers to obtain login access to AOM via an (1) expired or (2) default password. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/kb/en-us/solutions/public/k/05/sol05272632.html - http://www.securitytracker.com/id/1034629
CVE ID: CVE-2015-8612 State: PUBLISHED Published: 2016-01-08T19:00:00 Last Updated: 2024-08-06T08:20:43.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcp_handler argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79688 - http://www.debian.org/security/2015/dsa-3427 - https://www.exploit-db.com/exploits/46186/ - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.421085 - https://twitter.com/thegrugq/status/677809527882813440 - htt
p?l=slackware-security&y=2015&m=slackware-security.421085 - https://twitter.com/thegrugq/status/677809527882813440 - http://www.openwall.com/lists/oss-security/2015/12/18/6 - https://github.com/blueman-project/blueman/issues/416 - http://www.openwall.com/lists/oss-security/2015/12/19/1 - http://packetstormsecurity.com/files/135047/Slackware-Security-Advisory-blueman-Updates.html - https://github.com/blueman-project/blueman/releases/tag/2.0.3
CVE ID: CVE-2015-8613 State: PUBLISHED Published: 2017-04-11T19:00:00 Last Updated: 2024-08-06T08:20:43.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instance crash) via a crafted SCSI controller CTRL_GET_INFO command. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/12/22/1 - http://www.securityfocus.com/bid/79719 - https://bugzilla.redhat.com/show_bug.cgi?id=1284008 - https://security.gentoo.org/glsa/201604-01 - http://w
/bid/79719 - https://bugzilla.redhat.com/show_bug.cgi?id=1284008 - https://security.gentoo.org/glsa/201604-01 - http://www.debian.org/security/2016/dsa-3471 - https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg03737.html
CVE ID: CVE-2015-8614 State: PUBLISHED Published: 2016-04-11T21:00:00 Last Updated: 2024-08-06T08:20:43.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion. Additional Analyst Notes: - CVE Program Container: References: - http://www.claws-mail.org/news.php - https://security.gentoo.org/glsa/201606-11 - http://www.openwall.com/lists/oss-security/2015/12/22/2 - http://lists.opensuse.org/opensuse-updates/2016-01/ms
606-11 - http://www.openwall.com/lists/oss-security/2015/12/22/2 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00000.html - http://www.debian.org/security/2016/dsa-3452 - http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=3557 - http://git.claws-mail.org/?p=claws.git%3Ba=commit%3Bh=d390fa07f5548f3173dd9cc13b233db5ce934c82 - http://www.openwall.com/lists/oss-security/2015/12/21/10
CVE ID: CVE-2015-8615 State: PUBLISHED Published: 2016-01-08T19:00:00 Last Updated: 2024-08-06T08:20:43.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback method, which allows local HVM guest OS users to cause a denial of service via a large number of changes to the callback method (HVM_PARAM_CALLBACK_IRQ). Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-169.html - http://www.securityfocus.com/bid/79644 - http://www.securitytracker.com/id/1034512
CVE ID: CVE-2015-8616 State: PUBLISHED Published: 2016-01-19T02:00:00 Last Updated: 2024-08-06T08:20:43.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collator_sort.c in PHP 7.x before 7.0.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging the relationships between a key buffer and a destroyed array. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=71020 - http://php.net/ChangeLog-7.php
CVE ID: CVE-2015-8617 State: PUBLISHED Published: 2016-01-19T02:00:00 Last Updated: 2024-08-06T08:20:43.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the zend_throw_or_error function in Zend/zend_execute_API.c in PHP 7.x before 7.0.1 allows remote attackers to execute arbitrary code via format string specifiers in a string that is misused as a class name, leading to incorrect error handling. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/php/php-src/commit/b101a6bbd4f2181c360bd38e7683df4a03cba83e - http://www.securitytracker.com/id/1034543 - http://php.net/ChangeLog-7.php - https://bugs.php.net/bug.php?id=7
3cba83e - http://www.securitytracker.com/id/1034543 - http://php.net/ChangeLog-7.php - https://bugs.php.net/bug.php?id=71105