Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-3886 State: PUBLISHED Published: 2017-07-21T14:00:00 Last Updated: 2024-08-06T05:56:16.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1221266 - https://github.com/gobby/libinfinity/commit/c97f870f5ae13112988d9f8ad464b4f679903706 - http://seclists.org/oss-sec/2015/q2/410 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783601 - https://github.com/gobby/gobby/issues/61
CVE ID: CVE-2015-3887 State: PUBLISHED Published: 2017-09-21T16:00:00 Last Updated: 2024-08-06T05:56:16.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so library in the current working directory, which is referenced in the LD_PRELOAD path. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/05/13/11 - https://github.com/rofl0r/proxychains-ng/commit/9ab7dbeb3baff67a51d0c5e71465c453be0890b5#diff-803c5170888b8642f2a97e5e9423d399 - https://bugzilla.redhat.com/show_bug.cgi?id=1147013
67a51d0c5e71465c453be0890b5#diff-803c5170888b8642f2a97e5e9423d399 - https://bugzilla.redhat.com/show_bug.cgi?id=1147013 - http://www.securityfocus.com/bid/74648 - https://github.com/rofl0r/proxychains-ng/blob/v4.9/README#L56 - https://github.com/rofl0r/proxychains-ng/issues/60
CVE ID: CVE-2015-3888 State: PUBLISHED Published: 2018-01-12T17:00:00 Last Updated: 2024-08-06T05:56:16.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers via spaces in a tel: URL. Additional Analyst Notes: - CVE Program Container: References: - http://sotiriu.de/adv/NSOADV-2015-001.txt
CVE ID: CVE-2015-3890 State: PUBLISHED Published: 2017-09-20T18:00:00 Last Updated: 2024-08-06T05:56:16.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Open Litespeed before 1.3.10. Additional Analyst Notes: - CVE Program Container: References: - http://www.security-assessment.com/files/documents/advisory/Open%20Litespeed%20Use%20After%20Free%20Vulnerability.pdf
CVE ID: CVE-2015-3897 State: PUBLISHED Published: 2015-06-18T18:00:00 Last Updated: 2024-08-06T05:56:16.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the theme parameter and a file path in the location parameter to bonita/portal/themeResource. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132237/Bonita-BPM-6.5.1-Directory-Traversal-Open-Redirect.html - http://www.securityfocus.com/archive/1/535733/100/0/threaded - https://www.htbridge.com/advisory/HTB23259
CVE ID: CVE-2015-3898 State: PUBLISHED Published: 2018-02-28T21:00:00 Last Updated: 2024-08-06T05:56:16.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the redirectUrl parameter to (1) bonita/login.jsp or (2) bonita/loginservice. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132237/Bonita-BPM-6.5.1-Directory-Traversal-Open-Redirect.html - http://www.securityfocus.com/archive/1/535733/100/0/threaded - https://www.htbridge.com/advisory/HT
Open-Redirect.html - http://www.securityfocus.com/archive/1/535733/100/0/threaded - https://www.htbridge.com/advisory/HTB23259
CVE ID: CVE-2015-3900 State: PUBLISHED Published: 2015-06-24T14:00:00 Last Updated: 2024-08-06T05:56:16.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a "DNS hijack attack." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1657.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163502.html - http://lists.fedoraproject.org/pipermail/package-announc
roject.org/pipermail/package-announce/2015-August/163502.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163600.html - http://www.openwall.com/lists/oss-security/2015/06/26/2 - https://www.trustwave.com/Resources/SpiderLabs-Blog/Attacking-Ruby-Gem-Security-with-CVE-2015-3900/ - http://www.securityfocus.com/bid/75482 - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-007/?fid=6356 - http://blog.rubygems.org/2015/05/14/CVE-2015-3900.html - https://puppet.com/security/cve/CVE-2015-3900 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164236.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511
ermail/package-announce/2015-August/164236.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-3902 State: PUBLISHED Published: 2015-05-26T15:00:00 Last Updated: 2024-08-06T05:56:16.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the setup process in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 allow remote attackers to hijack the authentication of administrators for requests that modify the configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-07/msg00008.html - http://www.debian.org/security/2015/dsa-3382 - https://github.com/phpmyadmin/phpmyadmin/comm
tes/2015-07/msg00008.html - http://www.debian.org/security/2015/dsa-3382 - https://github.com/phpmyadmin/phpmyadmin/commit/ee92eb9bab8e2d546756c1d4aec81ec7c8e44b83 - http://www.securitytracker.com/id/1032404 - http://www.phpmyadmin.net/home_page/security/PMASA-2015-2.php - http://www.securityfocus.com/bid/74657
CVE ID: CVE-2015-3903 State: PUBLISHED Published: 2015-05-26T15:00:00 Last Updated: 2024-08-06T05:56:16.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: libraries/Config.class.php in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 disables X.509 certificate verification for GitHub API calls over SSL, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-07/msg00008.html - http://www.debian.org/security/2015/dsa-3382 - https://github.com/phpmyadmi
org/opensuse-updates/2015-07/msg00008.html - http://www.debian.org/security/2015/dsa-3382 - https://github.com/phpmyadmin/phpmyadmin/commit/5ebc4daf131dd3bd646326267f3e765d0249bbb4 - http://www.securityfocus.com/bid/74660 - http://www.securityfocus.com/archive/1/535547/100/0/threaded - http://packetstormsecurity.com/files/131954/phpMyAdmin-4.4.6-Man-In-The-Middle.html - http://cxsecurity.com/issue/WLB-2015050095 - http://www.securitytracker.com/id/1032403 - http://www.phpmyadmin.net/home_page/security/PMASA-2015-3.php
CVE ID: CVE-2015-3904 State: PUBLISHED Published: 2015-05-29T14:00:00 Last Updated: 2024-08-06T05:56:16.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in roomcloud.php in the Roomcloud plugin before 1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) pin, (2) start_day, (3) start_month, (4) start_year, (5) end_day, (6) end_month, (7) end_year, (8) lang, (9) adults, or (10) children parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/131934/WordPress-Roomcloud-1.1-Cross-Site-Scripting.html - https://wordpress.org/plugins/room
ketstormsecurity.com/files/131934/WordPress-Roomcloud-1.1-Cross-Site-Scripting.html - https://wordpress.org/plugins/roomcloud/changelog/ - http://seclists.org/fulldisclosure/2015/May/40 - http://www.securityfocus.com/bid/74580 - https://plugins.trac.wordpress.org/changeset/1117499
CVE ID: CVE-2015-3905 State: PUBLISHED Published: 2015-06-08T14:00:00 Last Updated: 2024-08-06T05:56:16.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kohler/t1utils/blob/master/NEWS - https://github.com/kohler/t1utils/commit/6b9d1aafcb61a3663c883663eb19ccdbfcde8d33 - http://www.openwall.com/lists/oss-security/2015/05/13/9 - http://www.securityfocus.com/bid/74674 - https://github.com/kohler/t
/www.openwall.com/lists/oss-security/2015/05/13/9 - http://www.securityfocus.com/bid/74674 - https://github.com/kohler/t1utils/issues/4 - http://www.openwall.com/lists/oss-security/2015/05/22/10 - https://security.gentoo.org/glsa/201507-10 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=779274 - https://bugzilla.redhat.com/show_bug.cgi?id=1218365 - http://ubuntu.com/usn/usn-2627-1
CVE ID: CVE-2015-3906 State: PUBLISHED Published: 2015-05-26T15:00:00 Last Updated: 2024-08-06T05:56:16.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: The logcat_dump_text function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not properly handle a lack of \0 termination, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted message in a packet, a different vulnerability than CVE-2015-3815. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74837 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11188 - http://www.wir
s: - http://www.securityfocus.com/bid/74837 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11188 - http://www.wireshark.org/security/wnpa-sec-2015-18.html - https://security.gentoo.org/glsa/201510-03 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b3b1f7c3aa2233a147294bad833b748d38fba84d
CVE ID: CVE-2015-3907 State: PUBLISHED Published: 2019-07-03T20:54:57 Last Updated: 2024-08-06T05:56:16.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: CodeIgniter Rest Server (aka codeigniter-restserver) 2.7.1 allows XXE attacks. Additional Analyst Notes: - CVE Program Container: References: - https://kb.hitcon.org/post/127839729207/codeigniter-rest-server-module-xxe-cve-2015-3907
CVE ID: CVE-2015-3908 State: PUBLISHED Published: 2015-08-12T14:00:00 Last Updated: 2024-08-06T05:56:16.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/07/14/4 - http://lists.opensuse.org/opensuse-updates/2015-07/msg00051.html - http://www.ansible.com/security - http://lists.opensuse.org/opensuse-updates
rg/opensuse-updates/2015-07/msg00051.html - http://www.ansible.com/security - http://lists.opensuse.org/opensuse-updates/2015-08/msg00029.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html
CVE ID: CVE-2015-3910 State: PUBLISHED Published: 2015-05-20T10:00:00 Last Updated: 2024-08-06T05:56:16.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google V8 before 4.3.61.21, as used in Google Chrome before 43.0.2357.65, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html - http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html - http://www.securityfocus.com/bid/74730
CVE ID: CVE-2015-3911 State: PUBLISHED Published: 2015-05-21T19:00:00 Last Updated: 2024-08-06T05:56:16.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei E587 Mobile WiFi with firmware before 11.203.30.00.00 allows remote attackers to bypass authentication, change configurations, send messages, and cause a denial of service (device restart) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-425408.htm - http://www.securityfocus.com/bid/74434
CVE ID: CVE-2015-3912 State: PUBLISHED Published: 2015-05-21T19:00:00 Last Updated: 2024-08-06T05:56:16.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei E355s Mobile WiFi with firmware before 22.158.45.02.625 and WEBUI before 13.100.04.01.625 allows remote attackers to obtain sensitive configuration information by sniffing the network or sending unspecified commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-425435.htm - http://www.securityfocus.com/bid/74397
CVE ID: CVE-2015-3913 State: PUBLISHED Published: 2017-06-08T21:00:00 Last Updated: 2024-08-06T05:56:16.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message. Additional Analyst Notes: - CVE Program Container: References: - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-427449.htm
CVE ID: CVE-2015-3919 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-3921 State: PUBLISHED Published: 2015-05-27T18:00:00 Last Updated: 2024-08-06T05:56:16.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132004/Coppermine-Gallery-1.5.34-XSS-Open-Redirection.html - http://www.securitytracker.com/id/1032558 - http://www.securityfocus.com/bid/74872 - http://forum.coppermine-gallery.net/index.php/topic%2C78194.0.html
CVE ID: CVE-2015-3922 State: PUBLISHED Published: 2015-05-27T18:00:00 Last Updated: 2024-08-06T05:56:16.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in mode.php in Coppermine Photo Gallery before 1.5.36 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132004/Coppermine-Gallery-1.5.34-XSS-Open-Redirection.html - http://www.securityfocus.com/bid/74869 - http://www.securitytracker.com/id/1032558 - http://forum.coppermine-gallery.net/index.php/topic%2C78194.0.html
CVE ID: CVE-2015-3923 State: PUBLISHED Published: 2015-06-10T18:00:00 Last Updated: 2024-08-06T05:56:16.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder parameter to minibrowser.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75140 - http://packetstormsecurity.com/files/132004/Coppermine-Gallery-1.5.34-XSS-Open-Redirection.html - http://www.securitytracker.com/id/1032558 - http://forum.coppermine-gallery.net/index.php/topic%2C78194.0.html
CVE ID: CVE-2015-3931 State: PUBLISHED Published: 2017-07-21T14:00:00 Last Updated: 2024-08-06T05:56:16.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsec e-Szigno before 3.2.7.12 allows remote attackers to perform XML signature wrapping attacks via an e-akta signed document with a ds:Object node with a crafted payload prepended to a valid ds:Object. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75487 - https://e-szigno.hu/letoltesek/programok-driverek.html - https://www.search-lab.hu/about-us/news/107-37-million-digitally-signed-documents-had-to-be-reverified - http://packetstormsecurity.com/files/132473/Microsec-e-Sz
7-37-million-digitally-signed-documents-had-to-be-reverified - http://packetstormsecurity.com/files/132473/Microsec-e-Szigno-Netlock-Mokka-XML-Signature-Wrapping.html - http://www.neih.gov.hu/?q=node/66 - https://www.search-lab.hu/eakta
CVE ID: CVE-2015-3932 State: PUBLISHED Published: 2017-07-21T14:00:00 Last Updated: 2024-08-06T05:56:16.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netlock Mokka before 2.7.8.1204 allows remote attackers to perform XML signature wrapping attacks via an e-akta signed document with a ds:Object node with a crafted payload prepended to a valid ds:Object. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75489 - https://www.search-lab.hu/about-us/news/107-37-million-digitally-signed-documents-had-to-be-reverified - http://packetstormsecurity.com/files/132473/Microsec-e-Szigno-Netlock-Mokka-XML-Signature-Wrapping.html - http://www
d - http://packetstormsecurity.com/files/132473/Microsec-e-Szigno-Netlock-Mokka-XML-Signature-Wrapping.html - http://www.neih.gov.hu/?q=node/66 - https://www.search-lab.hu/eakta
CVE ID: CVE-2015-3933 State: PUBLISHED Published: 2017-11-08T16:00:00 Last Updated: 2024-08-06T05:56:16.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the (1) email parameter or (2) userid parameter to register.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37363/ - https://github.com/semplon/GeniXCMS/releases/tag/v0.0.3-patch
CVE ID: CVE-2015-3934 State: PUBLISHED Published: 2017-11-21T15:00:00 Last Updated: 2024-08-06T05:56:16.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Fiyo CMS 2.0_1.9.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to apps/app_article/controller/rating.php or (2) user parameter to user/login. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132479/Fiyo-CMS-2.0_1.9.1-SQL-Injection.html
CVE ID: CVE-2015-3935 State: PUBLISHED Published: 2015-06-10T14:00:00 Last Updated: 2024-08-06T05:56:16.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the Business Search (search_nom) field to (1) htdocs/societe/societe.php or (2) htdocs/societe/admin/societe.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GPCsolutions/dolibarr/commit/a7f6bbd316e9b96216e9b2c7a065c9251c9a8907 - https://github.com/Dolibarr/dolibarr/issues/2857 - http://www.securityfocus.com/bid/74926 - http://packetstormse
a8907 - https://github.com/Dolibarr/dolibarr/issues/2857 - http://www.securityfocus.com/bid/74926 - http://packetstormsecurity.com/files/132108/Dolibarr-3.5-3.6-HTML-Injection.html - http://seclists.org/fulldisclosure/2015/May/126
CVE ID: CVE-2015-3938 State: PUBLISHED Published: 2015-10-03T10:00:00 Last Updated: 2024-08-06T06:04:00.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP application on Mitsubishi Electric MELSEC FX3G PLC devices before April 2015 allows remote attackers to cause a denial of service (device outage) via a long parameter. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-146-01
CVE ID: CVE-2015-3939 State: PUBLISHED Published: 2015-05-31T17:00:00 Last Updated: 2024-08-06T06:04:00.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the NC854 and NC856 modules for IDS RTU 850C devices allows remote authenticated users to read arbitrary files via unspecified vectors involving an internal web server, as demonstrated by reading a TELNET credentials file. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-148-01 - http://www.securityfocus.com/bid/74900
CVE ID: CVE-2015-3940 State: PUBLISHED Published: 2015-08-04T01:00:00 Last Updated: 2024-08-06T06:04:00.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Schneider Electric Wonderware System Platform before 2014 R2 Patch 01 allows local users to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033179 - https://ics-cert.us-cert.gov/advisories/ICSA-15-169-02 - http://www.securitytracker.com/id/1033180 - http://iom.invensys.com/EN/pdfLibrary/Security_Bulletin_LFSEC00000106.pdf - http://www.securityfocus.com/bid/75297
CVE ID: CVE-2015-3941 State: REJECTED Published: 2017-03-16T15:00:00 Last Updated: 2017-03-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-3942 State: PUBLISHED Published: 2015-08-04T01:00:00 Last Updated: 2024-08-06T06:04:00.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web-server component in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75227 - http://www.garrettcom.com/techsupport/MNS6K_R456_Release_Notes.pdf - https://ics-cert.us-cert.gov/advisories/ICSA-15-167-01
CVE ID: CVE-2015-3943 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-06T06:04:00.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advantech WebAccess before 8.1 allows remote attackers to read sensitive cleartext information about e-mail project accounts via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01
CVE ID: CVE-2015-3944 State: REJECTED Published: 2017-03-16T15:00:00 Last Updated: 2017-03-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-3945 State: REJECTED Published: 2017-03-16T15:00:00 Last Updated: 2017-03-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-3946 State: PUBLISHED Published: 2016-01-15T02:00:00 Last Updated: 2024-08-06T06:04:00.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Advantech WebAccess before 8.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01