Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-5350 State: PUBLISHED Published: 2018-03-19T13:00:00Z Last Updated: 2024-09-16T17:38:47.368Z Vendors: Dell EMC Products: Garden Nstar Problem Types: A vulnerability has been discovered in the garden-linux nstar executable that allows access to files on the host system Description: In Garden versions 0.22.0-0.329.0, a vulnerability has been discovered in the garden-linux nstar executable that allows access to files on the host system. By staging an application on Cloud Foundry using Diego and Garden installations with a malicious custom buildpack an end user could read files on the host system that the BOSH-created vcap user has permissions to read and then package them into
could read files on the host system that the BOSH-created vcap user has permissions to read and then package them into their app droplet. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2015-5350
CVE ID: CVE-2015-5351 State: PUBLISHED Published: 2016-02-25T01:00:00 Last Updated: 2024-08-06T06:41:09.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/83330 - http://packetstormsecurity.com/files/135882/Apache-Tomcat-CSRF-Token-Leak.html - http://www.oracle.com/technetwork/security-advisory/cpujul2018
ity.com/files/135882/Apache-Tomcat-CSRF-Token-Leak.html - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - https://security.gentoo.org/glsa/201705-09 - http://svn.apache.org/viewvc?view=revision&revision=1720658 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html - http://tomcat.apache.org/security-9.html - http://www.ubuntu.com/usn/USN-3024-1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html - http://www.debian.org/security/2016/dsa-3530 - http://tomcat.apache.org/security-7.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://seclists.org/bugtraq/2016/Feb/148 - http://rhn
oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://seclists.org/bugtraq/2016/Feb/148 - http://rhn.redhat.com/errata/RHSA-2016-1089.html - http://tomcat.apache.org/security-8.html - https://access.redhat.com/errata/RHSA-2016:1087 - http://svn.apache.org/viewvc?view=revision&revision=1720655 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.securitytracker.com/id/1035069 - https://bto.bluecoat.com/security-advisory/sa118 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442 - http://svn.apache.org/viewvc?view=revision&revision=1720663 - http://rhn.redhat.com/errata/RHSA-2016-2807.html - https:/
http://svn.apache.org/viewvc?view=revision&revision=1720663 - http://rhn.redhat.com/errata/RHSA-2016-2807.html - https://access.redhat.com/errata/RHSA-2016:1088 - https://security.netapp.com/advisory/ntap-20180531-0001/ - http://rhn.redhat.com/errata/RHSA-2016-2808.html - http://svn.apache.org/viewvc?view=revision&revision=1720661 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html - http://rhn.redhat.com/errata/RHSA-2016-2599.html - http://www.debian.org/security/2016/dsa-3609 - http://svn.apache.org/viewvc?view=revision&revision=1720652 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626 - https://softwaresupport.hpe.com/docum
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626 - https://softwaresupport.hpe.com/document/-/facetsearch/document/KM02978021 - http://www.debian.org/security/2016/dsa-3552 - http://svn.apache.org/viewvc?view=revision&revision=1720660 - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2015-5352 State: PUBLISHED Published: 2015-08-03T00:00:00 Last Updated: 2024-08-06T06:41:09.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2710-2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://security.netapp.com/adviso
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://security.netapp.com/advisory/ntap-20181023-0001/ - https://security.gentoo.org/glsa/201512-04 - https://anongit.mindrot.org/openssh.git/commit/?h=V_6_9&id=1bf477d3cdf1a864646d59820878783d42357a1d - http://openwall.com/lists/oss-security/2015/07/01/10 - http://rhn.redhat.com/errata/RHSA-2016-0741.html - http://www.securityfocus.com/bid/75525 - http://www.securitytracker.com/id/1032797 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html - http://www.openssh.com/txt/release-6.9 - https://lists.debi
nsuse.org/opensuse-security-announce/2015-09/msg00017.html - http://www.openssh.com/txt/release-6.9 - https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html - http://www.ubuntu.com/usn/USN-2710-1 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-5353 State: PUBLISHED Published: 2015-07-01T16:00:00 Last Updated: 2024-08-06T06:41:09.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tab parameter to admin/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132478/Novius-OS-5.0.1-elche-XSS-LFI-Open-Redirect.html - http://www.securityfocus.com/bid/75533 - http://hyp3rlinx.altervista.org/advisories/AS-NOVIUSOS0629.txt - http://www.securityfocus.com/archive/1/535876/100/0/threaded - https://www.exploit-db
g/advisories/AS-NOVIUSOS0629.txt - http://www.securityfocus.com/archive/1/535876/100/0/threaded - https://www.exploit-db.com/exploits/37439/
CVE ID: CVE-2015-5354 State: PUBLISHED Published: 2015-07-01T16:00:00 Last Updated: 2024-08-06T06:41:09.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132478/Novius-OS-5.0.1-elche-XSS-LFI-Open-Redirect.html - http://hyp3rlinx.altervista.org/advisories/AS-NOVIUSOS0629.txt - http://www.securityfocus.com/archive/1/535876/100/0/threaded - https://www.exploit-db.com/exploits/374
OVIUSOS0629.txt - http://www.securityfocus.com/archive/1/535876/100/0/threaded - https://www.exploit-db.com/exploits/37439/
CVE ID: CVE-2015-5355 State: PUBLISHED Published: 2015-07-01T16:00:00Z Last Updated: 2024-09-16T16:13:37.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS before 3.3.6 allow remote attackers to inject arbitrary web script or HTML via the (1) post-content or (2) post-title parameter to admin/edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1046 - https://github.com/GetSimpleCMS/GetSimpleCMS/releases/tag/v3.3.6 - http://packetstormsecurity.com/files/132481/GetSimple-CMS-5.7.3.1-Cross-Site-Scripting.html
CVE ID: CVE-2015-5356 State: PUBLISHED Published: 2015-07-01T16:00:00Z Last Updated: 2024-09-16T23:27:01.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/filebrowser.php in GetSimple CMS before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via the func parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GetSimpleCMS/GetSimpleCMS/releases/tag/v3.3.6 - https://github.com/GetSimpleCMS/GetSimpleCMS/commit/cb1845743bd11ba74a49b6b522c080df86a17d51 - https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1059
CVE ID: CVE-2015-5357 State: PUBLISHED Published: 2015-07-16T14:00:00 Last Updated: 2024-08-06T06:41:09.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Juniper EX4600, QFX3500, QFX3600, and QFX5100 switches with Junos 13.2X51-D15 through 13.2X51-D25, 13.2X51 before 13.2X51-D30, and 14.1X53 before 14.1X53-D10 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032847 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10684
CVE ID: CVE-2015-5358 State: PUBLISHED Published: 2015-07-14T17:00:00 Last Updated: 2024-08-06T06:41:09.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D35, 13.2X52 before 13.2X52-D25, 13.3 before 13.3R6, 14.1R3 before 14.1R3-S2, 14.1 before 14.1R4, 14.1X53 before 14.1X53-D12, 14.1X53 before 14.1X53-D16, 14.1X55 before 14.1X55-D25, 14.2 before 14.2R2, and 15.1 before 15.1R1 allows remote attackers to cause a denial of service (mbuf and connection consumption and restart) via a large numb
.1R1 allows remote attackers to cause a denial of service (mbuf and connection consumption and restart) via a large number of requests that trigger a TCP connection to move to the LAST_ACK state when there is more data to send. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033007 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10686 - http://www.securitytracker.com/id/1033915 - http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-009.txt.asc - https://kc.mcafee.com/corporate/index?page=content&id=SB10128 - http://www.securitytracker.com/id/1032842
CVE ID: CVE-2015-5359 State: PUBLISHED Published: 2015-07-14T17:00:00 Last Updated: 2024-08-06T06:41:09.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D10, 13.2 before 13.2R7, 13.3 before 13.3R5, 14.1R3 before 14.1R3-S2, 14.1 before 14.1R4, 14.2 before 14.2R2, and 15.1 before 15.1R1 allows remote attackers to cause a denial of service (NULL pointer dereference and RDP crash) via a large number of BGP-VPLS advertisements with updated BGP local preference values. Additional Analyst Notes: - CVE Program Container: References: - http://w
ents with updated BGP local preference values. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032843 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10687
CVE ID: CVE-2015-5360 State: PUBLISHED Published: 2015-07-16T14:00:00 Last Updated: 2024-08-06T06:41:09.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPv6 sendd in Juniper Junos 12.1X44 before 12.1X44-D51, 12.1X46 before 12.1X46-D36, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.2 before 14.2R3, 15.1 before 15.1R1, and 15.1X49 before 15.1X49-D20, when the "set protocols neighbor-discovery secure security-level default" option is configured, allows remote attackers to cause a denial of service (CPU consumption) via a crafted Secure Neighbor Discovery (SEN
red, allows remote attackers to cause a denial of service (CPU consumption) via a crafted Secure Neighbor Discovery (SEND) Protocol packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032849 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10688
CVE ID: CVE-2015-5361 State: PUBLISHED Published: 2020-02-28T22:25:24.967247Z Last Updated: 2024-09-16T16:39:13.197Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Background For regular, unencrypted FTP traffic, the FTP ALG can inspect the unencrypted control channel and open related sessions for the FTP data channel. These related sessions (gates) are specific to source and destination IPs and ports of client and server. The design intent of the ftps-extensions option (which is disabled by default) is to provide similar functionality when the SRX secures the FTP/FTPS client. As the control channel is encry
y default) is to provide similar functionality when the SRX secures the FTP/FTPS client. As the control channel is encrypted, the FTP ALG cannot inspect the port specific information and will open a wider TCP data channel (gate) from client IP to server IP on all destination TCP ports. In FTP/FTPS client environments to an enterprise network or the Internet, this is the desired behavior as it allows firewall policy to be written to FTP/FTPS servers on well-known control ports without using a policy with destination IP ANY and destination port ANY. Issue The ftps-extensions option is not intended or recommended where the SRX secures the FTPS server, as the wide data channel session (gate) wil
option is not intended or recommended where the SRX secures the FTPS server, as the wide data channel session (gate) will allow the FTPS client temporary access to all TCP ports on the FTPS server. The data session is associated to the control channel and will be closed when the control channel session closes. Depending on the configuration of the FTPS server, supporting load-balancer, and SRX inactivity-timeout values, the server/load-balancer and SRX may keep the control channel open for an extended period of time, allowing an FTPS client access for an equal duration.​ Note that the ftps-extensions option is not enabled by default. Additional Analyst Notes: - CVE Program Container: Referen
te that the ftps-extensions option is not enabled by default. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10706
CVE ID: CVE-2015-5362 State: PUBLISHED Published: 2015-07-14T17:00:00 Last Updated: 2024-08-06T06:41:09.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BFD daemon in Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R8, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.1X50 before 14.1X50-D85, 14.1X55 before 14.1X55-D20, 14.2 before 14.2R3, 15.1 before 15.1R1, and 15.1X49 before 15.1X49-D10 allows remote attackers to cause a denial of service (bfdd crash and restart) or execute arbitrary code via a crafted BFD packet. Additional Analyst Notes: - CVE Program Contain
d crash and restart) or execute arbitrary code via a crafted BFD packet. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10690 - http://www.securitytracker.com/id/1032844
CVE ID: CVE-2015-5363 State: PUBLISHED Published: 2015-07-16T14:00:00 Last Updated: 2024-08-06T06:41:09.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SRX Network Security Daemon (nsd) in Juniper SRX Series services gateways with Junos 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 allows remote DNS servers to cause a denial of service (crash) via a crafted DNS response. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032848 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10692
CVE ID: CVE-2015-5364 State: PUBLISHED Published: 2015-08-31T10:00:00 Last Updated: 2024-08-06T06:41:09.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial of service (system hang) via incorrect checksums within a UDP packet flood. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linu
pensuse.org/opensuse-security-announce/2015-09/msg00009.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=beb39db59d14990e401e235faf66a6b9b31240b0 - http://www.ubuntu.com/usn/USN-2713-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html - http://www.ubuntu.com/usn/USN-2680-1 - http://www.ubuntu.com/usn/USN-2682-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html - http://rhn.redhat.com/errata/RHSA-2015-1778.html - http://www.ubuntu.com/usn/USN-2714-1 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.6 - http://rhn.
.html - http://www.ubuntu.com/usn/USN-2714-1 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.6 - http://rhn.redhat.com/errata/RHSA-2016-1096.html - https://twitter.com/grsecurity/status/605854034260426753 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html - http://www.debian.org/security/2015/dsa-3329 - http://www.openwall.com/lists/oss-security/2015/06/30/13 - https://bugzilla.redhat.com/show_bug.cgi?id=1239029 - http://rhn.redhat.com/errata/RHSA-2015-1787.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.securitytracker.com/id/1032794 - http://lists.opensuse.org/opensuse-security-announce/2015-08/ms
19645.html - http://www.securitytracker.com/id/1032794 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html - http://www.ubuntu.com/usn/USN-2684-1 - http://www.debian.org/security/2015/dsa-3313 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 - http://www.ubuntu.com/usn/USN-2681-1 - http://rhn.redhat.com/errata/RHSA-2016-0045.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html - http://www.ubuntu.com/usn/USN-2683-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00010.html - http://www.securityfocus.com/bid/75510 - https://access.redhat.com/errata/RHSA-2016:1225 - http://rhn.redhat.com/errata/RHSA-2016-1
securityfocus.com/bid/75510 - https://access.redhat.com/errata/RHSA-2016:1225 - http://rhn.redhat.com/errata/RHSA-2016-1100.html - http://rhn.redhat.com/errata/RHSA-2015-1623.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html - https://github.com/torvalds/linux/commit/beb39db59d14990e401e235faf66a6b9b31240b0
CVE ID: CVE-2015-5365 State: PUBLISHED Published: 2015-07-02T14:42:00 Last Updated: 2024-08-06T06:41:09.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Zurmo CRM 3.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "What's going on?" profile field. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132418/Zurmo-CRM-3.0.2-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/75545
CVE ID: CVE-2015-5366 State: PUBLISHED Published: 2015-08-31T10:00:00 Last Updated: 2024-08-06T06:41:09.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a denial of service (EPOLLET epoll application read outage) via an incorrect checksum in a UDP packet, a different vulnerability than CVE-2015-5364. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.ht
nsuse-security-announce/2015-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=beb39db59d14990e401e235faf66a6b9b31240b0 - http://www.ubuntu.com/usn/USN-2713-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html - http://www.ubuntu.com/usn/USN-2680-1 - http://www.ubuntu.com/usn/USN-2682-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html - http://rhn.redhat.com/errata/RHSA-2015-1778.html - http://www.ubuntu.com/usn/USN-2714-1 - http://www.
09/msg00021.html - http://rhn.redhat.com/errata/RHSA-2015-1778.html - http://www.ubuntu.com/usn/USN-2714-1 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.6 - http://rhn.redhat.com/errata/RHSA-2016-1096.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html - http://www.debian.org/security/2015/dsa-3329 - http://www.openwall.com/lists/oss-security/2015/06/30/13 - https://bugzilla.redhat.com/show_bug.cgi?id=1239029 - http://rhn.redhat.com/errata/RHSA-2015-1787.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.securitytracker.com/id/1032794 - http://lists.opensuse.org/opensuse-security-announce/2015-08
-2719645.html - http://www.securitytracker.com/id/1032794 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html - http://www.ubuntu.com/usn/USN-2684-1 - http://www.debian.org/security/2015/dsa-3313 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 - http://www.ubuntu.com/usn/USN-2681-1 - http://rhn.redhat.com/errata/RHSA-2016-0045.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html - http://www.ubuntu.com/usn/USN-2683-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00010.html - http://www.securityfocus.com/bid/75510 - https://access.redhat.com/errata/RHSA-2016:1225 - http://rhn.redhat.com/errata/RHSA-201
ww.securityfocus.com/bid/75510 - https://access.redhat.com/errata/RHSA-2016:1225 - http://rhn.redhat.com/errata/RHSA-2016-1100.html - http://rhn.redhat.com/errata/RHSA-2015-1623.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html - https://github.com/torvalds/linux/commit/beb39db59d14990e401e235faf66a6b9b31240b0
CVE ID: CVE-2015-5367 State: PUBLISHED Published: 2015-08-27T15:00:00 Last Updated: 2024-08-06T06:41:09.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272 - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446601.htm - http://www.securitytracker.com/id/1033414 - http://www.