Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
D 845, and SD 850, while processing the content headers in the Playready module, a buffer overread may occur if the header count exceeds the expected value. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9203 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T02:37:07.672Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer overread vulnerability in QTEE Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, lack of input validation in playready_set_domainid could lead to a buffer overread. Additi
, SD 835, SD 845, and SD 850, lack of input validation in playready_set_domainid could lead to a buffer overread. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9204 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T17:49:23.288Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Over-Read in Core. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 808, and SD 810, if cchFriendlyName is greater than TZ_PR_MAX_NAME_LEN in function playready_leavedomain_generate_challenge(), a buffer overread occurs. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.secur
Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9205 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T22:20:07.737Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Over-read in TrustZone Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 808, and SD 810, in a PlayReady API function, a buffer over-read can occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9206 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T19:24:20.858Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer overread vulnerability in Playready Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 808, and SD 810, during XML encoding of a message in the Playready module, a buffer overread may occur if the message passed is large. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/201
large. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9207 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T17:53:53.817Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer overread vulnerability in QTEE Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, lack of input validation in playready_getadditional_responsedata could lead to a buffer overread. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://
Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9208 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T19:10:08.563Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Untrusted Pointer Dereference in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, and SD 810, the function tzbsp_pil_verify_sig() does not strictly check that the pointer to ELF and program headers and hash segment is within secure memory. It only checks that the address is not in non-secure m
ELF and program headers and hash segment is within secure memory. It only checks that the address is not in non-secure memory. A given address range can overlap with both secure and non-secure regions - hence if such an address is passed in, it would not pass the non-secure range check, and would be considered valid by the function, even though that memory area could be modified by the non-secure side. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9209 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T16:42:36.356Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Access Control in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, there is improper access control in a file storage API. Additional Analys
10, SD 820, SD 835, SD 845, SD 850, and SDX20, there is improper access control in a file storage API. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9210 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T20:47:04.121Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Over Read in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, lack of input validation in playready_licacq_process_response() can lead to memory over read. Additiona
845, and SD 850, lack of input validation in playready_licacq_process_response() can lead to memory over read. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9211 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T00:45:40.517Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer overread vulnerability in Playready Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, while provising the Playready module, a buffer overread may occur if the message pass
820A, SD 835, SD 845, and SD 850, while provising the Playready module, a buffer overread may occur if the message passed is large. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9212 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T18:49:08.116Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer overread vulnerability in QTEE Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, and SD 800, lack of input validation while processing TZ_PR_CMD_SAVE_KEY command could lead to a buffer overread. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9213 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T02:46:41.595Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Access Contorl in Storage. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, the DIAG-EFS command EFS2_DIAG_DELTREE, which is handled by the funct
SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, the DIAG-EFS command EFS2_DIAG_DELTREE, which is handled by the function fs_diag_deltree_handler(), is used to delete files and directories only inside the /public folder. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9214 State: REJECTED Published: 2021-11-23T19:58:40 Last Updated: 2021-11-23T19:58:40 Description: No description available.
CVE ID: CVE-2015-9215 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T01:05:57.470Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Null Pointer Dereference in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, and SD 810, improper input validation can cause a null pointer dereference in USB bootloader find_ep() function. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9216 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T01:07:06.651Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Lack of non-specification compliance error handling Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, and SD 810, improper handling of simultaneous interrupt in USB module during USB RESET and EP COMPLETE. Additional Analyst Notes: - CVE Program Container: References: - http
pt in USB module during USB RESET and EP COMPLETE. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9217 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T03:47:39.421Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Reachable assertion during video playback Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, certain malformed HVEC clips could cause an assertion to fail. Additional Analyst Notes: - CVE Program Container: References: -
malformed HVEC clips could cause an assertion to fail. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9218 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T00:45:55.703Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Reachable Assertion in Video. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, when processing bad HEVC clips, the DPB fills, and with no error handling for DPB being full, a hang occurs. Additional Analyst Notes: - CVE
HEVC clips, the DPB fills, and with no error handling for DPB being full, a hang occurs. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9219 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T17:48:57.830Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Integer Overflow to Buffer Overflow in TrustZone Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, an integer overflow to buffer overflow can occur in a DRM API. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9220 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T22:08:40.419Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Integer overflow vulnerability when loading firmware image Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 625, SD 810, SD 820, and SDX20, integer overflow occurs when the size of the firmware section is incorrectly encoded in the
, SD 810, SD 820, and SDX20, integer overflow occurs when the size of the firmware section is incorrectly encoded in the firmware image. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9221 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T00:20:47.398Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Untrusted Pointer access in QTEE Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, SD 800, and SD 810, lack of validation of pointers passed by secure apps could lead to an untrusted pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9222 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T02:36:22.612Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Loop with Unreachable Exit Condition ('Infinite Loop') in Video. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, processing erroneous bitstreams may result in a HW freeze. FW should detect the HW freeze based on watchd
High_Med_2016, processing erroneous bitstreams may result in a HW freeze. FW should detect the HW freeze based on watchdog timer, but because the watchdog timer is not enabled, an infinite loop occurs, resulting in a device freeze. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39739/ - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9223 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T17:43:42.802Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Buffer Copy without Checking Size of Input in Multimedia Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD 600, and SD 800, a buffer overflow can occur when processing an audio buffer. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9224 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T16:28:31.053Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear, Small Cell SoC Problem Types: Buffer Copy with Checking Size in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 8
425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20, lack of input Validation in QURTK_write() can cause potential buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9225 State: REJECTED Published: 2021-11-23T19:58:41 Last Updated: 2021-11-23T19:58:41 Description: No description available.
CVE ID: CVE-2015-9226 State: PUBLISHED Published: 2017-09-11T20:00:00Z Last Updated: 2024-09-16T18:56:18.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AlegroCart 1.2.8 allow remote administrators to execute arbitrary SQL commands via the download parameter in the (1) check_download and possibly (2) check_filename function in upload/admin2/model/products/model_admin_download.php or remote authenticated users with a valid Paypal transaction token to execute arbitrary SQL commands via the ref parameter in the (3) orderUpdate function in upload/catalog/extension/payment/paypal.php. Additional Analyst Notes: - CVE Program Container: Refe
rUpdate function in upload/catalog/extension/payment/paypal.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134362/AlegroCart-1.2.8-SQL-Injection.html - https://www.exploit-db.com/exploits/38727/ - https://blog.curesec.com/article/blog/AlegroCart-128-SQL-Injection-104.html - http://seclists.org/fulldisclosure/2015/Nov/68
CVE ID: CVE-2015-9227 State: PUBLISHED Published: 2017-09-11T20:00:00Z Last Updated: 2024-09-16T16:57:40.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in the get_file function in upload/admin2/controller/report_logs.php in AlegroCart 1.2.8 allows remote administrators to execute arbitrary PHP code via a URL in the file_path parameter to upload/admin2. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Nov/67 - https://www.exploit-db.com/exploits/38728/ - https://blog.curesec.com/article/blog/AlegroCart-128-LFIRFI-102.html - http://packetstormsecurity.com/files/134361/AlegroCart-1.2
log.curesec.com/article/blog/AlegroCart-128-LFIRFI-102.html - http://packetstormsecurity.com/files/134361/AlegroCart-1.2.8-Local-Remote-File-Inclusion.html
CVE ID: CVE-2015-9228 State: PUBLISHED Published: 2017-09-12T08:00:00 Last Updated: 2024-08-06T08:43:41.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a file extension is changed from .jpg to .php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cybersecurityworks/Disclosed/issues/6 - https://packetstormsecurity.com/files/135061/WordPress-NextGEN-Gallery-2.1.10-Shell-Upload.html - https://wordpress.org/plugins/nextgen-gallery/#developers - http://www.openwall.com/lists/oss-security/2015/10/27/6 - h
https://wordpress.org/plugins/nextgen-gallery/#developers - http://www.openwall.com/lists/oss-security/2015/10/27/6 - https://wpvulndb.com/vulnerabilities/9758 - https://cybersecurityworks.com/zerodays/cve-2015-9228-crony.html
CVE ID: CVE-2015-9229 State: PUBLISHED Published: 2017-09-12T22:00:00 Last Updated: 2024-08-06T08:43:42.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the nggallery-manage-gallery page in the Photocrati NextGEN Gallery plugin 2.1.15 for WordPress, XSS is possible for remote authenticated administrators via the images[1][alttext] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cybersecurityworks/Disclosed/issues/5 - https://cybersecurityworks.com/zerodays/cve-2015-9229-nextgen-gallery.html
CVE ID: CVE-2015-9230 State: PUBLISHED Published: 2017-09-12T22:00:00 Last Updated: 2024-08-06T08:43:42.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the admin/db-backup-security/db-backup-security.php page in the BulletProof Security plugin before .52.5 for WordPress, XSS is possible for remote authenticated administrators via the DBTablePrefix parameter. Additional Analyst Notes: - CVE Program Container: References: - https://forum.ait-pro.com/forums/topic/bps-changelog/ - https://github.com/cybersecurityworks/Disclosed/issues/3 - https://wpvulndb.com/vulnerabilities/8224 - https://cxsecurity.com/issue/WLB-2016010011 - http://www.openwall.com/lists/oss-security/2015/10
/vulnerabilities/8224 - https://cxsecurity.com/issue/WLB-2016010011 - http://www.openwall.com/lists/oss-security/2015/10/27/3 - https://packetstormsecurity.com/files/135125/BulletProof-Security-.52.4-Cross-Site-Scripting.html - https://cybersecurityworks.com/zerodays/cve-2015-9230-bulletproof.html
CVE ID: CVE-2015-9231 State: PUBLISHED Published: 2017-09-20T20:00:00Z Last Updated: 2024-09-16T17:23:28.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: iTerm2 3.x before 3.1.1 allows remote attackers to discover passwords by reading DNS queries. A new (default) feature was added to iTerm2 version 3.0.0 (and unreleased 2.9.x versions such as 2.9.20150717) that resulted in a potential information disclosure. In an attempt to see whether the text under the cursor (or selected text) was a URL, the text would be sent as an unencrypted DNS query. This has the potential to result in passwords and other sensitive information being sent in cleartext without the user being aware. Addi