Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-5330 State: PUBLISHED Published: 2015-12-29T22:00:00 Last Updated: 2024-08-06T06:41:09.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading (1) an error message or (2) a database value. Additional Analyst Notes: - CVE Program Container: References: - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=f36cb71c330a52106e36028b3029d952257baf15 - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=
p=samba.git%3Ba=commit%3Bh=f36cb71c330a52106e36028b3029d952257baf15 - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=ba5dbda6d0174a59d221c45cca52ecd232820d48 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html - http://www.ubuntu.com/usn/USN-2855-2 - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=a118d4220ed85749c07fb43c1229d9e2fecbea6b - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html - http://www.ubuntu.com/usn/USN-2856-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-annou
le.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html - https://bugzilla.redhat.com/show_bug.cgi?id=1281326 - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=0454b95657846fcecf0f51b6f1194faac02518bd - https://www.samba.org/samba/security/CVE-2015-5330.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=538d305de91e34a2938f5f219f18bf0e1918763f - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html - http://www.securitytrac
19f18bf0e1918763f - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html - http://www.securitytracker.com/id/1034493 - http://www.debian.org/security/2016/dsa-3433 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html - https://security.gentoo.org/glsa/201612-47 - http://www.securityfocus.com/bid/79734 - http://www.ubuntu.com/usn/USN-2855-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=7f51ec8c4ed9ba1f53d722e44fb6fb3cde933b72
CVE ID: CVE-2015-5331 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-06T06:41:09.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct spam attacks via the messaging API. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50426 - https://moodle.org/mod/forum/discuss.php?d=323228
CVE ID: CVE-2015-5332 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-06T06:41:09.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a denial of service (disk consumption) by leveraging the guest role and entering drafts with the editor-autosave feature. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51000 - https://moodle.org/mod/forum/discuss.php?d=323229
CVE ID: CVE-2015-5333 State: PUBLISHED Published: 2020-01-23T20:12:54 Last Updated: 2024-08-06T06:41:09.344Z Vendors: LibreSSL Products: LibreSSL Problem Types: Memory Leak Description: Memory leak in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (memory consumption) via a large number of ASN.1 object identifiers in X.509 certificates. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133998/Qualys-Security-Advisory-LibreSSL-Leak-Overflow.html - http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.3.1-relnotes.txt - http://www.securityfocus.com/archive/1/archive/1/536692/100/0/threa
g/pub/OpenBSD/LibreSSL/libressl-2.3.1-relnotes.txt - http://www.securityfocus.com/archive/1/archive/1/536692/100/0/threaded - http://lists.opensuse.org/opensuse-updates/2015-10/msg00050.html
CVE ID: CVE-2015-5334 State: PUBLISHED Published: 2020-01-23T19:56:11 Last Updated: 2024-08-06T06:41:09.546Z Vendors: LibreSSL Products: LibreSSL Problem Types: Other Description: Off-by-one error in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (program crash) or possible execute arbitrary code via a crafted X.509 certificate, which triggers a stack-based buffer overflow. Note: this vulnerability exists because of an incorrect fix for CVE-2014-3508. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133998/Qualys-Security-Advisory-LibreSSL-Leak-Overflow.html - http://seclists.org/full
p://packetstormsecurity.com/files/133998/Qualys-Security-Advisory-LibreSSL-Leak-Overflow.html - http://seclists.org/fulldisclosure/2015/Oct/75 - http://www.securityfocus.com/archive/1/archive/1/536692/100/0/threaded - http://lists.opensuse.org/opensuse-updates/2015-10/msg00050.html - http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.3.1-relnotes.txt
CVE ID: CVE-2015-5335 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-06T06:41:09.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin/registration/register.php in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote attackers to hijack the authentication of administrators for requests that send statistics to an arbitrary hub URL. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51091 - https://moodle.org/mod/forum/discuss.php?d=323230
CVE ID: CVE-2015-5336 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-06T06:41:09.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the survey module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allow remote authenticated users to inject arbitrary web script or HTML by leveraging the student role and entering a crafted survey answer. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=323231 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-49940
CVE ID: CVE-2015-5337 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-06T06:41:09.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted .swf file. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48085 - https://moodle.org/mod/forum/discuss.php?d=323232
CVE ID: CVE-2015-5338 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-06T06:41:09.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the lesson module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allow remote attackers to hijack the authentication of arbitrary users for requests to (1) mod/lesson/mediafile.php or (2) mod/lesson/view.php. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48109 - https://moodle.org/mod/forum/discuss.php?d=323233
CVE ID: CVE-2015-5339 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-06T06:41:09.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: The core_enrol_get_enrolled_users web service in enrol/externallib.php in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly implement group-based access restrictions, which allows remote authenticated users to obtain sensitive course-participant information via a web-service request. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51861 - https://moodle.org/mod/forum/discuss.php?d=323234
CVE ID: CVE-2015-5340 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-06T06:41:09.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not consider the moodle/badges:viewbadges capability, which allows remote authenticated users to obtain sensitive badge information via a request involving (1) badges/overview.php or (2) badges/view.php. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51684 - https://moodle.org/mod/forum/discuss.php?d=323235
CVE ID: CVE-2015-5341 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-06T06:41:09.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_scorm in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 mishandles availability dates, which allows remote authenticated users to bypass intended access restrictions and read SCORM contents via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=323236 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50837
CVE ID: CVE-2015-5342 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-06T06:41:09.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: The choice module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote authenticated users to bypass intended access restrictions by visiting a URL to add or delete responses in the closed state. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=323237 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51569
CVE ID: CVE-2015-5343 State: PUBLISHED Published: 2016-04-14T14:00:00 Last Updated: 2024-08-06T06:41:09.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3424 - http://www.securitytracker.com/id/1034470 - http://www.sl
: References: - http://www.debian.org/security/2015/dsa-3424 - http://www.securitytracker.com/id/1034470 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.405261 - http://subversion.apache.org/security/CVE-2015-5343-advisory.txt
CVE ID: CVE-2015-5344 State: PUBLISHED Published: 2016-02-03T15:00:00 Last Updated: 2024-08-06T06:41:09.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2035.html - http://camel.apache.org/security-advisories.data/CVE-2015-5344.txt.asc - http://www.securityfocus.com/bid/82260 - http://www.securityfocus.com/archive/1/537414/100/0/threaded - https://lists.apache.org/thread.html/b4014ea7c
id/82260 - http://www.securityfocus.com/archive/1/537414/100/0/threaded - https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E
CVE ID: CVE-2015-5345 State: PUBLISHED Published: 2016-02-25T01:00:00 Last Updated: 2024-08-06T06:41:09.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints and Filters, which allows remote attackers to determine the existence of a directory via a URL that lacks a trailing / (slash) character. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964 - http://svn.apache.org/viewvc?view=revision&revision=1715216
rtal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964 - http://svn.apache.org/viewvc?view=revision&revision=1715216 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - https://security.gentoo.org/glsa/201705-09 - https://kc.mcafee.com/corporate/index?page=content&id=SB10156 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html - http://tomcat.apache.org/security-9.html - http://svn.apache.org/viewvc?view=revision&revision=1715213 - http://packetstormsecurity.com/files/135892/Apache-Tomcat-Directory-Disclosure.html - http://www.ubuntu.com/usn/USN-3024-1
tp://packetstormsecurity.com/files/135892/Apache-Tomcat-Directory-Disclosure.html - http://www.ubuntu.com/usn/USN-3024-1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html - http://rhn.redhat.com/errata/RHSA-2016-2045.html - http://www.debian.org/security/2016/dsa-3530 - http://tomcat.apache.org/security-7.html - http://svn.apache.org/viewvc?view=revision&revision=1715206 - http://marc.info/?l=bugtraq&m=145974991225029&w=2 - http://rhn.redhat.com/errata/RHSA-2016-1089.html - http://tomcat.apache.org/security-8.html - http://www.qcsec.com/blog/CVE-2015-5345-apache-tomcat-vulnerability.html - https://access.redhat.com/errata/RHSA-2016:1087 - http://www.oracle.com/tech
015-5345-apache-tomcat-vulnerability.html - https://access.redhat.com/errata/RHSA-2016:1087 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securitytracker.com/id/1035071 - https://bto.bluecoat.com/security-advisory/sa118 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442 - https://access.redhat.com/errata/RHSA-2016:1088 - http://svn.apache.org/viewvc?view=revision&revision=1717212 - https://security.netapp.com/advisory/ntap-20180531-0001/ - http://tomcat.apache.org/security-6.html - http://seclists.org/bugtraq/2016/Feb/146 - http://svn.apache.org/viewvc?view=revision&revision=1716894 - http://lists.opensus
//seclists.org/bugtraq/2016/Feb/146 - http://svn.apache.org/viewvc?view=revision&revision=1716894 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html - http://svn.apache.org/viewvc?view=revision&revision=1717209 - http://www.securityfocus.com/bid/83328 - http://svn.apache.org/viewvc?view=revision&revision=1715207 - http://rhn.redhat.com/errata/RHSA-2016-2599.html - http://www.debian.org/security/2016/dsa-3609 - http://svn.apache.org/viewvc?view=revision&revision=1717216 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626 - http://www.debian.org/security
ttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626 - http://www.debian.org/security/2016/dsa-3552 - http://seclists.org/fulldisclosure/2016/Feb/122 - https://bz.apache.org/bugzilla/show_bug.cgi?id=58765 - http://svn.apache.org/viewvc?view=revision&revision=1716882 - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apac
/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2015-5346 State: PUBLISHED Published: 2016-02-25T01:00:00 Last Updated: 2024-08-06T06:41:09.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of multiple versions of the same web application, might allow remote attackers to hijack web sessions by leveraging use of a requestedSessionSSL field for an unintended request, related to CoyoteAdapter.java and Request.java. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.ht
Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - https://security.gentoo.org/glsa/201705-09 - http://seclists.org/bugtraq/2016/Feb/143 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html - http://tomcat.apache.org/security-9.html - http://www.ubuntu.com/usn/USN-3024-1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html - http://www.debian.org/security/2016/dsa-3530 - http://svn.apache.org/viewvc?view=revision&revision=1713184 - http://tomcat.apache.org/security-7.html - http://rhn.re
- http://svn.apache.org/viewvc?view=revision&revision=1713184 - http://tomcat.apache.org/security-7.html - http://rhn.redhat.com/errata/RHSA-2016-2046.html - http://www.securityfocus.com/bid/83323 - http://rhn.redhat.com/errata/RHSA-2016-1089.html - http://tomcat.apache.org/security-8.html - https://access.redhat.com/errata/RHSA-2016:1087 - http://svn.apache.org/viewvc?view=revision&revision=1723414 - http://www.securitytracker.com/id/1035069 - https://bto.bluecoat.com/security-advisory/sa118 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442 - http://rhn.redhat.com/errata/RHSA-2016-2807.html - https://access.redhat.com/errata/RHSA-2016:1088 - https://
05150442 - http://rhn.redhat.com/errata/RHSA-2016-2807.html - https://access.redhat.com/errata/RHSA-2016:1088 - https://security.netapp.com/advisory/ntap-20180531-0001/ - http://rhn.redhat.com/errata/RHSA-2016-2808.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html - https://bz.apache.org/bugzilla/show_bug.cgi?id=58809 - http://svn.apache.org/viewvc?view=revision&revision=1713185 - http://www.debian.org/security/2016/dsa-3609 - http://svn.apache.org/viewvc?view=revision&revision=1723506 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://svn.apache.org/viewvc?view=revision&revision=1713187 - https://h20566.www2.hpe.com/port
tinjan2016-2867206.html - http://svn.apache.org/viewvc?view=revision&revision=1713187 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626 - http://www.debian.org/security/2016/dsa-3552 - http://packetstormsecurity.com/files/135890/Apache-Tomcat-Session-Fixation.html - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2015-5347 State: PUBLISHED Published: 2016-04-12T17:00:00 Last Updated: 2024-08-06T06:41:09.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the getWindowOpenJavaScript function in org.apache.wicket.extensions.ajax.markup.html.modal.ModalWindow in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before 7.2.0 might allow remote attackers to inject arbitrary web script or HTML via a ModalWindow title. Additional Analyst Notes: - CVE Program Container: References: - http://wicket.apache.org/news/2016/03/01/cve-2015-5347.html - https://issues.apache.org/jira/browse/WICKET-6037 - http://www.securitytracker.com/id/
s/2016/03/01/cve-2015-5347.html - https://issues.apache.org/jira/browse/WICKET-6037 - http://www.securitytracker.com/id/1035165
CVE ID: CVE-2015-5348 State: PUBLISHED Published: 2016-04-15T15:00:00 Last Updated: 2024-08-06T06:41:09.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134946/Apache-Camel-Java-Object-Deserialization.html - http://rhn.redhat.com/errata/RHSA-2016-2035.html - http://camel.apache.org/security-advisories.data/CVE
alization.html - http://rhn.redhat.com/errata/RHSA-2016-2035.html - http://camel.apache.org/security-advisories.data/CVE-2015-5348.txt.asc - https://issues.apache.org/jira/browse/CAMEL-9309 - http://www.securityfocus.com/archive/1/537147/100/0/threaded - http://www.securityfocus.com/bid/80696 - https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E
CVE ID: CVE-2015-5349 State: PUBLISHED Published: 2016-04-11T21:00:00 Last Updated: 2024-08-06T06:41:09.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet. Additional Analyst Notes: - CVE Program Container: References: - https://directory.apache.org/studio/news.html - http://www.securityfocus.com/archive/1/537225/100/0/threaded - https://lists.apache.org/thread.html/reb5443aaf781b364896ee9d7cf6e97fdc4f5a
yfocus.com/archive/1/537225/100/0/threaded - https://lists.apache.org/thread.html/reb5443aaf781b364896ee9d7cf6e97fdc4f5a5174132c319252963b6%40%3Ccommits.directory.apache.org%3E