Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
r.com/id/1033862 - https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features
CVE ID: CVE-2015-7865 State: PUBLISHED Published: 2015-11-24T20:00:00 Last Updated: 2024-08-06T08:06:30.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows does not properly restrict access to the stereosvrpipe named pipe, which allows local users to gain privileges via a commandline in a number 2 command, which is stored in the HKEY_LOCAL_MACHINE explorer Run registry key, a different vulnerability than CVE-2011-4784. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034
n CVE-2011-4784. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034173 - http://packetstormsecurity.com/files/134520/NVIDIA-Stereoscopic-3D-Driver-Service-Arbitrary-Run-Key-Creation.html - https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04971867 - https://www.exploit-db.com/exploits/38792/ - https://code.google.com/p/google-security-research/issues/detail?id=515 - http://nvidia.custhelp.com/app/answers/detail/a_id/3807/kw/security
CVE ID: CVE-2015-7866 State: PUBLISHED Published: 2015-11-24T20:00:00 Last Updated: 2024-08-06T08:06:29.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in the Smart Maximize Helper (nvSmartMaxApp.exe) in the Control Panel in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to gain privileges via a Trojan horse application, as demonstrated by C:\Program.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034175 - https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04971867 - http://
acker.com/id/1034175 - https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04971867 - http://nvidia.custhelp.com/app/answers/detail/a_id/3806/kw/security
CVE ID: CVE-2015-7869 State: PUBLISHED Published: 2015-11-24T20:00:00 Last Updated: 2024-08-06T08:06:30.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows and R304 before 304.131, R340 before 340.96, R352 before 352.63, and R358 before 358.16 on Linux allow local users to obtain sensitive information, cause a denial of service (crash), or possibly gain privileges via unknown vectors, which trigger uninitialized or out of bounds memory access. NOTE: this identifier has been SPLIT per ADT2 and ADT3 due to different vulner
itialized or out of bounds memory access. NOTE: this identifier has been SPLIT per ADT2 and ADT3 due to different vulnerability type and affected versions. See CVE-2015-8328 for the vulnerability in the NVAPI support layer in NVIDIA drivers for Windows. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id/1034176 - https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04971867 - http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security - http://ubuntu.com/usn/usn-2814-1
CVE ID: CVE-2015-7871 State: PUBLISHED Published: 2017-08-07T20:00:00 Last Updated: 2024-08-06T08:06:30.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - http://support.ntp.org/bin/view/Main/NtpBug2941 - https://bugzilla.redhat.com/show_bug.cgi?id=1274265 - http://www.securitytracker.com/id/1033951 - http://www.debian.org/security/2015/dsa-3388 - http://www.securityfocus.com/bid/77287 - https://security.gentoo.org/glsa/201604-03 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/d
us.com/bid/77287 - https://security.gentoo.org/glsa/201604-03 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839 - https://security.gentoo.org/glsa/201607-15 - https://security.netapp.com/advisory/ntap-20171004-0001/ - https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf
CVE ID: CVE-2015-7872 State: PUBLISHED Published: 2015-11-16T11:00:00 Last Updated: 2024-08-06T08:06:30.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 4.2.6 allows local users to cause a denial of service (OOPS) via crafted keyctl commands. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html - http://rhn.redhat.com/errata/RHSA-2015-2636.html - http://rhn.redhat.com/errata/RHSA-2016-0212.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f05819df10d7b09f6d1eb6f8534a8f68e5a4fe61 -
l - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f05819df10d7b09f6d1eb6f8534a8f68e5a4fe61 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html - https://bugzilla.redhat.com/show_bug.cgi?id=1272172 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html - http://www.ubuntu.com/usn/USN-2826-1 - https://source.android.com/security/bulletin/2016-12-01.html - https://bugzilla.redhat.com/show_bug.cgi?id=1272371 - http://www.ubuntu.com/usn/USN-2840-1 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068676 - http://m
com/usn/USN-2840-1 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068676 - http://marc.info/?l=bugtraq&m=145975164525836&w=2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.ubuntu.com/usn/USN-2843-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html - http://www.openwall.com/lists/oss-security/2015/10/20/6 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html - http://www.ubuntu.com/usn/USN-2829-2 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html - http://www.ubuntu.com/usn/USN-2843-2 - http://lists.opensuse.org/opensuse-security-
ity-announce/2016-02/msg00013.html - http://www.ubuntu.com/usn/USN-2843-2 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://rhn.redhat.com/errata/RHSA-2016-0185.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce1fad2740c648a4340f6f6c391a8a83769d2e8c - http://www.ubuntu.com/usn/USN-2840-2 - https://github.com/torvalds/linux/commit/f05819df10d7b09f6d1eb6f8534a8f68e5a4fe61 - http://lists.ope
om/usn/USN-2840-2 - https://github.com/torvalds/linux/commit/f05819df10d7b09f6d1eb6f8534a8f68e5a4fe61 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html - http://www.ubuntu.com/usn/USN-2829-1 - http://www.ubuntu.com/usn/USN-2823-1 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html - http://rhn.redhat.com/errata/RHSA-2016-0224.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.securitytracker.com/id/1034472 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html - http://www.ubuntu.com/usn/USN-2843-3 - https://github.com/torvalds/linux/commit/ce1fad2740c648a4340f6f6c391a8a83769
ml - http://www.ubuntu.com/usn/USN-2843-3 - https://github.com/torvalds/linux/commit/ce1fad2740c648a4340f6f6c391a8a83769d2e8c - http://www.debian.org/security/2015/dsa-3396 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html - http://www.ubuntu.com/usn/USN-2824-1 - http://www.securityfocus.com/bid/77544 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html
CVE ID: CVE-2015-7873 State: PUBLISHED Published: 2015-10-28T10:00:00 Last Updated: 2024-08-06T08:06:30.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/cd097656758f981f80fb9029c7d6b4294582b706 - https://www.phpmyadmin.net/security/PMASA-2015-5/ - http://www.debian.org/security/2015/dsa-3382 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171326.html - http://www.securitytracker.com/id
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171326.html - http://www.securitytracker.com/id/1034013 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171311.html - http://www.securityfocus.com/bid/77299 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169987.html
CVE ID: CVE-2015-7874 State: PUBLISHED Published: 2020-01-15T15:02:07 Last Updated: 2024-08-06T08:06:30.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary code via a long nickname. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39119/
CVE ID: CVE-2015-7875 State: PUBLISHED Published: 2017-08-07T17:00:00 Last Updated: 2024-08-06T08:06:30.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for the "content type" plugins that are used on Panels and similar systems to place content and functionality on a page. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2554145 - http://www.openwall.com/lists/oss-security/2015/10/21/2 - http://www.securityfocus.com/bid/76441
CVE ID: CVE-2015-7876 State: PUBLISHED Published: 2015-10-21T14:00:00 Last Updated: 2024-08-06T08:06:30.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: The escapeLike function in sqlsrv/database.inc in the Drupal 7 driver for SQL Server and SQL Azure 7.x-1.x before 7.x-1.4 does not properly escape certain characters, which allows remote attackers to execute arbitrary SQL commands via vectors involving a module using the db_like function. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2569577 - https://www.drupal.org/node/2569005 - https://www.drupal.org/node/2569003 - http://cgit.drupalcode.org/sqlsrv/commit/?id=2ea0da8
CVE ID: CVE-2015-7877 State: PUBLISHED Published: 2017-09-11T17:00:00 Last Updated: 2024-08-06T08:06:30.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the User Dashboard module 7.x before 7.x-1.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2572341 - https://www.drupal.org/node/2577901
CVE ID: CVE-2015-7878 State: PUBLISHED Published: 2017-11-06T17:00:00 Last Updated: 2024-08-06T08:06:30.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Taxonomy Find module 6.x-2.x through 6.x-1.2 and 7.x-2.x through 7.x-1.0 in Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via taxonomy vocabulary and term names. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2577903
CVE ID: CVE-2015-7879 State: PUBLISHED Published: 2017-09-11T17:00:00 Last Updated: 2024-08-06T08:06:30.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Stickynote module 7.x before 7.x-1.3 for Drupal allows remote authenticated users with permission to create or edit a stickynote to inject arbitrary web script or HTML via note text on the admin listing page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77022 - https://www.drupal.org/node/2581997 - http://www.openwall.com/lists/oss-security/2015/10/21/2 - https://www.drupal.org/node/2581519
CVE ID: CVE-2015-7880 State: PUBLISHED Published: 2017-09-13T16:00:00 Last Updated: 2024-08-06T08:06:29.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Entity Registration module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to obtain sensitive event registration information by leveraging the "Register other accounts" permission and knowledge of usernames. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2582015 - http://www.securityfocus.com/bid/77023 - http://www.openwall.com/lists/oss-security/2015/10/21/2 - https://www.drupal.org/node/2582283
CVE ID: CVE-2015-7881 State: PUBLISHED Published: 2015-10-26T14:00:00 Last Updated: 2024-08-06T08:06:30.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Colorbox module 7.x-2.x before 7.x-2.10 for Drupal allows remote authenticated users with certain permissions to bypass intended access restrictions and "add unexpected content to a Colorbox" via unspecified vectors, possibly related to a link in a comment. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2582071 - https://www.drupal.org/node/2578165
CVE ID: CVE-2015-7882 State: PUBLISHED Published: 2019-07-19T15:44:44 Last Updated: 2024-08-06T08:06:29.903Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mongodb.org/browse/SERVER-20691
CVE ID: CVE-2015-7884 State: PUBLISHED Published: 2015-12-28T11:00:00 Last Updated: 2024-08-06T08:06:30.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/eda98796aff0d9bf41094b06811f5def3b4c333c - http://www.securitytracker.com/id/1034893 - http://www.securityfocus.com/bid/77317 - http://www.ubuntu.com/usn/USN-2843-1 - ht
/www.securitytracker.com/id/1034893 - http://www.securityfocus.com/bid/77317 - http://www.ubuntu.com/usn/USN-2843-1 - http://www.ubuntu.com/usn/USN-2842-2 - http://www.ubuntu.com/usn/USN-2843-2 - http://www.ubuntu.com/usn/USN-2842-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=eda98796aff0d9bf41094b06811f5def3b4c333c - http://www.openwall.com/lists/oss-security/2015/10/21/8 - https://bugzilla.redhat.com/show_bug.cgi?id=1274726 - http://www.ubuntu.com/usn/USN-2843-3 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html
CVE ID: CVE-2015-7885 State: PUBLISHED Published: 2015-12-28T11:00:00 Last Updated: 2024-08-06T08:06:30.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2841-2 - http://www.securityfocus.com/bid/77317 - http://www.ubuntu.com/usn/USN-2843-1 - http://www.ubuntu.com/usn/USN-2844-1 - http://www.ubuntu.com/usn/USN-2842-2 - http://www.ubuntu.co
.com/usn/USN-2843-1 - http://www.ubuntu.com/usn/USN-2844-1 - http://www.ubuntu.com/usn/USN-2842-2 - http://www.ubuntu.com/usn/USN-2843-2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4b6184336ebb5c8dc1eae7f7ab46ee608a748b05 - http://www.ubuntu.com/usn/USN-2842-1 - http://www.openwall.com/lists/oss-security/2015/10/21/8 - http://www.securitytracker.com/id/1034896 - https://github.com/torvalds/linux/commit/4b6184336ebb5c8dc1eae7f7ab46ee608a748b05 - https://bugzilla.redhat.com/show_bug.cgi?id=1274728 - http://www.ubuntu.com/usn/USN-2841-1 - http://www.ubuntu.com/usn/USN-2843-3
CVE ID: CVE-2015-7886 State: PUBLISHED Published: 2016-01-18T02:00:00 Last Updated: 2024-08-06T08:06:29.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp Data ONTAP before 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote attackers to obtain sensitive volume information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20160114-0002/ - http://kb.netapp.com/support/index?page=content&id=9010055
CVE ID: CVE-2015-7887 State: PUBLISHED Published: 2017-08-07T17:00:00 Last Updated: 2024-08-06T08:06:31.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/ka51A00000007EnQAI/authentication-bypass-vulnerability-in-snapcenter-server-1-0?language=en_US - http://www.securityfocus.com/bid/77315
CVE ID: CVE-2015-7888 State: PUBLISHED Published: 2017-06-07T14:00:00 Last Updated: 2024-08-06T08:06:30.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. (dot dot) in the name of a file, compressed into a zipped file named cred.zip, and downloaded to /sdcard/Download. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77338 - http://packetstormsecurity.com/files/134104/Samsung-WifiHs20UtilityService-Path-Traversal.html - https://b
m/bid/77338 - http://packetstormsecurity.com/files/134104/Samsung-WifiHs20UtilityService-Path-Traversal.html - https://bugs.chromium.org/p/project-zero/issues/detail?id=489&q=samsung&redir=1
CVE ID: CVE-2015-7889 State: PUBLISHED Published: 2017-12-27T18:00:00 Last Updated: 2024-08-06T08:06:30.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions for the com.samsung.android.email.intent.action.QUICK_REPLY_BACKGROUND service action, which might allow remote attackers with knowledge of the local email address to obtain sensitive information via a crafted application that sends a crafted intent. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77339 - http://packetstormsecurity.com/files/134105/Samsung-SecE
ntainer: References: - http://www.securityfocus.com/bid/77339 - http://packetstormsecurity.com/files/134105/Samsung-SecEmailComposer-QUICK_REPLY_BACKGROUND-Permission-Weakness.html - https://www.exploit-db.com/exploits/38558/ - https://bugs.chromium.org/p/project-zero/issues/detail?id=490&redir=1
CVE ID: CVE-2015-7890 State: PUBLISHED Published: 2020-02-12T14:54:18 Last Updated: 2024-08-06T08:06:30.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver, as used in Samsung S6 Edge, allow local users to cause a denial of service (memory corruption) via a large (1) buffer or (2) size parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134106/Samsung-Seiren-Kernel-Driver-Buffer-Overflow.html - https://code.google.com/p/google-security-research/issues/detail?id=491 - https://www.exploit-db.com/exploits/38556/
CVE ID: CVE-2015-7891 State: PUBLISHED Published: 2017-08-02T19:00:00 Last Updated: 2024-08-06T08:06:31.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with Android L(5.0/5.1) allows local users to trigger memory errors by leveraging definition of g2d_lock and g2d_unlock lock macros as no-ops, aka SVE-2015-4598. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77335 - https://bugs.chromium.org/p/project-zero/issues/detail?id=492 - https://www.exploit-db.com/exploits/38557/ - http://packetstormsecurity.com/files/1341
oject-zero/issues/detail?id=492 - https://www.exploit-db.com/exploits/38557/ - http://packetstormsecurity.com/files/134107/Samsung-Fimg2d-FIMG2D_BITBLT_BLIT-Ioctl-Concurrency-Flaw.html - http://security.samsungmobile.com/smrupdate.html#SMR-OCT-2015
CVE ID: CVE-2015-7892 State: PUBLISHED Published: 2019-12-09T19:22:11 Last Updated: 2024-08-06T08:06:30.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the m2m1shot_compat_ioctl32 function in the Samsung m2m1shot driver framework, as used in Samsung S6 Edge, allows local users to have unspecified impact via a large data.buf_out.num_planes value in an ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134108/Samsung-M2m1shot-Kernel-Driver-Buffer-Overflow.html - https://code.google.com/p/google-security-research/issues/detail?id=493 - https://www.exploit-db.com/exploits/38555/
CVE ID: CVE-2015-7893 State: PUBLISHED Published: 2017-04-11T19:00:00 Last Updated: 2024-08-06T08:06:30.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaScript. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=494&q=samsung&redir=1 - https://www.exploit-db.com/exploits/38554/ - https://googleprojectzero.blogspot.ie/2015/11/hack-galaxy-hunting-bugs-in-samsung.html - http://www.securityfocus.com/bid/77431 - http://packetstormsecurity.com/files/135643/Samsung-SecEmailUI-Script-Injection.htm
://www.securityfocus.com/bid/77431 - http://packetstormsecurity.com/files/135643/Samsung-SecEmailUI-Script-Injection.html
CVE ID: CVE-2015-7894 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T08:06:30.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allows remote attackers to cause a denial of service (segmentation fault and process crash) and execute arbitrary code via a crafted JPG. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=495&redir=1 - http://packetstormsecurity.com/files/134197/Samsung-LibQjpeg-Image-Decoding-Memory-Corruption.html - http://www.securityfocus.com/bid/77423 -
rity.com/files/134197/Samsung-LibQjpeg-Image-Decoding-Memory-Corruption.html - http://www.securityfocus.com/bid/77423 - https://www.exploit-db.com/exploits/38614/