Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-6617 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:23.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skia, as used in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23648740. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034592 - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6618 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:23.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bluetooth in Android 4.4 and 5.x before 5.1.1 LMY48Z allows user-assisted remote attackers to execute arbitrary code by leveraging access to the local physical environment, aka internal bug 24595992. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6619 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:23.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, aka internal bug 23520714. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6620 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:24.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bugs 24123723 and 24445127. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6621 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:23.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: SystemUI in Android 5.x before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23909438. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6622 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:24.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Native Frameworks Library in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23905002. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6623 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:22.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wi-Fi in Android 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24872703. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6624 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:23.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: System Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23999740. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6625 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:22.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: System Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information and consequently gain privileges via a crafted application, aka internal bug 23936840. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6626 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:24.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24310423. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6627 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:24.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Audio component in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information via a crafted audio file, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24211743. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6628 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:23.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Media Framework in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24074485. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6629 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:22.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wi-Fi in Android 5.x before 5.1.1 LMY48Z allows attackers to obtain sensitive information via unspecified vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 22667667. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6630 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:23.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: SystemUI in Android 5.x before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to read screenshots and consequently gain privileges via a crafted application, aka internal bug 19121797. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6631 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:24.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24623447. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6632 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:24.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24346430. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6633 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:24.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: The display drivers in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23987307. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6634 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:24.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: The display drivers in Android before 5.1.1 LMY48Z allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 24163261. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-6636 State: PUBLISHED Published: 2016-01-06T19:00:00 Last Updated: 2024-08-06T07:29:24.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 25070493 and 24686670. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034592 - http://source.android.com/security/bulletin/2016-01-01.html
CVE ID: CVE-2015-6637 State: PUBLISHED Published: 2016-01-06T19:00:00 Last Updated: 2024-08-06T07:29:24.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MediaTek misc-sd driver in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 25307013. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034592 - http://source.android.com/security/bulletin/2016-01-01.html
CVE ID: CVE-2015-6638 State: PUBLISHED Published: 2016-01-06T19:00:00 Last Updated: 2024-08-06T07:29:24.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Imagination Technologies driver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 24673908. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034592 - http://source.android.com/security/bulletin/2016-01-01.html
CVE ID: CVE-2015-6639 State: PUBLISHED Published: 2016-01-06T00:00:00.000Z Last Updated: 2025-02-13T16:27:12.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24446875. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39757/ - http://www.securitytracker.com/id/1034592 - http://source.android.com/security/bulletin/2016-01-01.html - http://seclists.org/fulldisclosure/2023/May/26 - http://packetstormsecurity.com/files/1726
ty/bulletin/2016-01-01.html - http://seclists.org/fulldisclosure/2023/May/26 - http://packetstormsecurity.com/files/172637/Widevine-Trustlet-5.x-6.x-7.x-PRDiagVerifyProvisioning-Buffer-Overflow.html
CVE ID: CVE-2015-6640 State: PUBLISHED Published: 2016-01-06T19:00:00 Last Updated: 2024-08-06T07:29:24.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: The prctl_set_vma_anon_name function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a certain update action, which allows attackers to gain privileges or cause a denial of service (vma list corruption) via a crafted application, aka internal bug 20017123. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034592 - http://source.android.com/security/bulletin/2016-01-01.html - https://android.googlesource.c
itytracker.com/id/1034592 - http://source.android.com/security/bulletin/2016-01-01.html - https://android.googlesource.com/kernel%2Fcommon/+/69bfe2d957d903521d32324190c2754cb073be15
CVE ID: CVE-2015-6641 State: PUBLISHED Published: 2016-01-06T19:00:00 Last Updated: 2024-08-06T07:29:24.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bluetooth in Android 6.0 before 2016-01-01 allows remote attackers to obtain sensitive Contacts information by leveraging pairing, aka internal bug 23607427. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034592 - http://source.android.com/security/bulletin/2016-01-01.html
CVE ID: CVE-2015-6642 State: PUBLISHED Published: 2016-01-06T19:00:00 Last Updated: 2024-08-06T07:29:24.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24157888. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034592 - http://source.android.com/security/bulletin/2016-01-01.html
CVE ID: CVE-2015-6643 State: PUBLISHED Published: 2016-01-06T19:00:00 Last Updated: 2024-08-06T07:29:24.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Setup Wizard in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows physically proximate attackers to modify settings or bypass a reset protection mechanism via unspecified vectors, aka internal bug 25290269. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034592 - http://source.android.com/security/bulletin/2016-01-01.html
CVE ID: CVE-2015-6644 State: PUBLISHED Published: 2016-01-06T19:00:00 Last Updated: 2024-08-06T07:29:24.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 24106146. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:2809 - https://access.redhat.com/errata/RHSA-2017:1832 - https://access.redhat.com/errata/RHSA-2017:2810 - http://www.securitytracker.com/id/1034592 - https://access.redhat.com/errata/RHSA-2017:2808 - https://usn.ubuntu.com/3727-1/ - http://source.an
ker.com/id/1034592 - https://access.redhat.com/errata/RHSA-2017:2808 - https://usn.ubuntu.com/3727-1/ - http://source.android.com/security/bulletin/2016-01-01.html - https://access.redhat.com/errata/RHSA-2018:2927 - http://www.debian.org/security/2017/dsa-3829 - https://access.redhat.com/errata/RHSA-2017:2811 - http://www.securityfocus.com/bid/79865
CVE ID: CVE-2015-6645 State: PUBLISHED Published: 2016-01-06T19:00:00 Last Updated: 2024-08-06T07:29:24.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: SyncManager in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to cause a denial of service (continuous rebooting) via a crafted application, aka internal bug 23591205. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034592 - http://source.android.com/security/bulletin/2016-01-01.html
CVE ID: CVE-2015-6646 State: PUBLISHED Published: 2016-01-06T19:00:00 Last Updated: 2024-08-06T07:29:23.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System V IPC implementation in the kernel in Android before 6.0 2016-01-01 allows attackers to cause a denial of service (global kernel resource consumption) by leveraging improper interaction between IPC resource allocation and the memory manager, aka internal bug 22300191, a different vulnerability than CVE-2015-7613. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034592 - http://source.android.com/security/bulletin/2016-01-01.html
CVE ID: CVE-2015-6647 State: PUBLISHED Published: 2016-01-06T00:00:00.000Z Last Updated: 2025-02-13T16:27:13.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24441554. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034592 - http://source.android.com/security/bulletin/2016-01-01.html - http://seclists.org/fulldisclosure/2023/May/26 - http://packetstormsecurity.com/files/172637/Widevine-Trustlet-5.x-6.x-7.x-PRDiagVerify
.org/fulldisclosure/2023/May/26 - http://packetstormsecurity.com/files/172637/Widevine-Trustlet-5.x-6.x-7.x-PRDiagVerifyProvisioning-Buffer-Overflow.html
CVE ID: CVE-2015-6649 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6650 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6651 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6652 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6653 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6654 State: PUBLISHED Published: 2015-09-03T14:00:00 Last Updated: 2024-08-06T07:29:24.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xenmem_add_to_physmap_one function in arch/arm/mm.c in Xen 4.5.x, 4.4.x, and earlier does not limit the number of printk console messages when reporting a failure to retrieve a reference on a foreign page, which allows remote domains to cause a denial of service by leveraging permissions to map the memory of a foreign guest. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-141.html - http://www.debian.org/security/2015/dsa-3414 - http://www.securitytracker.com/id/1033438
CVE ID: CVE-2015-6655 State: PUBLISHED Published: 2015-08-31T19:00:00 Last Updated: 2024-08-06T07:29:24.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin/admin_users.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37955/ - http://packetstormsecurity.com/files/133299/Pligg-CMS-2.0.2-Cross-Site-Request-Forgery.html
CVE ID: CVE-2015-6658 State: PUBLISHED Published: 2015-08-24T14:00:00 Last Updated: 2024-08-06T07:29:23.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Autocomplete system in Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to uploading files. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165723.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165061.html - http://www.securitytracker.com/id/1033358 - http://lists.fedoraproject.o
mail/package-announce/2015-August/165061.html - http://www.securitytracker.com/id/1033358 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165840.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165733.html - http://www.debian.org/security/2015/dsa-3346 - https://www.drupal.org/SA-CORE-2015-003 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165690.html - http://www.securityfocus.com/bid/76434 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165704.html
CVE ID: CVE-2015-6659 State: PUBLISHED Published: 2015-08-24T14:00:00 Last Updated: 2024-08-06T07:29:24.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x before 7.39 allows remote attackers to execute arbitrary SQL commands via an SQL comment. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165723.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165061.html - http://www.securitytracker.com/id/1033358 - http://lists.fedoraproject.org/pipermail/package-announce/2015-S
5061.html - http://www.securitytracker.com/id/1033358 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165840.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165733.html - http://www.securityfocus.com/bid/76432 - http://www.debian.org/security/2015/dsa-3346 - https://www.drupal.org/SA-CORE-2015-003 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165690.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165704.html
CVE ID: CVE-2015-6660 State: PUBLISHED Published: 2015-08-24T14:00:00 Last Updated: 2024-08-06T07:29:23.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not properly validate the form token, which allows remote attackers to conduct CSRF attacks that upload files in a different user's account via vectors related to "file upload value callbacks." Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165723.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165061.html - http://www.securitytracker.com/id/1033
tp://lists.fedoraproject.org/pipermail/package-announce/2015-August/165061.html - http://www.securitytracker.com/id/1033358 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165840.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165733.html - http://www.debian.org/security/2015/dsa-3346 - https://www.drupal.org/SA-CORE-2015-003 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165690.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165704.html
CVE ID: CVE-2015-6661 State: PUBLISHED Published: 2015-08-24T14:00:00 Last Updated: 2024-08-06T07:29:24.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to obtain sensitive node titles by reading the menu. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165723.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165061.html - http://www.securitytracker.com/id/1033358 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165840.html - http://lists.fedoraproject.org/pipermail/pack