Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-0206 State: PUBLISHED Published: 2015-01-09T02:00:00 Last Updated: 2024-08-06T04:03:10.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay detection. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html - http://tools.cisco.com/security
7936.html - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl - https://exchange.xforce.ibmcloud.com/vulnerabilities/99704 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html - http://www.securitytracker.com/id/1033378 - http://marc.info/?l=bugtraq&m=142721102728110&w=2 - https://www.openss
tml - http://www.securitytracker.com/id/1033378 - http://marc.info/?l=bugtraq&m=142721102728110&w=2 - https://www.openssl.org/news/secadv_20150108.txt - http://www.mandriva.com/security/advisories?name=MDVSA-2015:019 - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html - http://rhn.redhat.com/errata/RHSA-2015-0066.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10108 - https://kc.mcafee.com/corporate/index?page=content&id=SB10102 - https://github.com/openssl/openssl/commit/103b171d8fc282ef435f8de9afbf7
ee.com/corporate/index?page=content&id=SB10102 - https://github.com/openssl/openssl/commit/103b171d8fc282ef435f8de9afbf7782e312961f - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.securityfocus.com/bid/91787 - http://www.securityfocus.com/bid/71940 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://marc.info/?l=bugtraq&m=144050205101530&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://marc.info/?l=bugtraq&m=144050254401665&w=2 - https://bto.bluecoat.com/security-advisory/sa88 - http://www.debian.org/security/2015/dsa-3125 - http://
254401665&w=2 - https://bto.bluecoat.com/security-advisory/sa88 - http://www.debian.org/security/2015/dsa-3125 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html
CVE ID: CVE-2015-0207 State: PUBLISHED Published: 2015-03-19T00:00:00 Last Updated: 2024-08-06T04:03:10.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows remote attackers to cause a denial of service (application crash) via crafted DTLS traffic, as demonstrated by DTLS 1.0 traffic to a DTLS 1.2 server. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10110 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - https://bugzilla.r
page=content&id=SB10110 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - https://bugzilla.redhat.com/show_bug.cgi?id=1202351 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://bto.bluecoat.com/security-advisory/sa92 - https://www.openssl.org/news/secadv_20150319.txt - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.securityfocus.com/bid/73229 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-25
network/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.securitytracker.com/id/1031929 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=819418110b6fff4a7b96f01a5d68f71df3e3b736 - https://security.gentoo.org/glsa/201503-11 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-0208 State: PUBLISHED Published: 2015-03-19T00:00:00 Last Updated: 2024-08-06T04:03:10.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted RSA PSS parameters to an endpoint that uses the certificate-verification feature. Additional Analyst Notes: - CVE Program Container: References: - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=4b22cce3812052fe64fc3f6d58d8cc884e3cb834 - https://kc.mcafee.com/corporate/index
enssl.org/?p=openssl.git%3Ba=commit%3Bh=4b22cce3812052fe64fc3f6d58d8cc884e3cb834 - https://kc.mcafee.com/corporate/index?page=content&id=SB10110 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=1202369 - https://bto.bluecoat.com/security-advisory/sa92 - https://www.openssl.org/news/secadv_20150319.txt - http://www.securityfocus.com/bid/73230 - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.oracle.com/tec
748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.securitytracker.com/id/1031929 - https://security.gentoo.org/glsa/201503-11 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-0209 State: PUBLISHED Published: 2015-03-19T00:00:00 Last Updated: 2024-08-06T04:03:09.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&i
t. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10110 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://rhn.redhat.com/errata/RHSA-2015-0715.html - http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680 - http://www.debian.org/security/2015/dsa-3197 - http://www.ubuntu.com/usn/USN-2537-1 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html - https://bto.bluecoat.com/security-advisory/sa92 - https://www.openssl.org/news/secadv_2
nnounce/2015-March/152733.html - https://bto.bluecoat.com/security-advisory/sa92 - https://www.openssl.org/news/secadv_20150319.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=1b4a8df38fc9ab3c089ca5765075ee53ec5bd66a - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html - http://lists.opensu
Jun/msg00002.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - https://access.redhat.com/articles/1384453 - http://rhn.redhat.com/errata/RHSA-2016-1089.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html - https://bugzilla.redhat.com/show_bug.cgi?id=1196737 - http://marc.info/?l=bugtraq&m=143213830203296&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:063 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html - http://www.oracle.com/
ame=MDVSA-2015:063 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0716.html - http://marc.info/?l=bugtraq&m=142841429220765&w=2 - http://support.apple.com/kb/HT204942 - https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2015-0752.html - http://rhn.redhat.com/errata/RHSA-2016-2957.html - http://www.securitytracker.com/id/1031929 - http://marc.info/?l=bug
- http://rhn.redhat.com/errata/RHSA-2016-2957.html - http://www.securitytracker.com/id/1031929 - http://marc.info/?l=bugtraq&m=143213830203296&w=2 - http://www.securityfocus.com/bid/73239 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html - https://support.citrix.com/article/CTX216642 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html - http://marc.info/?l=bugtraq&m=144050254401665&w=2 - https://security.gentoo.org/glsa/201503-11 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-0210 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T04:03:10.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1178263 - https://bugzilla.redhat.com/show_bug.cgi?id=1178921
CVE ID: CVE-2015-0211 State: PUBLISHED Published: 2015-06-01T19:00:00 Last Updated: 2024-08-06T04:03:10.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/lti/ajax.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 does not consider the moodle/course:manageactivities and mod/lti:addinstance capabilities before proceeding with registered-tool list searches, which allows remote authenticated users to obtain sensitive information via requests to the LTI Ajax service. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47920 - https://moodle.org/mod/forum/d
ferences: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47920 - https://moodle.org/mod/forum/discuss.php?d=278611 - http://openwall.com/lists/oss-security/2015/01/19/1
CVE ID: CVE-2015-0212 State: PUBLISHED Published: 2015-06-01T19:00:00 Last Updated: 2024-08-06T04:03:10.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in course/pending.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted course summary. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48368 - http://openwall.com/lists/oss-security/2015/01/19/1 - https://moodle.org/mod/forum/discuss.php?d=278612
CVE ID: CVE-2015-0213 State: PUBLISHED Published: 2015-06-01T19:00:00 Last Updated: 2024-08-06T04:03:10.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in (1) editcategories.html and (2) editcategories.php in the Glossary module in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allow remote attackers to hijack the authentication of unspecified victims. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48106 - http://openwall.com/lists/oss-security/2015/01/19/1 - https://moodle.org/mod/forum/discus
h=HEAD&st=commit&s=MDL-48106 - http://openwall.com/lists/oss-security/2015/01/19/1 - https://moodle.org/mod/forum/discuss.php?d=278613
CVE ID: CVE-2015-0214 State: PUBLISHED Published: 2015-06-01T19:00:00 Last Updated: 2024-08-06T04:03:10.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: message/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to bypass a messaging-disabled setting via a web-services request, as demonstrated by a people-search request. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=278614 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48329 - http://openwall.com/lists/oss-security/2015/01/19/1
CVE ID: CVE-2015-0215 State: PUBLISHED Published: 2015-06-01T19:00:00 Last Updated: 2024-08-06T04:03:10.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: calendar/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to obtain sensitive calendar-event information via a web-services request. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48017 - https://moodle.org/mod/forum/discuss.php?d=278615 - http://openwall.com/lists/oss-security/2015/01/19/1
CVE ID: CVE-2015-0216 State: PUBLISHED Published: 2015-06-01T19:00:00 Last Updated: 2024-08-06T04:03:10.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: access.php in the Lesson module in Moodle 2.8.x before 2.8.2 does not set the RISK_XSS bit for graders, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via crafted essay feedback. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=278616 - http://openwall.com/lists/oss-security/2015/01/19/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48034
CVE ID: CVE-2015-0217 State: PUBLISHED Published: 2015-06-01T19:00:00 Last Updated: 2024-08-06T04:03:10.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: filter/mediaplugin/filter.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to cause a denial of service (CPU consumption or partial outage) via a crafted string that is matched against an improper regular expression. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48546 - https://moodle.org/mod/forum/discuss.php?d=278617 - http://openwall.com/lists/oss-security/2015
&st=commit&s=MDL-48546 - https://moodle.org/mod/forum/discuss.php?d=278617 - http://openwall.com/lists/oss-security/2015/01/19/1
CVE ID: CVE-2015-0218 State: PUBLISHED Published: 2015-06-01T19:00:00 Last Updated: 2024-08-06T04:03:10.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in auth/shibboleth/logout.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=278618 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47964 - http://openwall.com/lists/oss-security/2015/01/19/1
CVE ID: CVE-2015-0219 State: PUBLISHED Published: 2015-01-16T16:00:00 Last Updated: 2024-08-06T04:03:10.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 allows remote attackers to spoof WSGI headers by using an _ (underscore) character instead of a - (dash) character in an HTTP header, as demonstrated by an X-Auth_User header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62718 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148608.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:036 - http://lists.fedoraproject.org/piper
ary/148608.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:036 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148696.html - http://secunia.com/advisories/62285 - http://lists.opensuse.org/opensuse-updates/2015-09/msg00035.html - https://www.djangoproject.com/weblog/2015/jan/13/security/ - http://www.ubuntu.com/usn/USN-2469-1 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00001.html - http://secunia.com/advisories/62309 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:109 - http://advisories.mageia.org/MGASA-2015-0026.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148485.html
CVE ID: CVE-2015-0220 State: PUBLISHED Published: 2015-01-16T16:00:00 Last Updated: 2024-08-06T04:03:10.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: The django.util.http.is_safe_url function in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 does not properly handle leading whitespaces, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL, related to redirect URLs, as demonstrated by a "\njavascript:" URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62718 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148608.html - http://ubuntu.com/usn/us
es/62718 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148608.html - http://ubuntu.com/usn/usn-2469-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:036 - http://secunia.com/advisories/62285 - http://lists.opensuse.org/opensuse-updates/2015-09/msg00035.html - https://www.djangoproject.com/weblog/2015/jan/13/security/ - http://lists.opensuse.org/opensuse-updates/2015-04/msg00001.html - http://secunia.com/advisories/62309 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:109 - http://advisories.mageia.org/MGASA-2015-0026.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148485.html
CVE ID: CVE-2015-0221 State: PUBLISHED Published: 2015-01-16T16:00:00 Last Updated: 2024-08-06T04:03:10.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption) via a long line in a file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62718 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148608.html - http://ubuntu.com/usn/usn-2469-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:
15-January/148608.html - http://ubuntu.com/usn/usn-2469-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:036 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148696.html - http://secunia.com/advisories/62285 - http://lists.opensuse.org/opensuse-updates/2015-09/msg00035.html - https://www.djangoproject.com/weblog/2015/jan/13/security/ - http://lists.opensuse.org/opensuse-updates/2015-04/msg00001.html - http://secunia.com/advisories/62309 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:109 - http://advisories.mageia.org/MGASA-2015-0026.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148485.html
CVE ID: CVE-2015-0222 State: PUBLISHED Published: 2015-01-16T16:00:00 Last Updated: 2024-08-06T04:03:10.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate values, which triggers a large number of SQL queries. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148608.html - http://ubuntu.com/usn/usn-2469-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148696.html - http://secu
tu.com/usn/usn-2469-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148696.html - http://secunia.com/advisories/62285 - http://lists.opensuse.org/opensuse-updates/2015-09/msg00035.html - https://www.djangoproject.com/weblog/2015/jan/13/security/ - http://lists.opensuse.org/opensuse-updates/2015-04/msg00001.html - http://secunia.com/advisories/62309 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:109 - http://advisories.mageia.org/MGASA-2015-0026.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148485.html
CVE ID: CVE-2015-0223 State: PUBLISHED Published: 2015-02-02T16:00:00 Last Updated: 2024-08-06T04:03:10.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass access restrictions on qpidd via unknown vectors, related to 0-10 connection handling. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHBA-2016:1500 - http://www.securityfocus.com/bid/72319 - http://seclists.org/bugtraq/2015/Jan/122 - http://packetstormsecurity.com/files/130106/Apache-Qpid-0.30-Anonymous-Action-Prevention.html
CVE ID: CVE-2015-0224 State: PUBLISHED Published: 2017-10-30T14:00:00 Last Updated: 2024-08-06T04:03:10.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted protocol sequence set. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0203. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHBA-2016:1500 - https://issues.apache.org/jira/browse/QPID-6310 - http://www.securitytracker.com/id/1031872 - https://access.redhat.com/errata/RHSA-2015:0708 - http://www.securityfocus.com/bid/72317 - http://rh