Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ommit/?id=48900cb6af4282fa0fb6ff4d72a81aa3dadb5c39 - https://github.com/torvalds/linux/commit/48900cb6af4282fa0fb6ff4d72a81aa3dadb5c39 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.securityfocus.com/bid/76230 - http://www.ubuntu.com/usn/USN-2774-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1243852 - http://www.ubuntu.com/usn/USN-2773-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169378.html - http://www.securitytracker.com/id/1034045 - http://www.ubuntu.com/usn/USN-2777-1
CVE ID: CVE-2015-5157 State: PUBLISHED Published: 2015-08-31T10:00:00 Last Updated: 2024-08-06T06:32:32.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0212.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.ope
2/msg00031.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html - http://rhn.redhat.com/errata/RHSA-2016-0715.html - http://www.ubuntu.com/usn/USN-2689-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.ubuntu.com/usn/USN-2690-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b6e6a8334d56354853f9c255d1395c2ba570e0a - http://www.securityfocus.com/bid/76005 - http://www.ubuntu.com/usn/USN-2691-1 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html - http://lists.opensuse.org/open
USN-2691-1 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html - http://www.ubuntu.com/usn/USN-2688-1 - http://rhn.redhat.com/errata/RHSA-2016-0185.html - http://www.debian.org/security/2015/dsa-3313 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6 - http://www.openwall.com/lists/oss-security/2015/07/22/7 - http://rhn.redhat.com/errata/RHSA-2016-0224.html - https://github.com/torvalds/linux/commit/9b6e6a8334d56354853f9c255d1395c2ba570e0a - http://www.ubuntu.com/usn/USN-2687-1
CVE ID: CVE-2015-5158 State: PUBLISHED Published: 2016-04-08T16:00:00 Last Updated: 2024-08-06T06:32:32.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built with SCSI-device emulation support, allows guest OS users with CAP_SYS_RAWIO permissions to cause a denial of service (instance crash) via an invalid opcode in a SCSI command descriptor block. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76016 - https://lists.nongnu.org/archive/html/qemu-devel/2015-07/msg04558.html - https://security.gentoo.org/glsa/201510-02 - http://www.securitytracker.com/id/1033095
CVE ID: CVE-2015-5159 State: PUBLISHED Published: 2018-10-30T18:00:00 Last Updated: 2024-08-06T06:32:32.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: python-kdcproxy before 0.3.2 allows remote attackers to cause a denial of service via a large POST request. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1245200 - https://github.com/latchset/kdcproxy/commit/f274aa6787cb8b3ec1cc12c440a56665b7231882
CVE ID: CVE-2015-5160 State: PUBLISHED Published: 2018-08-20T21:00:00 Last Updated: 2024-08-06T06:41:07.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.openstack.org/wiki/OSSN/OSSN-0079 - https://bugzilla.redhat.com/show_bug.cgi?id=1245647 - http://rhn.redhat.com/errata/RHSA-2016-2577.html - https://bugs.launchpad.net/ossn/+bug/1686743 - http://www.openwall.com/lists/oss-security/2017/07/21/3
CVE ID: CVE-2015-5161 State: PUBLISHED Published: 2015-08-25T17:00:00 Last Updated: 2024-08-06T06:41:07.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external entity (XXE) and XML entity expansion (XEE) attacks via multibyte encoded characters. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133068/Zend-Framework-2.4.2-1.12.13-XXE-Injection.html - http://lists.fedoraproject.or
p://packetstormsecurity.com/files/133068/Zend-Framework-2.4.2-1.12.13-XXE-Injection.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165173.html - http://legalhackers.com/advisories/zend-framework-XXE-vuln.txt - http://www.securityfocus.com/bid/76177 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165147.html - https://www.exploit-db.com/exploits/37765/ - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164409.html - http://www.debian.org/security/2015/dsa-3340 - http://framework.zend.com/security/advisory/ZF2015-06 - http://seclists.org/fulldisclosure/2015/Aug/46
CVE ID: CVE-2015-5162 State: PUBLISHED Published: 2016-10-07T14:00:00 Last Updated: 2024-08-06T06:41:07.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1 and 12.0.0; and Nova before 12.0.4 and 13.0.0 does not properly limit qemu-img calls, which might allow attackers to cause a denial of service (memory and disk consumption) via a crafted disk image. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1449062 - http://www.securityfocus.com/bid/76849 - http://rhn.redhat.com/errata/RHSA-2017-0153.html - http://www.openwall.com/lists/oss-security/2016/10
us.com/bid/76849 - http://rhn.redhat.com/errata/RHSA-2017-0153.html - http://www.openwall.com/lists/oss-security/2016/10/06/8 - http://rhn.redhat.com/errata/RHSA-2016-2923.html - http://rhn.redhat.com/errata/RHSA-2016-2991.html - http://rhn.redhat.com/errata/RHSA-2017-0165.html - http://rhn.redhat.com/errata/RHSA-2017-0156.html - http://rhn.redhat.com/errata/RHSA-2017-0282.html
CVE ID: CVE-2015-5163 State: PUBLISHED Published: 2015-08-19T15:00:00 Last Updated: 2024-08-06T06:41:07.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1639.html - http://lists.openstack.org/pipermail/openstack-announce/2015-August/000527.html - http://www.securityfocus.com/bid/76346 - https://bugs.launchpad.net/glance/+bug/1471912
CVE ID: CVE-2015-5164 State: PUBLISHED Published: 2017-10-18T16:00:00 Last Updated: 2024-08-06T06:41:07.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Qpid server on Red Hat Satellite 6 does not properly restrict message types, which allows remote authenticated users with administrative access on a managed content host to execute arbitrary code via a crafted message, related to a pickle processing problem in pulp. Additional Analyst Notes: - CVE Program Container: References: - https://pulp.plan.io/issues/23 - https://bugzilla.redhat.com/show_bug.cgi?id=1247732
CVE ID: CVE-2015-5165 State: PUBLISHED Published: 2015-08-12T14:00:00 Last Updated: 2024-08-06T06:41:07.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1674.html - http://www.securitytracker.com/id/1033176 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html - http://www.debian.org/security/2015/dsa-3348 - http://www.oracle.com/technetwork/topics/security/linuxbu
msg00027.html - http://www.debian.org/security/2015/dsa-3348 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://support.citrix.com/article/CTX201717 - http://rhn.redhat.com/errata/RHSA-2015-1683.html - http://rhn.redhat.com/errata/RHSA-2015-1793.html - http://www.debian.org/security/2015/dsa-3349 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167820.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165373.html - http://rhn.redhat.com/errata/RHSA-2015-1833.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167792.html - http://lists.opensuse.org/opensuse-security-
s.fedoraproject.org/pipermail/package-announce/2015-September/167792.html - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.html - http://rhn.redhat.com/errata/RHSA-2015-1740.html - http://rhn.redhat.com/errata/RHSA-2015-1739.html - http://www.securityfocus.com/bid/76153 - http://xenbits.xen.org/xsa/advisory-140.html - https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13
CVE ID: CVE-2015-5166 State: PUBLISHED Published: 2015-08-12T14:00:00 Last Updated: 2024-08-06T06:41:07.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated block devices, which allows local HVM guest users to gain privileges by unplugging a block device twice. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167820.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165373.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167792.html - htt
/2015-September/165373.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167792.html - http://www.securityfocus.com/bid/76152 - http://www.securitytracker.com/id/1033175 - http://xenbits.xen.org/xsa/advisory-139.html
CVE ID: CVE-2015-5167 State: PUBLISHED Published: 2016-04-12T14:00:00 Last Updated: 2024-08-06T06:41:07.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Policy Admin Tool in Apache Ranger before 0.5.1 allows remote authenticated users to bypass intended access restrictions via the REST API. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/82871 - https://mail-archives.apache.org/mod_mbox/ranger-dev/201602.mbox/%3CD2D9A4C5.114ECA%25vel%40apache.org%3E - https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
CVE ID: CVE-2015-5168 State: PUBLISHED Published: 2017-09-13T16:00:00 Last Updated: 2024-08-06T06:41:07.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5206. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.us.apache.org/mod_mbox/www-announce/201509.mbox/%3CCABF6JR2j5vesvnjbm6sDPB_zAGj3kNgzzHEpLUh6dWG6t8mC2w%40mail.gmail.com%3E
CVE ID: CVE-2015-5169 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-06T06:41:08.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apache Struts before 2.3.20. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20180629-0003/ - http://www.securityfocus.com/bid/76625 - https://struts.apache.org/docs/s2-025.html - http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000125.html - https://bugzilla.redhat.com/show_bug.cgi?id=1260087 - http://jvn.jp/en/jp/JVN95989300/index.html
CVE ID: CVE-2015-5170 State: PUBLISHED Published: 2017-10-24T17:00:00 Last Updated: 2024-08-06T06:41:07.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow remote attackers to conduct cross-site request forgery (CSRF) attacks on PWS and log a user into an arbitrary account by leveraging lack of CSRF checks. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2015-5170-5173 - http://www.securityfocus.com/bid/101579
CVE ID: CVE-2015-5171 State: PUBLISHED Published: 2017-10-24T17:00:00 Last Updated: 2024-08-06T06:41:07.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire existing sessions. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2015-5170-5173
CVE ID: CVE-2015-5172 State: PUBLISHED Published: 2017-10-24T17:00:00 Last Updated: 2024-08-06T06:41:09.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire password reset links. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2015-5170-5173
CVE ID: CVE-2015-5173 State: PUBLISHED Published: 2017-10-24T17:00:00 Last Updated: 2024-08-06T06:41:08.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact via vectors involving emails with password recovery links, aka "Cross Domain Referer Leakage." Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2015-5170-5173
CVE ID: CVE-2015-5174 State: PUBLISHED Published: 2016-02-25T01:00:00 Last Updated: 2024-08-06T06:41:07.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. (slash dot dot) in a pathname used by a web application in a getResource, getResourceAsStream, or getResourcePaths call, as demonstrated by the $CATALINA_BASE/webapps directory. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/sit
bapps directory. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - https://security.gentoo.org/glsa/201705-09 - http://svn.apache.org/viewvc?view=revision&revision=1700900 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html - http://www.ubuntu.com/usn/USN-3024-1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html - http://rhn.redhat.com/errata/RHSA-2016-2045.html - http://www.d
e.org/opensuse-security-announce/2016-03/msg00047.html - http://rhn.redhat.com/errata/RHSA-2016-2045.html - http://www.debian.org/security/2016/dsa-3530 - http://tomcat.apache.org/security-7.html - http://marc.info/?l=bugtraq&m=145974991225029&w=2 - http://svn.apache.org/viewvc?view=revision&revision=1696284 - http://tomcat.apache.org/security-8.html - https://access.redhat.com/errata/RHSA-2016:1434 - http://svn.apache.org/viewvc?view=revision&revision=1700898 - http://www.securitytracker.com/id/1035070 - https://bto.bluecoat.com/security-advisory/sa118 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442 - https://access.redhat.com/errata/RHSA-2016:1433
2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442 - https://access.redhat.com/errata/RHSA-2016:1433 - https://security.netapp.com/advisory/ntap-20180531-0001/ - http://tomcat.apache.org/security-6.html - http://www.securityfocus.com/bid/83329 - https://access.redhat.com/errata/RHSA-2016:1432 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html - http://rhn.redhat.com/errata/RHSA-2016-2599.html - http://seclists.org/bugtraq/2016/Feb/149 - http://www.debian.org/security/2016/dsa-3609 - http://packetstormsecurity.com/files/135883/Apache-Tomcat-Limited-Directory-Traversal.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.htm
ache-Tomcat-Limited-Directory-Traversal.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.html - http://svn.apache.org/viewvc?view=revision&revision=1696281 - http://svn.apache.org/viewvc?view=revision&revision=1700897 - http://rhn.redhat.com/errata/RHSA-2016-1435.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626 - http://www.debian.org/security/2016/dsa-3552 - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lis
che.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rd4863c79bf729aabb95571fd845a9ea4ee3ae3fcee48f35aba007350%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r0b24f2c7507f702348e2c2d64e8a5de72bad6173658e8d8e45322ac2%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r15695e6203b026c9e9070ca9fa95fb17dd4cd88e534
2ac2%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r15695e6203b026c9e9070ca9fa95fb17dd4cd88e5342a7dc5e1e7b85%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r409efdf706c2077ae5c37018a87da725a3ca89570a9530342cdc53e4%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r1c62634b7426bee5f553307063457b99c84af73b078ede4f2592b34e%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache
read.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2015-5175 State: PUBLISHED Published: 2017-06-07T20:00:00 Last Updated: 2024-08-06T06:41:09.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Application plugins in Apache CXF Fediz before 1.1.3 and 1.2.x before 1.2.1 allow remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://mail-archives.apache.org/mod_mbox/cxf-dev/201508.mbox/%3CCAB8XdGAx=VL_uepDSecE2h8ggTD4kpagXnyfegVjt7Axi_Ossw%40mail.gmail.com%3E - http://www.openwall.com/lists/oss-security/2015/08/26/3 - https://cxf.apache.org/security-advisories.data/CVE-2015-5175.txt.asc?version=1&modificationDate=1440598018000&api=v2 - http://www.securityfo
g/security-advisories.data/CVE-2015-5175.txt.asc?version=1&modificationDate=1440598018000&api=v2 - http://www.securityfocus.com/bid/76486 - https://git-wip-us.apache.org/repos/asf?p=cxf-fediz.git%3Ba=commit%3Bh=f65c961ea31e3c1851daba8e7e49fc37bbf77b19 - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d
1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2015-5176 State: PUBLISHED Published: 2015-08-11T14:00:00 Last Updated: 2024-08-06T06:41:07.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PortletRequestDispatcher in PortletBridge, as used in Red Hat JBoss Portal 6.2.0, does not properly enforce the security constraints of servlets, which allows remote attackers to gain access to resources via a request that asks to render a non-JSF resource. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1543.html
CVE ID: CVE-2015-5177 State: PUBLISHED Published: 2017-10-20T21:00:00 Last Updated: 2024-08-06T06:41:07.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/p/openslp/mercurial/ci/2bc15d0494f886d9c4fe342d23bc160605aea51d/ - https://www.debian.org/security/2015/dsa-3353 - http://www.securitytracker.com/id/1033719 - http://www.securityfocus.com/bid/76635 - https://bugzilla.redhat.com/show_bug.cgi?id=1251064
CVE ID: CVE-2015-5178 State: PUBLISHED Published: 2015-10-27T16:00:00 Last Updated: 2024-08-06T06:41:09.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1905.html - http://rhn.redhat.com/errata/RHSA-2015-1904.html - http://rhn.redhat.com/errata/RHSA-2015-1908.h
a/RHSA-2015-1905.html - http://rhn.redhat.com/errata/RHSA-2015-1904.html - http://rhn.redhat.com/errata/RHSA-2015-1908.html - http://rhn.redhat.com/errata/RHSA-2015-1907.html - http://www.securitytracker.com/id/1033859 - http://rhn.redhat.com/errata/RHSA-2015-1906.html - https://bugzilla.redhat.com/show_bug.cgi?id=1250552