Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
3b6e884 - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html - http://www.ubuntu.com/usn/USN-2855-2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=530d50a1abdcdf4d1775652d4c456c1274d83d8d - http://www.securitytracker.com/id/1034492 - http://www.securityfocus.com/bid/79736 - https://www.samba.org/samba/security/CVE-2015-7540.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.html - http://www.debian.org/security/2016/dsa-3433 - https://security.gentoo.org/glsa/201612-47 - http://www.ubuntu.com/usn/USN-2855-1 - http://lists.opensuse.org/
sa-3433 - https://security.gentoo.org/glsa/201612-47 - http://www.ubuntu.com/usn/USN-2855-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html - https://bugzilla.redhat.com/show_bug.cgi?id=1288451
CVE ID: CVE-2015-7541 State: PUBLISHED Published: 2016-01-08T21:00:00 Last Updated: 2024-08-06T07:51:28.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the (1) image_path, (2) colors, or (3) depth variable. Additional Analyst Notes: - CVE Program Container: References: - http://rubysec.com/advisories/CVE-2015-7541/ - http://www.openwall.com/lists/oss-security/2016/01/05/2 - https://github.com/quadule/colorscore/commit/570b5e854cecddd44d2047c44126aed951b61718
CVE ID: CVE-2015-7542 State: PUBLISHED Published: 2019-12-03T22:13:39 Last Updated: 2024-08-06T07:51:28.490Z Vendors: libgwenhywfar Products: libgwenhywfar Problem Types: hijacking an SSL session Description: A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2018-01/msg00038.html - https://bugzilla.redhat.com/show_bug.cgi?id=1272503 - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174484.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174540.html
CVE ID: CVE-2015-7543 State: PUBLISHED Published: 2017-07-25T14:00:00 Last Updated: 2024-08-06T07:51:28.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the temporary directory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1280543
CVE ID: CVE-2015-7544 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-06T07:51:28.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: redhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager (aka RHEV Manager) before 3.6 allows remote authenticated users with the SuperUser role on any Entity to execute arbitrary commands on any host in the RHEV environment. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2016-0426.html - https://bugzilla.redhat.com/show_bug.cgi?id=1269588
CVE ID: CVE-2015-7545 State: PUBLISHED Published: 2016-04-13T15:00:00 Last Updated: 2024-08-06T07:51:28.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2515.html - http://lists.opensuse.org/opensuse-updates/2015-11/msg00066.html - h
http://rhn.redhat.com/errata/RHSA-2015-2515.html - http://lists.opensuse.org/opensuse-updates/2015-11/msg00066.html - https://security.gentoo.org/glsa/201605-01 - http://www.openwall.com/lists/oss-security/2015/12/08/5 - https://lkml.org/lkml/2015/10/5/683 - https://github.com/git/git/blob/master/Documentation/RelNotes/2.6.1.txt - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.securitytracker.com/id/1034501 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://bugzilla.redhat.com/show_bug.cgi?id=1269794 - https://github.
opics/security/linuxbulletinoct2015-2719645.html - https://bugzilla.redhat.com/show_bug.cgi?id=1269794 - https://github.com/git/git/blob/master/Documentation/RelNotes/2.3.10.txt - http://www.ubuntu.com/usn/USN-2835-1 - https://kernel.googlesource.com/pub/scm/git/git/+/33cfccbbf35a56e190b79bdec5c85457c952a021 - https://github.com/git/git/blob/master/Documentation/RelNotes/2.5.4.txt - http://www.openwall.com/lists/oss-security/2015/12/11/7 - http://www.securityfocus.com/bid/78711 - http://www.openwall.com/lists/oss-security/2015/12/09/8 - https://github.com/git/git/blob/master/Documentation/RelNotes/2.4.10.txt - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackwa
r/Documentation/RelNotes/2.4.10.txt - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.533255 - http://www.debian.org/security/2016/dsa-3435
CVE ID: CVE-2015-7546 State: PUBLISHED Published: 2016-02-03T15:00:00 Last Updated: 2024-08-06T07:51:28.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x before 8.0.2 (Liberty) and keystonemiddleware (formerly python-keystoneclient) before 1.5.4 (Kilo) and Liberty before 2.3.3 does not properly invalidate authorization tokens when using the PKI or PKIZ token providers, which allows remote authenticated users to bypass intended access restrictions and gain access to cloud resources by manipulating byte fields within a revoked token. Additional Analyst Notes: - CVE Program Container: References
ources by manipulating byte fields within a revoked token. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.openstack.org/wiki/OSSN/OSSN-0062 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugs.launchpad.net/keystone/+bug/1490804 - https://security.openstack.org/ossa/OSSA-2016-005.html - http://www.securityfocus.com/bid/80498
CVE ID: CVE-2015-7547 State: PUBLISHED Published: 2016-02-18T21:00:00 Last Updated: 2024-08-06T07:51:28.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module. Additional Analyst Notes: - CVE Program Container: References: - htt
AA DNS queries" and the libnss_dns.so.2 NSS module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035020 - http://marc.info/?l=bugtraq&m=146161017210491&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html - http://rhn.redhat.com/errata/RHSA-2016-0175.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05140858 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05125672 - https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/ - https://sourceware.org/bugzilla/show_bug.cgi?id=18665 - http://marc.info/?l=bugtraq&m=145857691004892&w=2 - htt
eased/ - https://sourceware.org/bugzilla/show_bug.cgi?id=18665 - http://marc.info/?l=bugtraq&m=145857691004892&w=2 - http://rhn.redhat.com/errata/RHSA-2016-0225.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177412.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40161 - http://www.debian.org/security/2016/dsa-3481 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html - http://ubuntu.com/usn/usn-2900-1 - http://www.fortiguard.com/advisory/glibc-getaddrinfo-stack-overflow - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?d
uard.com/advisory/glibc-getaddrinfo-stack-overflow - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917 - http://rhn.redhat.com/errata/RHSA-2016-0277.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00043.html - https://googleonlinesecurity.blogspot.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - https://security.netapp.com/advisory/ntap-20160217-0002/ - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html - https://blogs.sophos.com/2016/02/24/utm-up2date-9-355-released/ - https://support.lenovo.com/us/en/product_secu
6.html - https://blogs.sophos.com/2016/02/24/utm-up2date-9-355-released/ - https://support.lenovo.com/us/en/product_security/len_5450 - https://www.tenable.com/security/research/tra-2017-08 - http://www.vmware.com/security/advisories/VMSA-2016-0002.html - http://marc.info/?l=bugtraq&m=145672440608228&w=2 - http://www.securityfocus.com/bid/83265 - http://fortiguard.com/advisory/glibc-getaddrinfo-stack-overflow - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 - https://security.gentoo.org/glsa/201602-02 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128937 - http://marc.info/?l=bugtraq&m=145596041017029&w=2 - http:/
ortal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128937 - http://marc.info/?l=bugtraq&m=145596041017029&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html - https://www.exploit-db.com/exploits/40339/ - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05098877 - https://bto.bluecoat.com/security-advisory/sa114 - https://sourceware.org/ml/libc-alpha/2016-02/msg00416.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html - https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes - http://packetstormsecurity.com/files/135802/glibc-getaddrinfo-St
re+Data+Center+Operation+Software+Vulnerability+Fixes - http://packetstormsecurity.com/files/135802/glibc-getaddrinfo-Stack-Based-Buffer-Overflow.html - https://bugzilla.redhat.com/show_bug.cgi?id=1293532 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05008367 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176716 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05053211 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - https://h20566.www2.hpe.com/hpsc/doc/public/displ
w.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05028479 - https://support.f5.com/kb/en-us/solutions/public/k/47/sol47098834.html - http://rhn.redhat.com/errata/RHSA-2016-0176.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00044.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04989404 - http://www.debian.org/security/2016/dsa-3480 - https://ics-cert.us-cert.gov/advisories/ICSA-16-103-01 - https://www.exploit-db.com/exploits/39454/ - http://support.citrix.com
/ics-cert.us-cert.gov/advisories/ICSA-16-103-01 - https://www.exploit-db.com/exploits/39454/ - http://support.citrix.com/article/CTX206991 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160304-01-glibc-en - https://www.kb.cert.org/vuls/id/457759 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05130958 - https://access.redhat.com/articles/2161461 - https://kc.mcafee.com/corporate/index?page=content&id=SB10150 - http://marc.info/?l=bugtraq&m=145690841819314&w=2 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05212266 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073516 -
lay?docId=emr_na-c05212266 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073516 - http://seclists.org/fulldisclosure/2019/Sep/7 - https://seclists.org/bugtraq/2019/Sep/7 - http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html - http://seclists.org/fulldisclosure/2021/Sep/0 - http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html - https://www.arista.com/en/support/advisories-notices/security-advisories/1255-security-advisory-17 - http://seclists.org/fulldisclosure/2022/Jun/36 - http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdat
tp://seclists.org/fulldisclosure/2022/Jun/36 - http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html
CVE ID: CVE-2015-7548 State: PUBLISHED Published: 2016-01-12T19:00:00 Last Updated: 2024-08-06T07:51:28.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/80176 - http://rhn.redhat.com/errata/RHSA-2016-0018.html - https://security.openstack.org/ossa/OSSA-2016-001.html
CVE ID: CVE-2015-7549 State: PUBLISHED Published: 2017-10-30T14:00:00 Last Updated: 2024-08-06T07:51:28.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by leveraging failure to define the .write method. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/12/14/2 - http://www.securityfocus.com/bid/80761 - http://www.debian.org/security/2016/dsa-3471 - https://bugzilla.redhat.com/show_bug.cgi?id=1291137 - http://git.qemu.org/?p=qemu.g
.debian.org/security/2016/dsa-3471 - https://bugzilla.redhat.com/show_bug.cgi?id=1291137 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=43b11a91dd861a946b231b89b754285 - https://security.gentoo.org/glsa/201602-01 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175380.html
CVE ID: CVE-2015-7550 State: PUBLISHED Published: 2016-02-08T02:00:00 Last Updated: 2024-08-06T07:51:28.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: The keyctl_read_key function in security/keys/keyctl.c in the Linux kernel before 4.3.4 does not properly use a semaphore, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted application that leverages a race condition between keyctl_revoke and keyctl_read calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79903 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.4
ner: References: - http://www.securityfocus.com/bid/79903 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.4 - http://www.ubuntu.com/usn/USN-2911-1 - http://www.ubuntu.com/usn/USN-2890-3 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html - https://bugzilla.redhat.com/show_bug.cgi?id=1291197 - https://github.com/torvalds/linux/commit/b4a1b4f5047e4f54e194681125c74c0aa64d637d - http://www.ubuntu.com/usn/USN-2911-2 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.ubuntu.com/usn/USN-2890-2 - https://security-tracker.debian.org/tracker/CVE-2015-7550 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/
curity-tracker.debian.org/tracker/CVE-2015-7550 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b4a1b4f5047e4f54e194681125c74c0aa64d637d - http://www.ubuntu.com/usn/USN-2890-1 - http://www.debian.org/security/2016/dsa-3434 - http://www.ubuntu.com/usn/USN-2888-1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
CVE ID: CVE-2015-7551 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-06T07:51:28.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library. NOTE: this vulnerability exists because of a CVE-2009-5147 regression. Additional Analyst Notes: - CVE Program Container: References: -
rability exists because of a CVE-2009-5147 regression. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-7551.html - https://support.apple.com/HT206167 - https://github.com/ruby/ruby/commit/339e11a7f178312d937b7c95dd3115ce7236597a - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=796344 - https://www.ruby-lang.org/en/news/2015/12/16/unsafe-tainted-string-usage-in-fiddle-and-dl-cve-2015-7551/ - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=796551 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://p
in/bugreport.cgi?bug=796551 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://puppet.com/security/cve/ruby-dec-2015-security-fixes - https://access.redhat.com/errata/RHSA-2018:0583 - http://www.securityfocus.com/bid/76060
CVE ID: CVE-2015-7552 State: PUBLISHED Published: 2016-04-18T14:00:00 Last Updated: 2024-08-06T07:51:28.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the gdk_pixbuf_flip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3589 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00006.html - http://lists.opensuse.org/opensuse-updates/2016-03/msg00124.html - http://www.ubuntu.com/usn/USN-3085-1 - https://bugzilla.suse.com/show_bu
se.org/opensuse-updates/2016-03/msg00124.html - http://www.ubuntu.com/usn/USN-3085-1 - https://bugzilla.suse.com/show_bug.cgi?id=958963 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJF5ARFOX4BFUK6YCBKGAKBQYECO3AI2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSAZ6UCKKXC5VOWXGWQHOX2ZBLLATIOT/
CVE ID: CVE-2015-7553 State: PUBLISHED Published: 2017-09-14T16:00:00 Last Updated: 2024-08-06T07:51:28.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink_log module is loaded, allows local users to cause a denial of service (panic) by creating netlink sockets. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1288934
CVE ID: CVE-2015-7554 State: PUBLISHED Published: 2016-01-08T19:00:00 Last Updated: 2024-08-06T07:51:28.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00078.html - http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://www.oracle.com/tech
g/opensuse-updates/2016-01/msg00078.html - http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.securityfocus.com/bid/79699 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00081.html - https://security.gentoo.org/glsa/201701-16 - http://www.securityfocus.com/archive/1/537205/100/0/threaded - http://seclists.org/fulldisclosure/2015/Dec/119 - http://rhn.redhat.com/errata/RHSA-2016-1546.html - http://packetstormsecurity.com/files/135078/libtiff-4.0.6-Invalid-Write.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00100.html - http://www.openwall.com/lists/oss-security/2015/12/26/7
CVE ID: CVE-2015-7555 State: PUBLISHED Published: 2016-04-13T15:00:00 Last Updated: 2024-08-06T07:51:28.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a denial of service (program crash) via crafted image and logical screen width fields in a GIF file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/135034/giflib-5.1.1-Heap-Overflow.html - http://www-01.ibm.com/support/docview.wss?uid=isg3T1023474 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174876.html - http://www.securityfocus.com/archive/1/537171/100/0
oraproject.org/pipermail/package-announce/2016-January/174876.html - http://www.securityfocus.com/archive/1/537171/100/0/threaded - https://source.android.com/security/bulletin/2017-05-01 - http://www.securitytracker.com/id/1035331 - http://www.securityfocus.com/bid/81697 - http://seclists.org/fulldisclosure/2015/Dec/83
CVE ID: CVE-2015-7556 State: PUBLISHED Published: 2020-01-15T14:57:54 Last Updated: 2024-08-06T07:51:28.505Z Vendors: National Institute of Advanced Industrial Science and Technology Products: DeleGate Problem Types: Other Description: DeleGate 9.9.13 allows local users to gain privileges as demonstrated by the dgcpnod setuid program. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=159 - http://seclists.org/fulldisclosure/2015/Dec/123
CVE ID: CVE-2015-7557 State: PUBLISHED Published: 2016-05-20T14:00:00 Last Updated: 2024-08-06T07:51:28.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _rsvg_node_poly_build_path function in rsvg-shapes.c in librsvg before 2.40.7 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via an odd number of elements in a coordinate pair in an SVG document. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/12/21/5 - https://git.gnome.org/browse/librsvg/commit/rsvg-shapes.c?id=40af93e6eb1c94b90c3b9a0b87e0840e126bb8df - https://git.gnome.org/browse/librsvg/tree/NEWS