Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-2973 State: PUBLISHED Published: 2015-07-24T16:00:00 Last Updated: 2024-08-06T05:32:21.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Welcart plugin before 1.4.18 for WordPress allow remote attackers to inject arbitrary web script or HTML via the usces_referer parameter to (1) classes/usceshop.class.php, (2) includes/edit-form-advanced.php, (3) includes/edit-form-advanced30.php, (4) includes/edit-form-advanced34.php, (5) includes/member_edit_form.php, (6) includes/order_edit_form.php, (7) includes/order_list.php, or (8) includes/usces_item_master_list.php, related to admin.php. Additional Analyst Not
p, (7) includes/order_list.php, or (8) includes/usces_item_master_list.php, related to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN97971874/index.html - https://plugins.trac.wordpress.org/changeset/1199120 - https://wpvulndb.com/vulnerabilities/8114 - http://www.welcart.com/community/archives/74867 - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000103
CVE ID: CVE-2015-2974 State: PUBLISHED Published: 2015-07-29T01:00:00 Last Updated: 2024-08-06T05:32:21.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: LEMON-S PHP Gazou BBS plus before 2.36 allows remote attackers to upload arbitrary HTML documents via vectors involving a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN86680970/995636/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000106 - http://jvn.jp/en/jp/JVN86680970/index.html
CVE ID: CVE-2015-2975 State: PUBLISHED Published: 2015-07-26T14:00:00 Last Updated: 2024-08-06T05:32:21.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers to perform unspecified actions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lite.research-artisan.net/main/download - http://jvn.jp/en/jp/JVN10559378/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000105
CVE ID: CVE-2015-2976 State: PUBLISHED Published: 2015-07-25T10:00:00 Last Updated: 2024-08-06T05:32:21.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Research Artisan Lite before 1.18 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted HTML document or (2) a crafted URL that is mishandled during access-log analysis. Additional Analyst Notes: - CVE Program Container: References: - http://lite.research-artisan.net/main/download - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000104 - http://jvn.jp/en/jp/JVN58020495/index.html
CVE ID: CVE-2015-2977 State: PUBLISHED Published: 2015-07-29T14:00:00 Last Updated: 2024-08-06T05:32:21.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webservice-DIC yoyaku_v41 allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN46674982/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000107
CVE ID: CVE-2015-2978 State: PUBLISHED Published: 2015-07-29T14:00:00 Last Updated: 2024-08-06T05:32:21.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webservice-DIC yoyaku_v41 allows remote attackers to bypass authentication and complete a conference-room reservation via unspecified vectors, as demonstrated by an "unintentional reservation." Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000108 - http://jvn.jp/en/jp/JVN52248864/index.html
CVE ID: CVE-2015-2979 State: PUBLISHED Published: 2015-07-29T14:00:00 Last Updated: 2024-08-06T05:32:21.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webservice-DIC yoyaku_v41 allows remote attackers to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN17522792/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000109
CVE ID: CVE-2015-2980 State: PUBLISHED Published: 2015-08-08T01:00:00 Last Updated: 2024-08-06T05:32:21.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Yodobashi application 1.2.1.0 and earlier for Android allows remote attackers to execute arbitrary Java methods, and consequently obtain sensitive information or execute OS commands, via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN70465405/995407/index.html - http://jvn.jp/en/jp/JVN70465405/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000110
CVE ID: CVE-2015-2981 State: PUBLISHED Published: 2018-01-12T17:00:00 Last Updated: 2024-08-06T05:32:21.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN29053368/index.html - http://www.securityfocus.com/bid/76266 - http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000111.html
CVE ID: CVE-2015-2982 State: PUBLISHED Published: 2015-08-22T21:00:00 Last Updated: 2024-08-06T05:32:21.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in jquery.lightbox-0.5.min.js in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified input to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN69175956/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000113 - http://www.php-factory.net/trivia/16.php
CVE ID: CVE-2015-2983 State: PUBLISHED Published: 2015-08-22T21:00:00 Last Updated: 2024-08-06T05:32:21.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin.php in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote attackers to hijack the authentication of arbitrary users. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000114 - http://jvn.jp/en/jp/JVN78240242/index.html - http://www.php-factory.net/trivia/16.php
CVE ID: CVE-2015-2984 State: PUBLISHED Published: 2015-08-22T18:00:00 Last Updated: 2024-08-06T05:32:21.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: I-O DATA DEVICE WN-G54/R2 routers with firmware before 1.03 and NP-BBRS routers allow remote attackers to cause a denial of service (SSDP reflection) via UPnP requests. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000117 - http://www.securityfocus.com/bid/76393 - http://jvn.jp/en/jp/JVN17964918/index.html - http://www.iodata.jp/support/information/2015/wn-g54r2/
CVE ID: CVE-2015-2985 State: PUBLISHED Published: 2015-09-05T17:00:00 Last Updated: 2024-08-06T05:32:21.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in guide-park.com BBS X102 1.03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN13684924/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000301
CVE ID: CVE-2015-2986 State: PUBLISHED Published: 2015-09-05T17:00:00 Last Updated: 2024-08-06T05:32:21.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in rakuto.net hitSuji (rktSNS2) 0.2.2b allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN24692261/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000302
CVE ID: CVE-2015-2987 State: PUBLISHED Published: 2015-08-28T14:00:00 Last Updated: 2024-08-06T05:32:21.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Type74 ED before 4.0 misuses 128-bit ECB encryption for small files, which makes it easier for attackers to obtain plaintext data via differential cryptanalysis of a file with an original length smaller than 128 bits. Additional Analyst Notes: - CVE Program Container: References: - http://type74org.blog14.fc2.com/blog-entry-1384.html - http://type74.org/edman5-1.php - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000119 - http://jvn.jp/en/jp/JVN91474878/index.html
CVE ID: CVE-2015-2988 State: PUBLISHED Published: 2017-10-10T16:00:00 Last Updated: 2024-08-06T05:32:21.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rakuten card App for iOS 5.2.0 through 5.2.4 does not verify SSL certificates which might allow remote attackers to execute man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76531 - http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000120.html - http://jvn.jp/en/jp/JVN81207766/index.html
CVE ID: CVE-2015-2989 State: PUBLISHED Published: 2015-09-07T14:00:00 Last Updated: 2024-08-06T05:32:21.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000121 - http://jvn.jp/en/jp/JVN77193915/index.html
CVE ID: CVE-2015-2990 State: PUBLISHED Published: 2015-09-05T01:00:00 Last Updated: 2024-08-06T05:32:21.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in zhtml.cgi in NEOJAPAN desknet NEO 2.0R1.0 through 2.5R1.4 allows remote authenticated users to read arbitrary files via a crafted parameter. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000122 - http://jvn.jp/en/jp/JVN09283606/index.html - http://www.desknets.com/neo/support/mainte/2590/
CVE ID: CVE-2015-2991 State: PUBLISHED Published: 2015-09-05T01:00:00 Last Updated: 2024-08-06T05:32:21.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in NScripter before 3.00 allows remote attackers to execute arbitrary code via crafted save data. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN08494613/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000123 - http://www.nscripter.com/
CVE ID: CVE-2015-2992 State: PUBLISHED Published: 2020-02-27T17:45:34 Last Updated: 2024-08-06T05:32:21.181Z Vendors: Apache Software Foundation Products: Apache Struts Problem Types: Cross-Site Scripting Description: Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN88408929/index.html - http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000124.html - http://www.securityfocus.com/bid/76624 - https://security.netapp.com/advisory/ntap-20200330-0001/
CVE ID: CVE-2015-2993 State: PUBLISHED Published: 2015-06-08T14:00:00 Last Updated: 2024-08-06T05:32:21.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create administrator accounts via a crafted request to /createnewaccount or (2) write to arbitrary files via the fileName parameter to /userentry. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jun/8 - http://www.securityfocus.com/archive/1/535679/100/0/threaded - http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-De
om/archive/1/535679/100/0/threaded - http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.html - http://www.securityfocus.com/bid/75038 - https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-desk
CVE ID: CVE-2015-2994 State: PUBLISHED Published: 2015-06-08T14:00:00 Last Updated: 2024-08-06T05:32:21.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by uploading a file with a .jsp extension, then accessing it via a direct request to the file in icons/user_photo/. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jun/8 - http://www.securityfocus.com/archive/1/535679/100/0/threaded - http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Serv
/535679/100/0/threaded - http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.html - http://www.securityfocus.com/bid/75038 - https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-desk
CVE ID: CVE-2015-2995 State: PUBLISHED Published: 2015-06-08T14:00:00 Last Updated: 2024-08-06T05:32:21.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload and execute arbitrary files via a NULL byte after the extension, as demonstrated by a .war%00 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.rapid7.com/db/modules/exploit/multi/http/sysaid_rdslogs_file_upload - http://seclists.org/fulldisclosure/2015/Jun/8 - http://www.securityfocus.com/archive/1/535679/100/0/threaded - http://packetstormsecurity.com/files/
losure/2015/Jun/8 - http://www.securityfocus.com/archive/1/535679/100/0/threaded - http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.html - http://www.securityfocus.com/bid/75038 - https://www.exploit-db.com/exploits/37667/ - https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-desk
CVE ID: CVE-2015-2996 State: PUBLISHED Published: 2015-06-08T14:00:00 Last Updated: 2024-08-06T05:32:21.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the fileName parameter to getGfiUpgradeFile or (2) cause a denial of service (CPU and memory consumption) via a .. (dot dot) in the fileName parameter to calculateRdsFileChecksum. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jun/8 - http://www.securityfocus.com/archive/1/535679/100/0/threaded - http://packetstormsecurity
rg/fulldisclosure/2015/Jun/8 - http://www.securityfocus.com/archive/1/535679/100/0/threaded - http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.html - http://www.securityfocus.com/bid/75038 - https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-desk
CVE ID: CVE-2015-2997 State: PUBLISHED Published: 2015-06-08T14:00:00 Last Updated: 2024-08-06T05:32:21.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getAgentLogFile, as demonstrated by a large directory traversal sequence, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jun/8 - http://www.securityfocus.com/archive/1/535679/100/0/threaded - http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-O
hive/1/535679/100/0/threaded - http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.html - http://www.securityfocus.com/bid/75038 - https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-desk
CVE ID: CVE-2015-2998 State: PUBLISHED Published: 2015-06-08T14:00:00 Last Updated: 2024-08-06T05:32:21.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as demonstrated by decrypting the database password in WEB-INF/conf/serverConf.xml. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jun/8 - http://www.securityfocus.com/archive/1/535679/100/0/threaded - http://www.securityfocus.com/bid/75035 - http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Se
urityfocus.com/bid/75035 - http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.html - https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-desk
CVE ID: CVE-2015-2999 State: PUBLISHED Published: 2015-06-08T14:00:00 Last Updated: 2024-08-06T05:32:21.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote administrators to execute arbitrary SQL commands via the (1) groupFilter parameter in an AssetDetails report to /genericreport, customSQL parameter in a (2) TopAdministratorsByAverageTimer report or an (3) ActiveRequests report to /genericreport, (4) dir parameter to HelpDesk.jsp, or (5) grantSQL parameter to RFCGantt.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jun/8 - http://www
itional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jun/8 - http://www.securityfocus.com/archive/1/535679/100/0/threaded - http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.html - http://www.securityfocus.com/bid/75038 - https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-desk
CVE ID: CVE-2015-3000 State: PUBLISHED Published: 2015-06-08T14:00:00 Last Updated: 2024-08-06T05:32:21.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of nested entity references in an XML document to (1) /agententry, (2) /rdsmonitoringresponse, or (3) /androidactions, aka an XML Entity Expansion (XEE) attack. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jun/8 - http://www.securityfocus.com/archive/1/535679/100/0/threaded - http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4
ww.securityfocus.com/archive/1/535679/100/0/threaded - http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.html - http://www.securityfocus.com/bid/75038 - https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-desk
CVE ID: CVE-2015-3001 State: PUBLISHED Published: 2015-06-08T14:00:00 Last Updated: 2024-08-06T05:32:21.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jun/8 - http://www.securityfocus.com/archive/1/535679/100/0/threaded - http://www.securityfocus.com/bid/75035 - http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-D
p://www.securityfocus.com/bid/75035 - http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.html - https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-desk
CVE ID: CVE-2015-3002 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T05:32:21.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, and 12.3X48 before 12.3X48-D10 on SRX series devices does not properly enforce the log-out-on-disconnect feature when configured in the [system port console] stanza, which allows physically proximate attackers to reconnect to the console port and gain administrative access by leveraging access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA
tional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10672 - http://www.securitytracker.com/id/1032091 - http://www.securityfocus.com/bid/74019
CVE ID: CVE-2015-3003 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T05:32:21.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D10, 13.2 before 13.2R6, 13.3 before 13.3R5, 14.1 before 14.1R3, and 14.2 before 14.2R1 allows local users to gain privileges via crafted combinations of CLI commands and arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74023 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10674 - http://www.securitytracker.com/id/10
.com/bid/74023 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10674 - http://www.securitytracker.com/id/1032092
CVE ID: CVE-2015-3004 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T05:32:21.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: J-Web in Juniper Junos 11.4 before 11.4R12, 12.1X44 before 12.1X44-D35, 12.1X46 before 12.1X46-D25, 12.1X47 before 12.1X47-D10, 12.3X48 before 12.3X48-D10, 12.2 before 12.2R9, 12.3 before 12.3R7, 13.2 before 13.2R6, 13.2X51 before 13.2X51-D20, 13.3 before 13.3R5, 14.1 before 14.1R3, 14.1X53 before 14.1X53-D10, and 14.2 before 14.2R1 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032090 - h
s header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032090 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10675 - http://www.securityfocus.com/bid/74017
CVE ID: CVE-2015-3005 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T05:32:21.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Dynamic VPN in Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, and 12.3X48 before 12.3X48-D10 on SRX series devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10677 - http://www.securityfocus.com/bid/74016 - http://www.securitytracker.com/id/1032089