Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
l Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3198 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=ef8fc4b53d92fbfcd8ef1abbd6f2f5fe2c4a11e5 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00083.html - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155622.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155299.html - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.mandriva.com/se
ecurity-announce/2015/Sep/msg00008.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:079 - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153983.html - http://php.net/ChangeLog-5.php - https://support.apple.com/HT205267 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154266.html - https://bugs.php.net/bug.php?id=69253 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154276.html - http://hg.nih.at/libzip/rev/9f11d54f692e - http:
s.fedoraproject.org/pipermail/package-announce/2015-April/154276.html - http://hg.nih.at/libzip/rev/9f11d54f692e - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154666.html - http://www.securitytracker.com/id/1031985 - http://marc.info/?l=bugtraq&m=143403519711434&w=2
CVE ID: CVE-2015-2332 State: PUBLISHED Published: 2015-03-18T14:00:00 Last Updated: 2024-08-06T05:10:16.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in member.php in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/ - http://www.securityfocus.com/bid/73212 - http://www.securitytracker.com/id/1031953
CVE ID: CVE-2015-2333 State: PUBLISHED Published: 2015-03-18T14:00:00 Last Updated: 2024-08-06T05:10:16.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the MyCode editor in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/ - http://www.securityfocus.com/bid/73213 - http://www.securitytracker.com/id/1031953
CVE ID: CVE-2015-2334 State: PUBLISHED Published: 2015-03-18T14:00:00 Last Updated: 2024-08-06T05:10:16.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Admin Control Panel (ACP) login in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/ - http://www.securityfocus.com/bid/73214 - http://www.securitytracker.com/id/1031953
CVE ID: CVE-2015-2335 State: PUBLISHED Published: 2015-03-18T14:00:00 Last Updated: 2024-08-06T05:10:16.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: A JSON library in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to obtain the installation path via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/ - http://www.securityfocus.com/bid/73216 - http://www.securitytracker.com/id/1031953
CVE ID: CVE-2015-2336 State: PUBLISHED Published: 2015-06-13T14:00:00 Last Updated: 2024-08-06T05:10:15.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execute arbitrary code on the host OS via unspecified vectors, a different vulnerability than CVE-2012-0897. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032529 - http://www.securityfocu
nalyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032529 - http://www.securityfocus.com/bid/75095 - http://www.vmware.com/security/advisories/VMSA-2015-0004.html - http://www.securitytracker.com/id/1032530
CVE ID: CVE-2015-2337 State: PUBLISHED Published: 2015-06-13T14:00:00 Last Updated: 2024-08-06T05:10:16.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execute arbitrary code on the host OS via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032529 - http://www.securityfocus.com/bid/75095 - http://www.vmware.com/securit
es: - http://www.securitytracker.com/id/1032529 - http://www.securityfocus.com/bid/75095 - http://www.vmware.com/security/advisories/VMSA-2015-0004.html - http://www.securitytracker.com/id/1032530
CVE ID: CVE-2015-2338 State: PUBLISHED Published: 2015-06-13T14:00:00 Last Updated: 2024-08-06T05:10:15.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause a host OS denial of service via unspecified vectors, a different vulnerability than CVE-2015-2339. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032529 - http://www.securityfocus.co
st Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032529 - http://www.securityfocus.com/bid/75092 - http://www.vmware.com/security/advisories/VMSA-2015-0004.html - http://www.securitytracker.com/id/1032530
CVE ID: CVE-2015-2339 State: PUBLISHED Published: 2015-06-13T14:00:00 Last Updated: 2024-08-06T05:10:15.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause a host OS denial of service via unspecified vectors, a different vulnerability than CVE-2015-2338. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032529 - http://www.securityfocus.co
CVE ID: CVE-2015-2340 State: PUBLISHED Published: 2015-06-13T14:00:00 Last Updated: 2024-08-06T05:10:15.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause a host OS denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032529 - http://www.securityfocus.com/bid/75092 - http://www.vmware.com/security/ad
- http://www.securitytracker.com/id/1032529 - http://www.securityfocus.com/bid/75092 - http://www.vmware.com/security/advisories/VMSA-2015-0004.html - http://www.securitytracker.com/id/1032530
CVE ID: CVE-2015-2341 State: PUBLISHED Published: 2015-06-13T14:00:00 Last Updated: 2024-08-06T05:10:16.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before 7.0.1 allow attackers to cause a denial of service against a 32-bit guest OS or 64-bit host OS via a crafted RPC command. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2015-0004.html - http://www.securityfocus.com/bid/75094 - http://www.securitytracker.com/id/1032530
CVE ID: CVE-2015-2342 State: PUBLISHED Published: 2015-10-12T10:00:00 Last Updated: 2024-08-06T05:10:16.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Oct/1 - http://www.securitytracker.com/id/1033720 - http://www.zerodayinitiative.com/advisories/ZDI-15-455 - http://www.securityfocus.com/bid/76930 - https://www.7elements.co.uk/resources/technical
ive.com/advisories/ZDI-15-455 - http://www.securityfocus.com/bid/76930 - https://www.7elements.co.uk/resources/technical-advisories/cve-2015-2342-vmware-vcenter-remote-code-execution/ - http://www.vmware.com/security/advisories/VMSA-2015-0007.html
CVE ID: CVE-2015-2343 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-2344 State: PUBLISHED Published: 2016-03-16T10:00:00 Last Updated: 2024-08-06T05:10:16.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in VMware vRealize Automation 6.x before 6.2.4 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0003.html - http://www.securitytracker.com/id/1035270
CVE ID: CVE-2015-2345 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-2346 State: PUBLISHED Published: 2015-05-18T15:00:00 Last Updated: 2024-08-06T05:10:16.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote authenticated users to read arbitrary files via the req parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Apr/42 - http://packetstormsecurity.com/files/131459/Huawei-SEQ-Analyst-XXE-Injection.html
CVE ID: CVE-2015-2347 State: PUBLISHED Published: 2015-05-08T14:00:00 Last Updated: 2024-08-06T05:10:16.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote attackers to inject arbitrary web script or HTML via the command XML element in the req parameter to flexdata.action in (1) common/, (2) monitor/, or (3) psnpm/ or the (4) module XML element in the req parameter to flexdata.action in monitor/. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/folderview?id=0B-LWHbwdK3P9fnBlLWZqWlZqNnB0b2xHWFpYUWt3bmY3Y0lPUHVLNm9VTUlFcWhYTHlZSUU&usp
s: - https://drive.google.com/folderview?id=0B-LWHbwdK3P9fnBlLWZqWlZqNnB0b2xHWFpYUWt3bmY3Y0lPUHVLNm9VTUlFcWhYTHlZSUU&usp=sharing - http://packetstormsecurity.com/files/131460/Huawei-SEQ-Analyst-Cross-Site-Scripting.html - http://www.huawei.com/en/security/psirt/security-bulletins/security-notices/hw-424267.htm - http://seclists.org/fulldisclosure/2015/Apr/43
CVE ID: CVE-2015-2348 State: PUBLISHED Published: 2015-03-30T10:00:00 Last Updated: 2024-08-06T05:10:16.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: The move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 truncates a pathname upon encountering a \x00 character, which allows remote attackers to bypass intended extension restrictions and create files with unexpected names via a crafted second argument. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=144050155601375&w=2
243. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=1291d6bbee93b6109eb07e8f7916ff1b7fcc13e1 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://php.net/ChangeLog-5.php - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html - https://support.apple.com/HT205267 - https://bugs.php.net/bug.php?id=69207 - http:
rity-announce/2015-05/msg00005.html - https://support.apple.com/HT205267 - https://bugs.php.net/bug.php?id=69207 - http://www.securitytracker.com/id/1032484 - http://www.securityfocus.com/bid/73434 - http://www.ubuntu.com/usn/USN-2572-1 - http://rhn.redhat.com/errata/RHSA-2015-1135.html - http://rhn.redhat.com/errata/RHSA-2015-1053.html - http://lists.opensuse.org/opensuse-updates/2015-04/msg00015.html - https://security.gentoo.org/glsa/201606-10 - http://rhn.redhat.com/errata/RHSA-2015-1066.html
CVE ID: CVE-2015-2349 State: PUBLISHED Published: 2015-03-19T14:00:00 Last Updated: 2024-08-06T05:10:16.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in defaultnewsletter.php in SuperWebMailer 5.60.0.01190 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTMLForm parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Mar/55 - http://packetstormsecurity.com/files/130751/SuperWebMailer-5.50.0.01160-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/73063 - http://tetraph.com/security/xss-vulnerability/superwebmailer-5-50-0-01160-xss
- http://www.securityfocus.com/bid/73063 - http://tetraph.com/security/xss-vulnerability/superwebmailer-5-50-0-01160-xss-cross-site-scripting-security-vulnerabilities/
CVE ID: CVE-2015-2350 State: PUBLISHED Published: 2015-03-19T14:00:00 Last Updated: 2024-08-06T05:10:16.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in MikroTik RouterOS 5.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request in the status page to /cfg. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73013 - http://seclists.org/fulldisclosure/2015/Mar/49 - http://packetstormsecurity.com/files/130722/MikroTik-RouterOS-Cross-Site-Request-Forgery.html
CVE ID: CVE-2015-2351 State: PUBLISHED Published: 2015-03-19T14:00:00 Last Updated: 2024-08-06T05:10:16.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Alkacon OpenCms 9.5.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) homelink parameter to system/modules/org.opencms.workplace.help/jsptemplates/help_head.jsp, (2) workplaceresource parameter to system/workplace/locales/en/help/index.html, (3) path parameter to system/workplace/views/admin/admin-main.jsp, (4) mode parameter to system/workplace/views/explorer/explorer_files.jsp, or (5) query parameter in a search action to system/modu
arameter to system/workplace/views/explorer/explorer_files.jsp, or (5) query parameter in a search action to system/modules/org.opencms.workplace.help/elements/search.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alkacon/opencms-core/issues/304 - http://www.securityfocus.com/bid/73112 - http://seclists.org/fulldisclosure/2015/Mar/75 - http://packetstormsecurity.com/files/130812/Alkacon-OpenCms-9.5.1-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/534867/100/0/threaded
CVE ID: CVE-2015-2352 State: PUBLISHED Published: 2015-03-19T14:00:00 Last Updated: 2024-08-06T05:10:16.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cache handler in MyBB (aka MyBulletinBoard) before 1.8.4 does not properly check the encoding of input to the var_export function, which allows attackers to have an unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/ - http://www.securityfocus.com/bid/73257 - http://www.securitytracker.com/id/1031953
CVE ID: CVE-2015-2359 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T05:10:16.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web applications in Microsoft Exchange Server 2013 Cumulative Update 8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Exchange HTML Injection Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-064 - http://www.securitytracker.com/id/1032528 - http://www.securityfocus.com/bid/75013
CVE ID: CVE-2015-2360 State: PUBLISHED Published: 2015-06-10T01:00:00.000Z Last Updated: 2025-10-21T23:56:00.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1032525 - http://www.securityfocus.com/bid/75025 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061
CVE ID: CVE-2015-2361 State: PUBLISHED Published: 2015-07-14T21:00:00 Last Updated: 2024-08-06T05:10:16.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 does not properly initialize guest OS system data structures, which allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (buffer overflow) by leveraging guest OS privileges, aka "Hyper-V Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032897 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-068
CVE ID: CVE-2015-2362 State: PUBLISHED Published: 2015-07-14T21:00:00 Last Updated: 2024-08-06T05:10:15.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly initialize guest OS system data structures, which allows guest OS users to execute arbitrary code on the host OS by leveraging guest OS privileges, aka "Hyper-V System Data Structure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032897 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-068
CVE ID: CVE-2015-2363 State: PUBLISHED Published: 2015-07-14T22:00:00 Last Updated: 2024-08-06T05:10:16.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-073 - http://www.securitytracker.com/id/1032904
CVE ID: CVE-2015-2364 State: PUBLISHED Published: 2015-07-14T22:00:00 Last Updated: 2024-08-06T05:10:16.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: The graphics component in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application that leverages an incorrect bitmap conversion, aka "Graphics Component EOP Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-072 - h
E Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-072 - http://www.securitytracker.com/id/1032902
CVE ID: CVE-2015-2365 State: PUBLISHED Published: 2015-07-14T22:00:00 Last Updated: 2024-08-06T05:10:16.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-073 - http://www.securitytracke
erences: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-073 - http://www.securitytracker.com/id/1032904 - https://www.exploit-db.com/exploits/38267/
CVE ID: CVE-2015-2366 State: PUBLISHED Published: 2015-07-14T22:00:00 Last Updated: 2024-08-06T05:10:16.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-073 - http://www.securitytracker.com/id/1032904 - https://www.exploit-db.com/exploits/38266/