Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2505.html - http://www.securityfocus.com/bid/77685 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172695.html - http://rhn.redhat.com/errata/RHSA-2015-2504.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://github.com/abrt/libreport/commit/257578a23d1537a2d235aaa2b1488ee4f818e360 - https://bugzilla.redhat.com/show_bug.cgi?id=1270903
CVE ID: CVE-2015-5303 State: PUBLISHED Published: 2016-04-11T21:00:00 Last Updated: 2024-08-06T06:41:09.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2015:2650 - https://bugs.launchpad.net/tripleo/+bug/1516027
CVE ID: CVE-2015-5304 State: PUBLISHED Published: 2015-12-16T21:00:00 Last Updated: 2024-08-06T06:41:09.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.5 does not properly authorize access to shut down the server, which allows remote authenticated users with the Monitor, Deployer, or Auditor role to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2541.html - https://bugzilla.redhat.com/show_bug.cgi?id=1273046 - http://www.securitytracker.com/id/1034280 - http://rhn.redhat.com/errata/RHSA-2015-2540.html - http
bug.cgi?id=1273046 - http://www.securitytracker.com/id/1034280 - http://rhn.redhat.com/errata/RHSA-2015-2540.html - http://rhn.redhat.com/errata/RHSA-2015-2542.html - http://rhn.redhat.com/errata/RHSA-2015-2538.html - http://rhn.redhat.com/errata/RHSA-2015-2539.html
CVE ID: CVE-2015-5305 State: PUBLISHED Published: 2015-11-06T18:00:00 Last Updated: 2024-08-06T06:41:09.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Kubernetes, as used in Red Hat OpenShift Enterprise 3.0, allows attackers to write to arbitrary files via a crafted object type name, which is not properly handled before passing it to etcd. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1273969 - https://access.redhat.com/errata/RHSA-2015:1945
CVE ID: CVE-2015-5306 State: PUBLISHED Published: 2015-11-25T20:00:00 Last Updated: 2024-08-06T06:41:09.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2015:1929 - http://rhn.redhat.com/errata/RHSA-2015-2685.html - https://bugzilla.redhat.com/show_bug.cgi?id=1273698 - https://bugs.launchpad.net/ironic-inspector/+bug/1506419
CVE ID: CVE-2015-5307 State: PUBLISHED Published: 2015-11-16T11:00:00 Last Updated: 2024-08-06T06:41:09.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2636.html - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172187.html - http
ulletinjul2016-3090546.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172187.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html - https://kb.juniper.net/JSA10783 - http://www.debian.org/security/2016/dsa-3454 - http://www.openwall.com/lists/oss-security/2015/11/10/6 - http://rhn.redhat.com/errata/RHSA-2015-2645.html - http://www.ubuntu.com/usn/USN-2802-1 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.ubuntu.com/usn/USN-2806-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html - http://ww
//www.ubuntu.com/usn/USN-2806-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a20552e1eae07aa240fa370a0293e006b5faed - http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html - http://www.ubuntu.com/usn/USN-2805-1 - http://xenbits.xen.org/xsa/advisory-156.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172300.html - http://www.ubuntu.com/usn/USN-2807-1 - http://lists.opensuse.org/opensuse-securi
ge-announce/2015-November/172300.html - http://www.ubuntu.com/usn/USN-2807-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html - http://www.ubuntu.com/usn/USN-2801-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172435.html - http://www.debian.org/security/2015/dsa-3414 - http://support.citrix.com/article/CTX202583 - http://www.ubuntu.com/usn/USN-2800-1 - http://www.securitytracker.com/id/1034105 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - htt
://www.securitytracker.com/id/1034105 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.ubuntu.com/usn/USN-2804-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1277172 - http://rhn.redhat.com/errata/RHSA-2016-0046.html - http://www.debian.org/security/2015/dsa-3396 - http://www.securityfocus.com/bid/77528 - http://www.ubuntu.com/usn/USN-2803-1 - https://github.com/torvalds/linux/commit/54a20552e1eae07aa240fa370a0293e006b5faed
CVE ID: CVE-2015-5308 State: PUBLISHED Published: 2015-11-02T19:00:00 Last Updated: 2024-08-06T06:41:09.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in cs_admin_users.php in the wp-championship plugin 5.8 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user, (2) isadmin, (3) mail service, (4) mailresceipt, (5) stellv, (6) champtipp, (7) tippgroup, or (8) userid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8221 - http://www.vapid.dhs.org/advisory.php?v=155
CVE ID: CVE-2015-5309 State: PUBLISHED Published: 2015-12-07T20:00:00 Last Updated: 2024-08-06T06:41:09.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the terminal emulator in PuTTY before 0.66 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via an ECH (erase characters) escape sequence with a large parameter value, which triggers a buffer underflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3409 - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173021.html - http://lists.fedoraproject.org/pipermail/package-ann
aproject.org/pipermail/package-announce/2015-December/173021.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173094.html - http://www.securitytracker.com/id/1034308 - http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-ech-overflow.html - https://security.gentoo.org/glsa/201606-01 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00099.html
CVE ID: CVE-2015-5310 State: PUBLISHED Published: 2016-01-06T19:00:00 Last Updated: 2024-08-06T06:41:09.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WNM Sleep Mode code in wpa_supplicant 2.x before 2.6 does not properly ignore key data in response frames when management frame protection (MFP) was not negotiated, which allows remote attackers to inject arbitrary broadcast or multicast packets or cause a denial of service (ignored packets) via a WNM Sleep Mode response. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2808-1 - http://www.securitytracker.com/id/1034592 - http://w1.fi/security/2015-6/wpa_supplicant-unauthorized
om/usn/USN-2808-1 - http://www.securitytracker.com/id/1034592 - http://w1.fi/security/2015-6/wpa_supplicant-unauthorized-wnm-sleep-mode-gtk-control.txt - http://source.android.com/security/bulletin/2016-01-01.html - http://www.debian.org/security/2015/dsa-3397 - http://www.securityfocus.com/bid/77541 - http://www.openwall.com/lists/oss-security/2015/11/10/9
CVE ID: CVE-2015-5311 State: PUBLISHED Published: 2015-11-17T15:00:00 Last Updated: 2024-08-06T06:41:09.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and server crash) via crafted query packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/11/09/3 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172193.html - http://www.securitytracker.com/id/1034098 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171976.html - https://doc.powe
.com/id/1034098 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171976.html - https://doc.powerdns.com/md/security/powerdns-advisory-2015-03/ - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171865.html
CVE ID: CVE-2015-5312 State: PUBLISHED Published: 2015-12-15T21:00:00 Last Updated: 2024-08-06T06:41:09.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2550.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html
om/archives/security-announce/2016/Mar/msg00004.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html - https://support.apple.com/HT206167 - https://support.apple.com/HT206168 - http://www.debian.org/security/2015/dsa-3430 - https://git.gnome.org/browse/libxml2/commit/?id=69030714cde66d525a8884bda01b9e8f0abf8e1e - https://bugzilla.redhat.com/show_bug.cgi?id=1276693 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://xmlsoft.org/news.html - http://rhn.redhat.com/errata/RHSA-2016-1089.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.h
opics/security/linuxbulletinoct2015-2719645.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - http://www.ubuntu.com/usn/USN-2834-1 - http://www.securitytracker.com/id/1034243 - http://rhn.redhat.com/errata/RHSA-2015-2549.html - http://marc.info/?l=bugtraq&m=145382616617563&w=2 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://security.gentoo.org/glsa/201701-37 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html - https://support.apple.com/HT2
msg00120.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html - https://support.apple.com/HT206169 - https://support.apple.com/HT206166 - http://www.securityfocus.com/bid/79536
CVE ID: CVE-2015-5313 State: PUBLISHED Published: 2016-04-11T21:00:00 Last Updated: 2024-08-06T06:41:09.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows local users with storage_vol:create ACL but not domain:write permission to write to arbitrary files via a .. (dot dot) in a volume name. Additional Analyst Notes: - CVE Program Container: References: - http://security.libvirt.org/2015/0004.html - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=034e47c338b13a95cf02106a3af912c1c5
ity.libvirt.org/2015/0004.html - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=034e47c338b13a95cf02106a3af912c1c5f818d7 - http://www.securityfocus.com/bid/90913 - https://www.redhat.com/archives/libvir-list/2015-December/msg00473.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174404.html - https://security.gentoo.org/glsa/201612-10 - http://rhn.redhat.com/errata/RHSA-2016-2577.html
CVE ID: CVE-2015-5314 State: PUBLISHED Published: 2018-02-21T16:00:00 Last Updated: 2024-08-06T06:41:09.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with (1) an internal EAP server or (2) a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote attackers to cause a denial of service (process termination) via a large final fragment in an EAP-pwd message. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2808-1 - https://www
age. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2808-1 - https://www.debian.org/security/2015/dsa-3397 - http://w1.fi/security/2015-7/eap-pwd-missing-last-fragment-length-validation.txt - http://www.openwall.com/lists/oss-security/2015/11/10/10
CVE ID: CVE-2015-5315 State: PUBLISHED Published: 2018-02-21T16:00:00 Last Updated: 2024-08-06T06:41:09.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eap_pwd_process function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when EAP-pwd is enabled in a network configuration profile, which allows remote attackers to cause a denial of service (process termination) via a large final fragment in an EAP-pwd message. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2808-1 - https://www.debian.org/security/2015/dsa-3397 - http://w1.fi/security
ferences: - http://www.ubuntu.com/usn/USN-2808-1 - https://www.debian.org/security/2015/dsa-3397 - http://w1.fi/security/2015-7/eap-pwd-missing-last-fragment-length-validation.txt - http://www.openwall.com/lists/oss-security/2015/11/10/10
CVE ID: CVE-2015-5316 State: PUBLISHED Published: 2018-02-21T16:00:00 Last Updated: 2024-08-06T06:41:09.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6, when EAP-pwd is enabled in a network configuration profile, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an EAP-pwd Confirm message followed by the Identity exchange. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2808-1 - https://www.debian.org/security/2015/dsa-3397 - http://www.openwall.com/lists/oss-security/2015/11/10/1
usn/USN-2808-1 - https://www.debian.org/security/2015/dsa-3397 - http://www.openwall.com/lists/oss-security/2015/11/10/11 - http://www.securityfocus.com/bid/77538 - http://w1.fi/security/2015-8/eap-pwd-unexpected-confirm.txt
CVE ID: CVE-2015-5317 State: PUBLISHED Published: 2015-11-25T20:00:00.000Z Last Updated: 2025-10-21T23:55:56.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rhn.redhat.com/errata/RHSA-2016-0489.html - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
CVE ID: CVE-2015-5318 State: PUBLISHED Published: 2015-11-25T20:00:00 Last Updated: 2024-08-06T06:41:09.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible salt to generate CSRF protection tokens, which makes it easier for remote attackers to bypass the CSRF protection mechanism via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0489.html - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
CVE ID: CVE-2015-5319 State: PUBLISHED Published: 2015-11-25T20:00:00 Last Updated: 2024-08-06T06:41:09.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in the create-job CLI command in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to read arbitrary files via a crafted job configuration that is then used in an "XML-aware tool," as demonstrated by get-job and update-job. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0489.html - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
CVE ID: CVE-2015-5320 State: PUBLISHED Published: 2015-11-25T20:00:00 Last Updated: 2024-08-06T06:41:09.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.638 and LTS before 1.625.2 do not properly verify the shared secret used in JNLP slave connections, which allows remote attackers to connect as slaves and obtain sensitive information or possibly gain administrative access by leveraging knowledge of the name of a slave. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0489.html - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11
access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
CVE ID: CVE-2015-5321 State: PUBLISHED Published: 2015-11-25T20:00:00 Last Updated: 2024-08-06T06:41:09.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sidepanel widgets in the CLI command overview and help pages in Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to the pages. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0489.html - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
CVE ID: CVE-2015-5322 State: PUBLISHED Published: 2015-11-25T20:00:00 Last Updated: 2024-08-06T06:41:09.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to list directory contents and read arbitrary files in the Jenkins servlet resources via directory traversal sequences in a request to jnlpJars/. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0489.html - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
CVE ID: CVE-2015-5323 State: PUBLISHED Published: 2015-11-25T20:00:00 Last Updated: 2024-08-06T06:41:09.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.638 and LTS before 1.625.2 do not properly restrict access to API tokens which might allow remote administrators to gain privileges and run scripts by using an API token of another user. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0489.html - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
CVE ID: CVE-2015-5324 State: PUBLISHED Published: 2015-11-25T20:00:00 Last Updated: 2024-08-06T06:41:09.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to queue/api. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0489.html - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
CVE ID: CVE-2015-5325 State: PUBLISHED Published: 2015-11-25T20:00:00 Last Updated: 2024-08-06T06:41:09.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.638 and LTS before 1.625.2 allow attackers to bypass intended slave-to-master access restrictions by leveraging a JNLP slave. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3665. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0489.html - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
CVE ID: CVE-2015-5326 State: PUBLISHED Published: 2015-11-25T20:00:00 Last Updated: 2024-08-06T06:41:09.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0489.html - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
CVE ID: CVE-2015-5327 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-06T06:41:09.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Out-of-bounds memory read in the x509_decode_time function in x509_cert_parser.c in Linux kernels 4.3-rc1 and after. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/11/27/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1278978 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cc25b994acfbc901429da682d0f73c190e960206
CVE ID: CVE-2015-5328 State: REJECTED Published: 2022-07-08T17:37:21 Last Updated: 2022-07-08T17:37:21 Description: No description available.
CVE ID: CVE-2015-5329 State: PUBLISHED Published: 2016-04-11T21:00:00 Last Updated: 2024-08-06T06:41:09.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes it easier for remote attackers to obtain access to services in deployed overclouds by leveraging knowledge of the default credentials. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2015:2650