Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-2120 State: PUBLISHED Published: 2015-05-25T14:00:00 Last Updated: 2024-08-06T05:02:43.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP SiteScope 11.1x before 11.13, 11.2x before 11.24.391, and 11.3x before 11.30.521 allows remote authenticated users to gain privileges via unknown vectors, aka ZDI-CAN-2567. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74801 - http://www.zerodayinitiative.com/advisories/ZDI-15-239 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04688784 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr
public/kb/docDisplay?docId=emr_na-c04688784 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04688784
CVE ID: CVE-2015-2121 State: PUBLISHED Published: 2015-05-25T17:00:00 Last Updated: 2024-08-06T05:02:43.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the (1) HttpServlet or (2) NetworkEditorController component, aka ZDI-CAN-2569. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04657310 - http://zerodayinitiative.com/advisories/ZDI-15-192/ - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04
nitiative.com/advisories/ZDI-15-192/ - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04657310 - http://www.securityfocus.com/bid/74583
CVE ID: CVE-2015-2122 State: PUBLISHED Published: 2015-05-25T14:00:00 Last Updated: 2024-08-06T05:02:43.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST layer on HP SDN VAN Controller devices 2.5 and earlier allows remote attackers to cause a denial of service via network traffic to the REST port. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74588 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04657823 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04657823
CVE ID: CVE-2015-2123 State: PUBLISHED Published: 2015-05-25T17:00:00 Last Updated: 2024-08-06T05:02:43.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP NonStop Safeguard Security Software H06.x, L15.02, and J06.x before J06.19 allows remote authenticated users to gain privileges by leveraging Expand access. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04683599 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04683599 - http://www.securityfocus.com/bid/74819
CVE ID: CVE-2015-2124 State: PUBLISHED Published: 2015-06-05T10:00:00 Last Updated: 2024-08-06T05:02:43.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Easy Setup Wizard in HP ThinPro Linux 4.1 through 5.1 and Smart Zero Core 4.3 and 4.4 allows local users to bypass intended access restrictions and gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04692275 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04692275 - http://www.securityfocus.com/bid/74897
CVE ID: CVE-2015-2125 State: PUBLISHED Published: 2015-06-07T18:00:00 Last Updated: 2024-08-06T05:02:43.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP WebInspect 7.x through 10.4 before 10.4 update 1 allows remote authenticated users to bypass intended access restrictions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37250/ - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04695307 - http://www.securityfocus.com/bid/75036 - http://www.securitytracker.com/id/1032478 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=e
6 - http://www.securitytracker.com/id/1032478 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04695307
CVE ID: CVE-2015-2126 State: PUBLISHED Published: 2015-07-06T14:00:00 Last Updated: 2024-08-06T05:02:43.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in pppoec in HP HP-UX 11iv2 and 11iv3 allows local users to gain privileges by leveraging setuid permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75462 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04718530 - http://www.securitytracker.com/id/1032746 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04718530
CVE ID: CVE-2015-2127 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-2128 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-2129 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-2130 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-2131 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-2132 State: PUBLISHED Published: 2015-08-22T23:00:00 Last Updated: 2024-08-06T05:02:43.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04735247
CVE ID: CVE-2015-2133 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-2134 State: PUBLISHED Published: 2015-07-21T19:00:00 Last Updated: 2024-08-06T05:02:43.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04746490 - http://www.securityfocus.com/bid/75961 - http://www.securitytracker.com/id/1033014 - https://h20564.www2.hp.com/portal
- http://www.securityfocus.com/bid/75961 - http://www.securitytracker.com/id/1033014 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04746490
CVE ID: CVE-2015-2135 State: PUBLISHED Published: 2015-08-31T20:00:00 Last Updated: 2024-08-06T05:02:43.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Intelligent Provisioning 1.00 through 1.62(a), 2.00, and 2.10 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04756070
CVE ID: CVE-2015-2136 State: PUBLISHED Published: 2015-09-16T14:00:00 Last Updated: 2024-08-06T05:02:43.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP ArcSight Logger before 6.0 P2 allows remote authenticated users to bypass the intended authorization policy via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04762372
CVE ID: CVE-2015-2137 State: PUBLISHED Published: 2015-08-22T23:00:00 Last Updated: 2024-08-06T05:02:43.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Operations Manager i (OMi) 9.22, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033260 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04762687
CVE ID: CVE-2015-2138 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-2139 State: PUBLISHED Published: 2015-08-27T01:50:00 Last Updated: 2024-08-06T05:02:43.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2015-5403. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04762744 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04774019
CVE ID: CVE-2015-2140 State: PUBLISHED Published: 2015-08-27T01:50:00 Last Updated: 2024-08-06T05:02:43.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04762744 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04774019
CVE ID: CVE-2015-2141 State: PUBLISHED Published: 2015-07-01T14:00:00 Last Updated: 2024-08-06T05:02:43.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not properly blind private key operations for the Rabin-Williams digital signature algorithm, which allows remote attackers to obtain private keys via a timing attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3296 - http://www.securityfocus.com/bid/75467 - http://sourceforge.net/p/cryptopp/code/542/ - https://github.com/weidai11/cryptopp/commit/9425e16437439e68c7d96abef922167d68
://sourceforge.net/p/cryptopp/code/542/ - https://github.com/weidai11/cryptopp/commit/9425e16437439e68c7d96abef922167d68fafaff - http://lists.opensuse.org/opensuse-updates/2015-07/msg00047.html
CVE ID: CVE-2015-2142 State: PUBLISHED Published: 2017-10-06T22:00:00 Last Updated: 2024-08-06T05:02:43.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to (1) hijack the authentication of users for requests that cause an unspecified impact via the id parameter to project.php, (2) hijack the authentication of users for requests that cause an unspecified impact via the group_id parameter to group.php, (3) hijack the authentication of users for requests that delete statuses via the status_id parameter to status.php, (4) hijack the authentication
ion of users for requests that delete statuses via the status_id parameter to status.php, (4) hijack the authentication of users for requests that delete severities via the severity_id parameter to severity.php, (5) hijack the authentication of users for requests that cause an unspecified impact via the priority_id parameter to priority.php, (6) hijack the authentication of users for requests that delete the operating system via the os_id parameter to os.php, (7) hijack the authentication of users for requests that delete databases via the database_id parameter to database.php, or (8) hijack the authentication of users for requests that delete sites via the site_id parameter to sites.php. Ad
php, or (8) hijack the authentication of users for requests that delete sites via the site_id parameter to sites.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/a-v-k/phpBugTracker/issues/4 - http://www.openwall.com/lists/oss-security/2015/02/28/1
CVE ID: CVE-2015-2143 State: PUBLISHED Published: 2017-10-06T22:00:00 Last Updated: 2024-08-06T05:02:43.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to hijack the authentication of users for requests that cause an unspecified impact via unknown parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/02/28/1
CVE ID: CVE-2015-2144 State: PUBLISHED Published: 2017-10-06T22:00:00 Last Updated: 2024-08-06T05:02:43.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) project name parameter to project.php; the (2) use_js parameter to user.php; the (3) use_js parameter to group.php; the (4) Description parameter to status.php; the (5) Description parameter to severity.php; the (6) Regex parameter to os.php; or the (7) Name parameter to database.php. Additional Analyst Notes: - CVE Program Container: References: - ht
o os.php; or the (7) Name parameter to database.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/a-v-k/phpBugTracker/issues/4 - http://www.openwall.com/lists/oss-security/2015/02/28/1
CVE ID: CVE-2015-2145 State: PUBLISHED Published: 2017-10-06T22:00:00 Last Updated: 2024-08-06T05:02:43.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/02/28/1
CVE ID: CVE-2015-2146 State: PUBLISHED Published: 2017-10-06T22:00:00 Last Updated: 2024-08-06T05:02:43.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to project.php, the (2) group_id parameter to group.php, the (3) status_id parameter to status.php, the (4) resolution_id parameter to resolution.php, the (5) severity_id parameter to severity.php, the (6) priority_id parameter to priority.php, the (7) os_id parameter to os.php, or the (8) site_id parameter to site.php. Additional Analyst Notes: - CVE Program Contai
(7) os_id parameter to os.php, or the (8) site_id parameter to site.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/a-v-k/phpBugTracker/issues/4 - http://www.openwall.com/lists/oss-security/2015/02/28/1
CVE ID: CVE-2015-2147 State: PUBLISHED Published: 2017-10-06T22:00:00 Last Updated: 2024-08-06T05:02:43.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://cve.killedkenny.io/cve/CVE-2015-2147 - http://www.openwall.com/lists/oss-security/2015/02/28/1
CVE ID: CVE-2015-2148 State: PUBLISHED Published: 2017-10-06T22:00:00 Last Updated: 2024-08-06T05:02:43.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/02/28/1
CVE ID: CVE-2015-2149 State: PUBLISHED Published: 2015-03-18T14:00:00 Last Updated: 2024-08-06T05:02:43.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the administrative backend in MyBB (aka MyBulletinBoard) before 1.8.4 allow remote authenticated users to inject arbitrary web script or HTML via the (1) MIME-type field in an add action in the config-attachment_types module to admin/index.php; (2) title or (3) short description field in an add action in the (a) config-mycode or (b) user-groups module to admin/index.php; (4) title field in an add action in the (c) forum-management or (d) tool-tasks module to admin/index.ph
admin/index.php; (4) title field in an add action in the (c) forum-management or (d) tool-tasks module to admin/index.php; (5) name field in an add_set action in the style-templates module to admin/index.php; (6) title field in an add_template_group action in the style-templates module to admin/index.php; (7) name field in an add action in the config-post_icons module to admin/index.php; (8) "title to assign" field in an add action in the user-titles module to admin/index.php; or (9) username field in the config-banning module to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-mainte
CVE Program Container: References: - http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/ - http://www.securityfocus.com/bid/72738 - http://seclists.org/oss-sec/2015/q1/629 - http://sroesemann.blogspot.de/2015/02/sroeadv-2015-15.html - http://seclists.org/fulldisclosure/2015/Feb/80 - http://www.securitytracker.com/id/1031953 - http://seclists.org/oss-sec/2015/q1/705
CVE ID: CVE-2015-2150 State: PUBLISHED Published: 2015-03-12T14:00:00 Last Updated: 2024-08-06T05:02:43.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2631-1 - http://www1.huawei.com/en/security/psirt/secu
VE Program Container: References: - http://www.ubuntu.com/usn/USN-2631-1 - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm - https://github.com/torvalds/linux/commit/af6fc858a35b90e89ea7a7ee58e66628c55c776b - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00001.html - http://www.ubuntu.com/usn/USN-2632-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155908.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155804.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html -
curity/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html - http://www.debian.org/security/2015/dsa-3237 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155854.html - https://bugzilla.redhat.com/show_bug.cgi?id=1196266 - http://xenbits.xen.org/xsa/advisory-120.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html - http://www.securitytracker.com/id/1031902 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152747.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=af6fc858a35b90e89ea7a7ee58e66628c55c776b - http://www.securityfoc
linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=af6fc858a35b90e89ea7a7ee58e66628c55c776b - http://www.securityfocus.com/bid/73014 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html - http://www.securitytracker.com/id/1031806 - https://seclists.org/bugtraq/2019/Aug/18
CVE ID: CVE-2015-2151 State: PUBLISHED Published: 2015-03-12T14:00:00 Last Updated: 2024-08-06T05:10:14.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register operands, which allows local guest users to obtain sensitive information, cause a denial of service (memory corruption), or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm - http://support.citrix.com/article/CTX200484 - http://lists.fedoraproject
y-bulletins/security-advisories/hw-423503.htm - http://support.citrix.com/article/CTX200484 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152588.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://xenbits.xen.org/xsa/advisory-123.html - http://www.securitytracker.com/id/1031903 - http://www.debian.org/security/2015/dsa-3181 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152483.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg000
/pipermail/package-announce/2015-March/152483.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html - https://security.gentoo.org/glsa/201604-03 - http://www.securityfocus.com/bid/73015 - http://www.securitytracker.com/id/1031806
CVE ID: CVE-2015-2152 State: PUBLISHED Published: 2015-03-18T16:00:00 Last Updated: 2024-08-06T05:10:14.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access to the VGA console by (1) setting the DISPLAY environment variable, when compiled with SDL support, or connecting to the VNC server on (2) ::1 or (3) 127.0.0.1, when not compiled with SDL support. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201504-04 - http://www.securitytracke
yst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201504-04 - http://www.securitytracker.com/id/1031919 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152588.html - http://www.securityfocus.com/bid/73068 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152483.html - http://xenbits.xen.org/xsa/advisory-119.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html - http://www.securitytracker.com/id/1031806