Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-7581 State: PUBLISHED Published: 2016-02-16T02:00:00 Last Updated: 2024-08-06T07:51:28.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application's use of a wildcard controller route. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=ruby-security-ann/dthJ5wL69JE/IdvCimtZEgAJ - http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html - http://www
by-security-ann/dthJ5wL69JE/IdvCimtZEgAJ - http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html - http://www.openwall.com/lists/oss-security/2016/01/25/16 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html - http://www.securitytracker.com/id/1034816 - http://www.debian.org/security/2016/dsa-3464 - http://rhn.redhat.com/errata/RHSA-2016-0296.html - http://www.securityfocus.com/bid/81677
CVE ID: CVE-2015-7582 State: REJECTED Published: 2017-06-27T20:00:00 Last Updated: 2017-07-12T13:57:01 Description: No description available.
CVE ID: CVE-2015-7583 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7584 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7585 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7586 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7587 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7588 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7589 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7590 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7591 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7592 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7593 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7594 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7595 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7596 State: PUBLISHED Published: 2018-03-02T22:00:00 Last Updated: 2024-08-06T07:51:28.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: SafeNet Authentication Service End User Software Tools for Windows uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module. Additional Analyst Notes: - CVE Program Container: References: - https://safenet.gemalto.com/technical-support/security-updates/ - https://labs.nettitude.com/blog/cve-2015-7596-through-cve-2015-7598-cve-2015-7961-through-cve-2015-7967-safenet-authentication-service-agent-vulnerabilities/ - https://labs.n
cve-2015-7598-cve-2015-7961-through-cve-2015-7967-safenet-authentication-service-agent-vulnerabilities/ - https://labs.nettitude.com/wp-content/uploads/2016/03/160125-1-Gemalto-IDSS-Security-Bulletin-SAS-Agents-Privilege-Escalation.pdf
CVE ID: CVE-2015-7597 State: PUBLISHED Published: 2018-03-02T22:00:00 Last Updated: 2024-08-06T07:51:28.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: SafeNet Authentication Service IIS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module. Additional Analyst Notes: - CVE Program Container: References: - https://safenet.gemalto.com/technical-support/security-updates/ - https://labs.nettitude.com/blog/cve-2015-7596-through-cve-2015-7598-cve-2015-7961-through-cve-2015-7967-safenet-authentication-service-agent-vulnerabilities/ - https://labs.nettitude.com/wp-content/up
1-through-cve-2015-7967-safenet-authentication-service-agent-vulnerabilities/ - https://labs.nettitude.com/wp-content/uploads/2016/03/160125-1-Gemalto-IDSS-Security-Bulletin-SAS-Agents-Privilege-Escalation.pdf
CVE ID: CVE-2015-7598 State: PUBLISHED Published: 2018-03-02T22:00:00 Last Updated: 2024-08-06T07:51:28.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: SafeNet Authentication Service TokenValidator Proxy Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module. Additional Analyst Notes: - CVE Program Container: References: - https://safenet.gemalto.com/technical-support/security-updates/ - https://labs.nettitude.com/blog/cve-2015-7596-through-cve-2015-7598-cve-2015-7961-through-cve-2015-7967-safenet-authentication-service-agent-vulnerabilities/ - https://labs.nettitude.
7598-cve-2015-7961-through-cve-2015-7967-safenet-authentication-service-agent-vulnerabilities/ - https://labs.nettitude.com/wp-content/uploads/2016/03/160125-1-Gemalto-IDSS-Security-Bulletin-SAS-Agents-Privilege-Escalation.pdf
CVE ID: CVE-2015-7599 State: PUBLISHED Published: 2017-02-07T17:00:00 Last Updated: 2024-08-06T07:51:28.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a username and password. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20151029-0001/ - https://www.syscan360.org/slides/2015_EN_AttackingVxWorksFromstoneagetointerstellar_Eric_Yannick.pdf - http://blogs.windr
ttps://www.syscan360.org/slides/2015_EN_AttackingVxWorksFromstoneagetointerstellar_Eric_Yannick.pdf - http://blogs.windriver.com/wind_river_blog/2015/09/wind-river-vxworks-updateclarification.html - http://www.securityfocus.com/bid/79205 - https://kb.netapp.com/support/s/article/cve-2015-7599-vxworks-vulnerability-impacting-netapp-e-series-products?language=en_US
CVE ID: CVE-2015-7600 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T07:51:28.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privileges by entering an arbitrary program name in the Command field of the ApplicationLauncher section. Additional Analyst Notes: - CVE Program Container: References: - https://www.nettitude.co.uk/vulnerability-discovered-in-unsupported-cisco-systems-vpn-client/ - http://www.securitytracker.com/id/1033750
CVE ID: CVE-2015-7601 State: PUBLISHED Published: 2015-09-29T19:00:00 Last Updated: 2024-08-06T07:51:28.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..// (dot dot double slash) in a RETR command. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/38340/ - http://packetstormsecurity.com/files/133756/PCMan-FTP-Server-2.0.7-Directory-Traversal.html
CVE ID: CVE-2015-7602 State: PUBLISHED Published: 2015-09-29T19:00:00 Last Updated: 2024-08-06T07:51:28.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in a RETR command. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133749/BisonWare-BisonFTP-3.5-Directory-Traversal.html - https://www.exploit-db.com/exploits/38341/
CVE ID: CVE-2015-7603 State: PUBLISHED Published: 2015-09-29T19:00:00Z Last Updated: 2024-09-16T18:14:26.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Konica Minolta FTP Utility 1.0 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in a RETR command. Additional Analyst Notes: - CVE Program Container: References: - http://shinnai.altervista.org/exploits/SH-0024-20150922.html - https://www.exploit-db.com/exploits/38260/
CVE ID: CVE-2015-7604 State: PUBLISHED Published: 2015-09-29T19:00:00Z Last Updated: 2024-09-16T19:24:30.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.2.x before 6.2.6 and Splunk Light 6.2.x before 6.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033655 - http://www.splunk.com/view/SP-CAAAPAM
CVE ID: CVE-2015-7609 State: PUBLISHED Published: 2019-05-30T19:21:11 Last Updated: 2024-08-06T07:51:28.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbra. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Security_Center - https://www.fortiguard.com/zeroday/FG-VD-15-080 - https://www.fortiguard.com/zeroday/FG-VD-15-081 - https://bugzilla.zimbra.com/show_bug.cgi?id=101435 - https://bugzilla.zimbra.com/show_bug.cgi?id=101436
CVE ID: CVE-2015-7610 State: PUBLISHED Published: 2018-05-30T21:00:00 Last Updated: 2024-08-06T07:51:28.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration Suite (aka ZCS) before 8.6.0 Patch 10, 8.7.x before 8.7.11 Patch 2, and 8.8.x before 8.8.8 Patch 1 allows remote attackers to hijack the authentication of unspecified victims by leveraging failure to use a CSRF token. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zimbra.com/2018/04/new-patches-for-you-zimbra-8-8-8-turing-patch-1-zimbra-8-7-11-patch-2/ - https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.8/P1
ches-for-you-zimbra-8-8-8-turing-patch-1-zimbra-8-7-11-patch-2/ - https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.8/P1 - https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.11/P2 - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Zimbra_Releases/8.6.0/P10 - https://blog.zimbra.com/2018/05/new-patches-zimbra-8-8-8-turing-patch-3-zimbra-8-7-11-patch-3-zimbra-8-6-0-patch-10/
CVE ID: CVE-2015-7611 State: PUBLISHED Published: 2016-06-07T14:00:00 Last Updated: 2024-08-06T07:51:28.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/536575/100/0/threaded - http://www.openwall.com/lists/oss-security/2015/10/01/2 - http://packetstormsecurity.com/files/133798/Apache-James-Server-2.3.2-Arbitrary-Command-Execution.html - https://blogs.apache.org/james/entry/apache_james_server_2_3 - http://www.openwall.c
-Arbitrary-Command-Execution.html - https://blogs.apache.org/james/entry/apache_james_server_2_3 - http://www.openwall.com/lists/oss-security/2015/09/30/7 - http://packetstormsecurity.com/files/156463/Apache-James-Server-2.3.2-Insecure-User-Creation-Arbitrary-File-Write.html
CVE ID: CVE-2015-7612 State: PUBLISHED Published: 2015-10-01T20:00:00Z Last Updated: 2024-09-16T20:21:24.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Organizations page in Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.9 and earlier allow remote attackers to hijack the authentication of administrators for requests that have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10135 - http://www.securitytracker.com/id/1033682
CVE ID: CVE-2015-7613 State: PUBLISHED Published: 2015-10-19T10:00:00 Last Updated: 2024-08-06T07:51:28.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid call that leads to uid and gid comparisons against uninitialized data, related to msg.c, shm.c, and util.c. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2636.html - http://www.debian.org/security/2015/dsa-3372 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html - http://www.ubuntu.com/usn/USN-2765-1
372 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html - http://www.ubuntu.com/usn/USN-2765-1 - http://www.ubuntu.com/usn/USN-2792-1 - http://www.ubuntu.com/usn/USN-2762-1 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html - https://github.com/torvalds/linux/commit/b9a532277938798b53178d5a66af6e2915cb27cf - http://www.ubuntu.com/usn/USN-2763-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.securitytracker.com/id/1034094 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a532277938798b531
tytracker.com/id/1034094 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a532277938798b53178d5a66af6e2915cb27cf - http://www.securitytracker.com/id/1034592 - https://kc.mcafee.com/corporate/index?page=content&id=SB10146 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://bugzilla.redhat.com/show_bug.cgi?id=1268270 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html - http://www.ubuntu.com/usn/USN-2764-1 - http://www.openwall.com/lists/oss-security/2015/10/01/8 - http://www.securityfocus.com/bid/76977 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html - http://lists.ope
urityfocus.com/bid/76977 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html - http://www.ubuntu.com/usn/USN-2761-1 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html
CVE ID: CVE-2015-7614 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:51:28.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions and execute arbitrary commands via an app.launchURL call, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-67
09, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796 - http://www.zerodayinitiative.com/advisories/ZDI-15-509
CVE ID: CVE-2015-7615 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:51:28.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in a SaveAs feature in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7617, and CVE-2015-7621. Additiona
, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7617, and CVE-2015-7621. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-493 - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796
CVE ID: CVE-2015-7616 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:51:28.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ANVerifyComments method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-671
9, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796 - http://www.zerodayinitiative.com/advisories/ZDI-15-494
CVE ID: CVE-2015-7617 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:51:28.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code by leveraging improper EScript exception handling, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, and CVE-2015-7621. Add
5-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, and CVE-2015-7621. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-492 - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796
CVE ID: CVE-2015-7618 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:51:28.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CBAutoConfigCommentRepository method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716,
CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796 - http://www.zerodayinitiative.com/advisories/ZDI-15-498
CVE ID: CVE-2015-7619 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:51:28.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ANShareFile2 method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, C
VE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-500 - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796
CVE ID: CVE-2015-7620 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:51:28.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ANSendForBrowserReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-20
15-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.zerodayinitiative.com/advisories/ZDI-15-496 - http://www.securitytracker.com/id/1033796