Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-7361 State: PUBLISHED Published: 2015-10-15T20:00:00 Last Updated: 2024-08-06T07:43:46.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: FortiOS 5.2.3, when configured to use High Availability (HA) and the dedicated management interface is enabled, does not require authentication for access to the ZebOS shell on the HA dedicated management interface, which allows remote attackers to obtain shell access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033093 - http://www.fortiguard.com/advisory/zebos-routing-remote-shell-service-enabled - http://fortiguard.com/advisory/zebos-routing-remo
w.fortiguard.com/advisory/zebos-routing-remote-shell-service-enabled - http://fortiguard.com/advisory/zebos-routing-remote-shell-service-enabled
CVE ID: CVE-2015-7362 State: PUBLISHED Published: 2016-01-08T19:00:00 Last Updated: 2024-08-06T07:43:46.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fortinet FortiClient Linux SSLVPN before build 2313, when installed on Linux in a home directory that is world readable and executable, allows local users to gain privileges via the helper/subroc setuid program. Additional Analyst Notes: - CVE Program Container: References: - http://fortiguard.com/advisory/forticlient-sslvpn-linux-client-local-privilege-escalation-vulnerability - http://www.fortiguard.com/advisory/forticlient-sslvpn-linux-client-local-privilege-escalation-vulnerability
CVE ID: CVE-2015-7363 State: PUBLISHED Published: 2016-10-07T14:00:00 Last Updated: 2024-08-06T07:43:46.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.3, in hardware models with a hard disk, and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.3 allows remote administrators to inject arbitrary web script or HTML via vectors related to report filters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036981 - http://www.securitytracker.com/id/1036982 - http://www.securityfocus.com/bid/93413
/www.securitytracker.com/id/1036981 - http://www.securitytracker.com/id/1036982 - http://www.securityfocus.com/bid/93413 - http://fortiguard.com/advisory/fortianalyzer-and-fortimanager-stored-xss-vulnerability-in-report-filters
CVE ID: CVE-2015-7364 State: PUBLISHED Published: 2015-10-14T19:00:00 Last Updated: 2024-08-06T07:43:46.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTML_Quickform library, as used in Revive Adserver before 3.2.2, allows remote attackers to bypass the CSRF protection mechanism via an empty token. Additional Analyst Notes: - CVE Program Container: References: - http://www.revive-adserver.com/security/revive-sa-2015-001 - http://www.securityfocus.com/archive/1/536633/100/0/threaded - http://seclists.org/fulldisclosure/2015/Oct/32 - http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html - https://github.com/revive-adserver/rev
urity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html - https://github.com/revive-adserver/revive-adserver/commit/288f81cc
CVE ID: CVE-2015-7365 State: PUBLISHED Published: 2015-10-14T19:00:00 Last Updated: 2024-08-06T07:43:46.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the plugin upgrade form in Revive Adserver before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of an uploaded file containing errors. Additional Analyst Notes: - CVE Program Container: References: - http://www.revive-adserver.com/security/revive-sa-2015-001 - http://www.securityfocus.com/archive/1/536633/100/0/threaded - http://seclists.org/fulldisclosure/2015/Oct/32 - http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-
://seclists.org/fulldisclosure/2015/Oct/32 - http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html
CVE ID: CVE-2015-7366 State: PUBLISHED Published: 2015-10-14T19:00:00 Last Updated: 2024-08-06T07:43:46.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Revive Adserver before 3.2.2 allow remote attackers to hijack the authentication of users for requests that (1) perform certain plugin actions and possibly cause a denial of service (disabled core plugins) via unknown vectors or (2) change the contact name and language or possibly have unspecified other impact via a crafted POST request to an account-user-*.php script. Additional Analyst Notes: - CVE Program Container: References: - http://www.revive-adserver.com/se
nt-user-*.php script. Additional Analyst Notes: - CVE Program Container: References: - http://www.revive-adserver.com/security/revive-sa-2015-001 - http://www.securityfocus.com/archive/1/536633/100/0/threaded - http://seclists.org/fulldisclosure/2015/Oct/32 - http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html
CVE ID: CVE-2015-7367 State: PUBLISHED Published: 2015-10-14T19:00:00 Last Updated: 2024-08-06T07:43:46.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Revive Adserver before 3.2.2 allows remote attackers to perform unspecified actions by leveraging an unexpired session after the user has been (1) deleted or (2) unlinked. Additional Analyst Notes: - CVE Program Container: References: - http://www.revive-adserver.com/security/revive-sa-2015-001 - http://www.securityfocus.com/archive/1/536633/100/0/threaded - http://seclists.org/fulldisclosure/2015/Oct/32 - http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html
CVE ID: CVE-2015-7368 State: PUBLISHED Published: 2015-10-14T19:00:00 Last Updated: 2024-08-06T07:43:46.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Revive Adserver before 3.2.2 does not send the appropriate Cache-Control HTTP headers in responses for admin UI pages, which allows local users to obtain sensitive information via the web browser cache. Additional Analyst Notes: - CVE Program Container: References: - http://www.revive-adserver.com/security/revive-sa-2015-001 - http://www.securityfocus.com/archive/1/536633/100/0/threaded - http://seclists.org/fulldisclosure/2015/Oct/32 - https://github.com/revive-adserver/revive-adserver/commit/15aac363 - http://packetstormsecu
fulldisclosure/2015/Oct/32 - https://github.com/revive-adserver/revive-adserver/commit/15aac363 - http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html
CVE ID: CVE-2015-7369 State: PUBLISHED Published: 2015-10-14T19:00:00 Last Updated: 2024-08-06T07:43:46.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default Flash cross-domain policy (crossdomain.xml) in Revive Adserver before 3.2.2 does not restrict access cross domain access, which allows remote attackers to conduct cross domain attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.revive-adserver.com/security/revive-sa-2015-001 - http://www.securityfocus.com/archive/1/536633/100/0/threaded - http://seclists.org/fulldisclosure/2015/Oct/32 - http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XS
tp://seclists.org/fulldisclosure/2015/Oct/32 - http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html
CVE ID: CVE-2015-7370 State: PUBLISHED Published: 2015-10-14T19:00:00 Last Updated: 2024-08-06T07:43:46.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in open-flash-chart.swf in Open Flash Chart 2, as used in the VideoAds plugin in Revive Adserver before 3.2.2 and CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026, allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) data-file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.revive-adserver.com/securi
a-file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.revive-adserver.com/security/revive-sa-2015-001 - http://www.securitytracker.com/id/1036193 - http://www.securityfocus.com/archive/1/536633/100/0/threaded - http://www.securityfocus.com/bid/91497 - http://seclists.org/fulldisclosure/2015/Oct/32 - http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160627-01-security-notice-for-release-automation.aspx
CVE ID: CVE-2015-7371 State: PUBLISHED Published: 2015-10-14T19:00:00 Last Updated: 2024-08-06T07:43:46.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Revive Adserver before 3.2.2 does not restrict access to run-mpe.php, which allows remote attackers to run the Maintenance Priority Engine and possibly cause a denial of service (resource consumption) via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.revive-adserver.com/security/revive-sa-2015-001 - http://www.securityfocus.com/archive/1/536633/100/0/threaded - http://seclists.org/fulldisclosure/2015/Oct/32 - http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-
http://seclists.org/fulldisclosure/2015/Oct/32 - http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html
CVE ID: CVE-2015-7372 State: PUBLISHED Published: 2015-10-14T19:00:00 Last Updated: 2024-08-06T07:51:27.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in delivery-dev/al.php in Revive Adserver before 3.2.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the layerstyle parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.revive-adserver.com/security/revive-sa-2015-001 - https://github.com/revive-adserver/revive-adserver/commit/86b623f8 - http://www.securityfocus.com/archive/1/536633/100/0/threaded - http://seclists.org/fulldisclosure/2015/Oct/32 - http://packetstorms
securityfocus.com/archive/1/536633/100/0/threaded - http://seclists.org/fulldisclosure/2015/Oct/32 - http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html
CVE ID: CVE-2015-7373 State: PUBLISHED Published: 2015-10-14T19:00:00 Last Updated: 2024-08-06T07:51:27.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "magic-macros" feature in Revive Adserver before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via a GET parameter, which is not properly handled in a banner. Additional Analyst Notes: - CVE Program Container: References: - http://www.revive-adserver.com/security/revive-sa-2015-001 - http://www.securityfocus.com/archive/1/536633/100/0/threaded - http://seclists.org/fulldisclosure/2015/Oct/32 - http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.
aded - http://seclists.org/fulldisclosure/2015/Oct/32 - http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html
CVE ID: CVE-2015-7374 State: PUBLISHED Published: 2015-09-25T14:00:00 Last Updated: 2024-08-06T07:51:27.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-2649. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-451 - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-251-01
CVE ID: CVE-2015-7375 State: PUBLISHED Published: 2015-09-25T14:00:00 Last Updated: 2024-08-06T07:51:27.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code or cause a denial of service (unhandled runtime exception and application crash) via a crafted Indusoft Project file. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-251-01
CVE ID: CVE-2015-7377 State: PUBLISHED Published: 2015-10-16T20:00:00 Last Updated: 2024-08-06T07:51:27.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the invitaion_code parameter in a pie-register page to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133928/WordPress-Pie-Register-2.0.18-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/536668/100/0/threaded - https://github.com/GTSolutions/Pie
-Site-Scripting.html - http://www.securityfocus.com/archive/1/536668/100/0/threaded - https://github.com/GTSolutions/Pie-Register/blob/2.0.19/readme.txt - https://wpvulndb.com/vulnerabilities/8212
CVE ID: CVE-2015-7378 State: PUBLISHED Published: 2016-04-18T15:00:00 Last Updated: 2024-08-06T07:51:27.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Panda Security URL Filtering before 4.3.1.9 uses a weak ACL for the "Panda Security URL Filtering" directory and installed files, which allows local users to gain SYSTEM privileges by modifying Panda_URL_Filteringb.exe. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136607/Panda-Security-URL-Filtering-Privilege-Escalation.html - https://www.exploit-db.com/exploits/39670/ - http://seclists.org/fulldisclosure/2016/Apr/25
CVE ID: CVE-2015-7379 State: REJECTED Published: 2020-10-07T21:49:21 Last Updated: 2020-10-07T21:49:21 Description: No description available.
CVE ID: CVE-2015-7380 State: REJECTED Published: 2020-10-07T21:51:18 Last Updated: 2020-10-07T21:51:18 Description: No description available.
CVE ID: CVE-2015-7381 State: PUBLISHED Published: 2015-09-28T01:00:00 Last Updated: 2024-08-06T07:51:27.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to execute arbitrary PHP code via the (1) pathToMYSQL or (2) databaseStructureFile parameter, a different issue than CVE-2015-6008. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/374092
CVE ID: CVE-2015-7382 State: PUBLISHED Published: 2015-09-28T01:00:00 Last Updated: 2024-08-06T07:51:27.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary SQL commands via the defaultCharacterSet parameter, a different issue than CVE-2015-6009. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/374092
CVE ID: CVE-2015-7383 State: PUBLISHED Published: 2015-09-28T01:00:00 Last Updated: 2024-08-06T07:51:27.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge through 2015-04-28 allow remote attackers to inject arbitrary web script or HTML via the (1) adminUserName, (2) pathToMYSQL, (3) databaseStructureFile, or (4) pathToBibutils parameter to install.php or the (5) adminUserName parameter to update.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/374092
CVE ID: CVE-2015-7384 State: PUBLISHED Published: 2017-10-10T16:00:00 Last Updated: 2024-08-06T07:51:27.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1268791 - https://github.com/nodejs/node/issues/3138 - http://www.securityfocus.com/bid/101260
CVE ID: CVE-2015-7385 State: PUBLISHED Published: 2015-11-19T20:00:00 Last Updated: 2024-08-06T07:51:27.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Open-Xchange OX Guard before 2.0.0-rev11 allows remote attackers to inject arbitrary web script or HTML via the uid field in a PGP public key, which is not properly handled in "Guard PGP Settings." Additional Analyst Notes: - CVE Program Container: References: - http://software.open-xchange.com/products/guard/doc/Release_Notes_for_Patch_Release_2777_2.0.0_2015-09-30.pdf - http://www.securityfocus.com/archive/1/536923/100/0/threaded - http://www.securitytracker.com/id/1034166 - http:/
.pdf - http://www.securityfocus.com/archive/1/536923/100/0/threaded - http://www.securitytracker.com/id/1034166 - http://packetstormsecurity.com/files/134415/Open-Xchange-Guard-2.0-Cross-Site-Scripting.html
CVE ID: CVE-2015-7386 State: PUBLISHED Published: 2015-09-28T15:00:00Z Last Updated: 2024-09-16T23:21:53.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in includes/metaboxes.php in the Gallery - Photo Albums - Portfolio plugin 1.3.47 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the (1) Media Title or (2) Media Subtitle fields. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133494/WordPress-Easy-Media-Gallery-1.3.47-Cross-Site-Scripting.html - https://wpvulndb.com/vulnerabilities/8181
CVE ID: CVE-2015-7387 State: PUBLISHED Published: 2015-09-28T15:00:00 Last Updated: 2024-08-06T07:51:27.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and earlier allows remote attackers to bypass intended restrictions and execute arbitrary SQL commands via an allowed query followed by a disallowed one in the query parameter to event/runQuery.do, as demonstrated by "SELECT 1;INSERT INTO." Fixed in Build 11200. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/38173/ - http://seclists.org/fulldisclosure/2015/Sep/59 - https://www.exploit-db.com/exploits/38352/ - http://packe
oits/38173/ - http://seclists.org/fulldisclosure/2015/Sep/59 - https://www.exploit-db.com/exploits/38352/ - http://packetstormsecurity.com/files/133581/ManageEngine-EventLog-Analyzer-10.6-Build-10060-SQL-Query-Execution.html - http://packetstormsecurity.com/files/133747/ManageEngine-EventLog-Analyzer-Remote-Code-Execution.html - http://www.rapid7.com/db/modules/exploit/windows/misc/manageengine_eventlog_analyzer_rce
CVE ID: CVE-2015-7390 State: PUBLISHED Published: 2017-09-26T15:00:00 Last Updated: 2024-08-06T07:51:27.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in TestLink before 1.9.14 allows remote attackers to execute arbitrary SQL commands via the apikey parameter to lnl.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/536623/100/0/threaded
CVE ID: CVE-2015-7391 State: PUBLISHED Published: 2017-09-26T15:00:00 Last Updated: 2024-08-06T07:51:27.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.9.14 allow remote attackers to inject arbitrary web script or HTML via the (1) selected_end_date or (2) selected_start_date parameter to lib/results/tcCreatedPerUserOnTestProject.php; the (3) containerType parameter to lib/testcases/containerEdit.php; the (4) filter_tc_id or (5) filter_testcase_name parameter to lib/testcases/listTestCases.php; the (6) useRecursion parameter to lib/testcases/tcImport.php; the (7) targetTestCase or (8) created_by parameter
es.php; the (6) useRecursion parameter to lib/testcases/tcImport.php; the (7) targetTestCase or (8) created_by parameter to lib/testcases/tcSearch.php; or the (9) HTTP Referer header to third_party/user_contribution/fakeRemoteExecServer/client4fakeXMLRPCTestRunner.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/536622/100/0/threaded
CVE ID: CVE-2015-7392 State: PUBLISHED Published: 2015-10-05T14:00:00 Last Updated: 2024-08-06T07:51:27.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the parse_string function in libs/esl/src/esl_json.c in FreeSWITCH before 1.4.23 and 1.6.x before 1.6.2 allows remote attackers to execute arbitrary code via a trailing \u in a json string to cJSON_Parse. Additional Analyst Notes: - CVE Program Container: References: - https://freeswitch.org/stash/projects/FS/repos/freeswitch/commits/cf8925 - http://packetstormsecurity.com/files/133781/freeswitch-Heap-Overflow.html - http://www.securityfocus.com/archive/1/536569/100/0/threaded
CVE ID: CVE-2015-7393 State: PUBLISHED Published: 2016-01-12T20:00:00 Last Updated: 2024-08-06T07:51:27.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AAM 11.4.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AFM and PEM 11.3.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP DNS 12.0.0 before 12.0.0 HF1, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.2.0 through 11.3.0, BIG-IP GTM 11.2.0 through 11.6.0, BIG-IP PSM 11.2.0 through 11.4.1, Enterprise Manager 3.0.0 through 3.1.1, BIG-IQ Cloud 4.0.0 through 4.5.0, BIG-IQ Device 4.2.0 through 4.5.0, BI
11.4.1, Enterprise Manager 3.0.0 through 3.1.1, BIG-IQ Cloud 4.0.0 through 4.5.0, BIG-IQ Device 4.2.0 through 4.5.0, BIG-IQ Security 4.0.0 through 4.5.0, BIG-IQ ADC 4.5.0, BIG-IQ Centralized Management 4.6.0, and BIG-IQ Cloud and Orchestration 1.0.0 allows local users with advanced shell (bash) access to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/kb/en-us/solutions/public/k/75/sol75136237.html - http://securitytracker.com/id/1034632 - http://www.securitytracker.com/id/1034633
CVE ID: CVE-2015-7394 State: PUBLISHED Published: 2015-11-06T18:00:00 Last Updated: 2024-08-06T07:51:27.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: The datastor kernel module in F5 BIG-IP Analytics, APM, ASM, Link Controller, and LTM 11.1.0 before 12.0.0, BIG-IP AAM 11.4.0 before 12.0.0, BIG-IP AFM, PEM 11.3.0 before 12.0.0, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.1.0 through 11.3.0, BIG-IP GTM 11.1.0 through 11.6.0, BIG-IP PSM 11.1.0 through 11.4.1, BIG-IQ Cloud and Security 4.0.0 through 4.5.0, BIG-IQ Device 4.2.0 through 4.5.0, BIG-IQ ADC 4.5.0, and Enterprise Manager 3.0.0 through 3.1.1 allows remote authenticated users to cause a denial of service or gain pri
0, and Enterprise Manager 3.0.0 through 3.1.1 allows remote authenticated users to cause a denial of service or gain privileges by leveraging permission to upload and execute code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034025 - https://support.f5.com/kb/en-us/solutions/public/17000/400/sol17407.html - http://www.securitytracker.com/id/1034026