Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-1302 State: PUBLISHED Published: 2015-11-11T11:00:00 Last Updated: 2024-08-06T04:40:18.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and out_of_process_instance.cc. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-11/msg00121.html - http://rhn.redhat.com/errata/RHSA-2015-1841.html - https://code.google.com/p/chromium/issues/detail?id=520422 - ht
tml - http://rhn.redhat.com/errata/RHSA-2015-1841.html - https://code.google.com/p/chromium/issues/detail?id=520422 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00120.html - https://codereview.chromium.org/1316803003 - http://www.securitytracker.com/id/1034132 - https://security.gentoo.org/glsa/201603-09 - http://googlechromereleases.blogspot.com/2015/11/stable-channel-update.html - http://www.debian.org/security/2015/dsa-3415 - http://www.securityfocus.com/bid/77537
CVE ID: CVE-2015-1303 State: PUBLISHED Published: 2015-10-12T01:00:00 Last Updated: 2024-08-06T04:40:18.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not perform a rethrow action to propagate information about a cross-context exception, which allows remote attackers to bypass the Same Origin Policy via a crafted HTML document containing an IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2757-1 - http://googlechromereleases.blogspot.com/2015/09/stable-channel-update_24.html - http://rhn.redhat.com/errata/RHSA-2015-1841.h
/googlechromereleases.blogspot.com/2015/09/stable-channel-update_24.html - http://rhn.redhat.com/errata/RHSA-2015-1841.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00008.html - http://www.debian.org/security/2015/dsa-3376 - https://code.google.com/p/chromium/issues/detail?id=530301 - https://security.gentoo.org/glsa/201603-09 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00002.html - http://www.securitytracker.com/id/1033683 - http://www.securityfocus.com/bid/76844 - https://codereview.chromium.org/1339023002
CVE ID: CVE-2015-1304 State: PUBLISHED Published: 2015-10-12T01:00:00 Last Updated: 2024-08-06T04:40:18.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a (1) observe or (2) getNotifier call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2757-1 - http://googlechromereleases.blogspot.com/2015/09/stable-channel-update_24.html - http://rhn.redhat.com/errata/RHSA-2015-1841.html - http://lists.opensuse.org/opensuse-security-
channel-update_24.html - http://rhn.redhat.com/errata/RHSA-2015-1841.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00008.html - https://code.google.com/p/chromium/issues/detail?id=531891 - http://www.debian.org/security/2015/dsa-3376 - https://chromium.googlesource.com/v8/v8/+/9b0fb52b57021473aa813f3fb99ad7384a8b86f1 - https://security.gentoo.org/glsa/201603-09 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00002.html - http://www.securitytracker.com/id/1033683 - http://www.securityfocus.com/bid/76844
CVE ID: CVE-2015-1305 State: PUBLISHED Published: 2015-02-06T15:00:00 Last Updated: 2024-08-06T04:40:18.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted (1) 0x00224014 or (2) 0x0022c018 IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100602 - http://www.greyhathacker.net/?p=818 - http://www.osvdb.org/show/osvdb/117345 - http://www.exploit-db.com/exploits/35953 - https://kc.mcafee.com/corporate/index?page=content&id=SB10097 - http://p
45 - http://www.exploit-db.com/exploits/35953 - https://kc.mcafee.com/corporate/index?page=content&id=SB10097 - http://packetstormsecurity.com/files/130177/McAfee-Data-Loss-Prevention-Endpoint-Privilege-Escalation.html
CVE ID: CVE-2015-1306 State: PUBLISHED Published: 2015-01-22T15:00:00 Last Updated: 2024-08-06T04:40:18.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2015:051 - http://www.openwall.com/lists/oss-security/2015/01/20/4 - https://www.sympa.org/security_advisories - http://secunia.com/advisories/62387 - http://www.securityfocus.com/bid/72277 - http://secunia.com/advisories/62442 - http://
://secunia.com/advisories/62387 - http://www.securityfocus.com/bid/72277 - http://secunia.com/advisories/62442 - http://advisories.mageia.org/MGASA-2015-0085.html - http://www.debian.org/security/2015/dsa-3134
CVE ID: CVE-2015-1307 State: PUBLISHED Published: 2015-01-26T15:00:00 Last Updated: 2024-08-06T04:40:18.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: plasma-workspace before 5.1.95 allows remote attackers to obtain passwords via a Trojan horse Look and Feel package. Additional Analyst Notes: - CVE Program Container: References: - https://www.kde.org/info/security/advisory-20150122-1.txt - http://www.securityfocus.com/bid/72285 - http://www.openwall.com/lists/oss-security/2015/01/22/6
CVE ID: CVE-2015-1308 State: PUBLISHED Published: 2015-01-26T15:00:00 Last Updated: 2024-08-06T04:40:18.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72284 - http://secunia.com/advisories/62051 - https://www.kde.org/info/security/advisory-20150122-2.txt - http://www.openwall.com/lists/oss-security/2015/01/22/6
CVE ID: CVE-2015-1309 State: PUBLISHED Published: 2015-01-22T16:00:00 Last Updated: 2024-08-06T04:40:18.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity vulnerability in the Extended Computer Aided Test Tool (eCATT) in SAP NetWeaver AS ABAP 7.31 and earlier allows remote attackers to access arbitrary files via a crafted XML request, related to ECATT_DISPLAY_XMLSTRING_REMOTE, aka SAP Note 2016638. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-15-001-sap-netweaver-ecatt_display_xmlstring_remote-xxe/ - http://secunia.com/advisories/62469 - https://erpscan.io/press-center/blog/sap-critical-patch-update-ja
ng_remote-xxe/ - http://secunia.com/advisories/62469 - https://erpscan.io/press-center/blog/sap-critical-patch-update-january-2015/
CVE ID: CVE-2015-1310 State: PUBLISHED Published: 2015-01-22T16:00:00 Last Updated: 2024-08-06T04:40:18.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SAP Adaptive Server Enterprise (Sybase ASE) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/press-center/blog/sap-critical-patch-update-january-2015/
CVE ID: CVE-2015-1311 State: PUBLISHED Published: 2015-01-22T16:00:00 Last Updated: 2024-08-06T04:40:18.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Extended Application Services (XS) in SAP HANA allows remote attackers to inject arbitrary ABAP code via unspecified vectors, aka SAP Note 2098906. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/press-center/blog/sap-critical-patch-update-january-2015/
CVE ID: CVE-2015-1312 State: PUBLISHED Published: 2015-01-22T16:00:00 Last Updated: 2024-08-06T04:40:18.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dealer Portal in SAP ERP does not properly restrict access, which allows remote attackers to obtain sensitive information, gain privileges, and possibly have other unspecified impact via unknown vectors, aka SAP Note 2000401. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/press-center/blog/sap-critical-patch-update-january-2015/
CVE ID: CVE-2015-1313 State: PUBLISHED Published: 2023-06-29T14:07:44.700Z Last Updated: 2024-11-26T19:30:02.252Z Vendors: JetBrains Products: TeamCity Problem Types: CWE-20: Improper Input Validation Description: JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request data can be deduced by reading HTML and JavaScript files that are returned to the web browser after an initial unauthenticated request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/teamcity/download/ - https://beyondbinary.io/articles/teamcity-account-creation/
CVE ID: CVE-2015-1314 State: PUBLISHED Published: 2015-04-16T23:00:00 Last Updated: 2024-08-06T04:40:18.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: The USAA Mobile Banking application before 7.10.1 for Android displays the most recently-used screen before prompting the user for login, which might allow physically proximate users to obtain banking account numbers and balances. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jan/94 - http://dnlongen.blogspot.com/2015/01/usaa-mobile-app-gives-away-your-account.html - http://packetstormsecurity.com/files/130067/USAA-Mobile-App-Information-Disclosure.html
CVE ID: CVE-2015-1315 State: PUBLISHED Published: 2015-02-23T17:00:00 Last Updated: 2024-08-06T04:40:18.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the charset_to_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by converting a string from CP866 to UTF-8. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/unzip/+bug/580961/comments/120 - http://www.conostix.com/pub/adv/CVE-2015-1315-Info-ZIP-unzip-Out-of-bounds_Write.txt - http://www.openwall.com/lists/oss-security/2015/02/17/4 - http://www.ubuntu.com/usn/
ZIP-unzip-Out-of-bounds_Write.txt - http://www.openwall.com/lists/oss-security/2015/02/17/4 - http://www.ubuntu.com/usn/USN-2502-1
CVE ID: CVE-2015-1316 State: PUBLISHED Published: 2019-04-22T15:35:59.130598Z Last Updated: 2024-09-16T19:30:31.704Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Ubuntu Products: Juju Problem Types: Unsafe default behaviour exposed private credentials. Description: Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key. Additional Analyst Notes: - CVE Program Container: References: - http://bazaar.launchpad.net/~juju-core/juju-core/trunk/revision/4119
CVE ID: CVE-2015-1317 State: PUBLISHED Published: 2015-04-08T18:00:00 Last Updated: 2024-08-06T04:40:18.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code by deleting all WebContents while a RenderProcessHost instance still exists. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/oxide/+bug/1431484 - http://www.ubuntu.com/usn/USN-2556-1
CVE ID: CVE-2015-1318 State: PUBLISHED Published: 2015-04-17T17:00:00.000Z Last Updated: 2025-11-03T19:25:15.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container). Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/apport/trunk/2.17.1 - https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1438758 - http://www.osvdb.org/120803 - https://www.exploit-db.com/exploits/36782/ - http://www.ubuntu.com/usn/USN-2569-1 - https://www.exploit-db.com/exploits/43971/
CVE ID: CVE-2015-1319 State: PUBLISHED Published: 2015-09-17T16:00:00 Last Updated: 2024-08-06T04:40:18.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly detect if the screen is locked, which allows physically proximate attackers to mount removable media while the screen is locked as demonstrated by inserting a USB thumb drive. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2741-1 - https://bugs.launchpad.net/ubuntu/%2Bsource/unity/%2Bbug/1438870
CVE ID: CVE-2015-1320 State: PUBLISHED Published: 2019-04-22T15:35:59.171009Z Last Updated: 2024-09-16T22:26:40.726Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Ubuntu Products: MAAS Problem Types: Password logged in log file. Description: The SeaMicro provisioning of Ubuntu MAAS logs credentials, including username and password, for the management interface. This issue affects Ubuntu MAAS versions prior to 1.9.2. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/maas/+milestone/1.9.2
CVE ID: CVE-2015-1321 State: PUBLISHED Published: 2015-04-29T20:00:00 Last Updated: 2024-08-06T04:40:18.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted webpage. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2570-1
CVE ID: CVE-2015-1322 State: PUBLISHED Published: 2015-04-29T20:00:00 Last Updated: 2024-08-06T04:40:18.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Ubuntu network-manager package for Ubuntu (vivid) before 0.9.10.0-4ubuntu15.1, Ubuntu 14.10 before 0.9.8.8-0ubuntu28.1, and Ubuntu 14.04 LTS before 0.9.8.8-0ubuntu7.1 allows local users to change the modem device configuration or read arbitrary files via a .. (dot dot) in the file name in a request to read modem device contexts (com.canonical.NMOfono.ReadImsiContexts). Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/%2Bsource/network-ma
Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/%2Bsource/network-manager/%2Bbug/1449245 - http://www.ubuntu.com/usn/USN-2581-1
CVE ID: CVE-2015-1323 State: PUBLISHED Published: 2017-07-21T14:00:00 Last Updated: 2024-08-06T04:40:18.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The simulate dbus method in aptdaemon before 1.1.1+bzr982-0ubuntu3.1 as packaged in Ubuntu 15.04, before 1.1.1+bzr980-0ubuntu1.1 as packaged in Ubuntu 14.10, before 1.1.1-1ubuntu5.2 as packaged in Ubuntu 14.04 LTS, before 0.43+bzr805-0ubuntu10 as packaged in Ubuntu 12.04 LTS allows local users to obtain sensitive information, or access files with root permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75221 - http://www.ubuntu.com/usn/USN-2648-1
CVE ID: CVE-2015-1324 State: PUBLISHED Published: 2017-08-25T18:00:00 Last Updated: 2024-08-06T04:40:18.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 as packaged in Ubuntu 14.04 LTS, and before 2.0.1-0ubuntu17.9 as packaged in Ubuntu 12.04 LTS allow local users to write to arbitrary files and gain root privileges by leveraging incorrect handling of permissions when generating core dumps for setuid binaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2609-1 - https://bugs.launchpad.net/
Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2609-1 - https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1452239 - http://www.securityfocus.com/bid/74767
CVE ID: CVE-2015-1325 State: PUBLISHED Published: 2017-08-25T18:00:00.000Z Last Updated: 2025-11-03T19:25:16.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 as packaged in Ubuntu 14.04 LTS, and before 2.0.1-0ubuntu17.9 as packaged in Ubuntu 12.04 LTS allow local users to write to arbitrary files and gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/05/21/10 - http://www.securityfocus.com/bid/74769 - http://www.ubuntu.com/usn/USN-2609-1 -
l.com/lists/oss-security/2015/05/21/10 - http://www.securityfocus.com/bid/74769 - http://www.ubuntu.com/usn/USN-2609-1 - https://www.exploit-db.com/exploits/37088/
CVE ID: CVE-2015-1326 State: PUBLISHED Published: 2019-04-22T15:35:59.213418Z Last Updated: 2024-09-16T23:46:40.134Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Ubuntu Products: python-dbusmock Problem Types: Untrusted compiled bytecode Description: python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method could be tricked into executing malicious code if an attacker supplies a .pyc file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/martinpitt/python-dbusmock/commit/4e7d0df9093
CVE ID: CVE-2015-1327 State: PUBLISHED Published: 2019-04-22T15:35:59.250045Z Last Updated: 2024-09-16T17:27:40.688Z Severity: LOW (CVSS 3.9 CVSS:3.0/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Ubuntu Products: Content Hub Problem Types: Missing access control checks. Description: Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which would then send a copy of that file to another app. Additional Analyst Notes: - CVE Program Container: References: - h
h would then send a copy of that file to another app. Additional Analyst Notes: - CVE Program Container: References: - https://bazaar.launchpad.net/~phablet-team/content-hub/trunk/revision/212
CVE ID: CVE-2015-1328 State: PUBLISHED Published: 2016-11-28T03:01:00 Last Updated: 2024-08-06T04:40:18.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveraging a configuration in which overlayfs is permitted in an arbitrary mount namespace. Additional Analyst Notes: - CVE Program Container: References: - https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1328.html - http://www.securityfocus.com/bid/75206 - https:
ps://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1328.html - http://www.securityfocus.com/bid/75206 - https://www.exploit-db.com/exploits/37292/ - http://www.exploit-db.com/exploits/40688/ - https://security-tracker.debian.org/tracker/CVE-2015-1328 - http://seclists.org/oss-sec/2015/q2/717
CVE ID: CVE-2015-1329 State: PUBLISHED Published: 2017-09-20T16:00:00 Last Updated: 2024-08-06T04:40:18.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and 14.04 LTS might allow remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1329.html - http://www.ubuntu.com/usn/USN-2677-1 - http://www.securityfocus.com/bid/76174
CVE ID: CVE-2015-1330 State: PUBLISHED Published: 2015-07-01T14:00:00 Last Updated: 2024-08-06T04:40:18.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: unattended-upgrades before 0.86.1 does not properly authenticate packages when the (1) force-confold or (2) force-confnew dpkg options are enabled in the DPkg::Options::* apt configuration, which allows remote man-in-the-middle attackers to upload and execute arbitrary packages via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://metadata.ftp-master.debian.org/changelogs//main/u/unattended-upgrades/unattended-upgrades_0.86.1_changelog - http://www.securitytracker.com/id/1032738 - htt
elogs//main/u/unattended-upgrades/unattended-upgrades_0.86.1_changelog - http://www.securitytracker.com/id/1032738 - http://www.debian.org/security/2015/dsa-3297 - http://www.ubuntu.com/usn/USN-2657-1
CVE ID: CVE-2015-1331 State: PUBLISHED Published: 2015-08-12T14:00:00 Last Updated: 2024-08-06T04:40:18.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3317 - http://www.securityfocus.com/bid/75999 - http://www.ubuntu.com/usn/USN-2675-1 - http://lists.opensuse.org/opensuse-updates/2015-07/msg00066.html - https://service.ait.ac.at/security/2015/LxcSecurityAnalysis.html - https://github.com/lxc/lxc/commit/72cf81f6a3404e35028567db2c99a90406e9c6e6 - https://
ty/2015/LxcSecurityAnalysis.html - https://github.com/lxc/lxc/commit/72cf81f6a3404e35028567db2c99a90406e9c6e6 - https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1470842 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html
CVE ID: CVE-2015-1332 State: PUBLISHED Published: 2017-07-25T18:00:00 Last Updated: 2024-08-06T04:40:18.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted website. Additional Analyst Notes: - CVE Program Container: References: - http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1332.html - https://launchpad.net/ubuntu/+source/oxide-qt/1.9.1-0ubuntu0.15.04.1 - http://www.ubuntu.com/usn/USN-2735-1 - http://www.securityfocus.com/bid/76710