Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-4521 State: PUBLISHED Published: 2015-09-24T01:00:00 Last Updated: 2024-08-06T06:18:11.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html - http://lists.opensuse.org/opensuse-security-announce
sts.opensuse.org/opensuse-security-announce/2015-11/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html - http://www.ubuntu.com/usn/USN-2754-1 - http://www.mozilla.org/security/announce/2015/mfsa2015-112.html - http://www.ubuntu.com/usn/USN-2743-4 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.ubuntu.com/usn/USN-2743-3 - http://rhn.redhat.com/errata/RHSA-2015-1834.html - http://www.ubuntu.com/usn/USN-2743-2 - http://www.securitytracker.com/id/1033640 - http://rhn.redhat.com/errata/RHSA-2015-1852.html - http://www.debian.or
-2 - http://www.securitytracker.com/id/1033640 - http://rhn.redhat.com/errata/RHSA-2015-1852.html - http://www.debian.org/security/2015/dsa-3365 - http://www.securityfocus.com/bid/76816 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1170246 - http://www.ubuntu.com/usn/USN-2743-1
CVE ID: CVE-2015-4522 State: PUBLISHED Published: 2015-09-24T01:00:00 Last Updated: 2024-08-06T06:18:11.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors, related to an "overflow." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html - http://lists.open
e/2015-10/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html - http://www.ubuntu.com/usn/USN-2754-1 - http://www.mozilla.org/security/announce/2015/mfsa2015-112.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1170794 - http://www.ubuntu.com/usn/USN-2743-4 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.ubuntu.com/usn/USN-2743-3 - http://rhn.redhat.com/errata/RHSA-2015-1834.html - http://www.ubuntu.com/usn/USN-2743-2 - http://www.securitytracke
-3 - http://rhn.redhat.com/errata/RHSA-2015-1834.html - http://www.ubuntu.com/usn/USN-2743-2 - http://www.securitytracker.com/id/1033640 - http://rhn.redhat.com/errata/RHSA-2015-1852.html - http://www.debian.org/security/2015/dsa-3365 - http://www.securityfocus.com/bid/76816 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html - http://www.ubuntu.com/usn/USN-2743-1
CVE ID: CVE-2015-4523 State: PUBLISHED Published: 2017-09-11T17:00:00 Last Updated: 2024-08-06T06:18:11.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service (host reboot or reset to factory defaults), or execute arbitrary code via vectors related to saving files during analysis. Additional Analyst Notes: - CVE Program Container: References: - https://bto.bluecoat.com/security-advisory/sa97
CVE ID: CVE-2015-4524 State: PUBLISHED Published: 2015-07-04T14:00:00 Last Updated: 2024-08-06T06:18:11.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 before P15, and 7.2 before P01; Documentum Digital Assets Manager 6.5SP6 before P25; Documentum Web Publishers 6.5 SP7 before P25; and Documentum Task Space 6.7SP1 before P31 and 6.7SP2 before P23 allows remote authenticated users to execute arbitrary code by uploading a file to the backend Content Server. Additional Analyst
ote authenticated users to execute arbitrary code by uploading a file to the backend Content Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032770 - http://seclists.org/bugtraq/2015/Jul/9
CVE ID: CVE-2015-4525 State: PUBLISHED Published: 2015-07-04T10:00:00 Last Updated: 2024-08-06T06:18:11.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: The log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x before 7.2.0.2 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Jul/11
CVE ID: CVE-2015-4526 State: PUBLISHED Published: 2015-07-10T19:00:00 Last Updated: 2024-08-06T06:18:11.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RecoverPoint for Virtual Machines (VMs) 4.2 allows local users to obtain root-shell access by bypassing the Installation Manager Boxmgmt CLI interface. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Jul/59 - http://www.securitytracker.com/id/1032853
CVE ID: CVE-2015-4527 State: PUBLISHED Published: 2015-07-23T14:00:00 Last Updated: 2024-08-06T06:18:11.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in EMC Avamar Server 7.x before 7.1.2 and Avamar Virtual Addition (AVE) 7.x before 7.1.2 allows remote attackers to read arbitrary files by using the Avamar Desktop/Laptop client interface to send crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Jul/110 - http://www.securitytracker.com/id/1033026
CVE ID: CVE-2015-4528 State: PUBLISHED Published: 2015-07-16T21:00:00 Last Updated: 2024-08-06T06:18:11.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EMC Documentum CenterStage 1.2SP1 and 1.2SP2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75929 - http://www.securitytracker.com/id/1032966 - http://seclists.org/bugtraq/2015/Jul/80
CVE ID: CVE-2015-4529 State: PUBLISHED Published: 2015-07-16T21:00:00 Last Updated: 2024-08-06T06:18:11.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in EMC Documentum WebTop before 6.8P02, Documentum Administrator before 7.2P01, Documentum Digital Assets Manager through 6.5SP6, Documentum Web Publishers through 6.5SP7, and Documentum Task Space through 6.7SP2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Jul/81 - http://www.securitytracker.com/id/1032965 - http://www.securityfocus.co
ces: - http://seclists.org/bugtraq/2015/Jul/81 - http://www.securitytracker.com/id/1032965 - http://www.securityfocus.com/bid/75930
CVE ID: CVE-2015-4530 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T06:18:11.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in EMC Documentum WebTop before 6.8P01, Documentum Administrator through 7.2, Documentum Digital Assets Manager through 6.5SP6, Documentum Web Publishers through 6.5SP7, and Documentum Task Space through 6.7SP2 allows remote attackers to hijack the authentication of arbitrary users. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2518. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76405 - http://seclist
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76405 - http://seclists.org/bugtraq/2015/Aug/87
CVE ID: CVE-2015-4531 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T06:18:11.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended restrictions on data access and server actions, via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4622. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtra
plete fix for CVE-2014-4622. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Aug/86 - http://www.securityfocus.com/bid/76413
CVE ID: CVE-2015-4532 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T06:18:11.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization and does not properly restrict object types, which allows remote authenticated users to run save RPC commands with super-user privileges, and consequently execute arbitrary code, via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2514. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtra
plete fix for CVE-2014-2514. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Aug/86 - http://www.securityfocus.com/bid/76414
CVE ID: CVE-2015-4533 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T06:18:12.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization after creation of an object, which allows remote authenticated users to execute arbitrary code with super-user privileges via a custom script. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2513. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033296 - http://seclists.org/bugtraq/2015/Aug/86 - h
Program Container: References: - http://www.securitytracker.com/id/1033296 - http://seclists.org/bugtraq/2015/Aug/86 - http://www.securityfocus.com/bid/76411
CVE ID: CVE-2015-4534 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T06:18:11.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 allows remote authenticated users to execute arbitrary code by forging a signature for a query string that lacks the method_verb parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033296 - http://seclists.org/bugtraq/2015/Aug/86 - http://www.securityfocus.com/bid/76410
CVE ID: CVE-2015-4535 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T06:18:11.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02, when __debug_trace__ is configured, allows remote authenticated users to gain super-user privileges by leveraging the ability to read a log file containing a login ticket. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033296 - http://seclists.org/bugtraq/2015/Aug/86 - http://www.securityfocus.com/bid/76409
CVE ID: CVE-2015-4536 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T06:18:11.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which allows remote authenticated users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033296 - http://seclists.org/bugtraq/2015/Aug/86 - http://www.securityfocus.com/bid/76412
CVE ID: CVE-2015-4537 State: PUBLISHED Published: 2015-08-22T18:00:00 Last Updated: 2024-08-06T06:18:11.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lockbox in EMC Documentum D2 before 4.5 uses a hardcoded passphrase when a server lacks a D2.Lockbox file, which makes it easier for remote authenticated users to decrypt admin tickets by locating this passphrase in a decompiled D2 JAR archive. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Aug/117 - http://www.securitytracker.com/id/1033345
CVE ID: CVE-2015-4538 State: PUBLISHED Published: 2015-09-04T01:00:00 Last Updated: 2024-08-06T06:18:11.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in EMC Atmos before 2.2.3.426 and 2.3.x before 2.3.1.0 allows remote authenticated users to read arbitrary files or cause a denial of service (CPU and memory consumption) via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033456 - http://seclists.org/bugtraq/2015/Sep/7 - http://packetstormsecurity.com/files/133405/EMC-Atmos-2.3.0-XML-External-
456 - http://seclists.org/bugtraq/2015/Sep/7 - http://packetstormsecurity.com/files/133405/EMC-Atmos-2.3.0-XML-External-Entity-Injection.html
CVE ID: CVE-2015-4539 State: PUBLISHED Published: 2015-09-25T01:00:00 Last Updated: 2024-08-06T06:18:11.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Identity Management & Governance (IMG) before 7.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Sep/36 - http://www.securitytracker.com/id/1033520
CVE ID: CVE-2015-4540 State: PUBLISHED Published: 2015-09-25T01:00:00 Last Updated: 2024-08-06T06:18:11.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Identity Management & Governance (IMG) before 6.8.1 P18 and 6.9.x before 6.9.1 P6 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Sep/36 - http://www.securitytracker.com/id/1033520
CVE ID: CVE-2015-4541 State: PUBLISHED Published: 2015-09-25T01:00:00 Last Updated: 2024-08-06T06:18:11.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer GRC 5.x before 5.5.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html - http://seclists.org/bugtraq/2015/Sep/105 - http://www.securitytracker.com/id/1033649
CVE ID: CVE-2015-4542 State: PUBLISHED Published: 2015-09-25T01:00:00 Last Updated: 2024-08-06T06:18:11.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Archer GRC 5.x before 5.5.3 allows remote authenticated users to bypass intended access restrictions, and read or modify Discussion Forum Fields messages, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html - http://seclists.org/bugtraq/2015/Sep/105 - http://www.securitytracker.com/id/1033649
CVE ID: CVE-2015-4543 State: PUBLISHED Published: 2015-09-25T01:00:00 Last Updated: 2024-08-06T06:18:11.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Archer GRC 5.x before 5.5.3 uses cleartext for stored passwords in unspecified circumstances, which allows remote authenticated users to obtain sensitive information by reading database fields. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html - http://seclists.org/bugtraq/2015/Sep/105 - http://www.securitytracker.com/id/1033649
CVE ID: CVE-2015-4544 State: PUBLISHED Published: 2015-09-04T01:00:00 Last Updated: 2024-08-06T06:18:11.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum Content Server before 7.1P20 and 7.2.x before 7.2P04 does not properly verify authorization for dm_job object access, which allows remote authenticated users to obtain superuser privileges via crafted object operations. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4626. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133441/EMC-Documentum-Content-Server-Privilege-Escalation.html - http://seclists.org/bugtraq/2015/Sep/18
CVE ID: CVE-2015-4545 State: PUBLISHED Published: 2015-12-21T17:00:00 Last Updated: 2024-08-06T06:18:11.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Isilon OneFS 7.1 before 7.1.1.8, 7.2.0 before 7.2.0.4, and 7.2.1 before 7.2.1.1 allows remote authenticated administrators to bypass a SmartLock root-login restriction by creating a root account and establishing a login session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79674 - http://seclists.org/bugtraq/2015/Dec/103
CVE ID: CVE-2015-4546 State: PUBLISHED Published: 2015-10-02T01:00:00 Last Updated: 2024-08-06T06:18:12.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in EMC RSA OneStep 6.9 before build 559, as used in RSA Certificate Manager and RSA Registration Manager through 6.9 build 558 and other products, allows remote attackers to read arbitrary files via a crafted KCSOSC_ERROR_PAGE parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Sep/135 - http://packetstormsecurity.com/files/133784/RSA-OneStep-6.9-Path-Traversal.html - http://www.securitytracker.com/id/1033671
CVE ID: CVE-2015-4547 State: PUBLISHED Published: 2015-10-12T01:00:00 Last Updated: 2024-08-06T06:18:11.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Web Threat Detection before 5.1 SP1 stores a cleartext AnnoDB password in a configuration file, which allows remote authenticated users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Sep/134 - http://packetstormsecurity.com/files/133779/RSA-Web-Threat-Detection-Privilege-Escalation-Information-Disclosure.html - http://www.securitytracker.com/id/1033672
CVE ID: CVE-2015-4548 State: PUBLISHED Published: 2015-10-12T01:00:00 Last Updated: 2024-08-06T06:18:11.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Web Threat Detection before 5.1 SP1 allows local users to obtain root privileges by leveraging access to a service account and writing commands to a service configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Sep/134 - http://packetstormsecurity.com/files/133779/RSA-Web-Threat-Detection-Privilege-Escalation-Information-Disclosure.html - http://www.securitytracker.com/id/1033672
CVE ID: CVE-2015-4550 State: PUBLISHED Published: 2015-06-17T10:00:00 Last Updated: 2024-08-06T06:18:11.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance (ASA) devices with software 9.3(3) and 9.4(1.1) does not verify the AES-GCM Integrity Check Value (ICV) octets, which makes it easier for man-in-the-middle attackers to spoof IPSec and IKEv2 traffic by modifying packet data, aka Bug ID CSCuu66218. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75269 - http://www.securitytracker.com/id/1032595 - http://tools.cisco.com/security/center/viewAlert.x?alert
cus.com/bid/75269 - http://www.securitytracker.com/id/1032595 - http://tools.cisco.com/security/center/viewAlert.x?alertId=39366
CVE ID: CVE-2015-4551 State: PUBLISHED Published: 2015-11-10T16:00:00 Last Updated: 2024-08-06T06:18:12.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format files and templates when handling links, which might allow remote attackers to obtain sensitive information via a crafted document, which embeds data from local files into (1) Calc or (2) Writer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034085 - https://security.gentoo.org/glsa/201611-03 - http://www.securitytracker.com/id/1034091
securitytracker.com/id/1034085 - https://security.gentoo.org/glsa/201611-03 - http://www.securitytracker.com/id/1034091 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://rhn.redhat.com/errata/RHSA-2015-2619.html - http://www.ubuntu.com/usn/USN-2793-1 - http://www.securityfocus.com/bid/77486 - http://www.libreoffice.org/about-us/security/advisories/cve-2015-4551/ - https://security.gentoo.org/glsa/201603-05 - http://www.openoffice.org/security/cves/CVE-2015-4551.html - http://www.debian.org/security/2015/dsa-3394
CVE ID: CVE-2015-4552 State: PUBLISHED Published: 2015-09-03T17:00:00 Last Updated: 2024-08-06T06:18:12.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the quick edit function in xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the content of a post. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033471 - http://adrianhayter.com/exploits.php - http://blog.mybb.com/2015/05/27/mybb-1-8-5-1-6-17-merge-system-1-8-5-release/