Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
g/opensuse-security-announce/2015-10/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-1846.html - http://rhn.redhat.com/errata/RHSA-2015-1681.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.ubuntu.com/usn/USN-2704-1 - http://www.securityfocus.com/bid/74182 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163113.html - http://lists.openstack.org/pipermail/openstack-announce/2015-April/000349.html - http://rhn.redhat.com/errata/RHSA-2015-1684.html
CVE ID: CVE-2015-1857 State: PUBLISHED Published: 2018-04-27T16:00:00 Last Updated: 2024-08-06T04:54:16.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: The odl-mdsal-apidocs feature in OpenDaylight Helium allow remote attackers to obtain sensitive information by leveraging missing AAA restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://git.opendaylight.org/gerrit/#/c/17709/ - https://wiki.opendaylight.org/view/Security_Advisories - https://cloudrouter.org/security/
CVE ID: CVE-2015-1858 State: PUBLISHED Published: 2015-05-12T19:00:00 Last Updated: 2024-08-06T04:54:16.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html - https://security.gentoo.org/glsa/201603-1
://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html - https://security.gentoo.org/glsa/201603-10 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html - https://codereview.qt-project.org/#/c/108312/ - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html - http://www.ubuntu.com/usn/USN-2626-1 - http://lists.qt-project.org/pipermail/announce/2015-April/000067.html - http://www.securityfocus.com/bid/74309 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
CVE ID: CVE-2015-1859 State: PUBLISHED Published: 2015-05-12T19:00:00 Last Updated: 2024-08-06T04:54:16.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html - http://www.securityfocus.com/bid/74307 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April
424.html - http://www.securityfocus.com/bid/74307 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html - http://www.securityfocus.com/bid/74310 - https://security.gentoo.org/glsa/201603-10 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html - http://www.ubuntu.com/usn/USN-2626-1 - http://lists.qt-project.org/pipermail/announce/2015-April/000067.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
CVE ID: CVE-2015-1860 State: PUBLISHED Published: 2015-05-12T19:00:00 Last Updated: 2024-08-06T04:54:16.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156937.html - http://lists.fedoraproject.org/pipermail/package-anno
edoraproject.org/pipermail/package-announce/2015-May/156937.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html - https://security.gentoo.org/glsa/201603-10 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html - http://www.securityfocus.com/bid/74302 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156761.html - http://www.ubuntu.com/usn/USN-2626-1 - http://lists.qt-project.org/pipermail/announce/2015-April/000067.html - https://codereview.qt-p
ntu.com/usn/USN-2626-1 - http://lists.qt-project.org/pipermail/announce/2015-April/000067.html - https://codereview.qt-project.org/#/c/108248/ - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html
CVE ID: CVE-2015-1861 State: REJECTED Published: 2020-01-21T17:43:23 Last Updated: 2020-01-21T17:43:23 Description: No description available.
CVE ID: CVE-2015-1862 State: PUBLISHED Published: 2018-02-09T22:00:00 Last Updated: 2024-08-06T04:54:16.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specified directory in a namedspaced environment. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1211223 - http://www.openwall.com/lists/oss-security/2015/04/14/4 - http://packetstormsecurity.com/files/131422/Fedora-abrt-Race-Condition.html - https://www.exploit-db.com/exploits/36746/ - http://packetstormsecurity.com/files/131429/Abrt-
brt-Race-Condition.html - https://www.exploit-db.com/exploits/36746/ - http://packetstormsecurity.com/files/131429/Abrt-Apport-Race-Condition-Symlink.html - http://www.securityfocus.com/bid/74263 - https://www.exploit-db.com/exploits/36747/ - https://github.com/abrt/abrt/pull/810 - http://packetstormsecurity.com/files/131423/Linux-Apport-Abrt-Local-Root-Exploit.html - http://seclists.org/fulldisclosure/2015/Apr/34
CVE ID: CVE-2015-1863 State: PUBLISHED Published: 2015-04-28T14:00:00 Last Updated: 2024-08-06T04:54:16.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries. Additional Analyst Notes: - CVE Program Container: References: - http://w1.fi/security/2015-1/wpa_supplicant-p2p-ssid-overflow.txt - http://www.debian.org/security/2015/dsa-3233 - http://www.securityfocus.com/archive/1/535353/100/0/threaded - http://www.ubuntu.com/usn/US
org/security/2015/dsa-3233 - http://www.securityfocus.com/archive/1/535353/100/0/threaded - http://www.ubuntu.com/usn/USN-2577-1 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00000.html - http://seclists.org/fulldisclosure/2015/Apr/82 - http://www.securityfocus.com/bid/74296 - http://security.alibaba.com/blog/blog.htm?spm=0.0.0.0.p1ECc3&id=19 - http://packetstormsecurity.com/files/131598/Android-wpa_supplicant-Heap-Overflow.html - https://security.gentoo.org/glsa/201606-17 - http://www.securitytracker.com/id/1032192 - http://rhn.redhat.com/errata/RHSA-2015-1090.html
CVE ID: CVE-2015-1864 State: PUBLISHED Published: 2017-09-19T15:00:00 Last Updated: 2024-08-06T04:54:16.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the administration pages in Kallithea before 0.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) first name or (2) last name user details, or the (3) repository, (4) repository group, or (5) user group description. Additional Analyst Notes: - CVE Program Container: References: - https://kallithea-scm.org/security/cve-2015-1864.html - http://www.securityfocus.com/bid/74184 - http://www.openwall.com/lists/oss-security/2015/04/14/12 - https://kalli
html - http://www.securityfocus.com/bid/74184 - http://www.openwall.com/lists/oss-security/2015/04/14/12 - https://kallithea-scm.org/repos/kallithea/changeset/a8f2986afc18c9221bf99f88b06e60ab83c86c55
CVE ID: CVE-2015-1865 State: PUBLISHED Published: 2017-09-20T18:00:00.000Z Last Updated: 2025-08-06T21:12:38.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: fts.c in coreutils 8.4 allows local users to delete arbitrary files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/76073 - https://bugzilla.redhat.com/show_bug.cgi?id=1211300
CVE ID: CVE-2015-1866 State: PUBLISHED Published: 2017-09-20T18:00:00 Last Updated: 2024-08-06T04:54:16.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Ember.js 1.10.x before 1.10.1 and 1.11.x before 1.11.2. Additional Analyst Notes: - CVE Program Container: References: - https://emberjs.com/blog/2015/04/14/security-and-bugfix-releases-ember-1-10-1-1-11-2-1-11-3.html - http://www.openwall.com/lists/oss-security/2015/04/14/11 - http://www.securityfocus.com/bid/74185
CVE ID: CVE-2015-1867 State: PUBLISHED Published: 2015-08-12T14:00:00 Last Updated: 2024-08-06T04:54:16.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169995.html - http://rhn.redhat.com/errata/RHSA-2015-1424.html - https://github.com/ClusterLabs/pacemaker/commit/84ac07c - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170610.html - https://bugzilla.redhat.com/show_bug.cgi?id=1211
edoraproject.org/pipermail/package-announce/2015-November/170610.html - https://bugzilla.redhat.com/show_bug.cgi?id=1211370 - https://security.gentoo.org/glsa/201710-08 - http://www.securityfocus.com/bid/74231 - http://rhn.redhat.com/errata/RHSA-2015-2383.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169671.html
CVE ID: CVE-2015-1868 State: PUBLISHED Published: 2015-05-18T15:00:00 Last Updated: 2024-08-06T04:54:16.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156648.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-A
org/pipermail/package-announce/2015-April/156648.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156725.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156743.html - http://www.securityfocus.com/bid/74306 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156655.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156680.html - http://www.debian.org/security/2015/dsa-3306 - http://www.debian.org/security/2015/dsa-3307 - http://www.securitytracker.com/id/1032220 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156667.html
CVE ID: CVE-2015-1869 State: PUBLISHED Published: 2020-01-14T17:31:46 Last Updated: 2024-08-06T04:54:16.338Z Vendors: ABRT Products: ABRT Problem Types: Symbolic Link Following Description: The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges as demonstrated by a symlink attack on a var_log_messages file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/04/17/5 - https://bugzilla.redhat.com/show_bug.cgi?id=1212861 - https://github.com/abrt/abrt/commit/3287aa12eb205cff95cdd00d6d6c5c9a4f8f0eca - https://github.com/abrt/abrt/commit/7417505e1d93cc95ec648b74e3c801bc67aacb9f
CVE ID: CVE-2015-1870 State: PUBLISHED Published: 2017-06-26T15:00:00 Last Updated: 2024-08-06T04:54:16.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1083.html - http://www.securityfocus.com/bid/75119 - https://github.com/abrt/abrt/commit/7d023c32a565e83306cddf34c894477b7aaf33d1 - http://rhn.redhat.com/errata/RHSA-2015-1210.html -
thub.com/abrt/abrt/commit/7d023c32a565e83306cddf34c894477b7aaf33d1 - http://rhn.redhat.com/errata/RHSA-2015-1210.html - https://github.com/abrt/libreport/commit/c962918bc70a61a8cc647898ee8b1ff1c14a87c5 - https://bugzilla.redhat.com/show_bug.cgi?id=1212868 - https://github.com/abrt/abrt/commit/8939398b82006ba1fec4ed491339fc075f43fc7c
CVE ID: CVE-2015-1871 State: REJECTED Published: 2022-07-08T17:36:10 Last Updated: 2022-07-08T17:36:10 Description: No description available.
CVE ID: CVE-2015-1872 State: PUBLISHED Published: 2015-07-26T22:00:00 Last Updated: 2024-08-06T04:54:16.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Motion JPEG data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=fabbfaa095660982cc0bc63242c459561fa37037 - http://www.ubuntu.com/usn/USN-2944-1 - http://www.
=ffmpeg.git%3Ba=commit%3Bh=fabbfaa095660982cc0bc63242c459561fa37037 - http://www.ubuntu.com/usn/USN-2944-1 - http://www.securitytracker.com/id/1033078 - http://www.securityfocus.com/bid/72644 - https://lists.debian.org/debian-lts-announce/2019/03/msg00041.html
CVE ID: CVE-2015-1874 State: PUBLISHED Published: 2015-03-09T16:00:00 Last Updated: 2024-08-06T04:54:16.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin before 2.8.32 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete all plugin records via a request in the CF7DBPluginSubmissions page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72964 - http://packetstormsecurity.com/files/130654/WordPress-Contact-Form-DB-2.8.29-Cros
tp://www.securityfocus.com/bid/72964 - http://packetstormsecurity.com/files/130654/WordPress-Contact-Form-DB-2.8.29-Cross-Site-Request-Forgery.html - http://seclists.org/fulldisclosure/2015/Mar/21 - https://security.dxw.com/advisories/csrf-in-contact-form-db-allows-attacker-to-delete-all-stored-form-submissions/ - https://wordpress.org/plugins/contact-form-7-to-database-extension/changelog/
CVE ID: CVE-2015-1875 State: PUBLISHED Published: 2015-03-11T14:00:00 Last Updated: 2024-08-06T04:54:16.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in a2billing/customer/iridium_threed.php in Elastix 2.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/36305/ - http://packetstormsecurity.com/files/130698/Elastix-2.5.0-SQL-Injection.html
CVE ID: CVE-2015-1876 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T04:54:16.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ES File Explorer 3.2.4.1. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130431/ES-File-Explorer-3.2.4.1-Path-Traversal.html
CVE ID: CVE-2015-1877 State: PUBLISHED Published: 2021-06-02T16:34:34 Last Updated: 2024-08-06T04:54:16.331Z Vendors: n/a Products: n/a Problem Types: Other Description: The open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to execute arbitrary commands via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freedesktop.org/show_bug.cgi?id=89129 - http://www.openwall.com/lists/oss-security/2015/02/18/7 - http://www.openwall.com/lists/oss-security/2015/02/18/9 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777722 - http://www.debian
nwall.com/lists/oss-security/2015/02/18/9 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777722 - http://www.debian.org/security/2015/dsa-3165 - http://www.securityfocus.com/bid/72675
CVE ID: CVE-2015-1878 State: PUBLISHED Published: 2017-08-18T16:00:00 Last Updated: 2024-08-06T04:54:16.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ before 11.72 allows physically proximate attackers to sign arbitrary data with previously loaded signing keys, extract the device identification key [KNETI] and impersonate the nShield Connect device on a network, affect the integrity and confidentiality of newly created keys, and potentially cause other unspecified impacts using previously loaded keys by connecting to the USB port on the front panel. Additional Analyst Notes: - CVE Program Containe
reviously loaded keys by connecting to the USB port on the front panel. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032152
CVE ID: CVE-2015-1879 State: PUBLISHED Published: 2015-02-19T15:00:00Z Last Updated: 2024-09-17T00:37:14.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Google Doc Embedder plugin before 2.5.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the profile parameter in an edit action in the gde-settings page to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72547 - http://packetstormsecurity.com/files/130309/WordPress-Google-Doc-Embedder-2.5.18-Cross-Site-Scripting.html - https://wordpress.org/plugins/google-document-em
130309/WordPress-Google-Doc-Embedder-2.5.18-Cross-Site-Scripting.html - https://wordpress.org/plugins/google-document-embedder/changelog/
CVE ID: CVE-2015-1880 State: PUBLISHED Published: 2015-05-12T19:00:00 Last Updated: 2024-08-06T04:54:16.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032261 - http://www.fortiguard.com/advisory/FG-IR-15-005/ - http://www.securityfocus.com/bid/74652 - http://www.securitytracker.com/id/1032265 - http://www.securitytracker.com/id/1032264 - http://www.securitytracker.com/id/1032262
CVE ID: CVE-2015-1881 State: PUBLISHED Published: 2015-02-24T15:00:00 Last Updated: 2024-08-06T04:54:16.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of service (disk consumption) by creating a large number of images using the task v2 API and then deleting them, a different vulnerability than CVE-2014-9684. Additional Analyst Notes: - CVE Program Container: References: - http://lists.openstack.org/pipermail/openstack-announce/2015-February/000336.html - http://rhn.redhat.com/errata/RHSA-2015-0938.html - htt
tack.org/pipermail/openstack-announce/2015-February/000336.html - http://rhn.redhat.com/errata/RHSA-2015-0938.html - https://bugs.launchpad.net/glance/+bug/1420696 - http://www.securityfocus.com/bid/72694
CVE ID: CVE-2015-1882 State: PUBLISHED Published: 2015-04-26T10:00:00 Last Updated: 2024-08-06T04:54:16.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5.5.5 allow remote authenticated users to gain privileges by leveraging thread conflicts that result in Java code execution outside the context of the configured EJB Run-as user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74222 - http://www.securitytracker.com/id/1032190 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI33357 - http://www-01.ibm.com/support/docview.wss?uid=s
id/1032190 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI33357 - http://www-01.ibm.com/support/docview.wss?uid=swg21697368
CVE ID: CVE-2015-1883 State: PUBLISHED Published: 2015-07-20T01:00:00 Last Updated: 2024-08-06T04:54:16.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read certain administrative files via crafted use of an automated-maintenance policy stored procedure. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21698308 - http://www.securityfocus.com/bid/75946 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT08085 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT08080
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT08085 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT08080 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT08086 - http://www.securitytracker.com/id/1032881 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT08075
CVE ID: CVE-2015-1884 State: PUBLISHED Published: 2015-06-28T14:00:00 Last Updated: 2024-08-06T04:54:16.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2 through 7.2.0.5 allows remote authenticated users to read arbitrary files via a crafted internationalization-file URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032700 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52957 - http://www.securitytracker.com/id/10
racker.com/id/1032700 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR52957 - http://www.securitytracker.com/id/1032701 - http://www-01.ibm.com/support/docview.wss?uid=swg21700831 - http://www.securityfocus.com/bid/75360