Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
id=455 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html - http://googleprojectzero.blogspot.in/2015/06/owning-internet-printing-case-study-in.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html
CVE ID: CVE-2015-1160 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:58.789Z Description: No description available.
CVE ID: CVE-2015-1164 State: PUBLISHED Published: 2015-01-21T15:00:00 Last Updated: 2024-08-06T04:33:20.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the serve-static plugin before 1.7.2 for Node.js, when mounted at the root, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a // (slash slash) followed by a domain in the PATH_INFO to the default URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99936 - https://github.com/expressjs/serve-static/issues/26 - https://bugzilla.redhat.com/show_bug.cgi?id=1181917 - http://www.secur
s://github.com/expressjs/serve-static/issues/26 - https://bugzilla.redhat.com/show_bug.cgi?id=1181917 - http://www.securityfocus.com/bid/72064 - http://nodesecurity.io/advisories/serve-static-open-redirect
CVE ID: CVE-2015-1165 State: PUBLISHED Published: 2015-03-09T14:00:00 Last Updated: 2024-08-06T04:33:20.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to obtain sensitive RSS feed URLs and ticket data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html - http://www.debian.org/security/2015/dsa-3176 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154047.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154213.html
CVE ID: CVE-2015-1169 State: PUBLISHED Published: 2015-02-10T20:00:00 Last Updated: 2024-08-06T04:33:20.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apereo Central Authentication Service (CAS) Server before 3.5.3 allows remote attackers to conduct LDAP injection attacks via a crafted username, as demonstrated by using a wildcard and a valid password to bypass LDAP authentication. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jan/87 - https://github.com/Jasig/cas/pull/411 - http://packetstormsecurity.com/files/130053/CAS-Server-3.5.2-LDAP-Authentication-Bypass.html - https://issues.jasig.org/browse/CAS-1429 - https:
ty.com/files/130053/CAS-Server-3.5.2-LDAP-Authentication-Bypass.html - https://issues.jasig.org/browse/CAS-1429 - https://github.com/Jasig/cas/commit/7de61b4c6244af9ff8e75a2c92a570f3b075309c
CVE ID: CVE-2015-1170 State: PUBLISHED Published: 2015-03-06T23:00:00 Last Updated: 2024-08-06T04:33:20.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a "kernel administrator check," which allows local users to gain administrator privileges via unspecified API calls. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=143013598825091&w=2 - http://www.securitytracker.com/id/1032013 - https://support.lenovo.com/product_security/nvidia_windows_privilege
1&w=2 - http://www.securitytracker.com/id/1032013 - https://support.lenovo.com/product_security/nvidia_windows_privilege - http://marc.info/?l=bugtraq&m=142781493222653&w=2 - http://marc.info/?l=bugtraq&m=143013598825091&w=2 - https://support.lenovo.com/us/en/product_security/nvidia_windows_privilege - http://nvidia.custhelp.com/app/answers/detail/a_id/3634
CVE ID: CVE-2015-1171 State: PUBLISHED Published: 2015-08-28T20:57:00 Last Updated: 2024-08-06T04:33:20.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in GSM SIM Utility (aka SIM Card Editor) 6.6 allows remote attackers to execute arbitrary code via a long entry in a .sms file. Additional Analyst Notes: - CVE Program Container: References: - https://osandamalith.wordpress.com/2015/01/16/sim-editor-stack-based-buffer-overflow/ - http://packetstormsecurity.com/files/129992/simeditor-overflow.txt - https://www.youtube.com/watch?v=tljbFpYtDTk
CVE ID: CVE-2015-1172 State: PUBLISHED Published: 2015-02-11T19:00:00 Last Updated: 2024-08-06T04:33:20.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka holding_pattern) 0.6 and earlier for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130282/WordPress-Holding-Pattern-0.6-Shell-Upload.html - https://wpvulndb.com/vulnerabilities/7784 - http://w
.com/files/130282/WordPress-Holding-Pattern-0.6-Shell-Upload.html - https://wpvulndb.com/vulnerabilities/7784 - http://www.securityfocus.com/bid/72546
CVE ID: CVE-2015-1173 State: PUBLISHED Published: 2015-09-16T18:00:00 Last Updated: 2024-08-06T04:33:20.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 does not properly restrict access to the (1) Design Mode and (2) Debug Logger mode modules, which allows remote attackers to gain privileges via crafted "received parameters." Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Aug/68 - http://packetstormsecurity.com/files/133147/UNIT4TETA-TETA-WEB-22.62.3.4-Authorization-Bypass.html
CVE ID: CVE-2015-1174 State: PUBLISHED Published: 2017-08-02T19:00:00 Last Updated: 2024-08-06T04:33:20.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 and earlier allows remote attackers to hijack web sessions via a session id. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133296/UNIT4TETA-TETA-WEB-22.62.3.4-Session-Fixation.html
CVE ID: CVE-2015-1175 State: PUBLISHED Published: 2015-01-22T16:00:00 Last Updated: 2024-08-06T04:33:20.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in blocklayered-ajax.php in the blocklayered module in PrestaShop 1.6.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the layered_price_slider parameter. Additional Analyst Notes: - CVE Program Container: References: - http://octogence.com/advisories/cve-2015-1175-xss-prestashop/ - http://www.securityfocus.com/archive/1/534511/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/100013 - http://packetstormsecurity.com/files/130026/Pres
hreaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/100013 - http://packetstormsecurity.com/files/130026/Prestashop-1.6.0.9-Cross-Site-Scripting.html
CVE ID: CVE-2015-1176 State: PUBLISHED Published: 2015-01-23T15:00:00 Last Updated: 2024-08-06T04:33:20.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in upload/scp/tickets.php in osTicket before 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the status parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130057/osTicket-1.9.4-Cross-Site-Scripting.html - https://github.com/osTicket/osTicket-1.8/pull/1639 - http://www.securityfocus.com/archive/1/534526/100/0/threaded - http://www.securityfocus.com/bid/72276 - https://github.com/osTi
www.securityfocus.com/archive/1/534526/100/0/threaded - http://www.securityfocus.com/bid/72276 - https://github.com/osTicket/osTicket-1.8/releases/tag/v1.9.5
CVE ID: CVE-2015-1177 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T04:33:20.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.2. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130058/Exponent-CMS-2.3.2-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/534528/100/0/threaded - http://www.securityfocus.com/bid/72274
CVE ID: CVE-2015-1178 State: PUBLISHED Published: 2015-01-26T15:00:00 Last Updated: 2024-08-06T04:33:20.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in cart.php in X-Cart 5.1.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) product_id or (2) category_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72275 - http://packetstormsecurity.com/files/130061/X-CART-e-Commerce-5.1.8-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/534529/100/0/threaded
CVE ID: CVE-2015-1179 State: PUBLISHED Published: 2015-01-26T15:00:00 Last Updated: 2024-08-06T04:33:20.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in data_point_details.shtm in Mango Automation 2.4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dpid, (2) dpxid, or (3) pid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130062/Mango-Automation-SCADA-HMI-2.4.0-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/534530/100/0/threaded
CVE ID: CVE-2015-1180 State: PUBLISHED Published: 2015-01-23T15:00:00 Last Updated: 2024-08-06T04:33:20.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Reports in EventSentry 3.1.0 allows remote attackers to inject arbitrary web script or HTML via the pageId parameter to networktile/bullet. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130063/EventSentry-3.1.0-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/534531/100/0/threaded
CVE ID: CVE-2015-1182 State: PUBLISHED Published: 2015-01-27T15:00:00 Last Updated: 2024-08-06T04:33:20.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: The asn1_get_sequence_of function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x through 1.3.9 does not properly initialize a pointer in the asn1_sequence linked list, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ASN.1 sequence in a certificate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148829.html - http://secunia.com/advisories/62270 - http://lis
fedoraproject.org/pipermail/package-announce/2015-January/148829.html - http://secunia.com/advisories/62270 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148903.html - http://lists.opensuse.org/opensuse-updates/2015-02/msg00003.html - https://security.gentoo.org/glsa/201801-15 - http://secunia.com/advisories/62610 - https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2014-04 - http://www.debian.org/security/2015/dsa-3136
CVE ID: CVE-2015-1187 State: PUBLISHED Published: 2017-09-21T16:00:00.000Z Last Updated: 2025-10-21T23:55:34.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10052 - http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.html - http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html - https://github.com/darkarni
://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html - https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2 - http://www.securityfocus.com/bid/72848 - http://seclists.org/fulldisclosure/2015/Mar/15
CVE ID: CVE-2015-1188 State: PUBLISHED Published: 2015-05-20T18:00:00 Last Updated: 2024-08-06T04:33:20.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: The certificate verification functions in the HNDS service in Swisscom Centro Grande (ADB) DSL routers with firmware before 6.14.00 allows remote attackers to access the management functions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Apr/103
CVE ID: CVE-2015-1191 State: PUBLISHED Published: 2015-01-21T18:00:00 Last Updated: 2024-08-06T04:33:20.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) .. (dot dot) in an archive. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-03/msg00017.html - https://github.com/madler/pigz/commit/fdad1406b3ec809f4954ff7cdf9e99eb18c2458f - http://www.openwall.com/lists/oss-security/2015/01/18/3 - http://www.securityfocus.com/bid/72109 - http://lists.opensuse.org/opensuse-updates/2016-03/
oss-security/2015/01/18/3 - http://www.securityfocus.com/bid/72109 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00013.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774978
CVE ID: CVE-2015-1192 State: PUBLISHED Published: 2015-01-21T18:00:00 Last Updated: 2024-08-06T04:33:20.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in kgb 1.0b4 allows remote attackers to write to arbitrary files via a full pathname in a crafted archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/18/3 - http://www.securityfocus.com/bid/72111 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774989 - http://secunia.com/advisories/62203
CVE ID: CVE-2015-1193 State: PUBLISHED Published: 2015-01-21T18:00:00 Last Updated: 2024-08-06T04:33:20.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) .. (dot dot) in an archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/18/3 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774716
CVE ID: CVE-2015-1194 State: PUBLISHED Published: 2015-01-21T18:00:00 Last Updated: 2024-08-06T04:33:20.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: pax 1:20140703 allows remote attackers to write to arbitrary files via a symlink attack in an archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/18/3 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774716
CVE ID: CVE-2015-1195 State: PUBLISHED Published: 2015-01-21T18:00:00 Last Updated: 2024-08-06T04:33:20.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete arbitrary files via a full pathname in a filesystem: URL in the image location property. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9493. Additional Analyst Notes: - CVE Program Container: References: - http://lists.openstack.org/pipermail/openstack-announce/2015-January/000325.html - https://bugs.launchpad.net/ossa/+bug/1408663 - ht
.openstack.org/pipermail/openstack-announce/2015-January/000325.html - https://bugs.launchpad.net/ossa/+bug/1408663 - http://www.openwall.com/lists/oss-security/2015/01/18/5 - http://secunia.com/advisories/62169 - http://www.openwall.com/lists/oss-security/2015/01/15/2 - http://www.securityfocus.com/bid/71976 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
CVE ID: CVE-2015-1196 State: PUBLISHED Published: 2015-01-21T18:00:00 Last Updated: 2024-08-06T04:33:20.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file. Additional Analyst Notes: - CVE Program Container: References: - http://git.savannah.gnu.org/cgit/patch.git/commit/?id=4e9269a5fc1fe80a1095a92593dd85db871e1fd3 - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - https://bugzilla.redhat.com/show_bug.cgi?id=1182154 - http://www.securityfocus.com/bid/72074 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775227 - http://seclists.org/oss-sec/2
w.securityfocus.com/bid/72074 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775227 - http://seclists.org/oss-sec/2015/q1/173 - http://lists.opensuse.org/opensuse-updates/2015-02/msg00013.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/99967
CVE ID: CVE-2015-1197 State: PUBLISHED Published: 2015-02-19T00:00:00 Last Updated: 2024-08-06T04:33:20.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71914 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:066 - http://www.openwall.com/lists/oss-security/2015/01/18/7 - http://www.ubuntu.com/usn/USN-2906-1 - http://advisories.mageia.org/MGASA-2015-0080.html - http://www.openwall.com/lists/oss-security/2015/01/07/5 - ht
906-1 - http://advisories.mageia.org/MGASA-2015-0080.html - http://www.openwall.com/lists/oss-security/2015/01/07/5 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669 - https://lists.gnu.org/archive/html/bug-cpio/2015-01/msg00000.html - http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html - http://www.openwall.com/lists/oss-security/2023/12/21/8 - http://www.openwall.com/lists/oss-security/2023/12/27/1
CVE ID: CVE-2015-1198 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T04:33:20.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in ha 0.999p+dfsg-5. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/18/8 - http://www.securityfocus.com/bid/72103
CVE ID: CVE-2015-1199 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T04:33:20.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ppmd 10.1-5. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/18/9
CVE ID: CVE-2015-1200 State: PUBLISHED Published: 2015-01-23T15:00:00 Last Updated: 2024-08-06T04:33:20.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission to match the original file, which allows local users to bypass the intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100207 - http://seclists.org/oss-sec/2015/q1/177 - http://www.securityfocus.com/bid/72101 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.
/www.securityfocus.com/bid/72101 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBKV7AT6O3FGQ735PFOGQ4Q5VODMSHE5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3UCBCIN6M5EXFET4RGQTVSSL5S57XCH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XDCG7YJRDOR66V3WJDQPLMFSDULQDADC/
CVE ID: CVE-2015-1201 State: PUBLISHED Published: 2015-01-20T15:00:00Z Last Updated: 2024-09-16T19:40:41.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Privoxy before 3.0.22 allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62123
CVE ID: CVE-2015-1202 State: REJECTED Published: 2020-01-24T21:57:11 Last Updated: 2020-01-24T21:57:11 Description: No description available.
CVE ID: CVE-2015-1203 State: REJECTED Published: 2020-01-24T21:57:08 Last Updated: 2020-01-24T21:57:08 Description: No description available.
CVE ID: CVE-2015-1204 State: PUBLISHED Published: 2015-01-21T15:00:00Z Last Updated: 2024-09-17T01:21:09.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fs[resource] parameter in the wp-slim-view-2 page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-slimstat/changelog/ - http://secunia.com/advisories/62034 - https://wpvulndb.com/vulnerabilities/7744
CVE ID: CVE-2015-1205 State: PUBLISHED Published: 2015-01-22T22:00:00 Last Updated: 2024-08-06T04:33:20.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205221 - https://code.google.com/p/chromium/issues/detail?id=429139 - https://code.google.com/p/chromium/issues/detail?id=435514 - https://code.google.com/p/chromium/issues/detail?id=411026 - https://code.google.com/p/chromium/issues/detail?id=443333 - https://code.goo
e.com/p/chromium/issues/detail?id=411026 - https://code.google.com/p/chromium/issues/detail?id=443333 - https://code.google.com/p/chromium/issues/detail?id=413530 - https://code.google.com/p/chromium/issues/detail?id=425040 - https://support.apple.com/HT205212 - https://code.google.com/p/chromium/issues/detail?id=443274 - https://code.google.com/p/chromium/issues/detail?id=440913 - https://code.google.com/p/chromium/issues/detail?id=438363 - https://code.google.com/p/chromium/issues/detail?id=437655 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://secunia.com/advisories/62575 - http://www.ubuntu.com/usn/USN-2476-1 - http://www.securityfocus.com/bid/72288 - https
p://secunia.com/advisories/62575 - http://www.ubuntu.com/usn/USN-2476-1 - http://www.securityfocus.com/bid/72288 - https://code.google.com/p/chromium/issues/detail?id=432209 - https://code.google.com/p/chromium/issues/detail?id=422765 - https://code.google.com/p/chromium/issues/detail?id=440572 - http://security.gentoo.org/glsa/glsa-201502-13.xml - https://code.google.com/p/chromium/issues/detail?id=428828 - https://code.google.com/p/chromium/issues/detail?id=434723 - https://code.google.com/p/chromium/issues/detail?id=327070 - https://code.google.com/p/chromium/issues/detail?id=446076 - https://code.google.com/p/chromium/issues/detail?id=423899 - https://code.google.com/p/chromium/issues/de