Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-6490 State: PUBLISHED Published: 2015-10-28T10:00:00 Last Updated: 2024-08-06T07:22:22.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-300-03
CVE ID: CVE-2015-6491 State: PUBLISHED Published: 2015-10-28T10:00:00 Last Updated: 2024-08-06T07:22:22.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-300-03
CVE ID: CVE-2015-6492 State: PUBLISHED Published: 2015-10-28T10:00:00 Last Updated: 2024-08-06T07:22:22.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service (memory corruption and device crash) via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-300-03
CVE ID: CVE-2015-6493 State: PUBLISHED Published: 2015-10-28T10:00:00 Last Updated: 2024-08-06T07:22:22.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02
CVE ID: CVE-2015-6494 State: PUBLISHED Published: 2015-10-28T10:00:00 Last Updated: 2024-08-06T07:22:22.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02
CVE ID: CVE-2015-6495 State: PUBLISHED Published: 2019-11-26T14:00:21 Last Updated: 2024-08-06T07:22:22.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles. Additional Analyst Notes: - CVE Program Container: References: - https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_alalsdfkl4320_lfsk30f__l2k3jfsw34__39
CVE ID: CVE-2015-6496 State: PUBLISHED Published: 2015-08-24T14:00:00 Last Updated: 2024-08-06T07:22:22.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of service (crash) via a (1) DCCP, (2) SCTP, or (3) ICMPv6 packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174875.html - http://www.openwall.com/lists/oss-security/2015/08/18/1 - https://git.netfilter.org/conntrack-tools/commit/?id=c392c159605956c7bd4a264ab4490
com/lists/oss-security/2015/08/18/1 - https://git.netfilter.org/conntrack-tools/commit/?id=c392c159605956c7bd4a264ab4490e2b2704c0cd - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174883.html - http://www.openwall.com/lists/oss-security/2015/08/14/4 - http://lists.opensuse.org/opensuse-updates/2015-10/msg00015.html - http://bugzilla.netfilter.org/show_bug.cgi?id=910 - http://www.debian.org/security/2015/dsa-3341
CVE ID: CVE-2015-6497 State: PUBLISHED Published: 2020-01-15T16:49:00 Last Updated: 2024-08-06T07:22:22.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.2.1 and Enterprise Edition (EE) before 1.14.2.1, when used with PHP before 5.4.24 or 5.5.8, allows remote authenticated users to execute arbitrary PHP code via the productData parameter to index.php/api/v2_soap. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133544/Magento-1.9.2-File-Inclusion.html - http://blog.mindedsecurity.com/2015/09/autoloaded-file-
ormsecurity.com/files/133544/Magento-1.9.2-File-Inclusion.html - http://blog.mindedsecurity.com/2015/09/autoloaded-file-inclusion-in-magento.html - http://karmainsecurity.com/KIS-2015-04 - http://seclists.org/fulldisclosure/2015/Sep/48 - http://magento.com/security/patches/supee-6482
CVE ID: CVE-2015-6498 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T07:22:22.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alcatel-Lucent Home Device Manager before 4.1.10, 4.2.x before 4.2.2 allows remote attackers to spoof and make calls as target devices. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Nov/6 - http://packetstormsecurity.com/files/134191/Alcatel-Lucent-Home-Device-Manager-Spoofing.html - http://www.securityfocus.com/bid/77406
CVE ID: CVE-2015-6500 State: PUBLISHED Published: 2015-10-26T14:00:00 Last Updated: 2024-08-06T07:22:22.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows remote authenticated users to list directory contents and possibly cause a denial of service (CPU consumption) via a .. (dot dot) in the dir parameter to index.php/apps/files/ajax/scan.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2015-048.txt - http://www.debian.org/security/2015/dsa-3373 - https://owncloud.org/security/advisory/?id=oc-sa-
ies/SYSS-2015-048.txt - http://www.debian.org/security/2015/dsa-3373 - https://owncloud.org/security/advisory/?id=oc-sa-2015-014
CVE ID: CVE-2015-6501 State: PUBLISHED Published: 2017-01-12T23:00:00 Last Updated: 2024-08-06T07:22:22.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the string parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93845 - https://puppet.com/security/cve/CVE-2015-6501
CVE ID: CVE-2015-6502 State: PUBLISHED Published: 2017-12-11T17:00:00 Last Updated: 2024-08-06T07:22:22.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the console in Puppet Enterprise before 2015.2.1 allows remote attackers to inject arbitrary web script or HTML via the string parameter, related to Login Redirect. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2015-6502
CVE ID: CVE-2015-6506 State: PUBLISHED Published: 2015-09-03T14:00:00 Last Updated: 2024-08-06T07:22:22.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the cryptography interface in Request Tracker (RT) before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key. Additional Analyst Notes: - CVE Program Container: References: - https://bestpractical.com/release-notes/rt/4.2.12 - http://blog.bestpractical.com/2015/08/security-vulnerabilities-in-rt.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165124.html - http://lists.fedoraproject.org/pipermail/package-announce
oject.org/pipermail/package-announce/2015-August/165124.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164607.html - http://www.debian.org/security/2015/dsa-3335 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165163.html - https://github.com/bestpractical/rt/commit/36a461947b00b105336adb4997d
CVE ID: CVE-2015-6507 State: PUBLISHED Published: 2015-10-15T20:00:00 Last Updated: 2024-08-06T07:22:22.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hdbsql client 1.00.091.00 Build 1418659308-1530 in SAP HANA allows local users to cause a denial of service (memory corruption) and possibly have unspecified other impact via unknown vectors, aka SAP Security Note 2140700. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133760/SAP-HANA-hdbsql-Memory-Corruption.html - http://seclists.org/fulldisclosure/2015/Sep/109 - https://www.onapsis.com/research/security-advisories/sap-hana-multiple-memory-corruption-vulnerabilities
2015/Sep/109 - https://www.onapsis.com/research/security-advisories/sap-hana-multiple-memory-corruption-vulnerabilities - https://www.onapsis.com/blog/analyzing-sap-security-notes-april-2015-edition
CVE ID: CVE-2015-6508 State: PUBLISHED Published: 2015-08-18T15:00:00Z Last Updated: 2024-09-16T18:43:59.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pfSense before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the descr parameter in a "new" action to system_authservers.php. Additional Analyst Notes: - CVE Program Container: References: - https://redmine.pfsense.org/issues/4698 - https://www.pfsense.org/security/advisories/pfSense-SA-15_06.webgui.asc
CVE ID: CVE-2015-6509 State: PUBLISHED Published: 2015-08-18T15:00:00Z Last Updated: 2024-09-16T21:03:49.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in pfSense before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) proxypass parameter to system_advanced_misc.php; (2) adaptiveend, (3) adaptivestart, (4) maximumstates, (5) maximumtableentries, or (6) aliasesresolveinterval parameter to system_advanced_firewall.php; (7) proxyurl, (8) proxyuser, or (9) proxyport parameter to system_advanced_misc.php; or (10) name, (11) notification_name, (12) ipaddress, (13) password, (14) smtpipaddress, (15)
system_advanced_misc.php; or (10) name, (11) notification_name, (12) ipaddress, (13) password, (14) smtpipaddress, (15) smtpport, (16) smtpfromaddress, (17) smtpnotifyemailaddress, (18) smtpusername, or (19) smtppassword parameter to system_advanced_notifications.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.pfsense.org/security/advisories/pfSense-SA-15_06.webgui.asc
CVE ID: CVE-2015-6510 State: PUBLISHED Published: 2015-08-18T15:00:00Z Last Updated: 2024-09-16T23:21:56.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in pfSense before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) srctrack, (2) use_mfs_tmp_size, or (3) use_mfs_var_size parameter to system_advanced_misc.php; the (4) port, (5) snaplen, or (6) count parameter to diag_packet_capture.php; the (7) pppoe_resethour, (8) pppoe_resetminute, (9) wpa_group_rekey, or (10) wpa_gmk_rekey parameter to interfaces.php; the (11) pppoe_resethour or (12) pppoe_resetminute parameter to interfaces_ppps_edit.php
ey parameter to interfaces.php; the (11) pppoe_resethour or (12) pppoe_resetminute parameter to interfaces_ppps_edit.php; the (13) member[] parameter to interfaces_qinq_edit.php; the (14) port or (15) retry parameter to load_balancer_pool_edit.php; the (16) pkgrepourl parameter to pkg_mgr_settings.php; the (17) zone parameter to services_captiveportal.php; the port parameter to (18) services_dnsmasq.php or (19) services_unbound.php; the (20) cache_max_ttl or (21) cache_min_ttl parameter to services_unbound_advanced.php; the (22) sshport parameter to system_advanced_admin.php; the (23) id, (24) tunable, (25) descr, or (26) value parameter to system_advanced_sysctl.php; the (27) firmwareurl, (
p; the (23) id, (24) tunable, (25) descr, or (26) value parameter to system_advanced_sysctl.php; the (27) firmwareurl, (28) repositoryurl, or (29) branch parameter to system_firmware_settings.php; the (30) pfsyncpeerip, (31) synchronizetoip, (32) username, or (33) passwordfld parameter to system_hasync.php; the (34) maxmss parameter to vpn_ipsec_settings.php; the (35) ntp_server1, (36) ntp_server2, (37) wins_server1, or (38) wins_server2 parameter to vpn_openvpn_csc.php; or unspecified parameters to (39) load_balancer_relay_action.php, (40) load_balancer_relay_action_edit.php, (41) load_balancer_relay_protocol.php, or (42) load_balancer_relay_protocol_edit.php. Additional Analyst Notes: - CV
hp, (41) load_balancer_relay_protocol.php, or (42) load_balancer_relay_protocol_edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.pfsense.org/security/advisories/pfSense-SA-15_06.webgui.asc
CVE ID: CVE-2015-6511 State: PUBLISHED Published: 2015-08-18T15:00:00Z Last Updated: 2024-09-17T00:37:18.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pfSense before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the server[] parameter to services_ntpd.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.pfsense.org/security/advisories/pfSense-SA-15_06.webgui.asc
CVE ID: CVE-2015-6512 State: PUBLISHED Published: 2015-08-18T15:00:00Z Last Updated: 2024-09-17T03:23:49.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the get_messages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132673/FreiChat-9.6-SQL-Injection.html - https://www.exploit-db.com/exploits/37592/ - http://security.szurek.pl/freichat-96-sql-injection.html
CVE ID: CVE-2015-6513 State: PUBLISHED Published: 2015-08-18T15:00:00Z Last Updated: 2024-09-17T04:09:16.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the J2Store (com_j2store) extension before 3.1.7 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) sortby or (2) manufacturer_ids[] parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132658/Joomla-J2Store-3.1.6-SQL-Injection.html - http://volatileminds.net/2015/07/07/j2store-316-sql-injection.html - http://j2store.org/download-j2store/j2store-v3-3-1-7.html
CVE ID: CVE-2015-6514 State: PUBLISHED Published: 2015-08-18T15:00:00Z Last Updated: 2024-09-16T20:07:04.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Dashboard in Splunk Enterprise 6.2.x before 6.2.4 and Splunk Light 6.2.x before 6.2.4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAN7C - http://www.securitytracker.com/id/1032859
CVE ID: CVE-2015-6515 State: PUBLISHED Published: 2015-08-18T15:00:00Z Last Updated: 2024-09-16T17:38:14.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.2.x before 6.2.4, 6.1.x before 6.1.8, 6.0.x before 6.0.9, and 5.0.x before 5.0.13 and Splunk Light 6.2.x before 6.2.4 allows remote attackers to inject arbitrary web script or HTML via a header. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAN7C - http://www.securitytracker.com/id/1032859
CVE ID: CVE-2015-6516 State: PUBLISHED Published: 2015-08-18T15:00:00 Last Updated: 2024-08-06T07:22:22.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cygnux.org sysPass 1.0.9 and earlier allows remote authenticated users to execute arbitrary SQL commands via the search parameter to ajax/ajax_search.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2015-031.txt - https://www.exploit-db.com/exploits/37610/ - http://www.securityfocus.com/archive/1/535989/100/0/threaded - http://packetstormsecurity.com/files/132672/sysPass-1.0.9-SQL-Injection.html
CVE ID: CVE-2015-6517 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T07:22:22.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in phpLiteAdmin 1.1 allows remote attackers to hijack the authentication of users for requests that drop database tables via the droptable parameter to phpliteadmin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/535936/100/0/threaded - http://packetstormsecurity.com/files/132580/phpLiteAdmin-1.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
CVE ID: CVE-2015-6518 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T07:22:22.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpLiteAdmin 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, (2) droptable parameter, or (3) table parameter to phpliteadmin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/535936/100/0/threaded - http://packetstormsecurity.com/files/132580/phpLiteAdmin-1.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
CVE ID: CVE-2015-6519 State: PUBLISHED Published: 2015-08-18T17:00:00Z Last Updated: 2024-09-16T18:34:49.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Arab Portal 3 allows remote attackers to execute arbitrary SQL commands via the showemail parameter in a signup action to members.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37594/ - http://packetstormsecurity.com/files/132648/Arab-Portal-3-SQL-Injection.html - https://youtu.be/5nFblYE90Vk
CVE ID: CVE-2015-6520 State: PUBLISHED Published: 2015-09-01T14:00:00 Last Updated: 2024-08-06T07:22:22.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPPUSBXD before 1.22 listens on all interfaces, which allows remote attackers to obtain access to USB connected printers via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/08/18/11 - https://bugs.launchpad.net/ubuntu/+source/ippusbxd/+bug/1455644 - https://github.com/tillkamppeter/ippusbxd/commit/46844402bca7a38fc224483ba6f0a93c4613203f - http://www.ubuntu.com/usn/USN-2725-1 - http://www.openwall.com/lists/oss-security/2015/08/11/1
CVE ID: CVE-2015-6521 State: PUBLISHED Published: 2017-10-10T16:00:00 Last Updated: 2024-08-06T07:22:22.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ATutor LMS version 2.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/atutor/ATutor/issues/103 - http://www.openwall.com/lists/oss-security/2015/08/19/1
CVE ID: CVE-2015-6522 State: PUBLISHED Published: 2015-08-19T15:00:00 Last Updated: 2024-08-06T07:22:22.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the size parameter to get_album_item.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37824/ - https://wpvulndb.com/vulnerabilities/8140
CVE ID: CVE-2015-6523 State: PUBLISHED Published: 2015-08-19T15:00:00 Last Updated: 2024-08-06T07:22:22.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the instagram-portfolio page in wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8108 - https://plugins.trac.wordpress.org/changeset/1175403/portfolio-by-lisa-westlund - http://seclists.org/fulldisclosure/2015/Jul/104
CVE ID: CVE-2015-6524 State: PUBLISHED Published: 2015-08-24T14:00:00 Last Updated: 2024-08-06T07:22:22.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: this identifier was SPLIT from CVE-2014-3612 per ADT2 due to different vulnerability types. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168651.html - http://activemq.apache.org/securit
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168651.html - http://activemq.apache.org/security-advisories.data/CVE-2014-3612-announcement.txt - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168094.html
CVE ID: CVE-2015-6525 State: PUBLISHED Published: 2015-08-24T14:00:00 Last Updated: 2024-08-06T07:22:22.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_prepend, (3) evbuffer_expand, (4) exbuffer_reserve_space, or (5) evbuffer_read function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier was SPLIT from CVE-2014-6272 per ADT3 due to different affected versions. Addi
r an infinite loop. NOTE: this identifier was SPLIT from CVE-2014-6272 per ADT3 due to different affected versions. Additional Analyst Notes: - CVE Program Container: References: - http://archives.seul.org/libevent/users/Jan-2015/msg00010.html - http://www.debian.org/security/2015/dsa-3119
CVE ID: CVE-2015-6526 State: PUBLISHED Published: 2015-08-31T20:00:00 Last Updated: 2024-08-06T07:22:22.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: The perf_callchain_user_64 function in arch/powerpc/perf/callchain.c in the Linux kernel before 4.0.2 on ppc64 platforms allows local users to cause a denial of service (infinite loop) via a deep 64-bit userspace backtrace. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/9a5cbce421a283e6aea3c4007f141735bf9da8c3 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.ubuntu.com/usn/USN-2760-1 - https://bugzilla.redhat.com/show_b
s/security/linuxbulletinoct2015-2719645.html - http://www.ubuntu.com/usn/USN-2760-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1218454 - http://www.ubuntu.com/usn/USN-2759-1 - http://www.openwall.com/lists/oss-security/2015/08/18/4 - http://www.securitytracker.com/id/1033728 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9a5cbce421a283e6aea3c4007f141735bf9da8c3 - http://www.securityfocus.com/bid/76401 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.2