Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-4119 State: PUBLISHED Published: 2015-06-15T15:00:00 Last Updated: 2024-08-06T06:04:02.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in ISPConfig before 3.0.5.4p7 allow remote attackers to hijack the authentication of (1) administrators for requests that create an administrator account via a request to admin/users_edit.php or (2) arbitrary users for requests that conduct SQL injection attacks via the server parameter to monitor/show_sys_state.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/535734/100/0/threaded - http://bugtracker.ispconfi
ogram Container: References: - http://www.securityfocus.com/archive/1/535734/100/0/threaded - http://bugtracker.ispconfig.org/index.php?do=details&task_id=3898 - http://www.securityfocus.com/bid/75126 - http://packetstormsecurity.com/files/132238/ISPConfig-3.0.5.4p6-SQL-Injection-Cross-Site-Request-Forgery.html - https://www.exploit-db.com/exploits/37259/ - https://www.htbridge.com/advisory/HTB23260
CVE ID: CVE-2015-4127 State: PUBLISHED Published: 2015-05-28T14:00:00 Last Updated: 2024-08-06T06:04:02.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress allows remote attackers to inject arbitrary web script or HTML via the address parameter, as demonstrated by a request to index.php/2015/05/21/church_admin-registration-form/. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/121304 - http://www.securityfocus.com/bid/74782 - https://wordpress.org/plugins/church-admin/changelog/ - http://packetstormsecurity.com/files/132034/WordPress-Church-Admin-0.
://wordpress.org/plugins/church-admin/changelog/ - http://packetstormsecurity.com/files/132034/WordPress-Church-Admin-0.800-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/37112/
CVE ID: CVE-2015-4129 State: PUBLISHED Published: 2015-07-05T10:00:00 Last Updated: 2024-08-06T06:04:02.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Subrion CMS before 3.3.3 allows remote authenticated users to execute arbitrary SQL commands via modified serialized data in a salt cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.subrion.org/forums/threads/subrion-cms-3-3-3-is-available.2024/ - http://www.kb.cert.org/vuls/id/110532 - http://www.securityfocus.com/bid/74570
CVE ID: CVE-2015-4132 State: PUBLISHED Published: 2015-05-28T14:00:00 Last Updated: 2024-08-06T06:04:02.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allow remote administrators to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74852 - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-006.txt
CVE ID: CVE-2015-4133 State: PUBLISHED Published: 2015-05-28T14:00:00 Last Updated: 2024-08-06T06:04:02.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in uploads/ directory. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130845/ - http://packetstormsecurity.com/files/131515/ - https://wpvulndb.com/vulnerabilities/7867 - https://www.exploit-db.com
- http://packetstormsecurity.com/files/131515/ - https://wpvulndb.com/vulnerabilities/7867 - https://www.exploit-db.com/exploits/36809/ - http://osvdb.org/show/osvdb/88853 - http://www.securityfocus.com/bid/57100 - https://wordpress.org/plugins/reflex-gallery/changelog/
CVE ID: CVE-2015-4134 State: PUBLISHED Published: 2015-05-28T14:00:00 Last Updated: 2024-08-06T06:04:02.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/May/107 - http://www.securityfocus.com/bid/74804 - http://packetstormsecurity.com/files/132033/phpwind-8.7-Open-Redirect.html - http://www.securitytracker.com/id/1032428 - http://tetraph.com/security/open-redirect/phpwind-v8-7-open-redirect/
CVE ID: CVE-2015-4135 State: PUBLISHED Published: 2015-05-28T14:00:00 Last Updated: 2024-08-06T06:04:03.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74804 - http://www.securitytracker.com/id/1032427 - http://seclists.org/fulldisclosure/2015/May/106 - http://tetraph.com/security/xss-vulnerability/phpwind-v8-7-xss/ - http://packetstormsecurity.com/files/132030/phpwind-8.7-Cross-Site-Scripting.html
CVE ID: CVE-2015-4137 State: PUBLISHED Published: 2015-05-29T14:00:00 Last Updated: 2024-08-06T06:04:02.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/131981/Milw0rm-Clone-Script-1.0-SQL-Injection.html - http://www.securityfocus.com/bid/74745 - http://seclists.org/fulldisclosure/2015/May/76 - https://www.exploit-db.com/exploits/37248/
CVE ID: CVE-2015-4138 State: PUBLISHED Published: 2015-05-30T19:00:00 Last Updated: 2024-08-06T06:04:02.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not include the HTTPOnly flag in a Set-Cookie header for the administrator's cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, a different vulnerability than CVE-2015-2855. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/498348 - https://bto.bluecoat.com/security-advisory/sa
E Program Container: References: - http://www.kb.cert.org/vuls/id/498348 - https://bto.bluecoat.com/security-advisory/sa96
CVE ID: CVE-2015-4139 State: PUBLISHED Published: 2015-06-18T18:00:00 Last Updated: 2024-08-06T06:04:02.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in smilies4wp.php in the WP Smiley plugin 1.4.1 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the s4w-more parameter to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/05/31/2 - http://www.securityfocus.com/bid/74914 - http://www.openwall.com/lists/oss-security/2015/05/29/1
CVE ID: CVE-2015-4140 State: PUBLISHED Published: 2015-06-18T18:00:00 Last Updated: 2024-08-06T06:04:02.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the WP Smiley plugin 1.4.1 for WordPress allows remote attackers to hijack the authentication of editors for requests that conduct cross-site scripting (XSS) attacks via the s4w-more parameter to the smilies4wp.php page to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/05/31/2 - http://www.securityfocus.com/bid/74914 - http://www.openwall.com/lists/oss-security/2015/05/29/1
CVE ID: CVE-2015-4141 State: PUBLISHED Published: 2015-06-15T15:00:00 Last Updated: 2024-08-06T06:04:03.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/05/31/6 - http://www.debian.org/security/2015/dsa-3397 - http://w1.fi/security/2015-2/wps-upnp-http-chunked-transfer-encoding.txt
http://www.debian.org/security/2015/dsa-3397 - http://w1.fi/security/2015-2/wps-upnp-http-chunked-transfer-encoding.txt - https://security.gentoo.org/glsa/201606-17 - http://www.ubuntu.com/usn/USN-2650-1 - http://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html - http://www.openwall.com/lists/oss-security/2015/05/09/4
CVE ID: CVE-2015-4142 State: PUBLISHED Published: 2015-06-15T15:00:00 Last Updated: 2024-08-06T06:04:02.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/05/31/6 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172608.html - http://rhn.redhat.com/errata/RHSA-2015-14
lists.fedoraproject.org/pipermail/package-announce/2015-November/172608.html - http://rhn.redhat.com/errata/RHSA-2015-1439.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171401.html - http://www.securitytracker.com/id/1032625 - http://w1.fi/security/2015-3/integer-underflow-in-ap-mode-wmm-action-frame.txt - http://www.openwall.com/lists/oss-security/2015/05/09/5 - http://www.debian.org/security/2015/dsa-3397 - https://security.gentoo.org/glsa/201606-17 - http://www.ubuntu.com/usn/USN-2650-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172655.html - http://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html - http://rhn.redhat
nnounce/2015-November/172655.html - http://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html - http://rhn.redhat.com/errata/RHSA-2015-1090.html - https://support.apple.com/kb/HT213258 - http://seclists.org/fulldisclosure/2022/May/34
CVE ID: CVE-2015-4143 State: PUBLISHED Published: 2015-06-15T15:00:00 Last Updated: 2024-08-06T06:04:02.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) Commit or (2) Confirm message payload. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/05/31/6 - http://www.debian.org/security/2015/dsa-3397 - https://security.gentoo.org/glsa/201606-17 - http://www.ubuntu.com/usn/USN-2650-1 - http://w1.fi/security/2015-4/eap-pwd-missing-pay
rity.gentoo.org/glsa/201606-17 - http://www.ubuntu.com/usn/USN-2650-1 - http://w1.fi/security/2015-4/eap-pwd-missing-payload-length-validation.txt - http://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html - http://www.openwall.com/lists/oss-security/2015/05/09/6
CVE ID: CVE-2015-4144 State: PUBLISHED Published: 2015-06-15T15:00:00 Last Updated: 2024-08-06T06:04:02.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate that a message is long enough to contain the Total-Length field, which allows remote attackers to cause a denial of service (crash) via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/05/31/6 - http://www.debian.org/security/2015/dsa-3397 - https://security.gentoo.org/glsa/201606-17 - http://www.ubuntu.com/usn/USN-2650-1 - http://w1.fi/sec
ity/2015/dsa-3397 - https://security.gentoo.org/glsa/201606-17 - http://www.ubuntu.com/usn/USN-2650-1 - http://w1.fi/security/2015-4/eap-pwd-missing-payload-length-validation.txt - http://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html - http://www.openwall.com/lists/oss-security/2015/05/09/6
CVE ID: CVE-2015-4145 State: PUBLISHED Published: 2015-06-15T15:00:00 Last Updated: 2024-08-06T06:04:02.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate a fragment is already being processed, which allows remote attackers to cause a denial of service (memory leak) via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/05/31/6 - http://www.debian.org/security/2015/dsa-3397 - https://security.gentoo.org/glsa/201606-17 - http://www.ubuntu.com/usn/USN-2650-1 - http://w1.fi/security/2015-4/eap-pwd
https://security.gentoo.org/glsa/201606-17 - http://www.ubuntu.com/usn/USN-2650-1 - http://w1.fi/security/2015-4/eap-pwd-missing-payload-length-validation.txt - http://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html - http://www.openwall.com/lists/oss-security/2015/05/09/6
CVE ID: CVE-2015-4146 State: PUBLISHED Published: 2015-06-15T15:00:00 Last Updated: 2024-08-06T06:04:02.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the L (Length) and M (More) flags before determining if a response should be fragmented, which allows remote attackers to cause a denial of service (crash) via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/05/31/6 - http://w1.fi/security/2015-4/0005-EAP-pwd-peer-Fix-asymmetric-fragmentation-behavior.patch - http://www.debian.org/security/2015/dsa-3397
rity/2015-4/0005-EAP-pwd-peer-Fix-asymmetric-fragmentation-behavior.patch - http://www.debian.org/security/2015/dsa-3397 - https://security.gentoo.org/glsa/201606-17 - http://www.ubuntu.com/usn/USN-2650-1 - http://w1.fi/security/2015-4/eap-pwd-missing-payload-length-validation.txt - http://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html - http://www.openwall.com/lists/oss-security/2015/05/09/6
CVE ID: CVE-2015-4147 State: PUBLISHED Published: 2015-06-09T18:00:00 Last Updated: 2024-08-06T06:04:02.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that __default_headers is an array, which allows remote attackers to execute arbitrary code by providing crafted serialized data with an unexpected data type, related to a "type confusion" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.securitytracker.com/id/1032459 - http://ope
m/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.securitytracker.com/id/1032459 - http://openwall.com/lists/oss-security/2015/06/01/4 - http://php.net/ChangeLog-5.php - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://www.securityfocus.com/bid/73357 - https://bugs.php.net/bug.php?id=69085 - http://rhn.redhat.com/errata/RHSA-2015-1135.html - https://support.apple.com/kb/HT205031 - http://rhn.redhat.com/errata/RHSA-2015-1053.html - https://security.gentoo.org/glsa/201606-10 - http://rhn.redhat.com/errata/RHSA-2015-1066.html - http://rhn.redhat.com/errata/RHS
security.gentoo.org/glsa/201606-10 - http://rhn.redhat.com/errata/RHSA-2015-1066.html - http://rhn.redhat.com/errata/RHSA-2015-1218.html
CVE ID: CVE-2015-4148 State: PUBLISHED Published: 2015-06-09T18:00:00 Last Updated: 2024-08-06T06:04:02.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that the uri property is a string, which allows remote attackers to obtain sensitive information by providing crafted serialized data with an int data type, related to a "type confusion" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.securitytracker.com/id/1032459 - http://openwall.
network/topics/security/linuxbulletinjan2016-2867209.html - http://www.securitytracker.com/id/1032459 - http://openwall.com/lists/oss-security/2015/06/01/4 - http://php.net/ChangeLog-5.php - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://bugs.php.net/bug.php?id=69085 - http://rhn.redhat.com/errata/RHSA-2015-1135.html - https://support.apple.com/kb/HT205031 - http://rhn.redhat.com/errata/RHSA-2015-1053.html - http://lists.opensuse.org/opensuse-updates/2015-06/msg00028.html - https://security.gentoo.org/glsa/201606-10 - http://www.securityfocus.com/bid/75103 - http://rhn.redhat.com/errata/RHSA-2015-1066.html - http://rhn.redhat.com/errata/RHSA-2015-1218.html
CVE ID: CVE-2015-4152 State: PUBLISHED Published: 2015-06-15T15:00:00 Last Updated: 2024-08-06T06:04:02.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4.3 allows remote attackers to write to arbitrary files via vectors related to dynamic field references in the path option. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/535725/100/0/threaded - https://www.elastic.co/blog/logstash-1-4-3-released - http://packetstormsecurity.com/files/132233/Logstash-1.4.2-Directory-Traversal.html - https://www.elastic.co/community/security/
CVE ID: CVE-2015-4153 State: PUBLISHED Published: 2015-06-10T18:00:00 Last Updated: 2024-08-06T06:04:03.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attackers to include and execute arbitrary php files via a relative path in the template parameter in a load_template action to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201512-10 - https://www.exploit-db.com/exploits/37200/ - https://wordpress.org/plugins/zm-ajax-login-register/changelog/ - http://www.securityfocus.com/archive/1/53568
/37200/ - https://wordpress.org/plugins/zm-ajax-login-register/changelog/ - http://www.securityfocus.com/archive/1/535682/100/0/threaded - http://packetstormsecurity.com/files/132172/WordPress-zM-Ajax-Login-Register-1.0.9-Local-File-Inclusion.html - http://www.securityfocus.com/bid/75041
CVE ID: CVE-2015-4155 State: PUBLISHED Published: 2015-06-02T14:00:00 Last Updated: 2024-08-06T06:04:02.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Parallel before 20150422, when using (1) --pipe, (2) --tmux, (3) --cat, (4) --fifo, or (5) --compress, allows local users to write to arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.gnu.org/archive/html/parallel/2015-04/msg00045.html - http://lists.gnu.org/archive/html/parallel/2015-05/msg00024.html - http://www.securityfocus.com/bid/74962
CVE ID: CVE-2015-4156 State: PUBLISHED Published: 2015-06-02T14:00:00 Last Updated: 2024-08-06T06:04:02.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-05/msg00090.html - http://www.securityfocus.com/bid/74961 - http://lists.gnu.org/archive/html/parallel/2015-04/msg00045.html - http://lists.gnu.org/archive/html/parallel/2015-05/msg00024.html
CVE ID: CVE-2015-4157 State: PUBLISHED Published: 2015-06-02T14:00:00 Last Updated: 2024-08-06T06:04:02.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP Content Server allows remote attackers to cause a denial of service (service termination) via unspecified vectors, aka SAP Security Note 2127995. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74805 - http://seclists.org/fulldisclosure/2015/May/96
CVE ID: CVE-2015-4158 State: PUBLISHED Published: 2015-06-02T14:00:00 Last Updated: 2024-08-06T06:04:02.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP ABAP & Java Server allows remote attackers to cause a denial of service (service termination) via unspecified vectors, aka SAP Security Note 2121661. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74799 - http://seclists.org/fulldisclosure/2015/May/96
CVE ID: CVE-2015-4159 State: PUBLISHED Published: 2015-06-02T14:00:00 Last Updated: 2024-08-06T06:04:03.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes 2153892. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74802 - http://seclists.org/fulldisclosure/2015/May/96
CVE ID: CVE-2015-4160 State: PUBLISHED Published: 2015-06-02T14:00:00 Last Updated: 2024-08-06T06:04:02.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SAP ASE Database Platform allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes: 2152278. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74798 - http://seclists.org/fulldisclosure/2015/May/96
CVE ID: CVE-2015-4161 State: PUBLISHED Published: 2015-06-02T14:00:00 Last Updated: 2024-08-06T06:04:02.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP Afaria does not properly restrict access to unspecified functionality, which allows remote attackers to obtain sensitive information, gain privileges, or have other unspecified impact via unknown vectors, SAP Security Note 2155690. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74800 - http://seclists.org/fulldisclosure/2015/May/96
CVE ID: CVE-2015-4162 State: PUBLISHED Published: 2015-06-02T14:00:00 Last Updated: 2024-08-06T06:04:02.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in the management interface in PAN-OS before 5.0.16, 6.x before 6.0.8, and 6.1.x before 6.1.4 allows remote authenticated administrators to obtain sensitive information via crafted XML data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74941 - https://security.paloaltonetworks.com/CVE-2015-4162