Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-5179 State: PUBLISHED Published: 2017-09-20T16:00:00 Last Updated: 2024-08-06T06:41:07.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeIPA might display user data improperly via vectors involving non-printable characters. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1252567 - https://pagure.io/freeipa/issue/5153
CVE ID: CVE-2015-5180 State: PUBLISHED Published: 2017-06-27T20:00:00 Last Updated: 2024-08-06T06:41:08.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash). Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/attachment.cgi?id=8492 - https://bugzilla.redhat.com/show_bug.cgi?id=1249603 - https://sourceware.org/bugzilla/show_bug.cgi?id=18784 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=fc82b0a2dfe7dbd35671c10510a8da1043d746a5 - http://www.ubuntu.com/usn/USN-3239-1 - https://sourceware.or
?p=glibc.git%3Bh=fc82b0a2dfe7dbd35671c10510a8da1043d746a5 - http://www.ubuntu.com/usn/USN-3239-1 - https://sourceware.org/ml/libc-alpha/2017-02/msg00079.html - http://www.ubuntu.com/usn/USN-3239-2 - https://security.gentoo.org/glsa/201706-19 - http://www.securityfocus.com/bid/99324 - https://access.redhat.com/errata/RHSA-2018:0805 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVE ID: CVE-2015-5181 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-06T06:41:09.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JBoss console in A-MQ allows remote attackers to execute arbitrary JavaScript. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1248804 - https://rhn.redhat.com/errata/RHSA-2015-2557.html - http://rhn.redhat.com/errata/RHSA-2015-2556.html
CVE ID: CVE-2015-5182 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-06T06:41:08.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the jolokia API in A-MQ. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1248809 - https://lists.apache.org/thread.html/9e3391878c6840b294155f7ba6ccb47586e317f85c1bbd15c4608bd0%40%3Cdev.activemq.apache.org%3E - https://lists.apache.org/thread.html/rb280e767ab199767e07a367f287ba08a9692fa76e2da4a20d50d07c4%40%3Cdev.activemq.apache.org%3E
CVE ID: CVE-2015-5183 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-06T06:41:07.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041750 - https://access.redhat.com/errata/RHSA-2018:2840 - https://bugzilla.redhat.com/show_bug.cgi?id=1249182 - https://lists.apache.org/thread.html/9e3391878c6840b294155f7ba6ccb47586e317f85c1bbd15c4608bd0%40%3Cdev.activemq.apache.org%3E - https://lists.apache.org/thread.html/r63480b481eb5922465da102d97d0906d8823687f99ef3255ebc32be8%40%3Cdev.activemq.apa
E - https://lists.apache.org/thread.html/r63480b481eb5922465da102d97d0906d8823687f99ef3255ebc32be8%40%3Cdev.activemq.apache.org%3E - https://lists.apache.org/thread.html/r51c60b28154fe7b634e5f5b7a7fc7f6f060487b39a7b5e95e2c32047%40%3Cdev.activemq.apache.org%3E - https://lists.apache.org/thread.html/rb280e767ab199767e07a367f287ba08a9692fa76e2da4a20d50d07c4%40%3Cdev.activemq.apache.org%3E
CVE ID: CVE-2015-5184 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-06T06:41:07.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Console: CORS headers set to allow all in Red Hat AMQ. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1249183 - https://lists.apache.org/thread.html/9e3391878c6840b294155f7ba6ccb47586e317f85c1bbd15c4608bd0%40%3Cdev.activemq.apache.org%3E - https://lists.apache.org/thread.html/rb280e767ab199767e07a367f287ba08a9692fa76e2da4a20d50d07c4%40%3Cdev.activemq.apache.org%3E
CVE ID: CVE-2015-5185 State: PUBLISHED Published: 2015-09-28T20:00:00 Last Updated: 2024-08-06T06:41:09.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty className in a packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172667.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172634.html - http://www.openwall.com/lists/oss-security/2015/08/21/2 - http://www.securityfoc
ge-announce/2015-November/172634.html - http://www.openwall.com/lists/oss-security/2015/08/21/2 - http://www.securityfocus.com/bid/91212 - http://lists.opensuse.org/opensuse-updates/2015-09/msg00019.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172659.html
CVE ID: CVE-2015-5186 State: PUBLISHED Published: 2017-09-06T21:00:00 Last Updated: 2024-08-06T06:41:09.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Audit before 2.4.4 in Linux does not sanitize escape characters in filenames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76840 - http://www.openwall.com/lists/oss-security/2015/08/13/9 - https://bugzilla.redhat.com/show_bug.cgi?id=1251621 - https://people.redhat.com/sgrubb/audit/ChangeLog
CVE ID: CVE-2015-5187 State: PUBLISHED Published: 2017-07-25T18:00:00 Last Updated: 2024-08-06T06:41:08.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Candlepin allows remote attackers to obtain sensitive information by obtaining Java exception statements as a result of excessive web traffic. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1252147
CVE ID: CVE-2015-5188 State: PUBLISHED Published: 2015-10-27T16:00:00 Last Updated: 2024-08-06T06:41:09.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) before 2.0.0.CR9 allows remote attackers to hijack the authentication of administrators for requests that make arbitrary changes to an instance via vectors involving a file upload using a multipart/form-data submission. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1252885 - http://r
nal Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1252885 - http://rhn.redhat.com/errata/RHSA-2015-1905.html - http://rhn.redhat.com/errata/RHSA-2015-1904.html - http://rhn.redhat.com/errata/RHSA-2015-1908.html - https://issues.jboss.org/browse/WFCORE-594 - http://rhn.redhat.com/errata/RHSA-2015-1907.html - http://www.securitytracker.com/id/1033859 - http://rhn.redhat.com/errata/RHSA-2015-1906.html
CVE ID: CVE-2015-5189 State: PUBLISHED Published: 2015-09-03T14:00:00 Last Updated: 2024-08-06T06:41:08.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames, which allows remote authenticated users to gain privileges by sending a command that is checked for security after another user is authenticated. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1252805 - http://rhn.redhat.com/errata/RHSA-2015-1700.html
CVE ID: CVE-2015-5190 State: PUBLISHED Published: 2015-09-03T14:00:00 Last Updated: 2024-08-06T06:41:07.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pcsd web UI in PCS 0.9.139 and earlier allows remote authenticated users to execute arbitrary commands via "escape characters" in a URL. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1252813 - http://rhn.redhat.com/errata/RHSA-2015-1700.html
CVE ID: CVE-2015-5191 State: PUBLISHED Published: 2017-07-28T21:00:00Z Last Updated: 2024-09-16T17:27:59.722Z Vendors: VMware Products: VMware Tools Problem Types: Local privilege escalation vulnerability Description: VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. Successful exploitation of this issue may result in a local privilege escalation. CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100011 - https://www.vmware.com/security/advisories/VMSA-2017-0013.html - http://www.securitytracker.com/id/1039013
CVE ID: CVE-2015-5192 State: REJECTED Published: 2015-08-20T23:00:00 Last Updated: 2015-08-20T23:57:05 Description: No description available.
CVE ID: CVE-2015-5193 State: REJECTED Published: 2015-08-20T23:00:00 Last Updated: 2015-10-23T15:57:01 Description: No description available.
CVE ID: CVE-2015-5194 State: PUBLISHED Published: 2017-07-21T14:00:00 Last Updated: 2024-08-06T06:41:08.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crash) via crafted logconfig commands. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - https://www-01.ibm.com/support/docview.wss?uid=isg3T1024157 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://bk1.ntp.org/ntp-dev/?PAGE=patch&REV=4c4fc141LwvcoGp-lLGhkA
rk/topics/security/linuxbulletinapr2016-2952096.html - http://bk1.ntp.org/ntp-dev/?PAGE=patch&REV=4c4fc141LwvcoGp-lLGhkAFp3ZvtrA - http://www.securityfocus.com/bid/76475 - http://www.ubuntu.com/usn/USN-2783-1 - https://github.com/ntp-project/ntp/commit/553f2fa65865c31c5e3c48812cfd46176cffdd27 - https://www-01.ibm.com/support/docview.wss?uid=swg21986956 - https://www-01.ibm.com/support/docview.wss?uid=swg21988706 - http://rhn.redhat.com/errata/RHSA-2016-2583.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.html - http://rhn.redhat.com/errata/RHSA-2016-0780.html - http://www.debian.org/security/2015/dsa-3388 - http://www.openwall.com/lists/oss-security/2015
ata/RHSA-2016-0780.html - http://www.debian.org/security/2015/dsa-3388 - http://www.openwall.com/lists/oss-security/2015/08/25/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1254542 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169167.html - https://www-01.ibm.com/support/docview.wss?uid=swg21989542 - https://www-01.ibm.com/support/docview.wss?uid=swg21985122
CVE ID: CVE-2015-5195 State: PUBLISHED Published: 2017-07-21T14:00:00 Last Updated: 2024-08-06T06:41:07.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted statistics or filegen configuration command that is not enabled during compilation. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1254544 - https://www-01.ibm.com/support/docview.wss?uid=isg3T1024157 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://github.com/ntp-project/ntp/commit/52e9
racle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://github.com/ntp-project/ntp/commit/52e977d79a0c4ace997e5c74af429844da2f27be - http://www.ubuntu.com/usn/USN-2783-1 - https://www-01.ibm.com/support/docview.wss?uid=swg21986956 - https://www-01.ibm.com/support/docview.wss?uid=swg21988706 - http://rhn.redhat.com/errata/RHSA-2016-2583.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.html - http://rhn.redhat.com/errata/RHSA-2016-0780.html - http://www.debian.org/security/2015/dsa-3388 - http://www.openwall.com/lists/oss-security/2015/08/25/3 - http://www.securityfocus.com/bid/76474 - http://lists.fedoraproject.org/pipermail/packa
ists/oss-security/2015/08/25/3 - http://www.securityfocus.com/bid/76474 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169167.html - https://www-01.ibm.com/support/docview.wss?uid=swg21989542 - https://www-01.ibm.com/support/docview.wss?uid=swg21985122 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166992.html
CVE ID: CVE-2015-5196 State: REJECTED Published: N/A Last Updated: 2023-02-12T00:00:00 Description: No description available.
CVE ID: CVE-2015-5197 State: REJECTED Published: 2015-09-15T19:00:00 Last Updated: 2015-09-15T18:57:02 Description: No description available.
CVE ID: CVE-2015-5198 State: PUBLISHED Published: 2015-09-08T15:00:00 Last Updated: 2024-08-06T06:41:08.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, related to the VDPAU_DRIVER_PATH environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167469.html - http://www.securityfocus.com/bid/76636 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170637.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-Sept
permail/package-announce/2015-November/170637.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165546.html - https://bugzilla.redhat.com/show_bug.cgi?id=1253824 - http://www.ubuntu.com/usn/USN-2729-1 - http://lists.opensuse.org/opensuse-updates/2015-09/msg00012.html - http://lists.x.org/archives/xorg-announce/2015-August/002630.html - http://www.debian.org/security/2015/dsa-3355
CVE ID: CVE-2015-5199 State: PUBLISHED Published: 2015-09-08T15:00:00 Last Updated: 2024-08-06T06:41:08.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167469.html - http://www.securityfocus.com/bid/76636 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170637.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165546.html - http://www.ubunt
er/170637.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165546.html - http://www.ubuntu.com/usn/USN-2729-1 - http://lists.opensuse.org/opensuse-updates/2015-09/msg00012.html - http://lists.x.org/archives/xorg-announce/2015-August/002630.html - http://www.debian.org/security/2015/dsa-3355 - https://bugzilla.redhat.com/show_bug.cgi?id=1253826
CVE ID: CVE-2015-5200 State: PUBLISHED Published: 2015-09-08T15:00:00 Last Updated: 2024-08-06T06:41:07.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: The trace functionality in libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to write to arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167469.html - https://bugzilla.redhat.com/show_bug.cgi?id=1253827 - http://www.securityfocus.com/bid/76636 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170637.html - http://lists.fedoraproject.org/p
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170637.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165546.html - http://www.ubuntu.com/usn/USN-2729-1 - http://lists.opensuse.org/opensuse-updates/2015-09/msg00012.html - http://lists.x.org/archives/xorg-announce/2015-August/002630.html - http://www.debian.org/security/2015/dsa-3355
CVE ID: CVE-2015-5201 State: PUBLISHED Published: 2020-02-25T20:16:02 Last Updated: 2024-08-06T06:41:08.567Z Vendors: RedHat Products: Enterprise Virtualization Hypervisor (aka RHEV-H) Problem Types: Weak Authentication Description: VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise Virtualization before 3.5.6 when VSDM is run with -spice disable-ticketing and a VM is suspended and then restored, allows remote attackers to log in without authentication via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/
n via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1253882 - https://rhn.redhat.com/errata/RHEA-2015-2527.html - https://bugzilla.redhat.com/show_bug.cgi?id=1273144 - https://access.redhat.com/security/cve/cve-2015-5201
CVE ID: CVE-2015-5202 State: REJECTED Published: 2017-06-07T20:00:00 Last Updated: 2021-11-26T16:49:06 Description: No description available.
CVE ID: CVE-2015-5203 State: PUBLISHED Published: 2017-08-02T19:00:00 Last Updated: 2024-08-06T06:41:07.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXWV22WGSQFDRPE7G6ECGP3QXS2V2A2M/ - https://security.gentoo.org/glsa/201707-07 - https://access.redhat.com/errata/RHSA-2
AXWV22WGSQFDRPE7G6ECGP3QXS2V2A2M/ - https://security.gentoo.org/glsa/201707-07 - https://access.redhat.com/errata/RHSA-2017:1208 - http://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html - http://www.openwall.com/lists/oss-security/2015/08/16/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNLVBZWDEXZCFWOBZ3YVEQINMRBRX5QV/ - http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html - https://bugzilla.redhat.com/show_bug.cgi?id=1254242 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QIZNTZDXOJR5BTRZKCS3GVHVZV2PWHH/ - https://usn.ubuntu.com/3693-1/ - http://lists.opensuse.or
.fedoraproject.org/message/3QIZNTZDXOJR5BTRZKCS3GVHVZV2PWHH/ - https://usn.ubuntu.com/3693-1/ - http://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html
CVE ID: CVE-2015-5204 State: PUBLISHED Published: 2015-12-17T19:00:00 Last Updated: 2024-08-06T06:41:08.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file. Additional Analyst Notes: - CVE Program Container: References: - https://cordova.apache.org/news/2015/09/21/file-transfer-release.html - http://www.securityfocus.com/bid/76832
CVE ID: CVE-2015-5205 State: REJECTED Published: 2018-03-12T13:00:00 Last Updated: 2018-03-12T12:57:01 Description: No description available.
CVE ID: CVE-2015-5206 State: PUBLISHED Published: 2017-09-13T16:00:00 Last Updated: 2024-08-06T06:41:08.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.us.apache.org/mod_mbox/www-announce/201509.mbox/%3CCABF6JR2j5vesvnjbm6sDPB_zAGj3kNgzzHEpLUh6dWG6t8mC2w%40mail.gmail.com%3E
CVE ID: CVE-2015-5207 State: PUBLISHED Published: 2016-05-09T20:00:00 Last Updated: 2024-08-06T06:41:08.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Cordova iOS before 4.0.0 might allow attackers to bypass a URL whitelist protection mechanism in an app and load arbitrary resources by leveraging unspecified methods. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136840/Apache-Cordova-iOS-3.9.1-Access-Bypass.html - https://cordova.apache.org/announcements/2016/04/27/security.html - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000058.html - http://www.securityfocus.com/archive/1/538211/100/0/threaded - http://ww
vn.jp/en/contents/2016/JVNDB-2016-000058.html - http://www.securityfocus.com/archive/1/538211/100/0/threaded - http://www.securityfocus.com/bid/88764 - http://jvn.jp/en/jp/JVN35341085/index.html
CVE ID: CVE-2015-5208 State: PUBLISHED Published: 2016-05-09T20:00:00 Last Updated: 2024-08-06T06:41:09.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Cordova iOS before 4.0.0 allows remote attackers to execute arbitrary plugins via a link. Additional Analyst Notes: - CVE Program Container: References: - https://cordova.apache.org/announcements/2016/04/27/security.html - http://jvn.jp/en/jp/JVN41772178/index.html - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000059.html - http://www.securityfocus.com/bid/88797 - http://packetstormsecurity.com/files/136839/Apache-Cordova-iOS-3.9.1-Arbitrary-Plugin-Execution.html - http://www.securityfocus.com/archive/1/538210/100/0
es/136839/Apache-Cordova-iOS-3.9.1-Arbitrary-Plugin-Execution.html - http://www.securityfocus.com/archive/1/538210/100/0/threaded
CVE ID: CVE-2015-5209 State: PUBLISHED Published: 2017-08-29T15:00:00 Last Updated: 2024-08-06T06:41:08.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Struts 2.x before 2.3.24.1 allows remote attackers to manipulate Struts internals, alter user sessions, or affect container settings via vectors involving a top object. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033908 - http://www.securityfocus.com/bid/82550 - https://security.netapp.com/advisory/ntap-20180629-0002/ - https://struts.apache.org/docs/s2-026.html
CVE ID: CVE-2015-5210 State: PUBLISHED Published: 2015-11-02T19:00:00 Last Updated: 2024-08-06T06:41:08.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter. Additional Analyst Notes: - CVE Program Container: References: - https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities - http://www.openwall.com/lists/oss-security/2015/10/13/4
CVE ID: CVE-2015-5211 State: PUBLISHED Published: 2017-05-25T17:00:00 Last Updated: 2024-08-06T06:41:08.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versions is vulnerable to a Reflected File Download (RFD) attack. The attack involves a malicious user crafting a URL with a batch script extension that results in the response being downloaded rather than rendered and also includes some input reflected in the response. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/Resources/SpiderLabs-Blog/Reflected-File-Download---A-Ne