Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-6852 State: PUBLISHED Published: 2015-12-28T15:00:00 Last Updated: 2024-08-06T07:36:33.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x before 3.10 allows remote authenticated users to read log files via a crafted parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/135044/EMC-Secure-Remote-Services-Virtual-Edition-Path-Traversal.html - http://seclists.org/bugtraq/2015/Dec/130 - http://www.securityfocus.com/bid/79661 - http://www.securitytracker.com/id/1034530
CVE ID: CVE-2015-6853 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-06T07:36:34.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Domino web agent in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, R12.5 before CR5, R12.51 before CR4, and R12.52 before SP1 CR3 allows remote attackers to cause a denial of service (daemon crash) or obtain sensitive information via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035389 - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160323-0
35389 - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160323-01-security-notice-for-ca-single-sign-on-web-agents.aspx
CVE ID: CVE-2015-6854 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-06T07:36:34.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: The non-Domino web agents in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, and R12.5 before CR5 allow remote attackers to cause a denial of service (daemon crash) or obtain sensitive information via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035389 - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160323-01-security-notice-for-ca-single-sign-o
a-support-online/product-content/recommended-reading/security-notices/ca20160323-01-security-notice-for-ca-single-sign-on-web-agents.aspx
CVE ID: CVE-2015-6855 State: PUBLISHED Published: 2015-11-06T21:00:00 Last Updated: 2024-08-06T07:36:34.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3361 - http://www.securityfocus.com/bid/76691 - http://lists.fedoraproject.org/pipermail
ww.debian.org/security/2015/dsa-3361 - http://www.securityfocus.com/bid/76691 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169036.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167369.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169341.html - http://www.openwall.com/lists/oss-security/2015/09/10/2 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html - http://www.openwall.com/lists/oss-security/2015/09/10/1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169039.html - http://www.debian.org/security/2015/dsa-3362 - http://www.ubuntu.com/usn/USN-2745-1 -
nnounce/2015-October/169039.html - http://www.debian.org/security/2015/dsa-3362 - http://www.ubuntu.com/usn/USN-2745-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168602.html - https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg02479.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169327.html - https://security.gentoo.org/glsa/201602-01 - https://www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14
CVE ID: CVE-2015-6856 State: PUBLISHED Published: 2016-01-08T19:00:00 Last Updated: 2024-08-06T07:36:33.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dell Pre-Boot Authentication Driver (PBADRV.sys) 1.0.1.5 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x0022201c IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - https://www.korelogic.com/Resources/Advisories/KL-001-2015-008.txt - http://packetstormsecurity.com/files/134987/Dell-Authentication-Driver-Uncontrolled-Write.html - http://www.securityfocus.com/archive/1/537161/100/0/threaded - http://www.securityfocus.com/bid/79643 - http://seclists.org/full
ww.securityfocus.com/archive/1/537161/100/0/threaded - http://www.securityfocus.com/bid/79643 - http://seclists.org/fulldisclosure/2015/Dec/81
CVE ID: CVE-2015-6857 State: PUBLISHED Published: 2015-11-26T02:00:00 Last Updated: 2024-08-06T07:36:33.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Virtual Table Server (VTS) in HP LoadRunner 11.52, 12.00, 12.01, 12.02, and 12.50 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-3138. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-581 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04900820 - http://www.securityfocus.com/bid/77946 - http://www.securitytracker.com/id/1034259 - https://h20566.www2.hpe.com/portal
http://www.securityfocus.com/bid/77946 - http://www.securitytracker.com/id/1034259 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04907374
CVE ID: CVE-2015-6858 State: PUBLISHED Published: 2016-01-05T11:00:00 Last Updated: 2024-08-06T07:36:34.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Insight Control server provisioning before 7.5.0 RabbitMQ allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034310 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04918653 - http://www.securityfocus.com/bid/79343
CVE ID: CVE-2015-6859 State: PUBLISHED Published: 2016-01-05T11:00:00 Last Updated: 2024-08-06T07:36:33.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034410 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918
CVE ID: CVE-2015-6860 State: PUBLISHED Published: 2016-01-05T11:00:00 Last Updated: 2024-08-06T07:36:34.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6859. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034410 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918
CVE ID: CVE-2015-6861 State: PUBLISHED Published: 2016-01-05T11:00:00 Last Updated: 2024-08-06T07:36:35.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926482 - http://www.securityfocus.com/bid/79650
CVE ID: CVE-2015-6862 State: PUBLISHED Published: 2016-01-08T02:00:00 Last Updated: 2024-08-06T07:36:34.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE UCMDB Browser before 4.02 allows remote attackers to obtain sensitive information or bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034596 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04924053
CVE ID: CVE-2015-6863 State: PUBLISHED Published: 2016-01-16T02:00:00 Last Updated: 2024-08-06T07:36:34.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certificate upload component. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04941487
CVE ID: CVE-2015-6864 State: PUBLISHED Published: 2016-01-16T02:00:00 Last Updated: 2024-08-06T07:36:34.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certificate upload component. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04941487
CVE ID: CVE-2015-6865 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6866 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6867 State: PUBLISHED Published: 2015-11-04T02:00:00 Last Updated: 2024-08-06T07:36:34.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vertica-udx-zygote process in HP Vertica 7.1.1 UDx does not require authentication, which allows remote attackers to execute arbitrary commands via a crafted packet, aka ZDI-CAN-2914. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-535/ - http://www.securityfocus.com/bid/77405 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04873095
CVE ID: CVE-2015-6868 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6869 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6870 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6871 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6872 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6873 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6874 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6875 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6876 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6877 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6878 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6879 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6880 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6881 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6882 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6883 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6884 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6885 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6886 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6887 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6888 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6889 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6890 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6891 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6892 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6893 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6894 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6895 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6896 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6897 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6898 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6899 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6900 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6901 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6902 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6903 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6904 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6905 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6906 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6907 State: REJECTED Published: 2020-01-21T14:03:12 Last Updated: 2020-01-21T14:03:12 Description: No description available.
CVE ID: CVE-2015-6908 State: PUBLISHED Published: 2015-09-11T16:00:00 Last Updated: 2024-08-06T07:36:34.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76714 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.security-assessment.com/files/documents/advisory/OpenLDAP-ber_get_next-Denial-of-Serv
njul2016-3090546.html - http://www.security-assessment.com/files/documents/advisory/OpenLDAP-ber_get_next-Denial-of-Service.pdf - https://support.apple.com/HT205637 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html - http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commit%3Bh=6fe51a9ab04fd28bbc171da3cf12f1c1040d6629 - http://www.debian.org/security/2015/dsa-3356 - http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.ubuntu.com/usn/USN-2742-1 - http://www.openlda
echnetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.ubuntu.com/usn/USN-2742-1 - http://www.openldap.org/its/index.cgi/Software%20Bugs?id=8240 - http://rhn.redhat.com/errata/RHSA-2015-1840.html - http://www.securitytracker.com/id/1033534 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html
CVE ID: CVE-2015-6909 State: PUBLISHED Published: 2015-09-11T16:00:00 Last Updated: 2024-08-06T07:36:34.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "Create download task via file upload" feature in Synology Download Station before 3.5-2962 allows remote attackers to inject arbitrary web script or HTML via the name element in the Info dictionary in a torrent file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/536428/100/0/threaded - http://packetstormsecurity.com/files/133520/Synology-Download-Station-3.5-2956-3.5-2962-Cross-Site-Scripting.html - https://www.synology.c
security.com/files/133520/Synology-Download-Station-3.5-2956-3.5-2962-Cross-Site-Scripting.html - https://www.synology.com/en-global/releaseNote/DownloadStation?model=DS715 - https://www.securify.nl/advisory/SFY20150809/multiple_cross_site_scripting_vulnerabilities_in_synology_download_station.html - https://www.synology.com/en-global/support/security/Download_Station_3_5_2962 - http://seclists.org/fulldisclosure/2015/Sep/32
CVE ID: CVE-2015-6910 State: PUBLISHED Published: 2015-09-11T16:00:00 Last Updated: 2024-08-06T07:36:34.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Synology Video Station before 1.5-0757 allows remote attackers to execute arbitrary SQL commands via the id parameter to audiotrack.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Video_Station_1_5_0757 - https://www.securify.nl/advisory/SFY20150810/synology_video_station_command_injection_and_multiple_sql_injection_vulnerabilities.html - https://www.synology.com/en-global/releaseNote/VideoStation?model=DS715 - http://www.s
_injection_vulnerabilities.html - https://www.synology.com/en-global/releaseNote/VideoStation?model=DS715 - http://www.securityfocus.com/archive/1/536427/100/0/threaded - http://seclists.org/fulldisclosure/2015/Sep/31 - http://packetstormsecurity.com/files/133519/Synology-Video-Station-1.5-0757-Command-Injection-SQL-Injection.html
CVE ID: CVE-2015-6911 State: PUBLISHED Published: 2015-09-11T16:00:00 Last Updated: 2024-08-06T07:36:34.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary SQL commands via the id parameter to watchstatus.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.securify.nl/advisory/SFY20150810/synology_video_station_command_injection_and_multiple_sql_injection_vulnerabilities.html - https://www.synology.com/en-global/releaseNote/VideoStation?model=DS715 - http://www.securityfocus.com/archive/1/536427/100/0/threaded - http://seclists.org/fulld
Note/VideoStation?model=DS715 - http://www.securityfocus.com/archive/1/536427/100/0/threaded - http://seclists.org/fulldisclosure/2015/Sep/31 - http://packetstormsecurity.com/files/133519/Synology-Video-Station-1.5-0757-Command-Injection-SQL-Injection.html
CVE ID: CVE-2015-6912 State: PUBLISHED Published: 2015-09-11T16:00:00 Last Updated: 2024-08-06T07:36:34.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharacters in the subtitle_codepage parameter to subtitle.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.securify.nl/advisory/SFY20150810/synology_video_station_command_injection_and_multiple_sql_injection_vulnerabilities.html - https://www.synology.com/en-global/releaseNote/VideoStation?model=DS715 - http://www.securityfocus.com/archive/1/536427/100/0/threaded - http://seclists.or
releaseNote/VideoStation?model=DS715 - http://www.securityfocus.com/archive/1/536427/100/0/threaded - http://seclists.org/fulldisclosure/2015/Sep/31 - http://packetstormsecurity.com/files/133519/Synology-Video-Station-1.5-0757-Command-Injection-SQL-Injection.html
CVE ID: CVE-2015-6913 State: PUBLISHED Published: 2015-09-11T16:00:00 Last Updated: 2024-08-06T07:36:34.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "Create download task via URL" feature in Synology Download Station before 3.5-2967 allows remote attackers to inject arbitrary web script or HTML via the urls parameter in an add_url_task action to dlm/downloadman.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/536428/100/0/threaded - http://packetstormsecurity.com/files/133520/Synology-Download-Station-3.5-2956-3.5-2962-Cross-Site-Scripting.html - https://www.synology
rmsecurity.com/files/133520/Synology-Download-Station-3.5-2956-3.5-2962-Cross-Site-Scripting.html - https://www.synology.com/en-global/releaseNote/DownloadStation?model=DS715 - https://www.securify.nl/advisory/SFY20150809/multiple_cross_site_scripting_vulnerabilities_in_synology_download_station.html - http://seclists.org/fulldisclosure/2015/Sep/32
CVE ID: CVE-2015-6914 State: PUBLISHED Published: 2015-09-11T16:00:00Z Last Updated: 2024-09-17T01:45:36.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in SiteFactory CMS 5.5.9 allows remote attackers to read arbitrary files via a full pathname in the file parameter to assets/download.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133251/SiteFactory-CMS-5.5.9-Directory-Traversal.html
CVE ID: CVE-2015-6915 State: PUBLISHED Published: 2015-09-11T16:00:00Z Last Updated: 2024-09-17T00:51:29.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Montala Limited ResourceSpace 7.3.7009 and earlier allows remote attackers to execute arbitrary SQL commands via the "user" cookie to plugins/feedback/pages/feedback.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133297/ResourceSpace-CMS-7.3.7009-SQL-Injection.html