Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-2084 State: PUBLISHED Published: 2015-02-25T22:00:00 Last Updated: 2024-08-06T05:02:43.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Easy Social Icons plugin before 1.2.3 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the image_file parameter in an edit action in the cnss_social_icon_add page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Feb/76 - http://packetstormsecurity.com/files/130461/WordPress-Easy-Social-Icons-1.2.
//seclists.org/fulldisclosure/2015/Feb/76 - http://packetstormsecurity.com/files/130461/WordPress-Easy-Social-Icons-1.2.2-CSRF-XSS.html - http://www.exploit-db.com/exploits/36161 - https://wordpress.org/plugins/easy-social-icons/changelog/ - http://www.securityfocus.com/bid/74893
CVE ID: CVE-2015-2086 State: PUBLISHED Published: 2015-02-26T15:00:00Z Last Updated: 2024-09-17T00:15:30.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72671 - https://www.drupal.org/node/2428749 - https://www.drupal.org/node/2428799
CVE ID: CVE-2015-2087 State: PUBLISHED Published: 2015-02-26T15:00:00Z Last Updated: 2024-09-16T18:14:39.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the Avatar Uploader module before 6.x-1.3 for Drupal allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2427069 - https://www.drupal.org/node/2428793 - http://www.securityfocus.com/bid/72674
CVE ID: CVE-2015-2088 State: PUBLISHED Published: 2015-02-26T15:00:00Z Last Updated: 2024-09-16T22:36:41.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Term Queue module before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2428483 - https://www.drupal.org/node/2428853 - http://www.securityfocus.com/bid/72678
CVE ID: CVE-2015-2089 State: PUBLISHED Published: 2015-02-26T15:00:00 Last Updated: 2024-08-06T05:02:43.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the CrossSlide jQuery (crossslide-jquery-plugin-for-wordpress) plugin 2.0.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings or conduct cross-site scripting (XSS) attacks via the (2) csj_width, (3) csj_height, (4) csj_sleep, (5) csj_fade, or (6) upload_image parameter in the thisismyurl_csj.php page to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: Refer
n the thisismyurl_csj.php page to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130313/WordPress-Cross-Slide-2.0.5-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/74894
CVE ID: CVE-2015-2090 State: PUBLISHED Published: 2015-02-26T15:00:00 Last Updated: 2024-08-06T05:02:43.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the ajax_survey function in settings.php in the WordPress Survey and Poll plugin 1.1.7 for Wordpress allows remote attackers to execute arbitrary SQL commands via the survey_id parameter in an ajax_survey action to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/118218 - http://www.securityfocus.com/bid/74890 - https://wordpress.org/plugins/wp-survey-and-poll/changelog/ - http://packetstormsecurity.com/files/130381/WordPress-Su
- https://wordpress.org/plugins/wp-survey-and-poll/changelog/ - http://packetstormsecurity.com/files/130381/WordPress-Survey-And-Poll-1.1.7-Blind-SQL-Injection.html - http://www.exploit-db.com/exploits/36054
CVE ID: CVE-2015-2091 State: PUBLISHED Published: 2015-03-13T14:00:00 Last Updated: 2024-08-06T05:02:43.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authentication hook (mgs_hook_authz) in mod-gnutls 0.5.10 and earlier does not validate client certificates when "GnuTLSClientVerify require" is set, which allows remote attackers to spoof clients via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-04 - http://www.debian.org/security/2015/dsa-3177 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=578663 - http://issues.outoforder.cc/view.php?id=93
CVE ID: CVE-2015-2092 State: PUBLISHED Published: 2015-03-09T14:00:00 Last Updated: 2024-08-06T05:02:43.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows remote attackers to execute arbitrary code via a crafted object parameter in the Insert function, related to "Index Out-Of-Bounds." Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-053/ - http://www.securityfocus.com/bid/72840
CVE ID: CVE-2015-2093 State: PUBLISHED Published: 2015-03-09T14:00:00 Last Updated: 2024-08-06T05:02:43.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Connect function in the WebGate WebEyeAudio ActiveX control allows remote attackers to execute arbitrary code via a crafted value. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-054/ - http://www.securityfocus.com/bid/72839
CVE ID: CVE-2015-2094 State: PUBLISHED Published: 2015-03-09T14:00:00 Last Updated: 2024-08-06T05:02:43.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary code via unspecified vectors to the (1) PrintSiteImage, (2) PlaySiteAllChannel, (3) StopSiteAllChannel, or (4) SaveSiteImage function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72841 - http://www.zerodayinitiative.com/advisories/ZDI-15-071/ - http://www.osvdb.org/118905 - http://packetstormsecurity.com/files/131069/WebGate-WinRDS-2.0.8-
advisories/ZDI-15-071/ - http://www.osvdb.org/118905 - http://packetstormsecurity.com/files/131069/WebGate-WinRDS-2.0.8-StopSiteAllChannel-Stack-Overflow.html - http://www.zerodayinitiative.com/advisories/ZDI-15-074/ - http://www.osvdb.org/118906 - http://www.osvdb.org/118907 - http://www.zerodayinitiative.com/advisories/ZDI-15-073/ - https://www.exploit-db.com/exploits/36517/ - http://www.osvdb.org/118908 - http://www.zerodayinitiative.com/advisories/ZDI-15-072/
CVE ID: CVE-2015-2095 State: PUBLISHED Published: 2015-03-09T14:00:00 Last Updated: 2024-08-06T05:02:43.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-070/ - http://www.securityfocus.com/bid/73222
CVE ID: CVE-2015-2096 State: PUBLISHED Published: 2015-03-09T14:00:00 Last Updated: 2024-08-06T05:02:43.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-069/ - http://www.securityfocus.com/bid/72849
CVE ID: CVE-2015-2097 State: PUBLISHED Published: 2015-03-09T14:00:00 Last Updated: 2024-08-06T05:02:43.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified vectors to the (1) LoadImage or (2) LoadImageEx function in the WESPMonitor.WESPMonitorCtrl.1 control, (3) ChangePassword function in the WESPCONFIGLib.UserItem control, Connect function in the (4) WESPSerialPort.WESPSerialPortCtrl.1 or (5) WESPPLAYBACKLib.WESPPlaybackCtrl control, or (6) AddID function in the WESPCONFIGLib.IDList control or a (7) long string to the second argument to the
l control, or (6) AddID function in the WESPCONFIGLib.IDList control or a (7) long string to the second argument to the ConnectEx3 function in the WESPPLAYBACKLib.WESPPlaybackCtrl control. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/118902 - http://www.osvdb.org/118893 - http://www.zerodayinitiative.com/advisories/ZDI-15-059/ - https://www.exploit-db.com/exploits/36607/ - https://www.exploit-db.com/exploits/36505/ - http://packetstormsecurity.com/files/131072/WebGate-eDVR-Manager-Stack-Buffer-Overflow.html - http://www.securityfocus.com/bid/72835 - https://www.exploit-db.com/exploits/36602/ - http://www.zerodayinitiative.com/advisories/ZDI-15-068/ -
.com/bid/72835 - https://www.exploit-db.com/exploits/36602/ - http://www.zerodayinitiative.com/advisories/ZDI-15-068/ - http://www.osvdb.org/118896 - http://www.zerodayinitiative.com/advisories/ZDI-15-062/ - http://seclists.org/fulldisclosure/2015/Feb/90
CVE ID: CVE-2015-2098 State: PUBLISHED Published: 2021-07-22T17:13:13 Last Updated: 2024-08-06T05:02:43.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in WebGate eDVR Manager allow remote attackers to execute arbitrary code via unspecified vectors to the (1) Connect, (2) ConnectEx, or (3) ConnectEx2 function in the WESPEvent.WESPEventCtrl.1 control; (4) AudioOnlySiteChannel function in the WESPPlayback.WESPPlaybackCtrl.1 control; (5) Connect or (6) ConnectEx function in the WESPPTZ.WESPPTZCtrl.1 control; (7) SiteChannel property in the WESPPlayback.WESPPlaybackCtrl.1 control; (8) SiteName property in the WESPPlayback.WESPPlaybackCtrl.1 c
property in the WESPPlayback.WESPPlaybackCtrl.1 control; (8) SiteName property in the WESPPlayback.WESPPlaybackCtrl.1 control; or (9) OpenDVrSSite function in the WESPPTZ.WESPPTZCtrl.1 control. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-058/ - http://www.zerodayinitiative.com/advisories/ZDI-15-060/ - http://www.zerodayinitiative.com/advisories/ZDI-15-061/ - http://www.zerodayinitiative.com/advisories/ZDI-15-064/ - http://www.zerodayinitiative.com/advisories/ZDI-15-065/ - http://www.zerodayinitiative.com/advisories/ZDI-15-066/
CVE ID: CVE-2015-2099 State: PUBLISHED Published: 2021-07-22T17:10:55 Last Updated: 2024-08-06T05:02:43.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in WebGate Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the (1) GetRecFileInfo function in the FileConverter.FileConverterCtrl.1 control, (2) Login function in the LoginContoller.LoginControllerCtrl.1 control, or (3) GetThumbnail function in the WESPPlayback.WESPPlaybackCtrl.1 control. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-055/ - http://www.zerodayinitiative.com/advisories/ZDI-15
ferences: - http://www.zerodayinitiative.com/advisories/ZDI-15-055/ - http://www.zerodayinitiative.com/advisories/ZDI-15-056/ - http://www.zerodayinitiative.com/advisories/ZDI-15-063/
CVE ID: CVE-2015-2100 State: PUBLISHED Published: 2021-07-22T17:09:17 Last Updated: 2024-08-06T05:02:43.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in WebGate eDVR Manager and Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the (1) TCPDiscover or (2) TCPDiscover2 function in the WESPDiscovery.WESPDiscoveryCtrl.1 control. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-067/ - http://www.zerodayinitiative.com/advisories/ZDI-15-057/
CVE ID: CVE-2015-2101 State: PUBLISHED Published: 2015-02-27T15:00:00Z Last Updated: 2024-09-17T00:26:19.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Navigate bar in the Navigate module before 6.x-1.1 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2428503 - https://www.drupal.org/node/2428505 - http://www.securityfocus.com/bid/72670 - https://www.drupal.org/node/2428815
CVE ID: CVE-2015-2102 State: PUBLISHED Published: 2015-02-27T15:00:00 Last Updated: 2024-08-06T05:02:43.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_item.php in ClipBucket 2.7 RC3 (2.7.0.4.v2929-rc3) allows remote attackers to execute arbitrary SQL commands via the item parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/118667 - http://www.securityfocus.com/bid/72879 - http://www.securityfocus.com/archive/1/534790/100/0/threaded - http://packetstormsecurity.com/files/130485/Clipbucket-2.7.0.4.v2929-rc3-Blind-SQL-Injection.html - http://www.exploit-db.com/exploits/36156
CVE ID: CVE-2015-2103 State: PUBLISHED Published: 2015-02-27T15:00:00 Last Updated: 2024-08-06T05:02:43.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the admin-login panel (admin/index.cgi) in Cosmoshop allows remote attackers to inject arbitrary web script or HTML via the username field (u_name parameter). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534710/100/0/threaded - http://packetstormsecurity.com/files/130403/Cosmoshop-Cross-Site-Scripting.html
CVE ID: CVE-2015-2104 State: REJECTED Published: 2020-02-19T13:31:30 Last Updated: 2020-02-19T13:31:30 Description: No description available.
CVE ID: CVE-2015-2106 State: PUBLISHED Published: 2015-03-31T10:00:00 Last Updated: 2024-08-06T05:02:43.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27, 3 before 1.82, and 4 before 2.10 allows remote attackers to bypass intended access restrictions or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04582368 - http://www.securitytracker.com/id/1031974 - http://www.securityfocus.com/bid/73324 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDispl
com/id/1031974 - http://www.securityfocus.com/bid/73324 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04582368
CVE ID: CVE-2015-2107 State: PUBLISHED Published: 2015-03-14T01:00:00 Last Updated: 2024-08-06T05:02:43.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04588084 - http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04588084 - http://www.securitytracker.com/id/1031870
CVE ID: CVE-2015-2108 State: PUBLISHED Published: 2015-03-31T10:00:00 Last Updated: 2024-08-06T05:02:43.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Powershell Operations in HP Operations Orchestration 9.x and 10.x allows remote authenticated users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04595417 - https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04595417 - http://www.securitytracker.com/id/1031987 - http://www.securityfocus.com/bid/73320
CVE ID: CVE-2015-2109 State: PUBLISHED Published: 2015-03-31T10:00:00 Last Updated: 2024-08-06T05:02:43.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Operations Orchestration 10.x allows remote attackers to bypass authentication, and obtain sensitive information or modify data, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04595607 - https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04595607 - http://www.securityfocus.com/bid/73323
CVE ID: CVE-2015-2110 State: PUBLISHED Published: 2015-05-25T17:00:00 Last Updated: 2024-08-06T05:02:43.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in HP LoadRunner 11.52 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04594015 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04594015
CVE ID: CVE-2015-2111 State: PUBLISHED Published: 2015-04-04T01:00:00 Last Updated: 2024-08-06T05:02:43.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04626732 - http://www.securityfocus.com/bid/73481 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04626732
CVE ID: CVE-2015-2112 State: PUBLISHED Published: 2015-04-14T22:00:00 Last Updated: 2024-08-06T05:02:43.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote authenticated users to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04629160 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?
ite/hpsc/public/kb/docDisplay?docId=emr_na-c04629160 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04629160 - http://www.securityfocus.com/bid/73961
CVE ID: CVE-2015-2113 State: PUBLISHED Published: 2015-04-14T22:00:00 Last Updated: 2024-08-06T05:02:43.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04629160 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_
ublic/kb/docDisplay?docId=emr_na-c04629160 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04629160 - http://www.securityfocus.com/bid/73964
CVE ID: CVE-2015-2114 State: PUBLISHED Published: 2015-04-14T22:00:00 Last Updated: 2024-08-06T05:02:43.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Support Solution Framework before 11.51.0049 allows remote attackers to download an arbitrary program onto a client machine and execute this program via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04634535 - http://www.securityfocus.com/bid/74054 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04634535
CVE ID: CVE-2015-2115 State: PUBLISHED Published: 2015-04-27T16:00:00 Last Updated: 2024-08-06T05:02:43.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Capture and Route Software (HPCR) 1.3 before Patch 7, 1.3 FP1 before Patch 1, and 1.4 before Patch 1 allows remote authenticated users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04633710 - http://www.securityfocus.com/bid/74336 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04633710
CVE ID: CVE-2015-2116 State: PUBLISHED Published: 2015-04-26T10:00:00 Last Updated: 2024-08-06T05:02:43.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Storage Data Protector 7.x before 7.03 build 107 allows remote authenticated users to execute arbitrary code or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04636829 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04636829 - http://www.securityfocus.com/bid/74249 - http://www.securitytracker.com/id/1032162
CVE ID: CVE-2015-2117 State: PUBLISHED Published: 2015-04-26T10:00:00 Last Updated: 2024-08-06T05:02:43.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP TippingPoint Security Management System (SMS) and TippingPoint Virtual Security Management System (vSMS) before 4.1 patch 3 and 4.2 before patch 1 do not require authentication for JBoss RMI requests, which allows remote attackers to execute arbitrary code by (1) uploading this code within an archive or (2) instantiating a class. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04626974 - http://zerodayinitiative.com/advisories/ZD
64.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04626974 - http://zerodayinitiative.com/advisories/ZDI-15-154/ - http://www.securityfocus.com/bid/74285 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04626974 - http://www.securitytracker.com/id/1032187
CVE ID: CVE-2015-2118 State: PUBLISHED Published: 2015-05-25T17:00:00 Last Updated: 2024-08-06T05:02:43.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Secure Pull Print and Security Pull Print components in HP Access Control (AC) Software 12.x through 14.x before 14.1.2 allows remote authenticated users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04649315 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04649315
CVE ID: CVE-2015-2119 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.