Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-7895 State: PUBLISHED Published: 2017-06-27T20:00:00 Last Updated: 2024-08-06T08:06:30.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash). Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134950/Samsung-Galaxy-S6-Samsung-Gallery-Bitmap-Decoding-Crash.html - https://www.exploit-db.com/exploits/38613/ - https://bugs.chromium.org/p/project-zero/issues/detail?id=497&redir=1 - http://www.securityfocus.com/bid/77429 - https://googleprojectzero.blogspot.ie/2015/11/hack-galaxy-hunting-bugs-in-samsung.html
CVE ID: CVE-2015-7896 State: PUBLISHED Published: 2017-08-24T20:00:00 Last Updated: 2024-08-06T08:06:30.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=498&redir=1 - http://www.securityfocus.com/bid/77425 - http://packetstormsecurity.com/files/134198/Samsung-Galaxy-S6-LibQjpeg-DoIntegralUpsample-Crash.html - https://www.exploit-db.com/exploits/38612/
CVE ID: CVE-2015-7897 State: PUBLISHED Published: 2015-11-16T19:00:00 Last Updated: 2024-08-06T08:06:30.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge before G925VVRU4B0G9 allows remote attackers to gain privileges or cause a denial of service (memory corruption) via a crafted BMP image file. Additional Analyst Notes: - CVE Program Container: References: - http://googleprojectzero.blogspot.com/2015/11/hack-galaxy-hunting-bugs-in-samsung.html - https://code.google.com/p/google-security-research/issues/detail?id=499&q=samsung - http://packetstormsecurity.com/file
https://code.google.com/p/google-security-research/issues/detail?id=499&q=samsung - http://packetstormsecurity.com/files/134199/Samsung-Galaxy-S6-Android.media.process-Face-Recognition-Memory-Corruption.html - https://www.exploit-db.com/exploits/38611/
CVE ID: CVE-2015-7898 State: PUBLISHED Published: 2017-06-27T20:00:00 Last Updated: 2024-08-06T08:06:31.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/38610/ - https://bugs.chromium.org/p/project-zero/issues/detail?id=500&redir=1 - http://packetstormsecurity.com/files/134951/Samsung-Galaxy-S6-Samsung-Gallery-GIF-Parsing-Crash.html - http://www.securityfocus.com/bid/77430
CVE ID: CVE-2015-7899 State: PUBLISHED Published: 2015-10-29T20:00:00 Last Updated: 2024-08-06T08:06:30.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com_content component in Joomla! 3.x before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security-centre/630-20151003-core-acl-violations.html - http://www.securitytracker.com/id/1033950
CVE ID: CVE-2015-7900 State: PUBLISHED Published: 2015-10-28T10:00:00 Last Updated: 2024-08-06T08:06:30.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive debugging information by entering a crafted URL to trigger an exception, and then visiting a certain status page. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02
CVE ID: CVE-2015-7901 State: PUBLISHED Published: 2015-10-28T10:00:00 Last Updated: 2024-08-06T08:06:30.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42698/ - https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02
CVE ID: CVE-2015-7902 State: PUBLISHED Published: 2015-10-28T10:00:00 Last Updated: 2024-08-06T08:06:31.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for failed login attempts in unspecified circumstances, which allows remote attackers to obtain sensitive information via a series of requests. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02
CVE ID: CVE-2015-7903 State: PUBLISHED Published: 2015-10-28T10:00:00 Last Updated: 2024-08-06T08:06:30.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02
CVE ID: CVE-2015-7904 State: PUBLISHED Published: 2015-10-28T10:00:00 Last Updated: 2024-08-06T08:06:30.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary JSP code via vectors involving an upload of an image file. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02
CVE ID: CVE-2015-7905 State: PUBLISHED Published: 2015-11-13T02:00:00 Last Updated: 2024-08-06T08:06:30.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-274-02 - http://www.zerodayinitiative.com/advisories/ZDI-15-574 - http://www.zerodayinitiative.com/advisories/ZDI-15-575 - http://www.securityfocus.com/bid/77571 - http://www.zerodayinitiative.com/advisories/ZDI-15-576
CVE ID: CVE-2015-7906 State: PUBLISHED Published: 2015-12-21T11:00:00 Last Updated: 2024-08-06T08:06:31.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: LOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100, and LIP-ME201 devices allow remote attackers to read a password-hash backup file via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-342-02
CVE ID: CVE-2015-7907 State: PUBLISHED Published: 2015-12-21T11:00:00 Last Updated: 2024-08-06T08:06:31.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allows remote attackers to bypass authentication, and write to a configuration file or trigger a calibration or test, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-309-02
CVE ID: CVE-2015-7908 State: PUBLISHED Published: 2015-12-21T11:00:00 Last Updated: 2024-08-06T08:06:30.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allow remote attackers to discover cleartext passwords by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-309-02
CVE ID: CVE-2015-7909 State: PUBLISHED Published: 2016-01-22T11:00:00 Last Updated: 2024-08-06T08:06:31.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Hospira Communication Engine (CE) before 1.2 in LifeCare PCA Infusion System 5.07, Plum A+ Infusion System 13.40, and Plum A+3 Infusion System 13.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via traffic on TCP port 5000. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-337-02
CVE ID: CVE-2015-7910 State: PUBLISHED Published: 2015-11-19T11:00:00 Last Updated: 2024-08-06T08:06:31.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-321-01
CVE ID: CVE-2015-7911 State: PUBLISHED Published: 2015-12-23T02:00:00 Last Updated: 2024-08-06T08:06:31.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7.D4xxxT5F devices before 1.24.50 and PCD3.T665 and PCD3.T666 devices before 1.24.41 have hardcoded credentials, which allows remote attackers to obtain administrative access via an FTP session. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-335-01
CVE ID: CVE-2015-7912 State: PUBLISHED Published: 2015-11-21T11:00:00 Last Updated: 2024-08-06T08:06:31.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ice Faces servlet in ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML document. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-15-571/ - https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01
CVE ID: CVE-2015-7913 State: PUBLISHED Published: 2015-11-21T11:00:00 Last Updated: 2024-08-06T08:06:30.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows local users to execute arbitrary Java code with SYSTEM privileges by using the Apache Axis AdminService deployment method to publish a class. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-15-572/ - https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01
CVE ID: CVE-2015-7914 State: PUBLISHED Published: 2016-02-06T02:00:00 Last Updated: 2024-08-06T08:06:30.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authentication by leveraging knowledge of a password hash without knowledge of the associated password. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Feb/25 - https://ics-cert.us-cert.gov/advisories/ICSA-16-033-01
CVE ID: CVE-2015-7915 State: PUBLISHED Published: 2016-02-06T02:00:00 Last Updated: 2024-08-06T08:06:30.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Feb/25 - https://ics-cert.us-cert.gov/advisories/ICSA-16-033-01
CVE ID: CVE-2015-7916 State: PUBLISHED Published: 2016-02-06T02:00:00 Last Updated: 2024-08-06T08:06:30.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Feb/25 - https://ics-cert.us-cert.gov/advisories/ICSA-16-033-01
CVE ID: CVE-2015-7917 State: PUBLISHED Published: 2015-12-23T02:00:00 Last Updated: 2024-08-06T08:06:30.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Open Automation OPC Systems.NET 8.00.0023 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/78909 - https://ics-cert.us-cert.gov/advisories/ICSA-15-344-02
CVE ID: CVE-2015-7918 State: PUBLISHED Published: 2015-12-15T02:00:00 Last Updated: 2024-08-06T08:06:30.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the (1) Attach, (2) DefinedName, (3) DefinedNameLocal, (4) ODBCPrepareEx, (5) ObjCreatePolygon, (6) SetTabbedTextEx, or (7) SetValidationRule method, a different vulnerability than CVE-2015-8561. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-631 - http://www.zerodayinitiative.com/advisories/
ner: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-631 - http://www.zerodayinitiative.com/advisories/ZDI-15-625 - https://ics-cert.us-cert.gov/advisories/ICSA-15-335-02 - http://www.zerodayinitiative.com/advisories/ZDI-15-634 - http://www.zerodayinitiative.com/advisories/ZDI-15-632 - http://www.zerodayinitiative.com/advisories/ZDI-15-630 - http://www.zerodayinitiative.com/advisories/ZDI-15-633 - http://www.zerodayinitiative.com/advisories/ZDI-15-635 - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-329-01
CVE ID: CVE-2015-7919 State: PUBLISHED Published: 2015-12-21T11:00:00 Last Updated: 2024-08-06T08:06:30.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: SearchBlox 8.3 before 8.3.1 allows remote attackers to write to the config file, and consequently cause a denial of service (application crash), via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-337-01
CVE ID: CVE-2015-7920 State: REJECTED Published: 2017-03-16T15:00:00 Last Updated: 2017-03-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-7921 State: PUBLISHED Published: 2016-04-06T23:00:00 Last Updated: 2024-08-06T08:06:30.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 has hardcoded credentials, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of these credentials. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01
CVE ID: CVE-2015-7922 State: REJECTED Published: 2017-03-16T15:00:00 Last Updated: 2017-03-16T14:57:01 Description: No description available.
CVE ID: CVE-2015-7923 State: PUBLISHED Published: 2016-01-30T11:00:00 Last Updated: 2024-08-06T08:06:30.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Westermo WeOS before 4.19.0 uses the same SSL private key across different customers' installations, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-028-01
CVE ID: CVE-2015-7924 State: PUBLISHED Published: 2015-12-23T11:00:00 Last Updated: 2024-08-06T08:06:30.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: eWON devices with firmware before 10.1s0 do not trigger the discarding of browser session data in response to a log-off action, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Dec/118 - http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01 - https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03 - http://www.securityfocus.com/bid/79625
CVE ID: CVE-2015-7925 State: PUBLISHED Published: 2015-12-23T11:00:00 Last Updated: 2024-08-06T08:06:31.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to hijack the authentication of administrators for requests that trigger firmware upload, removal of configuration data, or a reboot. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Dec/118 - http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html - http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01
ON-XSS-CSRF-Session-Management-RBAC-Issues.html - http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01 - https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03 - http://www.securityfocus.com/bid/79625
CVE ID: CVE-2015-7926 State: PUBLISHED Published: 2015-12-23T11:00:00 Last Updated: 2024-08-06T08:06:30.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote attackers to obtain sensitive information via an unspecified URL. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Dec/118 - http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html - http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01 - https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03 - http:/
support/news/support/ewon-security-enhancement-7529-01 - https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03 - http://www.securityfocus.com/bid/79625
CVE ID: CVE-2015-7927 State: PUBLISHED Published: 2015-12-23T11:00:00 Last Updated: 2024-08-06T08:06:31.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Dec/118 - http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html - http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01 - https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03 - http://www.securi
s/support/ewon-security-enhancement-7529-01 - https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03 - http://www.securityfocus.com/bid/79625
CVE ID: CVE-2015-7928 State: PUBLISHED Published: 2015-12-23T11:00:00.000Z Last Updated: 2025-11-04T16:09:06.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Dec/118 - http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html - http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01 - https://ics-cert.us-cert.gov/advisori
es.html - http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01 - https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03 - http://www.securityfocus.com/bid/79625
CVE ID: CVE-2015-7929 State: PUBLISHED Published: 2015-12-23T11:00:00 Last Updated: 2024-08-06T08:06:31.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Dec/118 - http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html - http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01 - https://i
Session-Management-RBAC-Issues.html - http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01 - https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03 - http://www.securityfocus.com/bid/79625
CVE ID: CVE-2015-7930 State: PUBLISHED Published: 2015-12-24T01:00:00 Last Updated: 2024-08-06T08:06:30.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adcon Telemetry A840 Telemetry Gateway Base Station has hardcoded credentials, which allows remote attackers to obtain administrative access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-349-01 - http://www.securityfocus.com/bid/79345
CVE ID: CVE-2015-7931 State: PUBLISHED Published: 2015-12-24T01:00:00 Last Updated: 2024-08-06T08:06:31.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information by reading cleartext packet data, related to the lack of SSL support. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-349-01 - http://www.securityfocus.com/bid/79345
CVE ID: CVE-2015-7932 State: PUBLISHED Published: 2015-12-24T01:00:00 Last Updated: 2024-08-06T08:06:31.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-349-01 - http://www.securityfocus.com/bid/79345
CVE ID: CVE-2015-7934 State: PUBLISHED Published: 2015-12-24T01:00:00 Last Updated: 2024-08-06T08:06:31.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to discover log-file pathnames via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-349-01 - http://www.securityfocus.com/bid/79345
CVE ID: CVE-2015-7935 State: PUBLISHED Published: 2015-12-23T02:00:00 Last Updated: 2024-08-06T08:06:31.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-351-02 - http://www.securityfocus.com/bid/79624
CVE ID: CVE-2015-7936 State: PUBLISHED Published: 2015-12-23T02:00:00 Last Updated: 2024-08-06T08:06:30.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hijack the authentication of administrators for requests that modify a password. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-351-02 - http://www.securityfocus.com/bid/79624