Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ttps://bugzilla.redhat.com/show_bug.cgi?id=1215030 - https://bugzilla.redhat.com/attachment.cgi?id=1021565 - https://beaker-project.org/docs/whats-new/release-20.html#bug-fixes
CVE ID: CVE-2015-3163 State: PUBLISHED Published: 2017-09-06T21:00:00 Last Updated: 2024-08-06T05:39:31.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin pages for power types and key types in Beaker before 20.1 do not have any access controls, which allows remote authenticated users to modify power types and key types via navigating to $BEAKER/powertypes and $BEAKER/keytypes respectively. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/05/08/1 - https://beaker-project.org/jenkins-results/beaker-review-checks-docs/995/documentation/_build/html/whats-new/release-20.html - https://bugzilla.redhat.com/show_
ts/beaker-review-checks-docs/995/documentation/_build/html/whats-new/release-20.html - https://bugzilla.redhat.com/show_bug.cgi?id=1215034 - http://www.securityfocus.com/bid/74567
CVE ID: CVE-2015-3164 State: PUBLISHED Published: 2015-07-01T14:00:00 Last Updated: 2024-08-06T05:39:31.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non-authenticating mode, which allows local users to read from or send information to arbitrary X11 clients via vectors involving a UNIX socket. Additional Analyst Notes: - CVE Program Container: References: - http://lists.freedesktop.org/archives/wayland-devel/2015-June/022548.html - http://www.securityfocus.com/bid/75535 - https://security.gentoo.org/glsa/201701-64 - http://lists.opensuse.org/opensuse-updates/2015-06/msg00044.html
CVE ID: CVE-2015-3165 State: PUBLISHED Published: 2015-05-28T14:00:00 Last Updated: 2024-08-06T05:39:31.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause a denial of service (crash) by closing an SSL session at a time when the authentication timeout will expire during the session shutdown sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74787 - http://www.postgresql.org/about/news/1587/ - http://www.postgresql.org/docs/9.0/static/release-9-0-20.html
/bid/74787 - http://www.postgresql.org/about/news/1587/ - http://www.postgresql.org/docs/9.0/static/release-9-0-20.html - http://www.ubuntu.com/usn/USN-2621-1 - http://www.postgresql.org/docs/9.4/static/release-9-4-2.html - http://rhn.redhat.com/errata/RHSA-2015-1195.html - http://www.debian.org/security/2015/dsa-3269 - http://www.postgresql.org/docs/9.2/static/release-9-2-11.html - https://security.gentoo.org/glsa/201507-20 - http://rhn.redhat.com/errata/RHSA-2015-1194.html - http://www.debian.org/security/2015/dsa-3270 - http://www.postgresql.org/docs/9.1/static/release-9-1-16.html - http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html - http://www.postgresql.org/docs/9
-1-16.html - http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html - http://www.postgresql.org/docs/9.3/static/release-9-3-7.html - https://support.apple.com/HT205219 - http://rhn.redhat.com/errata/RHSA-2015-1196.html
CVE ID: CVE-2015-3166 State: PUBLISHED Published: 2019-11-20T20:50:16 Last Updated: 2024-08-06T05:39:31.938Z Vendors: PostgreSQL Global Development Group Products: PostgreSQL Problem Types: Other Description: The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified impact via unknown vectors, as demonstrated by an out-of-memory error. Additional Analyst Notes: - CVE Program Container: References: - http://www.postgresql.org/about/news/1587/ - http://www.postgresql.org/docs/9.0/static/
Program Container: References: - http://www.postgresql.org/about/news/1587/ - http://www.postgresql.org/docs/9.0/static/release-9-0-20.html - http://www.postgresql.org/docs/9.1/static/release-9-1-16.html - http://www.postgresql.org/docs/9.2/static/release-9-2-11.html - http://www.postgresql.org/docs/9.3/static/release-9-3-7.html - http://www.postgresql.org/docs/9.4/static/release-9-4-2.html - http://www.debian.org/security/2015/dsa-3269 - http://www.debian.org/security/2015/dsa-3270 - http://ubuntu.com/usn/usn-2621-1
CVE ID: CVE-2015-3167 State: PUBLISHED Published: 2019-11-20T20:50:14 Last Updated: 2024-08-06T05:39:31.906Z Vendors: PostgreSQL Global Development Group Products: PostgreSQL Problem Types: Other Description: contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error responses when an incorrect key is used, which makes it easier for attackers to obtain the key via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.postgresql.org/about/news/1587/ - http://www.postgresql.org/docs/9.0/static/release-9-0-20.html - http://www.postgresql.org/docs/9.1/static/re
ews/1587/ - http://www.postgresql.org/docs/9.0/static/release-9-0-20.html - http://www.postgresql.org/docs/9.1/static/release-9-1-16.html - http://www.postgresql.org/docs/9.2/static/release-9-2-11.html - http://www.postgresql.org/docs/9.3/static/release-9-3-7.html - http://www.postgresql.org/docs/9.4/static/release-9-4-2.html - http://www.debian.org/security/2015/dsa-3269 - http://www.debian.org/security/2015/dsa-3270 - http://ubuntu.com/usn/usn-2621-1
CVE ID: CVE-2015-3168 State: REJECTED Published: 2015-05-19T10:00:00 Last Updated: 2015-05-19T02:57:00 Description: No description available.
CVE ID: CVE-2015-3169 State: PUBLISHED Published: 2017-09-07T20:00:00 Last Updated: 2024-08-06T05:39:31.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in askbot 0.7.51-4.el6.noarch. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/05/14/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1221616 - http://www.securityfocus.com/bid/74689
CVE ID: CVE-2015-3170 State: PUBLISHED Published: 2017-07-21T14:00:00 Last Updated: 2024-08-06T05:39:31.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: selinux-policy when sysctl fs.protected_hardlinks are set to 0 allows local users to cause a denial of service (SSH login prevention) by creating a hardlink to /etc/passwd from a directory named .config, and updating selinux-policy. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1218672
CVE ID: CVE-2015-3171 State: PUBLISHED Published: 2017-07-25T18:00:00 Last Updated: 2024-08-06T05:39:31.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sosreport/sos/commit/d7759d3ddae5fe99a340c88a1d370d65cfa73fd6 - https://bugzilla.redhat.com/show_bug.cgi?id=1218658
CVE ID: CVE-2015-3172 State: PUBLISHED Published: 2022-07-06T19:02:28 Last Updated: 2024-08-06T05:39:31.976Z Vendors: n/a Products: EidoGo Problem Types: CWE-79 Description: EidoGo is susceptible to Cross-Site Scripting (XSS) attacks via maliciously crafted SGF input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jkk/eidogo/issues/27 - https://github.com/jkk/eidogo/pull/26
CVE ID: CVE-2015-3173 State: PUBLISHED Published: 2022-07-06T19:03:47 Last Updated: 2024-08-06T05:39:31.602Z Vendors: n/a Products: custom-content-type-manager Problem Types: CWE-94 Description: custom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary PHP remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/6b3d0736-7f08-4403-95eb-4385cb206f9e - https://blog.nettitude.com/uk/custom-content-type-manager-remote-code-execution - https://github.com/craftsmancoding/custom-content-type-manager/blob/master/readme.txt
CVE ID: CVE-2015-3174 State: PUBLISHED Published: 2015-06-01T19:00:00 Last Updated: 2024-08-06T05:39:31.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/quiz/db/access.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 does not set the RISK_XSS bit for graders, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via crafted gradebook feedback during manual quiz grading. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032358 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-49941 - https://moodle.org/mod/forum/discuss.php?d=31
p://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-49941 - https://moodle.org/mod/forum/discuss.php?d=313681 - http://openwall.com/lists/oss-security/2015/05/18/1 - http://www.securityfocus.com/bid/74719
CVE ID: CVE-2015-3175 State: PUBLISHED Published: 2015-06-01T19:00:00 Last Updated: 2024-08-06T05:39:31.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an error page that links to a URL from an HTTP Referer header. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=313682 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-49179 - http://www.securityfocus.com/bi
d=313682 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-49179 - http://www.securityfocus.com/bid/74720 - http://www.securitytracker.com/id/1032358 - http://openwall.com/lists/oss-security/2015/05/18/1
CVE ID: CVE-2015-3176 State: PUBLISHED Published: 2015-06-01T19:00:00 Last Updated: 2024-08-06T05:39:31.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: The account-confirmation feature in login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote attackers to obtain sensitive full-name information by attempting to self-register. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50099 - https://moodle.org/mod/forum/discuss.php?d=313683 - http://www.securityfocus.com/bid/74644 - http://www.securitytracker.com/id/1032358 - http://open
/discuss.php?d=313683 - http://www.securityfocus.com/bid/74644 - http://www.securitytracker.com/id/1032358 - http://openwall.com/lists/oss-security/2015/05/18/1
CVE ID: CVE-2015-3177 State: PUBLISHED Published: 2015-06-01T19:00:00 Last Updated: 2024-08-06T05:39:32.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.8.x before 2.8.6 does not consider the tool/monitor:subscribe capability before entering subscriptions to site-wide event-monitor rules, which allows remote authenticated users to obtain sensitive information via a subscription request. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50039 - http://www.securitytracker.com/id/1032358 - http://www.securityfocus.com/bid/74721 - https://moodle.org/mod/forum/discuss.php?d=313684 - http:/
ker.com/id/1032358 - http://www.securityfocus.com/bid/74721 - https://moodle.org/mod/forum/discuss.php?d=313684 - http://openwall.com/lists/oss-security/2015/05/18/1
CVE ID: CVE-2015-3178 State: PUBLISHED Published: 2015-06-01T19:00:00 Last Updated: 2024-08-06T05:39:32.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the external_format_text function in lib/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML into an external application via a crafted string that is visible to web services. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-49718 - http://www.securitytracker.com/id/1032358 -
ttp://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-49718 - http://www.securitytracker.com/id/1032358 - https://moodle.org/mod/forum/discuss.php?d=313685 - http://www.securityfocus.com/bid/74726 - http://openwall.com/lists/oss-security/2015/05/18/1
CVE ID: CVE-2015-3179 State: PUBLISHED Published: 2015-06-01T19:00:00 Last Updated: 2024-08-06T05:39:31.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74725 - https://moodle.org/mod/forum/discuss.php?d=313686 - http://www.securitytracker.com/id/1032358 - http://openwall.com/lists/oss-security/2015/05/18/1 - http://git.moodle.org/gw?p=moodle.git&a
tytracker.com/id/1032358 - http://openwall.com/lists/oss-security/2015/05/18/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50090
CVE ID: CVE-2015-3180 State: PUBLISHED Published: 2015-06-01T19:00:00 Last Updated: 2024-08-06T05:39:32.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/navigationlib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to obtain sensitive course-structure information by leveraging access to a student account with a suspended enrolment. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=313687 - http://www.securityfocus.com/bid/74729 - http://www.securitytracker.com/id/1032358 - http://openwall.com/lists/oss-security/2015/05/18/1 - http://git.m
d/74729 - http://www.securitytracker.com/id/1032358 - http://openwall.com/lists/oss-security/2015/05/18/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-49788
CVE ID: CVE-2015-3181 State: PUBLISHED Published: 2015-06-01T19:00:00 Last Updated: 2024-08-06T05:39:31.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: files/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 does not consider the moodle/user:manageownfiles capability before approving a private-file upload, which allows remote authenticated users to bypass intended file-management restrictions by using web services to perform uploads after this capability has been revoked. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74728 - http://git.moodle.org/gw?p=moodle.git&a=search
Program Container: References: - http://www.securityfocus.com/bid/74728 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-49994 - http://www.securitytracker.com/id/1032358 - https://moodle.org/mod/forum/discuss.php?d=313688 - http://openwall.com/lists/oss-security/2015/05/18/1
CVE ID: CVE-2015-3182 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T05:39:31.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032279 - https://bugzilla.redhat.com/show_bug.cgi?id=1219409 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.securityfocus.com/bid/7458
p://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.securityfocus.com/bid/74586 - https://security.gentoo.org/glsa/201510-03 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=373deb5f4182a5c4ab8c8418a7bbaa5d6e72bb05
CVE ID: CVE-2015-3183 State: PUBLISHED Published: 2015-07-20T23:00:00 Last Updated: 2024-08-06T05:39:31.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, related to mishandling of large chunk-size values and invalid chunk-extension characters in modules/http/http_filters.c. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=144493176821532&w=2 - http://rhn.redhat.com/errata/RHSA-2016-2056.html - http://lists.opensuse.org/
rc.info/?l=bugtraq&m=144493176821532&w=2 - http://rhn.redhat.com/errata/RHSA-2016-2056.html - http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html - http://httpd.apache.org/security/vulnerabilities_24.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://rhn.redhat.com/errata/RHSA-2016-0061.html - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - https://security.gentoo.org/glsa/201610-02 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://rhn.redhat.com/errata/RHSA-2015-1667.html - http://rhn.redhat.com/errata/RHSA-2016-0062.html - http://www.apache.org/dist/httpd/CHANGES_2.4 - http:
2015-1667.html - http://rhn.redhat.com/errata/RHSA-2016-0062.html - http://www.apache.org/dist/httpd/CHANGES_2.4 - http://rhn.redhat.com/errata/RHSA-2015-1666.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246 - http://www.securitytracker.com/id/1032967 - http://rhn.redhat.com/errata/RHSA-2015-1668.html - http://rhn.redhat.com/errata/RHSA-2015-2661.html - http://rhn.redhat.com/errata/RHSA-2016-2055.html - http://www.ubuntu.com/usn/USN-2686-1 - http://marc.info/?l=bugtraq&m=144493176821532&w=2 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://www.securityfocus.com/bid/75963 - http://www.debian.org/security/2015/dsa
urity-announce/2015/Aug/msg00001.html - http://www.securityfocus.com/bid/75963 - http://www.debian.org/security/2015/dsa-3325 - https://access.redhat.com/errata/RHSA-2015:2659 - https://github.com/apache/httpd/commit/e427c41257957b57036d5a549b260b6185d1dd73 - https://puppet.com/security/cve/CVE-2015-3183 - http://www.securityfocus.com/bid/91787 - https://access.redhat.com/errata/RHSA-2015:2660 - http://rhn.redhat.com/errata/RHSA-2016-2054.html - https://support.apple.com/kb/HT205031 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html - https://support.apple.com/HT205219 - http://
http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html - https://support.apple.com/HT205219 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0
ce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://github.c
rg/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://github.com/apache/httpd/commit/a6027e56924bb6227c1fdbf6f91e7e2438338be6 - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://li
ache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541
9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2015-3184 State: PUBLISHED Published: 2015-08-12T14:00:00 Last Updated: 2024-08-06T05:39:31.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1742.html - https://support.apple.com/HT206172 - http://www.debian.org/security/2015/dsa-3331 - http://lists.opensuse.org/opensuse-updates/2015-08/msg00022.html - http://www.securityfocus.com/bid/
ity/2015/dsa-3331 - http://lists.opensuse.org/opensuse-updates/2015-08/msg00022.html - http://www.securityfocus.com/bid/76274 - http://www.ubuntu.com/usn/USN-2721-1 - http://www.securitytracker.com/id/1033215 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00003.html - https://security.gentoo.org/glsa/201610-05 - http://subversion.apache.org/security/CVE-2015-3184-advisory.txt
CVE ID: CVE-2015-3185 State: PUBLISHED Published: 2015-07-20T23:00:00 Last Updated: 2024-08-06T05:39:31.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging the presence of a module that relies on the 2.2 API behavior. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.