Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-5236 State: PUBLISHED Published: 2022-07-07T15:54:03 Last Updated: 2024-08-06T06:41:08.537Z Vendors: n/a Products: Icedtea-web Problem Types: CWE-345 Description: It was discovered that the IcedTea-Web used codebase attribute of the <applet> tag on the HTML page that hosts Java applet in the Same Origin Policy (SOP) checks. As the specified codebase does not have to match the applet's actual origin, this allowed malicious site to bypass SOP via spoofed codebase value. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1256403
CVE ID: CVE-2015-5237 State: PUBLISHED Published: 2017-09-25T17:00:00 Last Updated: 2024-08-06T06:41:08.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: protobuf allows remote authenticated attackers to cause a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/protobuf/issues/760 - http://www.openwall.com/lists/oss-security/2015/08/27/2 - https://bugzilla.redhat.com/show_bug.cgi?id=1256426 - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40
v.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://lists.apache.org/thread.html/ra28fed69eef3a71e5fe5daea001d0456b05b102044237330ec5c7c82%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r17dc6f394429f6bffb5e4c66555d93c2e9923cbbdc5a93db9a56c1c7%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r42e47994734cd1980ef3e204a40555336e10cc80096927aca2f37d90%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/threa
47994734cd1980ef3e204a40555336e10cc80096927aca2f37d90%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/re6d04a214424a97ea59c62190d79316edf311a0a6346524dfef3b940%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r1263fa5b51e4ec3cb8f09ff40e4747428c71198e9bee93349ec96a3c%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r42ef6acfb0d86a2df0c2390702ecbe97d2104a331560f2790d17ca69%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/rb71dac1d9dd4e8a8ae3dbc033aeae514eda9be1263c1df3b42a530a2%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r320dc858da88846ba00bb077bcca2cdf75b7dde0f6eb3a3d
%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r320dc858da88846ba00bb077bcca2cdf75b7dde0f6eb3a3d60dba6a1%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r85c9a764b573c786224688cc906c27e28343e18f5b33387f94cae90f%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r02e39d7beb32eebcdbb4b516e95f67d71c90d5d462b26f4078d21eeb%40%3Cdev.flink.apache.org%3E - https://lists.apache.org/thread.html/r02e39d7beb32eebcdbb4b516e95f67d71c90d5d462b26f4078d21eeb%40%3Cuser.flink.apache.org%3E - https://lists.apache.org/thread.html/r5e52caf41dc49df55b4ee80758356fe1ff2a88179ff24c685de7c28d%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache
.html/r5e52caf41dc49df55b4ee80758356fe1ff2a88179ff24c685de7c28d%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/rf7539287c90be979bac94af9aaba34118fbf968864944b4871af48dd%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r1d274d647b3c2060df9be21eade4ce56d3a59998cf19ac72662dd994%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/rb40dc9d63a5331bce8e80865b7fa3af9dd31e16555affd697b6f3526%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/r4886108206d4c535db9b20c813fe4723d4fe6a91b9278382af8b9d08%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/r5741f4dbdd129dbb9885f5fb170dc1b24a06b9313b
b9d08%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/r5741f4dbdd129dbb9885f5fb170dc1b24a06b9313bedef5e67fded94%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/r14fa8d38d5757254f1a2e112270c996711d514de2e3b01c93d397ab4%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/r00d9ab1fc0f1daf14cd4386564dd84f7889404438d81462c86dfa836%40%3Ccommon-dev.hadoop.apache.org%3E - https://lists.apache.org/thread.html/r764fc66435ee4d185d359c28c0887d3e5866d7292a8d5598d9e7cbc4%40%3Ccommon-issues.hadoop.apache.org%3E - https://lists.apache.org/thread.html/r2ea33ce5591a9cb9ed52750b6ab42ab658f529a7028c3166ba93c7d5%40%3Ccommon-issues.hadoop.apache.org
ts.apache.org/thread.html/r2ea33ce5591a9cb9ed52750b6ab42ab658f529a7028c3166ba93c7d5%40%3Ccommon-issues.hadoop.apache.org%3E - https://lists.apache.org/thread.html/r0ca83171c4898dc92b86fa6f484a7be1dc96206765f4d01dce0f1b28%40%3Ccommon-issues.hadoop.apache.org%3E - https://lists.apache.org/thread.html/r4ef574a5621b0e670a3ce641e9922543e34f22bf4c9ee9584aa67fcf%40%3Cissues.hbase.apache.org%3E - https://lists.apache.org/thread.html/r00097d0b5b6164ea428554007121d5dc1f88ba2af7b9e977a10572cd%40%3Cdev.hbase.apache.org%3E - https://lists.apache.org/thread.html/rd64381fb8f92d640c1975dc50dcdf1b8512e02a2a7b20292d3565cae%40%3Cissues.hbase.apache.org%3E - https://lists.apache.org/thread.html/r7fed8dd9bee4940
0dcdf1b8512e02a2a7b20292d3565cae%40%3Cissues.hbase.apache.org%3E - https://lists.apache.org/thread.html/r7fed8dd9bee494094e7011cf3c2ab75bd8754ea314c6734688c42932%40%3Ccommon-issues.hadoop.apache.org%3E
CVE ID: CVE-2015-5238 State: REJECTED Published: 2020-07-21T17:52:09 Last Updated: 2020-07-21T17:52:09 Description: No description available.
CVE ID: CVE-2015-5239 State: PUBLISHED Published: 2020-01-23T19:52:32 Last Updated: 2024-08-06T06:41:08.706Z Vendors: QEMU Products: QEMU Problem Types: Integer Overflow Description: Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.html - http://lists.fe
tober/168671.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html - http://www.ubuntu.com/usn/USN-2745-1 - http://www.openwall.com/lists/oss-security/2015/09/02/7 - https://github.com/qemu/qemu/commit/f9a70e79391f6d7c2a912d785239ee8effc1922d - https://www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14
CVE ID: CVE-2015-5240 State: PUBLISHED Published: 2015-10-27T16:00:00 Last Updated: 2024-08-06T06:41:08.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the device owner of a port to start with network: before the security group rules are applied. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1909.html - https://bugzilla.redhat.com/show_bug.cgi?id=1258458 - https://security.openstack.org/ossa/OSSA-2015-
SA-2015-1909.html - https://bugzilla.redhat.com/show_bug.cgi?id=1258458 - https://security.openstack.org/ossa/OSSA-2015-018.html - https://bugs.launchpad.net/neutron/+bug/1489111 - http://www.openwall.com/lists/oss-security/2015/09/08/9
CVE ID: CVE-2015-5241 State: PUBLISHED Published: 2017-05-19T19:00:00 Last Updated: 2024-08-06T06:41:08.590Z Vendors: Apache Software Foundation Products: Apache jUDDI Problem Types: Open Redirect Description: After logging into the portal, the logout jsp page redirects the browser back to the login page after. It is feasible for malicious users to redirect the browser to an unintended web page in Apache jUDDI 3.1.2, 3.1.3, 3.1.4, and 3.1.5 when utilizing the portlets based user interface also known as 'Pluto', 'jUDDI Portal', 'UDDI Portal' or 'uddi-console'. User session data, credentials, and auth tokens are cleared before the redirect. Additional Analyst Notes: - CVE Program Container: Re
ata, credentials, and auth tokens are cleared before the redirect. Additional Analyst Notes: - CVE Program Container: References: - http://juddi.apache.org/security.html
CVE ID: CVE-2015-5242 State: PUBLISHED Published: 2015-11-25T20:00:00 Last Updated: 2024-08-06T06:41:09.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute arbitrary code via a crafted extended attribute (xattrs). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1258743 - https://review.openstack.org/#/c/237994/ - http://rhn.redhat.com/errata/RHSA-2015-1918.html - https://access.redhat.com/solutions/1985893
CVE ID: CVE-2015-5243 State: PUBLISHED Published: 2018-08-20T21:00:00 Last Updated: 2024-08-06T06:41:08.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpWhois allows remote attackers to execute arbitrary code via a crafted whois record. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jsmitty12/phpWhois/issues/19 - https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180425-01_phpWhois_Code_Execution - https://github.com/sparc/phpWhois.org/commit/5cc572490c9053d46598ec9348a11e36a5a33a46#diff-f150ae17da7341bf6c2eff928684b3a3 - https://github.com/Gemorroj/phpwhois/commit/91c937e03c876ba1290b6de2a3ad953d2105fdd0 - https://blog
bf6c2eff928684b3a3 - https://github.com/Gemorroj/phpwhois/commit/91c937e03c876ba1290b6de2a3ad953d2105fdd0 - https://blog.nettitude.com/uk/cve-2015-5243-phpwhois-remote-code-execution - https://github.com/jsmitty12/phpWhois/blob/master/CHANGELOG.md
CVE ID: CVE-2015-5244 State: PUBLISHED Published: 2017-08-07T20:00:00 Last Updated: 2024-08-06T06:41:08.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote attackers to bypass application restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://pagure.io/mod_nss/c/34e1ccecb4a7d5054dba2f92b403af9b6ae1e110 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175248.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176026.html - https://bugzilla.redhat.com/show_bug.cgi?id=1259216
CVE ID: CVE-2015-5245 State: PUBLISHED Published: 2015-12-03T20:00:00 Last Updated: 2024-08-06T06:41:09.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted bucket name. Additional Analyst Notes: - CVE Program Container: References: - http://tracker.ceph.com/issues/12537 - https://access.redhat.com/errata/RHSA-2015:2512 - http://lists.ceph.com/pipermail/ceph-announce-ceph.com/2015-October/000034.html
CVE ID: CVE-2015-5246 State: PUBLISHED Published: 2017-10-06T15:00:00 Last Updated: 2024-08-06T06:41:08.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP Authentication functionality in Foreman might allow remote attackers with knowledge of old passwords to gain access via vectors involving the password lifetime period in Active Directory. Additional Analyst Notes: - CVE Program Container: References: - http://projects.theforeman.org/issues/11471 - https://bugzilla.redhat.com/show_bug.cgi?id=1258700
CVE ID: CVE-2015-5247 State: PUBLISHED Published: 2016-04-14T15:00:00 Last Updated: 2024-08-06T06:41:08.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by triggering a failed unlink after creating a volume on a root_squash NFS pool. Additional Analyst Notes: - CVE Program Container: References: - http://security.libvirt.org/2015/0003.html - http://www.ubuntu.com/usn/USN-2867-1
CVE ID: CVE-2015-5248 State: PUBLISHED Published: 2017-09-20T16:00:00 Last Updated: 2024-08-06T06:41:08.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected file download vulnerability in Red Hat Feedhenry Enterprise Mobile Application Platform. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-017/?fid=7150 - https://bugzilla.redhat.com/show_bug.cgi?id=1272326
CVE ID: CVE-2015-5249 State: REJECTED Published: 2015-09-10T14:00:00 Last Updated: 2015-09-10T12:57:01 Description: No description available.
CVE ID: CVE-2015-5250 State: PUBLISHED Published: 2015-09-08T15:00:00 Last Updated: 2024-08-06T06:41:08.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openshift/origin/issues/4374 - https://access.redhat.com/errata/RHSA-2015:1736 - https://bugzilla.redhat.com/show_bug.cgi?id=1259867
CVE ID: CVE-2015-5251 State: PUBLISHED Published: 2015-10-26T17:00:00 Last Updated: 2024-08-06T06:41:08.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-status header to images/*. Additional Analyst Notes: - CVE Program Container: References: - https://security.openstack.org/ossa/OSSA-2015-019.html - https://bugs.launchpad.net/bugs/1482371 - http://rhn.redhat.com/errata/RHSA-2015-1897.html
CVE ID: CVE-2015-5252 State: PUBLISHED Published: 2015-12-29T22:00:00 Last Updated: 2024-08-06T06:41:08.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allows remote attackers to bypass intended file-access restrictions via a symlink that points outside of a share. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79733 - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.h
ail/package-announce/2015-December/174391.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html - http://www.ubuntu.com/usn/USN-2855-2 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html - https://bugzilla.redhat.com/show_bug.cgi?id=1290288 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html - http://lis
announce/2016-01/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993 - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=4278ef25f64d5fdbf432ff1534e275416ec9561e - http://www.securitytracker.com/id/1034493 - http://www.debian.org/security/2016/dsa-3433 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html
tp://www.debian.org/security/2016/dsa-3433 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://security.gentoo.org/glsa/201612-47 - https://www.samba.org/samba/security/CVE-2015-5252.html - http://www.ubuntu.com/usn/USN-2855-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html
CVE ID: CVE-2015-5253 State: PUBLISHED Published: 2015-11-18T16:00:00 Last Updated: 2024-08-06T06:41:09.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack." Additional Analyst Notes: - CVE Program Container: References: - http://cxf.apache.org/security-advisories.data/CVE-2015-5253.txt.asc - https://git-wip-us.apache.org/repos/asf?p=cxf.git%3Ba=commitdiff%3Bh=845eccb6484b43ba02875c71e824db23ae4f20c0 - http://www.securitytracker.com/id/1034
repos/asf?p=cxf.git%3Ba=commitdiff%3Bh=845eccb6484b43ba02875c71e824db23ae4f20c0 - http://www.securitytracker.com/id/1034162 - http://rhn.redhat.com/errata/RHSA-2016-0321.html - http://www.openwall.com/lists/oss-security/2015/11/14/1 - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdb
44bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2015-5254 State: PUBLISHED Published: 2016-01-08T19:00:00 Last Updated: 2024-08-06T06:41:08.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3524 - http://rhn.redhat.com/errata/RHSA-2016-2035.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174537.html - http://www.openwall.com/lists/oss-security/2015/12/
raproject.org/pipermail/package-announce/2015-December/174537.html - http://www.openwall.com/lists/oss-security/2015/12/08/6 - http://rhn.redhat.com/errata/RHSA-2016-0489.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174371.html - http://rhn.redhat.com/errata/RHSA-2016-2036.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://issues.apache.org/jira/browse/AMQ-6013 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://activemq.apache.org/security-advisories.data/CVE-2015-5254-announcement.txt - http
sory/cpujul2017-3236622.html - http://activemq.apache.org/security-advisories.data/CVE-2015-5254-announcement.txt - https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E
CVE ID: CVE-2015-5255 State: PUBLISHED Published: 2015-11-18T21:00:00 Last Updated: 2024-08-06T06:41:08.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle Data Services 3.0.x before 3.0.0.354175, 3.1.x before 3.1.0.354180, 4.5.x before 4.5.1.354177, 4.6.2.x before 4.6.2.354178, and 4.7.x before 4.7.0.354178, allows remote attackers to send HTTP traffic to intranet servers via a crafted XML document, related to a Server-Side Request Forgery (SSRF) issue. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=145996963420108&w=2 - https://helpx.adob
yst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=145996963420108&w=2 - https://helpx.adobe.com/security/products/coldfusion/apsb15-29.html - http://packetstormsecurity.com/files/134506/Apache-Flex-BlazeDS-4.7.1-SSRF.html - http://www.securitytracker.com/id/1034210 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073670 - http://www.vmware.com/security/advisories/VMSA-2015-0008.html - https://helpx.adobe.com/security/products/livecycleds/apsb15-30.html - http://www.securityfocus.com/archive/1/536958/100/0/threaded - http://www.securityfocus.com/bid/77626
CVE ID: CVE-2015-5256 State: PUBLISHED Published: 2015-11-23T11:00:00 Last Updated: 2024-08-06T06:41:08.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Cordova-Android before 4.1.0, when an application relies on a remote server, improperly implements a JavaScript whitelist protection mechanism, which allows attackers to bypass intended access restrictions via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/536944/100/0/threaded - http://packetstormsecurity.com/files/134497/Apache-Cordova-3.7.2-Whitelist-Failure.html - http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000187.html - http://www.securityf
ordova-3.7.2-Whitelist-Failure.html - http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000187.html - http://www.securityfocus.com/bid/77677 - https://cordova.apache.org/announcements/2015/11/20/security.html - http://jvn.jp/en/jp/JVN18889193/index.html
CVE ID: CVE-2015-5257 State: PUBLISHED Published: 2015-11-16T11:00:00 Last Updated: 2024-08-06T06:41:08.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted USB device. NOTE: this ID was incorrectly used for an Apache Cordova issue that has the correct ID of CVE-2015-8320. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3372 - http://www.securityfocus.com/bid/76834 - http://www.ubuntu.com/usn/USN-2792-1 -
www.debian.org/security/2015/dsa-3372 - http://www.securityfocus.com/bid/76834 - http://www.ubuntu.com/usn/USN-2792-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cbb4be652d374f64661137756b8f357a1827d6a4 - http://www.ubuntu.com/usn/USN-2794-1 - http://www.ubuntu.com/usn/USN-2799-1 - http://www.ubuntu.com/usn/USN-2795-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1265607 - https://github.com/torvalds/linux/commit/cbb4be652d374f64661137756b8f357a1827d6a4 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.4 - http://www.openwall.com/lists/oss-security/2015/09/23/1 - http://www.ubuntu.com/usn/USN-2798-1