Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-3120 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:31.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3119, CVE-2015-3121, CVE-2015-3122, and CVE-2015-4433. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 -
CVE ID: CVE-2015-3121 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:31.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3119, CVE-2015-3120, CVE-2015-3122, and CVE-2015-4433. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 -
CVE ID: CVE-2015-3122 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:31.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, and CVE-2015-4433. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 -
CVE ID: CVE-2015-3123 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:31.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431. Additional Analyst Notes: - CVE Program Container: References: - h
CVE ID: CVE-2015-3124 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:30.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-201
28, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37849/ - http://www.securitytracker.com/id/1032810 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html - http://www.securityfocus.com/bid/75590
CVE ID: CVE-2015-3125 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:31.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, and CVE-2015-5116. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - http://
CVE ID: CVE-2015-3126 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:30.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-4429. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - ht
15-4429. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - http://www.securityfocus.com/bid/75596 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html
CVE ID: CVE-2015-3127 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:31.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-201
28, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html - http://www.securityfocus.com/bid/75590
CVE ID: CVE-2015-3128 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:31.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-201
27, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html - http://www.securityfocus.com/bid/75590
CVE ID: CVE-2015-3129 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:32.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-201
27, CVE-2015-3128, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html - http://www.securityfocus.com/bid/75590
CVE ID: CVE-2015-3130 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:31.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431. Additional Analyst Notes: - CVE Program Container: References: - h
123, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - http://www.securityfocus.com/bid/75591 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html
CVE ID: CVE-2015-3131 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:31.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-201
27, CVE-2015-3128, CVE-2015-3129, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html - http://www.securityfocus.com/bid/75590
CVE ID: CVE-2015-3132 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:32.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-201
27, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html - http://www.securityfocus.com/bid/75590
CVE ID: CVE-2015-3133 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:31.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3134, and CVE-2015-4431. Additional Analyst Notes: - CVE Program Container: References: - h
123, CVE-2015-3130, CVE-2015-3134, and CVE-2015-4431. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - http://www.securityfocus.com/bid/75591 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html
CVE ID: CVE-2015-3134 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:31.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, and CVE-2015-4431. Additional Analyst Notes: - CVE Program Container: References: - h
123, CVE-2015-3130, CVE-2015-3133, and CVE-2015-4431. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - http://www.securityfocus.com/bid/75591 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html - https://www.exploit-db.com/exploits/37862/
CVE ID: CVE-2015-3135 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:32.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-4432 and CVE-2015-5118. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75592 - http://www.securitytrack
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75592 - http://www.securitytracker.com/id/1032810 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html
CVE ID: CVE-2015-3136 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:30.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-201
27, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html - http://www.securityfocus.com/bid/75590
CVE ID: CVE-2015-3137 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T05:39:30.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-4428, CVE-2015-4430, and CVE-201
27, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html - http://www.securityfocus.com/bid/75590
CVE ID: CVE-2015-3138 State: PUBLISHED Published: 2017-09-27T18:00:00 Last Updated: 2024-08-06T05:39:31.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash). Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2017-05/msg00018.html - https://github.com/the-tcpdump-group/tcpdump/issues/446 - https://bugzilla.redhat.com/show_bug.cgi?id=1212342 - https://github.com/the-tcpdump-group/tcpdump/commit/3ed82f4ed0095768529afc22b923c8f7171fff70
CVE ID: CVE-2015-3140 State: PUBLISHED Published: 2019-11-21T21:41:58 Last Updated: 2024-08-06T05:39:31.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567 Additional Analyst Notes: - CVE Program Container: References: - http://web.synametrics.com/SynamanVersionHistory.htm - https://web.synametrics.com/SyntailVersionHistory.htm - https://web.synametrics.com/SyncrifyVersionHistory.htm
CVE ID: CVE-2015-3141 State: PUBLISHED Published: 2015-05-20T19:00:00 Last Updated: 2024-08-06T05:39:31.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies Xeams 4.5 Build 5755 and earlier allow remote attackers to hijack the authentication of administrators for requests that create an (1) SMTP domain or a (2) user via a request to /FrontController; or conduct cross-site scripting (XSS) attacks via the (3) domainname parameter to /FrontController, when creating a new SMTP domain configuration; the (4) txtRecipient parameter to /FrontController, when creating a new forwarder; the (5) popFetchSer
in configuration; the (4) txtRecipient parameter to /FrontController, when creating a new forwarder; the (5) popFetchServer, (6) popFetchUser, or (7) popFetchRecipient parameter to /FrontController, when creating a new POP3 Fetcher account; or the (8) Smtp HELO domain in the Advanced Server Configuration. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/121847 - http://www.securityfocus.com/bid/74578 - https://www.exploit-db.com/exploits/36949/ - http://packetstormsecurity.com/files/131844/Xeams-4.5-Build-5755-CSRF-Cross-Site-Scripting.html
CVE ID: CVE-2015-3142 State: PUBLISHED Published: 2017-06-26T15:00:00 Last Updated: 2024-08-06T05:39:31.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1083.html - https://bugzilla.redhat.com/show_bug.cgi?id=1212818 - http://www.openwall.com/lists/oss-security/2015/04/17/5 - http:
- https://bugzilla.redhat.com/show_bug.cgi?id=1212818 - http://www.openwall.com/lists/oss-security/2015/04/17/5 - http://www.securityfocus.com/bid/75116 - http://rhn.redhat.com/errata/RHSA-2015-1210.html
CVE ID: CVE-2015-3143 State: PUBLISHED Published: 2015-04-24T14:00:00 Last Updated: 2024-08-06T05:39:31.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=145612005512270&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157188.html - http://curl.haxx.se/docs/adv_20150422A.html - http://www.debian.org/security/2015/dsa-3232 - http://lists.fedoraproject.org/piperm