Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-6918 State: PUBLISHED Published: 2017-10-10T16:00:00 Last Updated: 2024-08-06T07:36:34.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: salt before 2015.5.5 leaks git usernames and passwords to the log. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saltstack/salt/commit/28aa9b105804ff433d8f663b2f9b804f2b75495a - https://bugzilla.redhat.com/show_bug.cgi?id=1257154
CVE ID: CVE-2015-6919 State: PUBLISHED Published: 2015-09-11T20:00:00Z Last Updated: 2024-09-16T18:34:38.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the googleSearch (CSE) (com_googlesearch_cse) component 3.0.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the q parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133375/Joomla-GoogleSearch-CSE-3.0.2-Cross-Site-Scripting.html
CVE ID: CVE-2015-6920 State: PUBLISHED Published: 2015-09-11T20:00:00 Last Updated: 2024-08-06T07:36:34.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in js/window.php in the sourceAFRICA plugin 0.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133371/WordPress-sourceAFRICA-0.1.3-Cross-Site-Scripting.html - https://wpvulndb.com/vulnerabilities/8169
CVE ID: CVE-2015-6921 State: PUBLISHED Published: 2015-09-11T20:00:00Z Last Updated: 2024-09-17T04:04:29.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Zendesk Feedback Tab module 7.x-1.x before 7.x-1.1 for Drupal allows remote administrators with the "Configure Zendesk Feedback Tab" permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2561893 - https://www.drupal.org/node/2561887
CVE ID: CVE-2015-6922 State: PUBLISHED Published: 2020-02-17T18:00:30 Last Updated: 2024-08-06T07:36:35.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers to bypass authentication and (1) add an administrative account via crafted request to LocalAuth/setAccount.aspx or (2) write to and execute arbitrary files via a full pathname in the PathData parameter to ConfigTab/uploader.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advi
ab/uploader.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-448 - http://packetstormsecurity.com/files/133782/Kaseya-Virtual-System-Administrator-Code-Execution-Privilege-Escalation.html - http://www.zerodayinitiative.com/advisories/ZDI-15-449 - https://www.exploit-db.com/exploits/38351/ - https://helpdesk.kaseya.com/entries/96164487--Kaseya-Security-Advisory
CVE ID: CVE-2015-6923 State: PUBLISHED Published: 2015-09-21T19:00:00 Last Updated: 2024-08-06T07:36:34.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x00000ffd ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Sep/72 - http://packetstormsecurity.com/files/133620/VBox-Satellite-Express-Arbitrary-Write-Privilege-Escalation.html - https://www.exploit-db.com/exploits/38225/ - http://www.securityfocus.com/archive/1/536491/100/0/threaded - https:/
ml - https://www.exploit-db.com/exploits/38225/ - http://www.securityfocus.com/archive/1/536491/100/0/threaded - https://www.korelogic.com/Resources/Advisories/KL-001-2015-005.txt
CVE ID: CVE-2015-6925 State: PUBLISHED Published: 2016-01-22T15:00:00 Last Updated: 2024-08-06T07:36:34.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: wolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service (resource consumption or traffic amplification) via a crafted DTLS cookie in a ClientHello message. Additional Analyst Notes: - CVE Program Container: References: - http://wolfssl.com/wolfSSL/Docs-wolfssl-changelog.html - https://github.com/IAIK/wolfSSL-DoS - https://wolfssl.com/wolfSSL/Blog/Entries/2015/9/17_Two_Vulnerabilities_Recently_Found%2C_An_Attack_on_RSA_using_CRT_and_DoS_Vulnerability_With_DTLS.html
CVE ID: CVE-2015-6926 State: PUBLISHED Published: 2018-01-19T15:00:00 Last Updated: 2024-08-06T07:36:34.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenID Single Sign-On authentication functionality in OXID eShop before 4.5.0 allows remote attackers to impersonate users via the email address in a crafted authentication token. Additional Analyst Notes: - CVE Program Container: References: - https://oxidforge.org/en/oxid-security-bulletin-2015-001.html - https://bugs.oxid-esales.com/view.php?id=6224
CVE ID: CVE-2015-6927 State: PUBLISHED Published: 2015-09-28T20:00:00 Last Updated: 2024-08-06T07:36:34.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: vzctl before 4.9.4 determines the virtual environment (VE) layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container (CT) root users to change the root password for arbitrary ploop containers, as demonstrated by a symlink attack on the ploop container root.hdd file and then access a control panel. Additional Analyst Notes: - CVE Program Container: References: - https://openvz.org/Download/vzctl/4.9.4 - https://security.gentoo.org/glsa/201701-30 - http://www.debi
er: References: - https://openvz.org/Download/vzctl/4.9.4 - https://security.gentoo.org/glsa/201701-30 - http://www.debian.org/security/2015/dsa-3357 - https://src.openvz.org/projects/OVZL/repos/vzctl/commits/9e98ea630ac0e88b44e3e23c878a5166aeb74e1c
CVE ID: CVE-2015-6928 State: PUBLISHED Published: 2015-09-28T15:00:00 Last Updated: 2024-08-06T07:36:34.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: classes/admin.class.php in CubeCart 5.2.12 through 5.2.16 and 6.x before 6.0.7 does not properly validate that a password reset request was made, which allows remote attackers to change the administrator password via a recovery request with a space character in the validate parameter and the administrator email in the email parameter. Additional Analyst Notes: - CVE Program Container: References: - https://forums.cubecart.com/topic/50277-critical-security-issue-admin-account-hijack/ - http://seclists.org/fulldisclosure/2015/Se
rums.cubecart.com/topic/50277-critical-security-issue-admin-account-hijack/ - http://seclists.org/fulldisclosure/2015/Sep/40 - http://packetstormsecurity.com/files/133535/CubeCart-6.0.6-Administrative-Bypass.html - http://www.securitytracker.com/id/1034015
CVE ID: CVE-2015-6929 State: PUBLISHED Published: 2015-09-16T18:00:00 Last Updated: 2024-08-06T07:36:34.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Nokia Networks (formerly Nokia Solutions and Networks and Nokia Siemens Networks) @vantage Commander allow remote attackers to inject arbitrary web script or HTML via the (1) idFilter or (2) nameFilter parameter to cftraces/filter/fl_copy.jsp; the (3) flName parameter to cftraces/filter/fl_crea1.jsp; the (4) serchStatus, (5) refreshTime, or (6) serchNode parameter to cftraces/process/pr_show_process.jsp; the (7) MaxActivationTime, (8) NumberOfBytes, (9) NumberOfTracefiles,
parameter to cftraces/process/pr_show_process.jsp; the (7) MaxActivationTime, (8) NumberOfBytes, (9) NumberOfTracefiles, (10) SessionName, or (11) serchSessionkind parameter to cftraces/session/se_crea.jsp; the (12) serchSessionDescription parameter to cftraces/session/se_show.jsp; the (13) serchApplication or (14) serchApplicationkind parameter to cftraces/session/tr_crea_filter.jsp; the (15) columKeyUnique, (16) columParameter, (17) componentName, (18) criteria1, (19) criteria2, (20) criteria3, (21) description, (22) filter, (23) id, (24) pathName, (25) tableName, or (26) component parameter to cftraces/session/tr_create_tagg_para.jsp; or the (27) userid parameter to home/certificate_assoc
component parameter to cftraces/session/tr_create_tagg_para.jsp; or the (27) userid parameter to home/certificate_association.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=0B-LWHbwdK3P9eTNKRkdDWGpkN2M - http://packetstormsecurity.com/files/133538/Nokia-Solutions-And-Networks-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2015/Sep/42
CVE ID: CVE-2015-6931 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-06T07:36:34.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036112 - http://www.vmware.com/security/advisories/VMSA-2016-0009.html
CVE ID: CVE-2015-6932 State: PUBLISHED Published: 2015-09-18T22:00:00 Last Updated: 2024-08-06T07:36:34.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS LDAP servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033582 - http://www.vmware.com/security/advisories/VMSA-2015-0006.html
CVE ID: CVE-2015-6933 State: PUBLISHED Published: 2016-01-09T02:00:00 Last Updated: 2024-08-06T07:36:34.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x before 7.1.2, and VMware ESXi 5.0 through 6.0 allows Windows guest OS users to gain guest OS privileges or cause a denial of service (guest OS kernel memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034604 - http://www.securitytracker.com/id/1034603 - http://www.vmware.com/security/advi
p://www.securitytracker.com/id/1034604 - http://www.securitytracker.com/id/1034603 - http://www.vmware.com/security/advisories/VMSA-2016-0001.html
CVE ID: CVE-2015-6934 State: PUBLISHED Published: 2015-12-21T02:00:00 Last Updated: 2024-08-06T07:36:34.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Serialized-object interfaces in VMware vRealize Orchestrator 6.x, vCenter Orchestrator 5.x, vRealize Operations 6.x, vCenter Operations 5.x, and vCenter Application Discovery Manager (vADM) 7.x allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2015-0009.html - http://www.securityfocus.com/bid/79648
CVE ID: CVE-2015-6935 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-6937 State: PUBLISHED Published: 2015-10-19T10:00:00 Last Updated: 2024-08-06T07:36:35.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __rds_conn_create function in net/rds/connection.c in the Linux kernel through 4.2.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html - http://lists.opensuse.org/opensuse-security
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html - http://www.debian.org/security/2015/dsa-3364 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168447.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html - https://bugzilla.redhat.com/show_bug.cgi?id=1263139 - http://www.securitytracker.com/id/1034453 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=74e98eb085889b0d2d4908f59f6e00026063014f - http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html - http://lists.opensuse.org/opensuse-security-announce/20
tp://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.openwall.com/lists/oss-security/2015/09/14/3 - http://www.ubuntu.com/usn/USN-2774-1 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg000
015/09/14/3 - http://www.ubuntu.com/usn/USN-2774-1 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html - https://github.com/torvalds/linux/commit/74e98eb085889b0d2d4908f59f6e00026063014f - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167358.html - http://www.securityfocus.com/bid/76767 - http://www.ubuntu.com/usn/USN-2773-1 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168539.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - ht
urity-advisory/cpuoct2018-4428296.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html - http://www.ubuntu.com/usn/USN-2777-1 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html
CVE ID: CVE-2015-6938 State: PUBLISHED Published: 2015-09-21T19:00:00 Last Updated: 2024-08-06T07:36:34.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-10/msg00016.html - https://github.com/ipython/ipython/commi
eferences: - http://lists.opensuse.org/opensuse-updates/2015-10/msg00016.html - https://github.com/ipython/ipython/commit/3ab41641cf6fce3860c73d5cf4645aa12e1e5892 - https://bugzilla.redhat.com/show_bug.cgi?id=1259405 - http://seclists.org/oss-sec/2015/q3/474 - http://seclists.org/oss-sec/2015/q3/544 - https://github.com/jupyter/notebook/commit/dd9876381f0ef09873d8c5f6f2063269172331e3 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167670.html - https://github.com/jupyter/notebook/commit/35f32dd2da804d108a3a3585b69ec3295b2677ed - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166471.html - http://lists.fedoraproject.org/pipermail/package-an
aproject.org/pipermail/package-announce/2015-September/166471.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166460.html
CVE ID: CVE-2015-6939 State: PUBLISHED Published: 2015-09-18T16:00:00 Last Updated: 2024-08-06T07:36:34.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login module in Joomla! 3.4.x before 3.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033541 - http://developer.joomla.org/security-centre/626-20150908-core-xss-vulnerability.html - http://packetstormsecurity.com/files/133907/Joomla-CMS-3.4.3-Cross-Site-Scripting.html
CVE ID: CVE-2015-6940 State: PUBLISHED Published: 2015-09-22T15:00:00 Last Updated: 2024-08-06T07:36:34.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GetResource servlet in Pentaho Business Analytics (BA) Suite 4.5.x, 4.8.x, and 5.0.x through 5.2.x and Pentaho Data Integration (PDI) Suite 4.3.x, 4.4.x, and 5.0.x through 5.2.x does not restrict access to files in the pentaho-solutions/system folder, which allows remote attackers to obtain passwords and other sensitive information via a file name in the resource parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/536477/100/0/threaded - http://packetstormsecur
Program Container: References: - http://www.securityfocus.com/archive/1/536477/100/0/threaded - http://packetstormsecurity.com/files/133601/Pentaho-5.2.x-BA-Suite-PDI-Information-Disclosure.html - https://support.pentaho.com/entries/78884125-Security-Vulnerability-Announcement-Feb-2015
CVE ID: CVE-2015-6941 State: PUBLISHED Published: 2017-08-09T16:00:00 Last Updated: 2024-08-06T07:36:34.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs. Additional Analyst Notes: - CVE Program Container: References: - https://docs.saltstack.com/en/latest/topics/releases/2015.5.6.html - https://docs.saltstack.com/en/latest/topics/releases/2015.8.1.html - https://bugzilla.redhat.com/show_bug.cgi?id=1273066 - https://github.com/twangboy/salt/commit/c0689e32154c41f59840ae10ffc5fbfa30618710
CVE ID: CVE-2015-6942 State: PUBLISHED Published: 2017-08-29T15:00:00 Last Updated: 2024-08-06T07:36:34.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Coremail XT3.0 allows remote attackers to inject arbitrary web script or HTML via a hyperlink in a document attachment. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Nov/100
CVE ID: CVE-2015-6943 State: PUBLISHED Published: 2015-09-15T18:00:00 Last Updated: 2024-08-06T07:36:34.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the serendipity_checkCommentToken function in include/functions_comments.inc.php in Serendipity before 2.0.2, when "Use Tokens for Comment Moderation" is enabled, allows remote administrators to execute arbitrary SQL commands via the serendipity[id] parameter to serendipity_admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Sep/10 - http://www.securitytracker.com/id/1033558 - http://packetstormsecurity.com/files/133428/Serendipity-2
sure/2015/Sep/10 - http://www.securitytracker.com/id/1033558 - http://packetstormsecurity.com/files/133428/Serendipity-2.0.1-Blind-SQL-Injection.html - http://blog.curesec.com/article/blog/Serendipity-201-Blind-SQL-Injection-52.html - http://blog.s9y.org/archives/265-Serendipity-2.0.2-Security-Fix-Release.html
CVE ID: CVE-2015-6944 State: PUBLISHED Published: 2015-09-15T18:00:00 Last Updated: 2024-08-06T07:36:35.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to hijack the authentication of users for requests that execute arbitrary SQL commands via the cmd parameter to sys/sys/listaBD2.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/536406/100/0/threaded - http://hyp3rlinx.altervista.org/advisories/AS-JSPMYSQLADMINISTRADOR-0904.txt - http://packetstormsecurity.com/files/133466/JSPMySQL-Administrador-1-Cross-Site-Reques
-JSPMYSQLADMINISTRADOR-0904.txt - http://packetstormsecurity.com/files/133466/JSPMySQL-Administrador-1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
CVE ID: CVE-2015-6945 State: PUBLISHED Published: 2015-09-15T18:00:00 Last Updated: 2024-08-06T07:36:34.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to inject arbitrary web script or HTML via the bd parameter to sys/sys/listaBD2.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/536406/100/0/threaded - http://hyp3rlinx.altervista.org/advisories/AS-JSPMYSQLADMINISTRADOR-0904.txt - http://packetstormsecurity.com/files/133466/JSPMySQL-Administrador-1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
CVE ID: CVE-2015-6946 State: PUBLISHED Published: 2015-09-15T18:00:00 Last Updated: 2024-08-06T07:36:34.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Reprise License Manager service in Borland AccuRev allow remote attackers to execute arbitrary code via the (1) akey or (2) actserver parameter to the activate_doit function or (3) licfile parameter to the service_startup_doit functionality. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-414/ - http://www.zerodayinitiative.com/advisories/ZDI-15-416 - https://redr2e.com/cve-to-poc-cve-2015-6946/ - http://www.zeroday
tp://www.zerodayinitiative.com/advisories/ZDI-15-416 - https://redr2e.com/cve-to-poc-cve-2015-6946/ - http://www.zerodayinitiative.com/advisories/ZDI-15-412
CVE ID: CVE-2015-6947 State: REJECTED Published: 2015-09-15T18:00:00 Last Updated: 2015-09-16T17:57:02 Description: No description available.
CVE ID: CVE-2015-6948 State: PUBLISHED Published: 2015-09-15T18:00:00 Last Updated: 2024-08-06T07:36:35.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Microsoft Word document conversion feature in Corel WordPerfect allows remote attackers to execute arbitrary code via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033559 - http://www.zerodayinitiative.com/advisories/ZDI-15-410
CVE ID: CVE-2015-6949 State: PUBLISHED Published: 2015-09-15T18:00:00 Last Updated: 2024-08-06T07:36:34.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ASUS TM-AC1900 router allows remote attackers to execute arbitrary code via crafted HTTP header values. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033560 - http://www.zerodayinitiative.com/advisories/ZDI-15-409
CVE ID: CVE-2015-6959 State: PUBLISHED Published: 2017-06-07T20:00:00 Last Updated: 2024-08-06T07:36:34.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Vindula 1.9. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=-WXWqNBEQQc