Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-8736 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mp2t_find_next_pcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not reserve memory for a trailer, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79382 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11820 - http://www.wireshark.org/security/wnpa-sec-2015-54.html - https://security.gentoo.org/glsa
zilla/show_bug.cgi?id=11820 - http://www.wireshark.org/security/wnpa-sec-2015-54.html - https://security.gentoo.org/glsa/201604-05 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=baa3eab78b422616a92ee38551c1b1510dca4ccb - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8737 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mp2t_open function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e3fc691368af60bbbaec9e038ee6a6d3b7707955 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11821 - https://security.gentoo.org/glsa/201604
038ee6a6d3b7707955 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11821 - https://security.gentoo.org/glsa/201604-05 - http://www.wireshark.org/security/wnpa-sec-2015-55.html - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8738 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: The s7comm_decode_ud_cpu_szl_subfunc function in epan/dissectors/packet-s7comm_szl_ids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does not validate the list count in an SZL response, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11823 - http://www.wireshark.org/security/wnpa-sec-2015-56.html - https://code.wireshark.or
org/bugzilla/show_bug.cgi?id=11823 - http://www.wireshark.org/security/wnpa-sec-2015-56.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=858c3f0079f987833fb22eba2c361d1a88ba4103 - https://security.gentoo.org/glsa/201604-05 - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8739 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ipmi_fmt_udpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1 improperly attempts to access a packet scope, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=96bf82ced0b58c7a4c2a6c300efeebe4f05c0ff4 - http://www.wireshark.org/security/wnpa-sec-2015-57.html - http://ww
ommit%3Bh=96bf82ced0b58c7a4c2a6c300efeebe4f05c0ff4 - http://www.wireshark.org/security/wnpa-sec-2015-57.html - http://www.securityfocus.com/bid/79382 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11831 - https://security.gentoo.org/glsa/201604-05 - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8740 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_tds7_colmetadata_token function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not validate the number of columns, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79382 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11846 - http://www.wireshark.org/security/wnpa-sec-2015-58.html - https
ps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11846 - http://www.wireshark.org/security/wnpa-sec-2015-58.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e78093f69f1e95df919bbe644baa06c7e4e720c0 - https://security.gentoo.org/glsa/201604-05 - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8741 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_ppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2015-59.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2290eba5cb25f927f9142680193ac1158d35506e - https://bugs.wireshark.org/bugz
/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2290eba5cb25f927f9142680193ac1158d35506e - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11876 - https://security.gentoo.org/glsa/201604-05 - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8742 State: PUBLISHED Published: 2016-01-04T02:00:00 Last Updated: 2024-08-06T08:29:21.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_CPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d48b0eff28c995947ac3f8d842ddd9b50dd5798d - http://www.wireshark.org/security/wnpa-sec-2015-60.html - https://bu
mmit%3Bh=d48b0eff28c995947ac3f8d842ddd9b50dd5798d - http://www.wireshark.org/security/wnpa-sec-2015-60.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11931 - https://security.gentoo.org/glsa/201604-05 - http://www.securitytracker.com/id/1034551
CVE ID: CVE-2015-8743 State: PUBLISHED Published: 2016-12-29T22:00:00 Last Updated: 2024-08-06T08:29:21.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged (CAP_SYS_RAWIO) user/process could use this flaw to leak or corrupt QEMU memory bytes. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/04/2 - https://bugzilla.redhat.com/show_bug.cgi?id=1264929 - http://www.securitytracker.com/id/1034574 - http://www.securityfocus.com/bid/79820
redhat.com/show_bug.cgi?id=1264929 - http://www.securitytracker.com/id/1034574 - http://www.securityfocus.com/bid/79820 - http://www.openwall.com/lists/oss-security/2016/01/04/1 - http://www.debian.org/security/2016/dsa-3469 - http://www.debian.org/security/2016/dsa-3470 - https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg00050.html - http://www.debian.org/security/2016/dsa-3471 - https://security.gentoo.org/glsa/201602-01
CVE ID: CVE-2015-8744 State: PUBLISHED Published: 2016-12-29T22:00:00 Last Updated: 2024-08-06T08:29:21.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It occurs when a guest sends a Layer-2 packet smaller than 22 bytes. A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1270871 - http://www.securityfocus.com/bid/79821 - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=a7278b36fcab9af469563b
871 - http://www.securityfocus.com/bid/79821 - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=a7278b36fcab9af469563bd7b - http://www.openwall.com/lists/oss-security/2016/01/04/3 - http://www.openwall.com/lists/oss-security/2016/01/04/6 - http://www.debian.org/security/2016/dsa-3471 - http://www.securitytracker.com/id/1034576 - https://security.gentoo.org/glsa/201602-01
CVE ID: CVE-2015-8745 State: PUBLISHED Published: 2016-12-29T22:00:00 Last Updated: 2024-08-06T08:29:21.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It could occur while reading Interrupt Mask Registers (IMR). A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034575 - http://www.securityfocus.com/bid/79822 - http://www.openwall.com/lists/oss-security/2016/01/04/7 - http://www.openwall.com/lists/oss
ecurityfocus.com/bid/79822 - http://www.openwall.com/lists/oss-security/2016/01/04/7 - http://www.openwall.com/lists/oss-security/2016/01/04/4 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c6048f849c7e3f009786df76206e895 - https://bugzilla.redhat.com/show_bug.cgi?id=1270876 - http://www.debian.org/security/2016/dsa-3471 - https://security.gentoo.org/glsa/201602-01
CVE ID: CVE-2015-8746 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-06T08:29:21.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/nfs/nfs4proc.c in the NFS client in the Linux kernel before 4.2.2 does not properly initialize memory for migration recovery operations, which allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) via crafted network traffic. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1295802 - https://github.com/torvalds/linux/commit/18e3b739fdc826481c6a1335ce0c5b19b3d415da - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://rhn.
s/linux/commit/18e3b739fdc826481c6a1335ce0c5b19b3d415da - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://www.securitytracker.com/id/1034594 - http://www.openwall.com/lists/oss-security/2016/01/05/9 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=18e3b739fdc826481c6a1335ce0c5b19b3d415da
CVE ID: CVE-2015-8747 State: PUBLISHED Published: 2016-02-03T15:00:00 Last Updated: 2024-08-06T08:29:21.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/06/7 - http://www.securityfocus.com/bid/80255 - http://www.openwall.com/lists/oss-security/2016/01/05/7 - https://github.com/Unrud/Radicale/commit/bcaf452e516c02c9bed584a73736431c5e8831f1 - https://github.com/Kozea/Radicale/pull/343 - http://www.debian.org/security/2
bcaf452e516c02c9bed584a73736431c5e8831f1 - https://github.com/Kozea/Radicale/pull/343 - http://www.debian.org/security/2016/dsa-3462 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175776.html - http://www.openwall.com/lists/oss-security/2016/01/06/4 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175738.html
CVE ID: CVE-2015-8748 State: PUBLISHED Published: 2016-02-03T15:00:00 Last Updated: 2024-08-06T08:29:21.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user name, as demonstrated by ".*". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/80255 - http://www.openwall.com/lists/oss-security/2016/01/05/7 - https://github.com/Kozea/Radicale/pull/341 - http://www.debian.org/security/2016/dsa-3462 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175776.html - http://www.openwall.
016/dsa-3462 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175776.html - http://www.openwall.com/lists/oss-security/2016/01/06/4 - https://github.com/Unrud/Radicale/commit/4bfe7c9f7991d534c8b9fbe153af9d341f925f98 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175738.html
CVE ID: CVE-2015-8749 State: PUBLISHED Published: 2016-01-15T19:00:00 Last Updated: 2024-08-06T08:29:21.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: The volume_utils._parse_volume_info function in OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty) includes the connection_info dictionary in the StorageError message when using the Xen backend, which might allow attackers to obtain sensitive password information by reading log files or other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/07/9 - http://www.securityfocus.com/bid/80189 - https://security.open
http://www.openwall.com/lists/oss-security/2016/01/07/9 - http://www.securityfocus.com/bid/80189 - https://security.openstack.org/ossa/OSSA-2016-002.html - https://bugs.launchpad.net/nova/+bug/1516765 - http://www.openwall.com/lists/oss-security/2016/01/07/8
CVE ID: CVE-2015-8750 State: PUBLISHED Published: 2017-02-13T18:00:00 Last Updated: 2024-08-06T08:29:21.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debug_abbrev section marked NOBITS in an ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1294264 - https://github.com/tomhughes/libdwarf/commit/11750a2838e52953013e3114ef27b3c7b1780697 - http://www.openwall.com/lists/oss-security/2016/01/07/11
CVE ID: CVE-2015-8751 State: PUBLISHED Published: 2020-02-17T21:31:10 Last Updated: 2024-08-06T08:29:21.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 image, related to integer multiplication for memory allocation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/80035 - http://www.openwall.com/lists/oss-security/2016/01/07/10 - http://www.openwall.com/lists/oss-security/2016/01/08/2 - http://www.openwall.com/lists/oss-security/2016/01/11/3 - https://bugzilla.redhat.com/show_bug.cgi
curity/2016/01/08/2 - http://www.openwall.com/lists/oss-security/2016/01/11/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1294039 - https://lists.apache.org/thread.html/re28d4c3c5b77138de47bf5b2ad04886d9104eb74ae3594e5f7254318%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rf15130c7b5f703664ce57a97934ffb8cc6065cbb1bf678dca8651519%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2015-8752 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8753 State: PUBLISHED Published: 2016-01-08T19:00:00 Last Updated: 2024-08-06T08:29:21.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP Afaria 7.0.6001.5 allows remote attackers to bypass authorization checks and wipe or lock mobile devices via a crafted request, related to "Insecure signature," aka SAP Security Note 2134905. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-15-023-sap-afaria-authorization-bypass-insecure-signature/
CVE ID: CVE-2015-8754 State: PUBLISHED Published: 2016-01-08T19:00:00Z Last Updated: 2024-09-16T16:13:42.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mollom module 6.x-2.7 before 6.x-2.15 for Drupal allows remote attackers to bypass intended access restrictions and modify the mollom blacklist via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2627448 - https://www.drupal.org/node/2626872
CVE ID: CVE-2015-8755 State: PUBLISHED Published: 2016-01-08T19:00:00Z Last Updated: 2024-09-17T00:15:49.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034483 - http://www.securityfocus.com/bid/79236 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-011/
CVE ID: CVE-2015-8756 State: PUBLISHED Published: 2016-01-08T19:00:00Z Last Updated: 2024-09-16T23:41:30.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search result view in the Indexed Search (indexed_search) component in TYPO3 6.2.x before 6.2.16 allows remote authenticated editors to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-015/ - http://www.securitytracker.com/id/1034486
CVE ID: CVE-2015-8757 State: PUBLISHED Published: 2016-01-08T19:00:00Z Last Updated: 2024-09-16T22:46:11.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to extension data during an extension installation. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-010/ - http://www.securityfocus.com/bid/79254 - http://www.securitytracker.com/id/1034482
CVE ID: CVE-2015-8758 State: PUBLISHED Published: 2016-01-08T19:00:00Z Last Updated: 2024-09-17T04:19:06.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034484 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-013/ - http://www.securityfocus.com/bid/79240
CVE ID: CVE-2015-8759 State: PUBLISHED Published: 2016-01-08T19:00:00Z Last Updated: 2024-09-16T19:10:11.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web script or HTML via a link field. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012/ - http://www.securityfocus.com/bid/79250
CVE ID: CVE-2015-8760 State: PUBLISHED Published: 2016-01-08T19:00:00Z Last Updated: 2024-09-16T20:16:51.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka "Cross-Site Flashing." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034485 - http://www.securityfocus.com/bid/79210 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-014/
CVE ID: CVE-2015-8761 State: PUBLISHED Published: 2016-01-08T19:00:00Z Last Updated: 2024-09-16T22:14:18.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Values module 7.x-1.x before 7.x-1.2 for Drupal does not properly check permissions, which allows remote administrators with the "Import value sets" permission to execute arbitrary PHP code via the exported values list in a ctools import. Additional Analyst Notes: - CVE Program Container: References: - http://cgit.drupalcode.org/values/commit/?id=5942ee9 - http://www.securityfocus.com/bid/79656 - https://www.drupal.org/node/2636344 - https://www.drupal.org/node/2622534
CVE ID: CVE-2015-8762 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-06T08:29:21.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a zero-length EAP-PWD packet. Additional Analyst Notes: - CVE Program Container: References: - http://freeradius.org/security.html#eap-pwd-2015 - http://www.openwall.com/lists/oss-security/2016/01/08/7
CVE ID: CVE-2015-8763 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-06T08:29:21.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted (1) commit or (2) confirm message, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://freeradius.org/security.html#eap-pwd-2015 - http://www.openwall.com/lists/oss-security/2016/01/08/7
CVE ID: CVE-2015-8764 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-06T08:29:21.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://freeradius.org/security.html#eap-pwd-2015 - http://www.openwall.com/lists/oss-security/2016/01/08/7
CVE ID: CVE-2015-8765 State: PUBLISHED Published: 2016-01-08T20:00:00Z Last Updated: 2024-09-17T02:10:35.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intel McAfee ePolicy Orchestrator (ePO) 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix 1106041, and 5.3.x before 5.3.1 Hotfix 1106041 allow remote attackers to execute arbitrary code via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10144 - https://www.kb.cert.org/vuls/id/576313
CVE ID: CVE-2015-8766 State: PUBLISHED Published: 2016-01-08T21:00:00 Last Updated: 2024-08-06T08:29:22.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the (1) email_sendmail[from_name], (2) email_sendmail[from_address], (3) email_smtp[from_name], (4) email_smtp[from_address], (5) email_smtp[host], (6) email_smtp[port], (7) jit_image_manipulation[trusted_external_sites], or (8) maintenance_mode[ip_whitelist] parameters to system/preferences. Additional Analyst Notes: - CVE Program Container: