Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-4400 State: PUBLISHED Published: 2018-02-06T16:00:00 Last Updated: 2024-08-06T06:11:12.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ring (formerly DoorBot) video doorbells allow remote attackers to obtain sensitive information about the wireless network configuration by pressing the set up button and leveraging an API in the GainSpan Wi-Fi module. Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/zeroday/FG-VD-15-021 - https://www.pentestpartners.com/security-blog/steal-your-wi-fi-key-from-your-doorbell-iot-wtf/ - https://blog.fortinet.com/2016/01/22/cve-2015-4400-backdoorbot-network-configuration-leak-on-a-connected-d
ll-iot-wtf/ - https://blog.fortinet.com/2016/01/22/cve-2015-4400-backdoorbot-network-configuration-leak-on-a-connected-doorbell
CVE ID: CVE-2015-4407 State: PUBLISHED Published: 2017-03-13T06:14:00 Last Updated: 2024-08-06T06:11:12.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a crafted HTTP request, aka the PSIA issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.hikvision.com/En/Press-Release-details_435_i1023.html
CVE ID: CVE-2015-4408 State: PUBLISHED Published: 2017-03-13T06:14:00 Last Updated: 2024-08-06T06:11:13.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a crafted HTTP request, aka the ISAPI issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.hikvision.com/En/Press-Release-details_435_i1023.html
CVE ID: CVE-2015-4409 State: PUBLISHED Published: 2017-03-13T06:14:00 Last Updated: 2024-08-06T06:11:13.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a crafted HTTP request, aka the SDK issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.hikvision.com/En/Press-Release-details_435_i1023.html
CVE ID: CVE-2015-4410 State: PUBLISHED Published: 2020-02-20T16:24:26 Last Updated: 2024-08-06T06:11:13.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Moped::BSON::ObjecId.legal? method in rubygem-moped before commit dd5a7c14b5d2e466f7875d079af71ad19774609b allows remote attackers to cause a denial of service (worker resource consumption) or perform a cross-site scripting (XSS) attack via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - https://sakurity.com/blog/2015/06/04/mongo_ruby_regexp.html - https://homakov.blogspot.ru/2012/05/saferweb-injects-in-various-ruby.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-Jul
ot.ru/2012/05/saferweb-injects-in-various-ruby.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161987.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161964.html - https://bugzilla.redhat.com/show_bug.cgi?id=1229757 - http://www.openwall.com/lists/oss-security/2015/06/06/3 - http://www.securityfocus.com/bid/75045 - https://github.com/mongoid/moped/commit/dd5a7c14b5d2e466f7875d079af71ad19774609b#diff-3b93602f64c2fe46d38efd9f73ef5358R24 - https://seclists.org/oss-sec/2015/q2/653 - https://www.securityfocus.com/bid/75045
CVE ID: CVE-2015-4411 State: PUBLISHED Published: 2020-02-20T16:24:22 Last Updated: 2024-08-06T06:11:12.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Moped::BSON::ObjecId.legal? method in mongodb/bson-ruby before 3.0.4 as used in rubygem-moped allows remote attackers to cause a denial of service (worker resource consumption) via a crafted string. NOTE: This issue is due to an incomplete fix to CVE-2015-4410. Additional Analyst Notes: - CVE Program Container: References: - https://sakurity.com/blog/2015/06/04/mongo_ruby_regexp.html - https://homakov.blogspot.ru/2012/05/saferweb-injects-in-various-ruby.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-
gspot.ru/2012/05/saferweb-injects-in-various-ruby.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161987.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161964.html - http://www.openwall.com/lists/oss-security/2015/06/06/3 - http://www.securityfocus.com/bid/75045 - https://github.com/mongoid/moped/commit/dd5a7c14b5d2e466f7875d079af71ad19774609b#diff-3b93602f64c2fe46d38efd9f73ef5358R24 - https://bugzilla.redhat.com/show_bug.cgi?id=1229706 - https://github.com/mongodb/bson-ruby/commit/fef6f75413511d653c76bf924a932374a183a24f#diff-8c8558c185bbb548ccb5a6d6ac4bfee5R191 - https://github.com/mongodb/bson-ruby/compare/7446d7c6764dfda8dc4480ce16d5
4f#diff-8c8558c185bbb548ccb5a6d6ac4bfee5R191 - https://github.com/mongodb/bson-ruby/compare/7446d7c6764dfda8dc4480ce16d5c023e74be5ca...28f34978a85b689a4480b4d343389bf4886522e7 - https://seclists.org/oss-sec/2015/q2/653 - https://github.com/mongodb/bson-ruby/commit/976da329ff03ecdfca3030eb6efe3c85e6db9999 - https://www.securityfocus.com/bid/75045 - https://security-tracker.debian.org/tracker/CVE-2015-4411
CVE ID: CVE-2015-4412 State: PUBLISHED Published: 2018-02-05T16:00:00 Last Updated: 2024-08-06T06:11:12.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: BSON injection vulnerability in the legal? function in BSON (bson-ruby) gem before 3.0.4 for Ruby allows remote attackers to cause a denial of service (resource consumption) or inject arbitrary data via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75045 - https://github.com/mongodb/bson-ruby/commit/976da329ff03ecdfca3030eb6efe3c85e6db9999 - https://github.com/mongodb/bson-ruby/compare/7446d7c6764dfda8dc4480ce16d5c023e74be5ca...28f34978a85b689a4480b4d343389b
- https://github.com/mongodb/bson-ruby/compare/7446d7c6764dfda8dc4480ce16d5c023e74be5ca...28f34978a85b689a4480b4d343389bf4886522e7 - https://sakurity.com/blog/2015/06/04/mongo_ruby_regexp.html - https://bugzilla.redhat.com/show_bug.cgi?id=1229750 - http://www.openwall.com/lists/oss-security/2015/06/06/3
CVE ID: CVE-2015-4413 State: PUBLISHED Published: 2015-06-24T14:00:00 Last Updated: 2024-08-06T06:11:12.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the new_fb_sign_button function in nextend-facebook-connect.php in Nextend Facebook Connect plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirect_to parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jun/70 - https://wordpress.org/plugins/nextend-facebook-connect/changelog/ - http://packetstormsecurity.com/files/132425/WordPress-Nextend-Facebook-Connect-1.5.4-C
end-facebook-connect/changelog/ - http://packetstormsecurity.com/files/132425/WordPress-Nextend-Facebook-Connect-1.5.4-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/75391 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=1178751%40nextend-facebook-connect&old=1060317%40nextend-facebook-connect&sfp_email=&sfph_mail=
CVE ID: CVE-2015-4414 State: PUBLISHED Published: 2015-06-17T18:00:00 Last Updated: 2024-08-06T06:11:12.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download_audio.php in the SE HTML5 Album Audio Player (se-html5-album-audio-player) plugin 1.1.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapid.dhs.org/advisory.php?v=124 - https://wpvulndb.com/vulnerabilities/8032 - https://www.exploit-db.com/exploits/37274/ - http://packetstormsecurity.com/files/132266/WordPress-SE-HTML5-Album-Audio-Player-
/www.exploit-db.com/exploits/37274/ - http://packetstormsecurity.com/files/132266/WordPress-SE-HTML5-Album-Audio-Player-1.1.0-Directory-Traversal.html - http://www.securityfocus.com/bid/75093
CVE ID: CVE-2015-4415 State: PUBLISHED Published: 2015-06-10T14:00:00 Last Updated: 2024-08-06T06:11:12.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in func.php in Magnifica Webscripts Anima Gallery 2.6 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) theme or (2) lang cookie parameter to AnimaGallery/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/535705/100/0/threaded - http://www.securityfocus.com/bid/75061
CVE ID: CVE-2015-4418 State: PUBLISHED Published: 2015-06-09T00:00:00 Last Updated: 2024-08-06T06:11:12.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho NetFlow Analyzer build 10250 and earlier does not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032516 - http://www.securityfocus.com/bid/75068 - https://support.zoho.com/portal/manageengine/helpcenter/articles/vulnerability-fix-for-fails-to-restrict-access-permissions-cross-site-scripting-cross-site-request-forge
center/articles/vulnerability-fix-for-fails-to-restrict-access-permissions-cross-site-scripting-cross-site-request-forgery-over-build-10250
CVE ID: CVE-2015-4420 State: PUBLISHED Published: 2015-06-18T18:00:00 Last Updated: 2024-08-06T06:11:12.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Opsview 4.6.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a (1) crafted check plugin, the (2) description in a host profile, or the (3) plugin_args parameter to a Test service check page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75223 - https://www.exploit-db.com/exploits/37271/
CVE ID: CVE-2015-4421 State: PUBLISHED Published: 2017-10-19T21:00:00 Last Updated: 2024-08-06T06:11:12.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tzdriver module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03 allows local users to gain privileges or cause a denial of service (memory corruption) via an unspecified input. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74742 - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-432799.htm
CVE ID: CVE-2015-4422 State: PUBLISHED Published: 2017-10-19T21:00:00 Last Updated: 2024-08-06T06:11:12.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TEEOS module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03 allows local users with root permissions to gain privileges or cause a denial of service (memory corruption) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74742 - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-432799.htm
CVE ID: CVE-2015-4425 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:11:12.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pimcore before build 3473 allows remote authenticated users with the "assets" permission to create or write to arbitrary files via a .. (dot dot) in the dir parameter to admin/asset/add-asset-compatibility. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jul/57 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-4425/ - https://github.com/pimcore/pimcore/commit/4f2a95f877d406a054f9f225347
and-downloads/security-advisories/cve-2015-4425/ - https://github.com/pimcore/pimcore/commit/4f2a95f877d406a054f9f2253475fe58c76aa03d
CVE ID: CVE-2015-4426 State: PUBLISHED Published: 2015-08-18T17:00:00 Last Updated: 2024-08-06T06:11:12.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pimcore before build 3473 allows remote attackers to execute arbitrary SQL commands via the filter parameter to admin/asset/grid-proxy. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-4426/ - https://github.com/pimcore/pimcore/commit/1c6692e8287deed7f3356b6a1e2e9b7fe4e858dd - http://www.securityfocus.com/bid/75724 - http://seclists.org/fulldisclosure/2015/Jul/58
CVE ID: CVE-2015-4427 State: PUBLISHED Published: 2015-06-09T14:00:00 Last Updated: 2024-08-06T06:11:12.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Test/WorkArea/workarea.aspx in Ektron Content Management System (CMS) before 9.10 SP1 (Build 9.1.0.184.1.114) allow remote authenticated users to inject arbitrary web script or HTML via the (1) page, (2) action, (3) folder_id, or (4) LangType parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/535647/100/0/threaded - http://v00d00sec.com/2015/05/31/cve-2015-3624-csrf-and-xss-vulnerabilities-in-ektron-cms-9-10-s
/535647/100/0/threaded - http://v00d00sec.com/2015/05/31/cve-2015-3624-csrf-and-xss-vulnerabilities-in-ektron-cms-9-10-sp1/ - http://packetstormsecurity.com/files/132105/Ektron-CMS-9.10-SP1-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/74942
CVE ID: CVE-2015-4428 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T06:11:12.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4430, and CVE-201
27, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4430, and CVE-2015-5117. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html - http://www.securityfocus.com/bid/75590
CVE ID: CVE-2015-4429 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T06:11:12.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-3126. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - ht
15-3126. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - http://www.securityfocus.com/bid/75596 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html
CVE ID: CVE-2015-4430 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T06:11:12.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, and CVE-201
27, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, and CVE-2015-5117. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html - http://www.securityfocus.com/bid/75590
CVE ID: CVE-2015-4431 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T06:11:12.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, and CVE-2015-3134. Additional Analyst Notes: - CVE Program Container: References: - h
123, CVE-2015-3130, CVE-2015-3133, and CVE-2015-3134. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - http://www.securityfocus.com/bid/75591 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html
CVE ID: CVE-2015-4432 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T06:11:12.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3135 and CVE-2015-5118. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75592 - http://www.securitytrack
CVE ID: CVE-2015-4433 State: PUBLISHED Published: 2015-07-09T16:00:00 Last Updated: 2024-08-06T06:11:12.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, and CVE-2015-3122. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 -
-2015-3122. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032810 - http://www.securityfocus.com/bid/75595 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html - http://rhn.redhat.com/errata/RHSA-2015-1214.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html - https://security.gentoo.org/glsa/201507-13 - https://helpx.adobe.com/security/products/flash-player/apsb15-16.html
CVE ID: CVE-2015-4434 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-4435 State: PUBLISHED Published: 2015-07-15T14:00:00 Last Updated: 2024-08-06T06:11:12.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-4438, CVE-2015-4441, CVE-2015-4445, CVE-2015-4447, CVE-2015-4451, CVE-2015-4452, CVE-2015-5085, and CVE-2015-5086. Additional Analyst Notes: - CVE Program Container: References: - http:
CVE-2015-4452, CVE-2015-5085, and CVE-2015-5086. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032892 - https://helpx.adobe.com/security/products/reader/apsb15-15.html - http://www.securityfocus.com/bid/75737
CVE ID: CVE-2015-4436 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-4437 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-4438 State: PUBLISHED Published: 2015-07-15T14:00:00 Last Updated: 2024-08-06T06:11:12.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-4435, CVE-2015-4441, CVE-2015-4445, CVE-2015-4447, CVE-2015-4451, CVE-2015-4452, CVE-2015-5085, and CVE-2015-5086. Additional Analyst Notes: - CVE Program Container: References: - http:
CVE ID: CVE-2015-4439 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-4440 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-4441 State: PUBLISHED Published: 2015-07-15T14:00:00 Last Updated: 2024-08-06T06:11:12.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-4435, CVE-2015-4438, CVE-2015-4445, CVE-2015-4447, CVE-2015-4451, CVE-2015-4452, CVE-2015-5085, and CVE-2015-5086. Additional Analyst Notes: - CVE Program Container: References: - http:
CVE ID: CVE-2015-4442 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.