Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE Program Container: References: - https://www.trustwave.com/Resources/SpiderLabs-Blog/Reflected-File-Download---A-New-Web-Attack-Vector/ - https://pivotal.io/security/cve-2015-5211 - https://lists.debian.org/debian-lts-announce/2019/07/msg00012.html
CVE ID: CVE-2015-5212 State: PUBLISHED Published: 2015-11-10T16:00:00 Last Updated: 2024-08-06T06:41:08.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034085 - http://www.libreoffice.org/about-us/security/advisories/cve-2015-5212/ - htt
http://www.securitytracker.com/id/1034085 - http://www.libreoffice.org/about-us/security/advisories/cve-2015-5212/ - https://security.gentoo.org/glsa/201611-03 - http://www.securitytracker.com/id/1034091 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://rhn.redhat.com/errata/RHSA-2015-2619.html - http://www.ubuntu.com/usn/USN-2793-1 - http://www.securityfocus.com/bid/77486 - http://www.openoffice.org/security/cves/CVE-2015-5212.html - https://security.gentoo.org/glsa/201603-05 - http://www.debian.org/security/2015/dsa-3394
CVE ID: CVE-2015-5213 State: PUBLISHED Published: 2015-11-10T16:00:00 Last Updated: 2024-08-06T06:41:08.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a long DOC file, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034085 - https://security.gentoo.org/glsa/201611-03 - http://www.securitytracker.com/id/1034091 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct201
1-03 - http://www.securitytracker.com/id/1034091 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://rhn.redhat.com/errata/RHSA-2015-2619.html - http://www.ubuntu.com/usn/USN-2793-1 - http://www.securityfocus.com/bid/77486 - http://www.openoffice.org/security/cves/CVE-2015-5213.html - http://www.libreoffice.org/about-us/security/advisories/cve-2015-5213/ - https://security.gentoo.org/glsa/201603-05 - http://www.debian.org/security/2015/dsa-3394
CVE ID: CVE-2015-5214 State: PUBLISHED Published: 2015-11-10T16:00:00 Last Updated: 2024-08-06T06:41:08.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via an index to a non-existent bookmark in a DOC file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201611-03 - http://www.securitytracker.com/id/1034091 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://rhn.redhat.com/errata/RHSA-2
ttp://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://rhn.redhat.com/errata/RHSA-2015-2619.html - http://www.ubuntu.com/usn/USN-2793-1 - http://www.securityfocus.com/bid/77486 - http://www.libreoffice.org/about-us/security/advisories/cve-2015-5214/ - http://www.openoffice.org/security/cves/CVE-2015-5214.html - http://www.securitytracker.com/id/1034086 - https://security.gentoo.org/glsa/201603-05 - http://www.debian.org/security/2015/dsa-3394
CVE ID: CVE-2015-5215 State: PUBLISHED Published: 2020-02-17T00:00:00 Last Updated: 2024-08-06T06:41:08.412Z Vendors: n/a Products: Ipsilon Problem Types: Cross-Site Scripting Description: The default configuration of the Jinja templating engine used in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not enable auto-escaping, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via template variables. NOTE: This may be a duplicate of CVE-2015-5216. Moreover, the Jinja development team does not enable auto-escape by default for performance issues as explained in https://jinja.palletsprojects.com/en/master/faq/#why-is-autoescaping-not-t
efault for performance issues as explained in https://jinja.palletsprojects.com/en/master/faq/#why-is-autoescaping-not-the-default. Additional Analyst Notes: - CVE Program Container: References: - https://pagure.io/ipsilon/a503aa9c2a30a74e709d1c88099befd50fb2eb16 - https://fedorahosted.org/ipsilon/wiki/Releases/v1.0.1 - http://www.openwall.com/lists/oss-security/2015/10/23/10 - https://bugzilla.redhat.com/show_bug.cgi?id=1255168
CVE ID: CVE-2015-5216 State: PUBLISHED Published: 2020-02-17T18:16:41 Last Updated: 2024-08-06T06:41:08.474Z Vendors: n/a Products: Ipsilon Problem Types: Cross-Site Scripting Description: The Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly escape certain characters in a Python exception-message template, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via an HTTP response. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/10/27/8 - https://bugzilla.redhat.com/show_bug.cgi?id=1255170 - https://pagure.io/ipsilon/a503aa9c2a30a74e709d1c88099befd50fb2eb16
CVE ID: CVE-2015-5217 State: PUBLISHED Published: 2015-11-17T15:00:00 Last Updated: 2024-08-06T06:41:08.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service Provider (SP) owner, which allows remote authenticated users to cause a denial of service via a duplicate SP name. Additional Analyst Notes: - CVE Program Container: References: - https://pagure.io/ipsilon/826e6339441546f596320f3d73304ab5f7c10de6 - https://fedorahosted.org/ipsilon/wiki/Releases/v1.0.1 - https://bugzilla.redhat.com/show_bug.cgi?id=1255172 - http://www.openw
//fedorahosted.org/ipsilon/wiki/Releases/v1.0.1 - https://bugzilla.redhat.com/show_bug.cgi?id=1255172 - http://www.openwall.com/lists/oss-security/2015/10/27/8
CVE ID: CVE-2015-5218 State: PUBLISHED Published: 2015-11-09T16:00:00 Last Updated: 2024-08-06T06:41:08.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-11/msg00035.html - http://www.spinics.net/lists/util-linux-ng/msg11873.html - https://github.com/kerolasa/lelux-utiliteetit/commit/70e3fcf293c1827a2655a86584ab13075124a8a8 - https://bugzilla.redhat.com/show_bug.cgi?id=1259322 - htt
-utiliteetit/commit/70e3fcf293c1827a2655a86584ab13075124a8a8 - https://bugzilla.redhat.com/show_bug.cgi?id=1259322 - https://github.com/kerolasa/lelux-utiliteetit/commit/d883d64d96ab9bef510745d064a351145b9babec - https://www.kernel.org/pub/linux/utils/util-linux/v2.27/v2.27-ReleaseNotes
CVE ID: CVE-2015-5219 State: PUBLISHED Published: 2017-07-21T14:00:00 Last Updated: 2024-08-06T06:41:08.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet. Additional Analyst Notes: - CVE Program Container: References: - http://aix.software.ibm.com/aix/efixes/security/ntp_advisory4.asc - https://www-01.ibm.com/support/docview.wss?uid=isg3T1024157 - https://github.com/ntp-project/ntp/commit/5f295cd05c3c136d39f5b3e500a2d781bdbb59c8 - http://lists.open
id=isg3T1024157 - https://github.com/ntp-project/ntp/commit/5f295cd05c3c136d39f5b3e500a2d781bdbb59c8 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html - https://www.ibm.com/support/home/docdisplay?lndocid=migr-5099409 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.ubuntu.com/usn/USN-2783-1 - https://www-01.ibm.com/support/docview.wss?uid=swg21986956 - https://www-01.ibm.com/support/docview.wss?uid=swg21988706 - http://rhn.redhat.com/errata/RHSA-2016-2583.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.html - http://bk1.ntp.org/ntp-dev/?PAGE=patch&REV=51786731Gr4-NOrTBC_a_uXO4wuGhg - htt
age-announce/2015-November/170926.html - http://bk1.ntp.org/ntp-dev/?PAGE=patch&REV=51786731Gr4-NOrTBC_a_uXO4wuGhg - http://rhn.redhat.com/errata/RHSA-2016-0780.html - http://www.debian.org/security/2015/dsa-3388 - http://www.openwall.com/lists/oss-security/2015/08/25/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1255118 - http://www.securityfocus.com/bid/76473 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169167.html - https://www-01.ibm.com/support/docview.wss?uid=swg21989542 - https://www-01.ibm.com/support/docview.wss?uid=swg21985122 - http://lists.fedoraproject.org/pipermail/package
21989542 - https://www-01.ibm.com/support/docview.wss?uid=swg21985122 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166992.html - https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11
CVE ID: CVE-2015-5220 State: PUBLISHED Published: 2015-10-27T16:00:00 Last Updated: 2024-08-06T06:41:08.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Console in Red Hat Enterprise Application Platform (EAP) before 6.4.4 and WildFly (formerly JBoss Application Server) allows remote attackers to cause a denial of service (memory consumption) via a large request header. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1905.html - http://rhn.redhat.com/errata/RHSA-2015-1904.html - http://rhn.redhat.com/errata/RHSA-2015-1908.html - http://rhn.redhat.com/errata/RHSA-2016-1519.html - http://rhn.redhat.com/errata/RHSA-2
.com/errata/RHSA-2015-1908.html - http://rhn.redhat.com/errata/RHSA-2016-1519.html - http://rhn.redhat.com/errata/RHSA-2015-1907.html - https://bugzilla.redhat.com/show_bug.cgi?id=1255597 - http://www.securitytracker.com/id/1033859 - http://rhn.redhat.com/errata/RHSA-2015-1906.html
CVE ID: CVE-2015-5221 State: PUBLISHED Published: 2017-07-25T18:00:00 Last Updated: 2024-08-06T06:41:08.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html - http://www.openwall.com/lists/oss-security/2015/08/20/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXWV22WGSQ
15/08/20/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXWV22WGSQFDRPE7G6ECGP3QXS2V2A2M/ - https://access.redhat.com/errata/RHSA-2017:1208 - http://lists.opensuse.org/opensuse-updates/2016-11/msg00018.html - https://github.com/mdadams/jasper/commit/df5d2867e8004e51e18b89865bc4aa69229227b3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNLVBZWDEXZCFWOBZ3YVEQINMRBRX5QV/ - http://lists.opensuse.org/opensuse-updates/2016-11/msg00010.html - https://bugzilla.redhat.com/show_bug.cgi?id=1255710 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3Q
bug.cgi?id=1255710 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QIZNTZDXOJR5BTRZKCS3GVHVZV2PWHH/ - https://usn.ubuntu.com/3693-1/ - http://lists.opensuse.org/opensuse-updates/2016-11/msg00064.html
CVE ID: CVE-2015-5222 State: PUBLISHED Published: 2015-08-24T14:00:00 Last Updated: 2024-08-06T06:41:07.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat OpenShift Enterprise 3.0.0.0 does not properly check permissions, which allows remote authenticated users with build permissions to execute arbitrary shell commands with root permissions on arbitrary build pods via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2015:1650
CVE ID: CVE-2015-5223 State: PUBLISHED Published: 2015-10-26T17:00:00 Last Updated: 2024-08-06T06:41:08.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Object Storage (Swift) before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest that references an object in another container. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0329.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00025.html - https://security.openstack.org/ossa/OSSA-2015-016.html - http://rhn.redhat.com/errata/RHSA-2015-1895.html - http://www.oracle.com/technetwork/topics/sec
ssa/OSSA-2015-016.html - http://rhn.redhat.com/errata/RHSA-2015-1895.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securityfocus.com/bid/84827 - https://bugs.launchpad.net/swift/+bug/1449212 - http://www.openwall.com/lists/oss-security/2015/08/26/5 - https://bugs.launchpad.net/swift/+bug/1453948
CVE ID: CVE-2015-5224 State: PUBLISHED Published: 2017-08-23T15:00:00 Last Updated: 2024-08-06T06:41:09.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1256686 - http://www.securityfocus.com/bid/76467 - http://www.openwall.com/lists/oss-security/2015/08/24/3 - https://github.com/karelzak/util-linux/commit/bde91c85bdc77975155058276f99d2e0f5eab5a9
CVE ID: CVE-2015-5225 State: PUBLISHED Published: 2015-11-06T21:00:00 Last Updated: 2024-08-06T06:41:08.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (heap memory corruption and process crash) or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the server display surface. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg05832.html - https://lists.gnu.org/archive/html/qemu-devel/2015-08/msg02495.html - http:/
ive/html/qemu-devel/2015-09/msg05832.html - https://lists.gnu.org/archive/html/qemu-devel/2015-08/msg02495.html - http://rhn.redhat.com/errata/RHSA-2015-1837.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165484.html - http://www.debian.org/security/2015/dsa-3348 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169039.html - http://rhn.redhat.com/errata/RHSA-2015-1772.html - http://www.securitytracker.com/id/1033547 - http://www.openwall.com/lists/oss-security/2015/08/21/6 - http://www.securityfocus.com/bid/76506 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166798.html - https://security.gentoo.org/glsa/20
tp://lists.fedoraproject.org/pipermail/package-announce/2015-September/166798.html - https://security.gentoo.org/glsa/201602-01
CVE ID: CVE-2015-5226 State: REJECTED Published: 2015-09-12T14:00:00 Last Updated: 2015-09-12T13:57:01 Description: No description available.
CVE ID: CVE-2015-5227 State: PUBLISHED Published: 2017-10-18T20:00:00 Last Updated: 2024-08-06T06:41:09.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Landing Pages plugin before 1.9.2 for WordPress allows remote attackers to execute arbitrary code via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/landing-pages/#developers - https://wpvulndb.com/vulnerabilities/8200
CVE ID: CVE-2015-5228 State: PUBLISHED Published: 2016-06-07T14:00:00 Last Updated: 2024-08-06T06:41:08.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory path. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/08/25/5 - http://lists.opensuse.org/opensuse-updates/2015-09/msg00030.html - https://lists.openvz.org/pipermail/criu/2015-August/021847.html - https://bugzilla.redhat.com/show_bug.cgi?id=1255782
CVE ID: CVE-2015-5229 State: PUBLISHED Published: 2016-04-08T15:00:00 Last Updated: 2024-08-06T06:41:07.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of service (hang or crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1246713 - http://www.securityfocus.com/bid/84172 - https://bugzilla.redhat.com/show_bug.cgi?id=1256285 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-
://bugzilla.redhat.com/show_bug.cgi?id=1256285 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - https://bugzilla.redhat.com/show_bug.cgi?id=1293976 - http://rhn.redhat.com/errata/RHSA-2016-0176.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10150
CVE ID: CVE-2015-5230 State: PUBLISHED Published: 2020-01-15T16:32:47 Last Updated: 2024-08-06T06:41:08.428Z Vendors: PowerDNS Products: PowerDNS Authoritative Server Problem Types: Other Description: The DNS packet parsing/generation code in PowerDNS (aka pdns) Authoritative Server 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via crafted query packets. Additional Analyst Notes: - CVE Program Container: References: - https://doc.powerdns.com/md/security/powerdns-advisory-2015-02/ - http://www.debian.org/security/2015/dsa-3347 - http://www.securitytracker.com/id/1033475
CVE ID: CVE-2015-5231 State: PUBLISHED Published: 2016-06-07T14:00:00 Last Updated: 2024-08-06T06:41:09.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via (1) process dumps or (2) ptrace access. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/08/25/5 - http://lists.opensuse.org/opensuse-updates/2015-09/msg00030.html - https://lists.openvz.org/pipermail/criu/2015-August/021847.html - https://bugzilla.redhat.com/show_bug.cgi?id=1256728
CVE ID: CVE-2015-5232 State: PUBLISHED Published: 2017-06-07T20:00:00 Last Updated: 2024-08-06T06:41:08.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/01org/opa-fm/commit/5f4087aabb5d03c42738b320af0fc60e9df4d1f7 - http://www.openwall.com/lists/oss-security/2015/09/22/17 - https://github.com/01org/opa-ff/commit/080ab97461d80a01636f77ba6aecc667c3c0087c - https://bugzilla.redhat.com/show_bug.cgi?id=1257098 - https://github.com/01org/opa-fm/commit/c5759e7b76f5bf844be6c6641cc1b356bbc83869
CVE ID: CVE-2015-5233 State: PUBLISHED Published: 2016-04-11T21:00:00 Last Updated: 2024-08-06T06:41:08.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which allows (1) remote authenticated users with the view_reports permission to read reports from arbitrary hosts or (2) remote authenticated users with the destroy_reports permission to delete reports from arbitrary hosts via direct access to the (a) individual report show/delete pages or (b) APIs. Additional Analyst Notes: - CVE Program Container: References: - http://projects.theforeman.org/issues/11579 - https://access.redhat.com/erra
tes: - CVE Program Container: References: - http://projects.theforeman.org/issues/11579 - https://access.redhat.com/errata/RHSA-2015:2622 - http://theforeman.org/security.html#CVE-2015-5233:reportsshow/destroynotrestrictedbyhostauthorization
CVE ID: CVE-2015-5234 State: PUBLISHED Published: 2015-10-09T14:00:00 Last Updated: 2024-08-06T06:41:08.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2817-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00019.html - http://www.oracle.com/technetwork/topics/security/linuxbulleti
se.org/opensuse-security-announce/2015-09/msg00019.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167120.html - http://www.securitytracker.com/id/1033780 - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2015-September/033546.html - http://rhn.redhat.com/errata/RHSA-2016-0778.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167130.html - https://bugzilla.redhat.com/show_bug.cgi?id=1233667
CVE ID: CVE-2015-5235 State: PUBLISHED Published: 2015-10-09T14:00:00 Last Updated: 2024-08-06T06:41:08.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2817-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00019.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://bugzilla.redhat.c
9.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://bugzilla.redhat.com/show_bug.cgi?id=1233697 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167120.html - http://www.securitytracker.com/id/1033780 - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2015-September/033546.html - http://rhn.redhat.com/errata/RHSA-2016-0778.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167130.html