Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-7662 State: PUBLISHED Published: 2015-11-11T11:00:00 Last Updated: 2024-08-06T07:58:59.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allow remote attackers to bypass intended access restrictions and write to files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034111 - http://rhn.redhat.com/errata/RHSA-2015-2024.html - https://helpx.adobe.com/security/produc
uritytracker.com/id/1034111 - http://rhn.redhat.com/errata/RHSA-2015-2024.html - https://helpx.adobe.com/security/products/flash-player/apsb15-28.html - http://lists.opensuse.org/opensuse-updates/2015-11/msg00071.html - http://www.securityfocus.com/bid/77535 - https://security.gentoo.org/glsa/201511-02 - http://rhn.redhat.com/errata/RHSA-2015-2023.html
CVE ID: CVE-2015-7663 State: PUBLISHED Published: 2015-11-11T11:00:00 Last Updated: 2024-08-06T07:58:58.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-8042, CVE-2015-
7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034111 - http://rhn.redhat.com/errata/RHSA-2015-2024.html - https://helpx.adobe.com/security/products/flash-player/apsb15-28.html - http://lists.opensuse.org/opensuse-updates/2015-11/msg00071.html - https://security.gentoo.org/glsa/201511-02 - http://www.securityfocus.com/bid/77533 - http://rhn.redhat.com/errata/RHSA-2015-2023.html
CVE ID: CVE-2015-7665 State: PUBLISHED Published: 2015-12-27T19:00:00 Last Updated: 2024-08-06T07:58:59.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tails before 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, which allows remote FTP servers to discover the Tor client IP address by reading a (1) PORT or (2) EPRT command. NOTE: within wget itself, the automatic fallback is not considered a vulnerability by CVE. Additional Analyst Notes: - CVE Program Container: References: - https://mailman.boum.org/pipermail/tails-dev/2015-October/009591.html - https://mailman.boum.org/pipermail/tails-dev/2015-August/009370.html - http:
ermail/tails-dev/2015-October/009591.html - https://mailman.boum.org/pipermail/tails-dev/2015-August/009370.html - http://www.openwall.com/lists/oss-security/2015/10/01/10 - https://labs.riseup.net/code/issues/10364 - https://lists.gnu.org/archive/html/bug-wget/2015-08/msg00020.html - http://git.savannah.gnu.org/cgit/wget.git/commit/?id=075d7556964f5a871a73c22ac4b69f5361295099 - http://www.securityfocus.com/bid/76678 - https://tails.boum.org/news/version_1.7/index.en.html
CVE ID: CVE-2015-7666 State: PUBLISHED Published: 2017-12-27T19:00:00 Last Updated: 2024-08-06T07:58:59.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the (1) cp_updateMessageItem and (2) cp_deleteMessageItem functions in cp_ppp_admin_int_message_list.inc.php in the Payment Form for PayPal Pro plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the cal parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/payment-form-for-paypal-pro/#developers - https://wpvulndb.com/vulnerabilities/8210 - http://www.securityfocus.com/arch
/payment-form-for-paypal-pro/#developers - https://wpvulndb.com/vulnerabilities/8210 - http://www.securityfocus.com/archive/1/536602/100/0/threaded - https://plugins.trac.wordpress.org/changeset/1254452/payment-form-for-paypal-pro
CVE ID: CVE-2015-7667 State: PUBLISHED Published: 2017-12-27T19:00:00 Last Updated: 2024-08-06T07:58:59.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) templates/admanagement/admanagement.php and (2) templates/adspot/adspot.php in the ResAds plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8204 - https://wordpress.org/plugins/resads/#developers - http://www.securityfocus.com/archive/1/536601/100/0/threaded
CVE ID: CVE-2015-7668 State: PUBLISHED Published: 2017-12-27T19:00:00 Last Updated: 2024-08-06T07:58:58.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8205 - https://wordpress.org/plugins/easy2map/#developers - http://www.securityfocus.com/archive/1/536598/100/0/threaded
CVE ID: CVE-2015-7669 State: PUBLISHED Published: 2017-12-27T19:00:00 Last Updated: 2024-08-06T07:58:59.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in (1) includes/MapImportCSV2.php and (2) includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include and execute arbitrary files via the csvfile parameter related to "upload file functionality." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/536597/100/0/threaded - https://wordpress.org/plugins/easy2map/#developers - https://wpvulndb.com/vulnerabilities/8206
CVE ID: CVE-2015-7670 State: PUBLISHED Published: 2017-09-26T15:00:00 Last Updated: 2024-08-06T07:58:59.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in includes/update.php in the Support Ticket System plugin before 1.2.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user or (2) id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/simple-support-ticket-system/#developers - https://wpvulndb.com/vulnerabilities/8207 - http://www.securityfocus.com/archive/1/536624/100/0/threaded
CVE ID: CVE-2015-7672 State: PUBLISHED Published: 2017-09-07T20:00:00 Last Updated: 2024-08-06T07:58:59.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Centreon 2.6.1 (fixed in Centreon 18.10.0 and Centreon web 2.8.27). Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=sIONzwQAngU - https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10/centreon-18.10.0.html - https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8/centreon-2.8.27.html - https://github.com/centreon/centreon/pull/6953 - https://github.com/centreon/centreon/pu
reon-2.8/centreon-2.8.27.html - https://github.com/centreon/centreon/pull/6953 - https://github.com/centreon/centreon/pull/6637
CVE ID: CVE-2015-7673 State: PUBLISHED Published: 2015-10-26T17:00:00 Last Updated: 2024-08-06T07:58:59.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) and possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file. Additional Analyst Notes: - CVE Program Container: References: - https://git.gnome.org/browse/gdk-pixbuf/commit/?id=edf6fb8d856574bc3bb3a703037f56533229267c - http://www.openwall.com/lists/oss-security/2015/10/01/3 - http://www.securityfocus.com/bid/76953 - ht
037f56533229267c - http://www.openwall.com/lists/oss-security/2015/10/01/3 - http://www.securityfocus.com/bid/76953 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00006.html - http://ftp.gnome.org/pub/gnome/sources/gdk-pixbuf/2.32/gdk-pixbuf-2.32.0.news - http://lists.opensuse.org/opensuse-updates/2016-03/msg00124.html - https://git.gnome.org/browse/gdk-pixbuf/commit/?id=19f9685dbff7d1f929c61cf99188df917a18811d - http://www.ubuntu.com/usn/USN-2767-1 - http://www.openwall.com/lists/oss-security/2015/10/02/9 - http://www.debian.org/security/2015/dsa-3378 - https://git.gnome.org/browse/gdk-pixbuf/commit/?id=6ddca835100107e6b5841ce9d56074f6d98c387e - https://security.gentoo.org/glsa/201
t.gnome.org/browse/gdk-pixbuf/commit/?id=6ddca835100107e6b5841ce9d56074f6d98c387e - https://security.gentoo.org/glsa/201512-05
CVE ID: CVE-2015-7674 State: PUBLISHED Published: 2015-10-26T17:00:00 Last Updated: 2024-08-06T07:58:59.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://git.gnome.org/browse/gdk-pixbuf/commit/?id=e9a5704edaa9aee9498f1fbf6e1b70fcce2e55aa - http://lists.opensuse.org/opensuse-updates/2016-06/msg00006.html - http://lists.opensuse
9aee9498f1fbf6e1b70fcce2e55aa - http://lists.opensuse.org/opensuse-updates/2016-06/msg00006.html - http://lists.opensuse.org/opensuse-updates/2016-03/msg00124.html - http://ftp.gnome.org/pub/gnome/sources/gdk-pixbuf/2.32/gdk-pixbuf-2.32.1.news - http://www.openwall.com/lists/oss-security/2015/10/05/7 - http://www.securityfocus.com/bid/76955 - http://www.ubuntu.com/usn/USN-2767-1 - http://www.openwall.com/lists/oss-security/2015/10/01/4 - http://www.openwall.com/lists/oss-security/2015/10/01/7 - http://www.debian.org/security/2015/dsa-3378 - http://www.openwall.com/lists/oss-security/2015/10/02/10 - https://security.gentoo.org/glsa/201512-05
CVE ID: CVE-2015-7675 State: PUBLISHED Published: 2016-02-10T15:00:00 Last Updated: 2024-08-06T07:58:59.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files via a valid FileID in the (1) serverFileIds parameter to mobile/sendMsg or (2) arg01 parameter to human.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Jan/95 - http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf - http://packetstormsecurity.com/files/135457/Ipswitc
cs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf - http://packetstormsecurity.com/files/135457/Ipswitch-MOVEit-DMZ-8.1-Authorization-Bypass.html - https://www.profundis-labs.com/advisories/CVE-2015-7675.txt
CVE ID: CVE-2015-7676 State: PUBLISHED Published: 2016-04-15T15:00:00 Last Updated: 2024-08-06T07:58:59.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ipswitch MOVEit File Transfer (formerly DMZ) 8.1 and earlier, when configured to support file view on download, allows remote authenticated users to conduct cross-site scripting (XSS) attacks by uploading HTML files. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Jan/95 - http://www.securityfocus.com/bid/90574 - http://packetstormsecurity.com/files/135458/Ipswitch-MOVEit-DMZ-8.1-Persistent-Cross-Site-Scripting.html - https://profundis-labs.com/advisories/CVE-2015-7676.t
458/Ipswitch-MOVEit-DMZ-8.1-Persistent-Cross-Site-Scripting.html - https://profundis-labs.com/advisories/CVE-2015-7676.txt
CVE ID: CVE-2015-7677 State: PUBLISHED Published: 2016-02-10T15:00:00 Last Updated: 2024-08-06T07:58:59.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which allows remote authenticated users to enumerate FileIDs via the X-siLock-FileID parameter in a download action to MOVEitISAPI/MOVEitISAPI.dll. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Jan/95 - http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf - http://packetstormsecurity.com/files/135459/Ipswitch-MOVEit-DM
.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf - http://packetstormsecurity.com/files/135459/Ipswitch-MOVEit-DMZ-8.1-File-ID-Enumeration.html - https://www.profundis-labs.com/advisories/CVE-2015-7677.txt
CVE ID: CVE-2015-7678 State: PUBLISHED Published: 2016-02-10T15:00:00 Last Updated: 2024-08-06T07:58:59.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Jan/95 - https://www.profundis-labs.com/advisories/CVE-2015-7678.txt - http://packetstormsecurity.com/files/135460/Ipswitch-MOVEit-Mobile-1.2.0.962-Cross-Site-Request-Forgery.html
CVE ID: CVE-2015-7679 State: PUBLISHED Published: 2016-02-10T15:00:00 Last Updated: 2024-08-06T07:58:58.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Ipswitch MOVEit Mobile before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the query string to mobile/. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Jan/95 - http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf - https://profundis-labs.com/advisories/CVE-2015-7679.txt - http://packetstormsecurity.com/files/135461/Ipswitch-MOVEit-Mobile-1.2.0.962-Cross-Site-Scripting.html
CVE ID: CVE-2015-7680 State: PUBLISHED Published: 2016-02-10T15:00:00 Last Updated: 2024-08-06T07:58:58.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of SOAP requests to machine.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Jan/95 - https://profundis-labs.com/advisories/CVE-2015-7680.txt - http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf - http://packetstormsecurity.com/files/135462
ttp://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf - http://packetstormsecurity.com/files/135462/Ipswitch-MOVEit-DMZ-8.1-Information-Disclosure.html
CVE ID: CVE-2015-7681 State: REJECTED Published: 2016-02-10T15:00:00 Last Updated: 2016-02-10T12:57:02 Description: No description available.
CVE ID: CVE-2015-7682 State: PUBLISHED Published: 2015-10-16T20:00:00 Last Updated: 2024-08-06T07:58:58.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allow remote administrators to execute arbitrary SQL commands via the (1) select_invitaion_code_bulk_option or (2) invi_del_id parameter in the pie-invitation-codes page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8213 - https://github.com/GTSolutions/Pie-Register/blob/2.0.19/readme.txt - http://www.securityfocus.com/archi
abilities/8213 - https://github.com/GTSolutions/Pie-Register/blob/2.0.19/readme.txt - http://www.securityfocus.com/archive/1/536669/100/0/threaded - http://packetstormsecurity.com/files/133929/WordPress-Pie-Register-2.0.18-SQL-Injection.html
CVE ID: CVE-2015-7683 State: PUBLISHED Published: 2015-10-16T20:00:00 Last Updated: 2024-08-06T07:58:59.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in Font.php in the Font plugin before 7.5.1 for WordPress allows remote administrators to read arbitrary files via a full pathname in the url parameter to AjaxProxy.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8214 - http://packetstormsecurity.com/files/133930/WordPress-Font-7.5-Path-Traversal.html - http://www.securityfocus.com/archive/1/536670/100/0/threaded - https://wordpress.org/plugins/font/changelog/
CVE ID: CVE-2015-7684 State: PUBLISHED Published: 2015-10-05T14:00:00 Last Updated: 2024-08-06T07:58:59.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload in GLPI before 0.85.3 allows remote authenticated users to execute arbitrary code by adding a file with an executable extension as an attachment to a new ticket, then accessing it via a direct request to the file in files/_tmp/. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Feb/71 - http://www.glpi-project.org/spip.php?page=annonce&id_breve=338 - https://forge.glpi-project.org/issues/5217
CVE ID: CVE-2015-7685 State: PUBLISHED Published: 2015-10-05T14:00:00 Last Updated: 2024-08-06T07:58:59.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: GLPI before 0.85.3 allows remote authenticated users to create super-admin accounts by leveraging permissions to create a user and the _profiles_id parameter to front/user.form.php. Additional Analyst Notes: - CVE Program Container: References: - https://forge.glpi-project.org/issues/5218 - http://seclists.org/fulldisclosure/2015/Feb/71 - http://www.glpi-project.org/spip.php?page=annonce&id_breve=338
CVE ID: CVE-2015-7686 State: PUBLISHED Published: 2015-10-03T10:00:00 Last Updated: 2024-08-06T07:58:58.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in Address.pm in the Email-Address module 1.908 and earlier for Perl allows remote attackers to cause a denial of service (CPU consumption) via a crafted string containing a list of e-mail addresses in conjunction with parenthesis characters that can be associated with nested comments. NOTE: the default configuration in 1.908 mitigates this vulnerability but misparses certain realistic comments. Additional Analyst Notes: - CVE Program Container: References: - https://forum.bestpractical.com
ain realistic comments. Additional Analyst Notes: - CVE Program Container: References: - https://forum.bestpractical.com/t/security-vulnerabilities-in-rt-2017-06-15/32016 - http://www.openwall.com/lists/oss-security/2015/10/02/13 - http://www.openwall.com/lists/oss-security/2015/09/27/1
CVE ID: CVE-2015-7687 State: PUBLISHED Published: 2017-10-16T18:00:00 Last Updated: 2024-08-06T07:58:59.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving req_ca_vrfy_smtp and req_ca_vrfy_mta. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/10/03/1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170448.html - https://www.opensmtpd.org/announces/release-5.7.2.txt - http://www.securityfocus.com/bid/76975 - https://www.qualys.com/2
ttps://www.opensmtpd.org/announces/release-5.7.2.txt - http://www.securityfocus.com/bid/76975 - https://www.qualys.com/2015/10/02/opensmtpd-audit-report.txt - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169600.html - https://bugzilla.redhat.com/show_bug.cgi?id=1268793
CVE ID: CVE-2015-7691 State: PUBLISHED Published: 2017-08-07T20:00:00 Last Updated: 2024-08-06T07:58:59.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1274254 - http://www.securityfocus.com/bid/77274 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - h
ww.securityfocus.com/bid/77274 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://support.ntp.org/bin/view/Main/NtpBug2899 - http://rhn.redhat.com/errata/RHSA-2016-2583.html - http://www.securitytracker.com/id/1033951 - http://rhn.redhat.com/errata/RHSA-2016-0780.html - http://www.debian.org/security/2015/dsa-3388 - https://security.gentoo.org/glsa/201607-15 - https://security.netapp.com/advisory/ntap-20171004-0001/
CVE ID: CVE-2015-7692 State: PUBLISHED Published: 2017-08-07T20:00:00 Last Updated: 2024-08-06T07:58:59.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1274254 - http://www.securityfocus.com/bid/77285 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://support.ntp.org/bin/view/Main/NtpBug2899 - http://rhn.r
twork/topics/security/linuxbulletinapr2016-2952096.html - http://support.ntp.org/bin/view/Main/NtpBug2899 - http://rhn.redhat.com/errata/RHSA-2016-2583.html - http://www.securitytracker.com/id/1033951 - http://rhn.redhat.com/errata/RHSA-2016-0780.html - http://www.debian.org/security/2015/dsa-3388 - https://security.gentoo.org/glsa/201607-15 - https://security.netapp.com/advisory/ntap-20171004-0001/
CVE ID: CVE-2015-7695 State: PUBLISHED Published: 2016-06-07T14:00:00 Last Updated: 2024-08-06T07:58:59.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/09/30/8 - http://www.debian.org/security/2015/dsa-3369 - http://www.openwall.com/lists/oss-security/2015/10/11/3 - http://www.openwall.com/lists/oss-security/2015/09/30/6 - http://www.securityfocus.com/bid/76784 - http://framework.zend.com/s
/www.openwall.com/lists/oss-security/2015/09/30/6 - http://www.securityfocus.com/bid/76784 - http://framework.zend.com/security/advisory/ZF2015-08
CVE ID: CVE-2015-7696 State: PUBLISHED Published: 2015-11-06T18:00:00 Last Updated: 2024-08-06T07:58:59.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2788-2 - http://www.openwall.com/lists/oss-security/2015/09/07/4 - http://www.debian.org/security/2015/dsa-3386 - http://www.securitytracker.com/id/1034027 - http://www.ubuntu.com/usn/U