Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rapid7.com/db/modules/exploit/windows/http/manage_engine_opmanager_rce - http://seclists.org/fulldisclosure/2015/Sep/66 - http://packetstormsecurity.com/files/133596/ManageEngine-OpManager-Remote-Code-Execution.html - https://www.exploit-db.com/exploits/38221/
CVE ID: CVE-2015-7767 State: PUBLISHED Published: 2015-10-09T14:00:00Z Last Updated: 2024-09-17T02:31:19.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long USER command. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37908/ - https://www.exploit-db.com/exploits/38252/
CVE ID: CVE-2015-7768 State: PUBLISHED Published: 2015-10-09T14:00:00 Last Updated: 2024-08-06T07:58:59.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command. Additional Analyst Notes: - CVE Program Container: References: - http://www.rapid7.com/db/modules/exploit/windows/ftp/kmftp_utility_cwd - http://packetstormsecurity.com/files/137252/Konica-Minolta-FTP-Utility-1.0-SEH-Buffer-Overflow.html - http://packetstormsecurity.com/files/133621/Konica-Minolta-FTP-Utility-1.00-Post-Auth-CWD-Command-SEH-Overflow.html - https://www.exploit-db.com/exploits/39215/ - https
ca-Minolta-FTP-Utility-1.00-Post-Auth-CWD-Command-SEH-Overflow.html - https://www.exploit-db.com/exploits/39215/ - https://www.exploit-db.com/exploits/38254/
CVE ID: CVE-2015-7769 State: PUBLISHED Published: 2016-02-19T19:00:00 Last Updated: 2024-08-06T07:59:00.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: baserCMS 3.0.2 through 3.0.8 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://basercms.net/security/JVN69854312 - http://jvn.jp/en/jp/JVN69854312/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000030
CVE ID: CVE-2015-7770 State: PUBLISHED Published: 2015-11-06T11:00:00 Last Updated: 2024-08-06T07:59:00.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dell SonicWall TotalSecure TZ 100 devices with firmware before 5.9.1.0-22o allow remote attackers to cause a denial of service via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN90135579/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000176 - http://www.securitytracker.com/id/1034092
CVE ID: CVE-2015-7771 State: PUBLISHED Published: 2015-11-20T02:00:00 Last Updated: 2024-08-06T07:59:00.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted SSID that is encountered by an applican application, a different vulnerability than CVE-2015-7772. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN71088919/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000178 - http://jvn.jp/en/jp/JVN71088919/995707/index.html
CVE ID: CVE-2015-7772 State: PUBLISHED Published: 2015-11-20T02:00:00 Last Updated: 2024-08-06T07:58:59.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted URL that triggers WebView anchor attachment in an applican application, a different vulnerability than CVE-2015-7771. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN64625488/995707/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000179 - http://jvn.jp/en/jp/JVN64625488/index.htm
/JVN64625488/995707/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000179 - http://jvn.jp/en/jp/JVN64625488/index.html
CVE ID: CVE-2015-7773 State: PUBLISHED Published: 2015-11-20T02:00:00 Last Updated: 2024-08-06T07:58:59.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the Panel component in Bastian Allgeier Kirby before 2.1.2 allows remote authenticated users to execute arbitrary PHP code by uploading a file that lacks an extension, and then renaming this file to have a .php extension. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000182 - http://getkirby.com/changelog/kirby-2-1-2 - http://jvn.jp/en/jp/JVN34780384/index.html
CVE ID: CVE-2015-7774 State: PUBLISHED Published: 2015-11-14T02:00:00 Last Updated: 2024-08-06T07:58:59.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: PC-EGG pWebManager before 3.3.10, and before 2.2.2 for PHP 4.x, allows remote authenticated users to execute arbitrary OS commands by leveraging the editor role. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000180 - http://www.pwebmanager.org/ - http://jvn.jp/en/jp/JVN25323093/index.html
CVE ID: CVE-2015-7775 State: PUBLISHED Published: 2016-06-19T15:00:00 Last Updated: 2024-08-06T07:58:59.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-1197. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000084 - http://jvn.jp/en/jp/JVN49285177/index.html - https://support.cybozu.com/ja-jp/article/8893
CVE ID: CVE-2015-7776 State: PUBLISHED Published: 2016-06-19T20:00:00 Last Updated: 2024-08-06T07:58:59.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Garoon 3.x and 4.x before 4.2.0 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to track users via a crafted HTML e-mail message, a different vulnerability than CVE-2016-1196. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN53542912/index.html - https://support.cybozu.com/ja-jp/article/8897 - https://support.cybozu.com/ja-jp/article/8757 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000085 - https://support.cybozu.com/ja-jp/article/8982 - ht
om/ja-jp/article/8757 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000085 - https://support.cybozu.com/ja-jp/article/8982 - https://support.cybozu.com/ja-jp/article/8951
CVE ID: CVE-2015-7777 State: PUBLISHED Published: 2015-11-21T11:00:00 Last Updated: 2024-08-06T07:58:59.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in JosephErnest Void before 2015-10-02 allows remote attackers to inject arbitrary web script or HTML via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN20649799/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000184 - https://github.com/josephernest/void/commit/84b9615ae7fe233c40a80bf749085caaef6f4919
CVE ID: CVE-2015-7778 State: PUBLISHED Published: 2017-10-10T16:00:00 Last Updated: 2024-08-06T07:59:00.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gurunavi App for iOS before 6.0.0 does not verify SSL certificates which could allow remote attackers to perform man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000181.html - http://www.securityfocus.com/bid/77637 - http://jvn.jp/en/jp/JVN29141986/index.html
CVE ID: CVE-2015-7779 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7780 State: PUBLISHED Published: 2017-06-27T20:00:00 Last Updated: 2024-08-06T07:58:59.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN21968837/index.html - http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000185.html
CVE ID: CVE-2015-7781 State: PUBLISHED Published: 2017-06-27T20:00:00 Last Updated: 2024-08-06T07:59:00.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000186.html - http://jvn.jp/en/jp/JVN12991684/index.html
CVE ID: CVE-2015-7782 State: PUBLISHED Published: 2015-12-30T02:00:00 Last Updated: 2024-08-06T07:58:59.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Let's PHP! Frame high-speed chat before 2015-09-22 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN35845584/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000188
CVE ID: CVE-2015-7783 State: PUBLISHED Published: 2015-12-27T19:00:00 Last Updated: 2024-08-06T07:58:59.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Let's PHP! p++BBS before 4.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://php.s3.to/bbs/bbs2.php - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000189 - http://jvn.jp/en/jp/JVN72891124/index.html
CVE ID: CVE-2015-7784 State: PUBLISHED Published: 2015-12-30T02:00:00 Last Updated: 2024-08-06T07:59:00.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the BOKUBLOCK (1) BbAdminViewsControl213 plugin before 1.1 and (2) BbAdminViewsControl plugin before 2.1 for EC-CUBE allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ec-cube.net/products/detail.php?product_id=288 - http://www.ec-cube.net/products/detail.php?product_id=781 - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000190 - http://jvn.jp/en/jp/JVN55545372/index.html
CVE ID: CVE-2015-7785 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-06T07:59:00.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: GANMA! App for iOS does not verify SSL certificates. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN44541100/index.html - http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000191.html
CVE ID: CVE-2015-7786 State: PUBLISHED Published: 2015-12-29T17:00:00 Last Updated: 2024-08-06T07:58:59.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the NTT DATA Smart Sourcing JavaScript module 2003-11-26 through 2013-07-09 for Web Analytics Service allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000196 - http://www.nttdata-smart.co.jp/information/2015/000040.html - http://jvn.jp/en/jp/JVN70083512/index.html - http://jvn.jp/en/jp/JVN70083512/995570/index.html
CVE ID: CVE-2015-7787 State: PUBLISHED Published: 2015-12-30T02:00:00 Last Updated: 2024-08-06T07:58:59.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to discover the WPA2-PSK passphrase via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN69462495/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000192 - http://www.asus.com/jp/News/FX04LE8HN0qBoqFI
CVE ID: CVE-2015-7788 State: PUBLISHED Published: 2015-12-30T02:00:00 Last Updated: 2024-08-06T07:58:59.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.asus.com/jp/News/FX04LE8HN0qBoqFI - http://jvn.jp/en/jp/JVN34489380/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000193
CVE ID: CVE-2015-7789 State: PUBLISHED Published: 2015-12-30T02:00:00 Last Updated: 2024-08-06T07:58:59.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.asus.com/jp/News/FX04LE8HN0qBoqFI - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000194 - http://jvn.jp/en/jp/JVN85359294/index.html
CVE ID: CVE-2015-7790 State: PUBLISHED Published: 2015-12-30T02:00:00 Last Updated: 2024-08-06T07:59:00.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability on ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000195 - http://www.asus.com/jp/News/FX04LE8HN0qBoqFI - http://jvn.jp/en/jp/JVN89965717/index.html
CVE ID: CVE-2015-7791 State: PUBLISHED Published: 2015-12-29T22:00:00 Last Updated: 2024-08-06T07:59:00.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin.php in the Collne Welcart plugin before 1.5.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) search[column] or (2) switch parameter. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN43344629/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000200 - http://www.welcart.com/community/archives/76035 - https://wpvulndb.com/vulnerabilities/8356 - http://www.securityfocus.com/bid/79647
CVE ID: CVE-2015-7792 State: PUBLISHED Published: 2015-12-30T02:00:00 Last Updated: 2024-08-06T07:59:00.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Corega CG-WLBARGS devices allow remote attackers to perform administrative operations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79683 - http://corega.jp/support/security/20151224_wlbargs.htm - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000201 - http://jvn.jp/en/jp/JVN51349622/index.html
CVE ID: CVE-2015-7793 State: PUBLISHED Published: 2015-12-30T02:00:00 Last Updated: 2024-08-06T07:59:00.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Corega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers to trigger outbound network traffic via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://corega.jp/support/security/20151224_wlbaragm.htm - http://jvn.jp/en/jp/JVN50775659/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000202
CVE ID: CVE-2015-7794 State: PUBLISHED Published: 2015-12-30T02:00:00 Last Updated: 2024-08-06T07:58:59.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Corega CG-WLNCM4G devices provide an open DNS resolver, which allows remote attackers to cause a denial of service (traffic amplification) via crafted queries. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000203 - http://jvn.jp/en/jp/JVN51250073/index.html - http://corega.jp/support/security/20151224_wlncm4g.htm
CVE ID: CVE-2015-7795 State: PUBLISHED Published: 2016-02-17T02:00:00 Last Updated: 2024-08-06T07:58:59.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, CVE-2016-1149, and CVE-2016-1150. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026 - https://cs.cybozu.co.jp/2015/006072.html - https://cs.cybozu.co.jp/2015/006087.html - https://cs.cybozu.co.jp/2016/006107.html - http://jvn.jp/e
2015/006072.html - https://cs.cybozu.co.jp/2015/006087.html - https://cs.cybozu.co.jp/2016/006107.html - http://jvn.jp/en/jp/JVN69278491/index.html - https://cs.cybozu.co.jp/2016/006109.html
CVE ID: CVE-2015-7796 State: PUBLISHED Published: 2016-02-17T02:00:00 Last Updated: 2024-08-06T07:59:00.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7797, CVE-2015-7798, CVE-2016-1149, and CVE-2016-1150. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026 - https://cs.cybozu.co.jp/2015/006072.html - https://cs.cybozu.co.jp/2015/006087.html - https://cs.cybozu.co.jp/2016/006107.html - http://jvn.jp/e
CVE ID: CVE-2015-7797 State: PUBLISHED Published: 2016-02-17T02:00:00 Last Updated: 2024-08-06T07:58:59.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7798, CVE-2016-1149, and CVE-2016-1150. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026 - https://cs.cybozu.co.jp/2015/006072.html - https://cs.cybozu.co.jp/2015/006087.html - https://cs.cybozu.co.jp/2016/006107.html - http://jvn.jp/e
CVE ID: CVE-2015-7798 State: PUBLISHED Published: 2016-02-17T02:00:00 Last Updated: 2024-08-06T07:58:59.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2016-1149, and CVE-2016-1150. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026 - https://cs.cybozu.co.jp/2015/006072.html - https://cs.cybozu.co.jp/2015/006087.html - https://cs.cybozu.co.jp/2016/006107.html - http://jvn.jp/e
CVE ID: CVE-2015-7799 State: PUBLISHED Published: 2015-10-19T10:00:00 Last Updated: 2024-08-06T07:59:00.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html - http://www.ubuntu.com/usn/USN-2841-2 - http://www.securityfocus.com/bid/77033 - http://lists.opensuse.org/opensuse-
ml - http://www.ubuntu.com/usn/USN-2841-2 - http://www.securityfocus.com/bid/77033 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html - http://www.securitytracker.com/id/1033809 - https://code.google.com/p/android/issues/detail?id=187973 - http://www.ubuntu.com/usn/USN-2886-1 - http://www.ubuntu.com/usn/USN-2843-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html - http://www.ubuntu.com/usn/USN-2844-1 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00039.html - http://www.ubuntu.com/usn/USN-2842-2 - http://www.ubuntu.com/usn/USN-2843-2 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html - http://www.ubuntu.
ntu.com/usn/USN-2843-2 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html - http://www.ubuntu.com/usn/USN-2842-1 - http://www.openwall.com/lists/oss-security/2015/10/10/3 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - https://bugzilla.redhat.com/show_bug.cgi?id=1271134 - http://www.ubuntu.com/usn/USN-2841-1 - http://www.debian.org/security/2015/dsa-3426 - http://www.ubuntu.com/usn/USN-2843-3 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html
CVE ID: CVE-2015-7800 State: REJECTED Published: 2022-07-08T17:37:36 Last Updated: 2022-07-08T17:37:36 Description: No description available.
CVE ID: CVE-2015-7801 State: PUBLISHED Published: 2016-04-20T16:00:00 Last Updated: 2024-08-06T07:58:59.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in OptiPNG 0.6.4 allows remote attackers to execute arbitrary code via a crafted PNG file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/09/16/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1264015 - http://www.ubuntu.com/usn/USN-2951-1
CVE ID: CVE-2015-7802 State: PUBLISHED Published: 2016-04-20T16:00:00 Last Updated: 2024-08-06T07:58:59.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: gifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote attackers to cause a denial of service (uninitialized memory read) via a crafted GIF file. Additional Analyst Notes: - CVE Program Container: References: - http://optipng.sourceforge.net/history.txt - http://www.ubuntu.com/usn/USN-2951-1 - https://sourceforge.net/p/optipng/bugs/53/
CVE ID: CVE-2015-7803 State: PUBLISHED Published: 2015-12-11T11:00:00 Last Updated: 2024-08-06T07:58:59.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a .phar file with a crafted TAR archive entry in which the Link indicator references a file that does not exist. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205637 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00099.html - https://bugs.php.net/bug.php?id=69720 - http://
637 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00099.html - https://bugs.php.net/bug.php?id=69720 - http://www.debian.org/security/2015/dsa-3380 - http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.461720 - http://www.securityfocus.com/bid/76959 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=d698f0ae51f67c9cce870b09c59df3d6ba959244 - http://www.php.net/ChangeLog-5.php - http://www.openwall.com/lists/oss-security/2015/10/05/8 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00037.html - http://www.ubuntu.com/usn/USN-2786-1 - http://lists.opensuse.org/op
pensuse.org/opensuse-updates/2016-02/msg00037.html - http://www.ubuntu.com/usn/USN-2786-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html - https://security.gentoo.org/glsa/201606-10
CVE ID: CVE-2015-7804 State: PUBLISHED Published: 2015-12-11T11:00:00 Last Updated: 2024-08-06T07:58:59.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (uninitialized pointer dereference and application crash) by including the / filename in a .zip PHAR archive. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205637 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00099.html - http://www.debian.org/security/2015/dsa-3380 - http://lists.apple.com/archives/securi