Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
sa-3184 - http://www.openwall.com/lists/oss-security/2015/02/13/14 - http://www.openwall.com/lists/oss-security/2015/02/14/6 - http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git%3Ba=commit%3Bh=f0f71a721ccd7ab9e40b8b6b028b59632c0cc648 - http://www.securitytracker.com/id/1031876
CVE ID: CVE-2015-1607 State: PUBLISHED Published: 2019-11-20T18:30:54 Last Updated: 2024-08-06T04:47:17.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service (invalid read operation) via a crafted keyring file, related to sign extensions and "memcpy with overlapping ranges." Additional Analyst Notes: - CVE Program Container: References: - https://blog.fuzzing-project.org/5-Multiple-issues-in-GnuPG-found-through-keyring-fuzzing-TFPA-0012015.html - https://lists.gnupg.org/pipermail/gnupg-announ
ultiple-issues-in-GnuPG-found-through-keyring-fuzzing-TFPA-0012015.html - https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html - http://www.openwall.com/lists/oss-security/2015/02/13/14 - http://www.openwall.com/lists/oss-security/2015/02/14/6 - https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000361.html - https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000362.html - http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git%3Ba=commit%3Bh=2183683bd633818dd031b090b5530951de76f392 - http://www.ubuntu.com/usn/usn-2554-1/ - http://www.securityfocus.com/bid/72610
CVE ID: CVE-2015-1608 State: PUBLISHED Published: 2015-02-16T02:00:00 Last Updated: 2024-08-06T04:47:17.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Topline Opportunity Form (aka XLS Opp form) before 2015-02-15 does not properly restrict access to database-connection strings, which allows attackers to read the cleartext version of sensitive credential and e-mail address information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/669156 - http://www.kb.cert.org/vuls/id/BLUU-9RUTH4 - http://www.securityfocus.com/bid/72518
CVE ID: CVE-2015-1609 State: PUBLISHED Published: 2015-03-30T14:00:00 Last Updated: 2024-08-06T04:47:17.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service via a crafted UTF-8 string in a BSON request. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152493.html - https://security.gentoo.org/glsa/201611-13 - http://www.splunk.com/view/SP-CAAAPC3 - http://www.securitytracker.com/id/1034466 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153690.html - https://jira.mongodb.org/bro
034466 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153690.html - https://jira.mongodb.org/browse/SERVER-17264
CVE ID: CVE-2015-1610 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-06T04:47:17.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: hosttracker in OpenDaylight l2switch allows remote attackers to change the host location information by spoofing the MAC address, aka "topology spoofing." Additional Analyst Notes: - CVE Program Container: References: - https://wiki.opendaylight.org/view/Security_Advisories#.5BModerate.5D_CVE-2015-1610_l2switch:_topology_spoofing_via_hosttracker - http://www.internetsociety.org/sites/default/files/10_4_2.pdf - http://www.securityfocus.com/bid/73251
CVE ID: CVE-2015-1611 State: PUBLISHED Published: 2017-04-04T17:00:00 Last Updated: 2024-08-06T04:47:17.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to "fake LLDP injection." Additional Analyst Notes: - CVE Program Container: References: - https://git.opendaylight.org/gerrit/#/c/16208/ - http://www.internetsociety.org/sites/default/files/10_4_2.pdf - https://wiki.opendaylight.org/view/Security_Advisories#.5BModerate.5D_CVE-2015-1611_CVE-2015-1612_openflowplugin:_topology_spoofing_via_LLDP - http://www.securityfocus.com/bid/73254 - https:
CVE-2015-1611_CVE-2015-1612_openflowplugin:_topology_spoofing_via_LLDP - http://www.securityfocus.com/bid/73254 - https://git.opendaylight.org/gerrit/#/c/16193/ - https://cloudrouter.org/security/
CVE ID: CVE-2015-1612 State: PUBLISHED Published: 2017-04-04T17:00:00 Last Updated: 2024-08-06T04:47:17.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay." Additional Analyst Notes: - CVE Program Container: References: - https://git.opendaylight.org/gerrit/#/c/16208/ - http://www.internetsociety.org/sites/default/files/10_4_2.pdf - https://wiki.opendaylight.org/view/Security_Advisories#.5BModerate.5D_CVE-2015-1611_CVE-2015-1612_openflowplugin:_topology_spoofing_via_LLDP - http://www.securityfocus.
sories#.5BModerate.5D_CVE-2015-1611_CVE-2015-1612_openflowplugin:_topology_spoofing_via_LLDP - http://www.securityfocus.com/bid/73254 - https://git.opendaylight.org/gerrit/#/c/16193/ - https://cloudrouter.org/security/
CVE ID: CVE-2015-1613 State: PUBLISHED Published: 2015-02-16T15:00:00Z Last Updated: 2024-09-16T23:36:55.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method. Additional Analyst Notes: - CVE Program Container: References: - https://rhodecode.com/blog/rhodecode-enterprise-security-release/
CVE ID: CVE-2015-1614 State: PUBLISHED Published: 2015-02-19T15:00:00 Last Updated: 2024-08-06T04:47:17.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Image Metadata Cruncher plugin for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) image_metadata_cruncher[alt] or (2) image_metadata_cruncher[caption] parameter in an update action in the image_metadata_cruncher_title page to wp-admin/options.php or (3) custom image meta tag to the image metadata cruncher page. Additional Analyst Notes: - CVE Program Contain
ns.php or (3) custom image meta tag to the image metadata cruncher page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100926 - http://packetstormsecurity.com/files/130404/WordPress-Image-Metadata-Cruncher-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/534718/100/0/threaded - http://www.securityfocus.com/archive/1/534711/100/0/threaded
CVE ID: CVE-2015-1616 State: PUBLISHED Published: 2015-02-17T15:00:00Z Last Updated: 2024-09-16T17:52:47.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10098
CVE ID: CVE-2015-1617 State: PUBLISHED Published: 2015-02-17T15:00:00Z Last Updated: 2024-09-17T00:25:43.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10098
CVE ID: CVE-2015-1618 State: PUBLISHED Published: 2015-02-17T15:00:00Z Last Updated: 2024-09-16T22:44:59.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated users to obtain sensitive password information via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10098
CVE ID: CVE-2015-1619 State: PUBLISHED Published: 2015-02-17T15:00:00Z Last Updated: 2024-09-16T23:46:13.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway (MEG) 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5, 5.6, and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest messages. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10099
CVE ID: CVE-2015-1621 State: PUBLISHED Published: 2015-02-17T15:00:00Z Last Updated: 2024-09-16T22:08:36.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Webform prepopulate block module before 7.x-3.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2423681 - http://www.openwall.com/lists/oss-security/2015/02/13/12 - https://www.drupal.org/node/2424405
CVE ID: CVE-2015-1622 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T04:47:17.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-018 - http://www.securitytracker.com/id/1031888 - http://www.securityfocus.com/bid/72927
CVE ID: CVE-2015-1623 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T04:47:17.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0056 and CVE-2015-1626. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-018 - http://www.securitytracker.com/id/1031888 - http://www.securityfocus.com/bid/72928
CVE ID: CVE-2015-1624 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T04:47:17.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-018 - http://www.securitytracker.com/id/1031888 - http://www.securityfocus.com/bid/72929
CVE ID: CVE-2015-1625 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T04:47:17.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1634. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-018 - http://www.securitytracker.com/id/1031888 - http://www.securityfocus.com/bid/72923
CVE ID: CVE-2015-1626 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T04:47:17.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0056 and CVE-2015-1623. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-018 - http://www.securitytracker.com/id/1031888 - http://www.securityfocus.com/bid/72930
CVE ID: CVE-2015-1627 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T04:47:17.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-018 - http://www.securitytracker.com/id/1031888 - http://www.securityfocus.com/bid/72932
CVE ID: CVE-2015-1628 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T04:47:17.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbitrary web script or HTML via a crafted X-OWA-Canary cookie in an AD.RecipientType.User action, aka "OWA Modified Canary Parameter Cross Site Scripting Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-026 - http://www.securitytracker.com/id/1031900
CVE ID: CVE-2015-1629 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T04:47:17.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "ExchangeDLP Cross Site Scripting Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-026 - http://www.securitytracker.com/id/1031900
CVE ID: CVE-2015-1630 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T04:47:17.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Audit Report Cross Site Scripting Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-026 - http://www.securitytracker.com/id/1031900
CVE ID: CVE-2015-1631 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T04:47:17.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof meeting organizers via unspecified vectors, aka "Exchange Forged Meeting Request Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-026 - http://www.securitytracker.com/id/1031900
CVE ID: CVE-2015-1632 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T04:47:17.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in errorfe.aspx in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbitrary web script or HTML via the msgParam parameter in an authError action, aka "Exchange Error Message Cross Site Scripting Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-026 - http://www.securitytracker.com/id/1031900
CVE ID: CVE-2015-1633 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T04:47:17.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, SharePoint Foundation 2013 Gold and SP1, and SharePoint Server 2013 Gold and SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-022 - http://www.securitytracker.com/id/1031895
CVE ID: CVE-2015-1634 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T04:47:17.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1625. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-018 - http://www.securitytracker.com/id/1031888 - http://www.securityfocus.com/bid/72931
CVE ID: CVE-2015-1635 State: PUBLISHED Published: 2015-04-14T20:00:00.000Z Last Updated: 2025-10-22T00:05:32.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-034 - https://www.exploit-db.com/exploits/36773/ - http://www.osvdb.org/120629 - http://www.securitytrack
tins/2015/ms15-034 - https://www.exploit-db.com/exploits/36773/ - http://www.osvdb.org/120629 - http://www.securitytracker.com/id/1032109 - http://www.securityfocus.com/bid/74013 - https://www.exploit-db.com/exploits/36776/ - http://packetstormsecurity.com/files/131463/Microsoft-Windows-HTTP.sys-Proof-Of-Concept.html
CVE ID: CVE-2015-1636 State: PUBLISHED Published: 2015-03-11T10:00:00 Last Updated: 2024-08-06T04:47:17.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 Gold and SP1 and SharePoint Server 2013 Gold and SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-022 - http://www.securitytracker.com/id/1031895
CVE ID: CVE-2015-1637 State: PUBLISHED Published: 2015-03-06T17:00:00 Last Updated: 2024-08-06T04:47:17.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schannel (aka Secure Channel) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204 and CVE-2015-1067. Additional Analyst Notes: - CVE Program
e "FREAK" issue, a different vulnerability than CVE-2015-0204 and CVE-2015-1067. Additional Analyst Notes: - CVE Program Container: References: - https://technet.microsoft.com/library/security/3046015 - http://www.securitytracker.com/id/1031833 - http://www.securityfocus.com/bid/72965 - https://freakattack.com/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-031 - http://web.archive.org/web/20150321220028/https://freakattack.com/
CVE ID: CVE-2015-1638 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Active Directory Federation Services (AD FS) 3.0 on Windows Server 2012 R2 does not properly handle logoff actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation, aka "Active Directory Federation Services Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032115 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-040
CVE ID: CVE-2015-1639 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft Office for Mac 2011 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microsoft Outlook App for Mac XSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032104 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033
CVE ID: CVE-2015-1640 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft Project Server 2010 SP2 and 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032111 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-036
CVE ID: CVE-2015-1641 State: PUBLISHED Published: 2015-04-14T20:00:00.000Z Last Updated: 2025-10-21T23:56:03.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted RTF document, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1032104 - ht
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1032104 - http://www.securityfocus.com/bid/73995 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033
CVE ID: CVE-2015-1642 State: PUBLISHED Published: 2015-08-15T00:00:00.000Z Last Updated: 2025-10-21T23:55:58.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1203 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081 - http://www.securitytracker.com/id/1033239