Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ttp://www.openwall.com/lists/oss-security/2016/01/27/6 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://github.com/torvalds/linux/commit/94f9cd81436c85d8c3a318ba92e236ede73752fc - http://www.ubuntu.com/usn/USN-2890-3 - http://www.ubuntu.com/usn/USN-2889-1 - http://www.ubuntu.com/usn/USN-2889-2 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html - http://www.ubuntu.com/usn/USN-2890-2 - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http://www.ubuntu.com/usn/USN-2890-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html - https://bugzilla.redhat.com/sho
SN-2890-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html - https://bugzilla.redhat.com/show_bug.cgi?id=1300731 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=94f9cd81436c85d8c3a318ba92e236ede73752fc - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176464.html
CVE ID: CVE-2015-8789 State: PUBLISHED Published: 2016-01-29T19:00:00 Last Updated: 2024-08-06T08:29:22.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3538 - http://www.securityfocus.com/bid/94924 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html - https://github.com/Matroska-Org/libebml/commit/8
24 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html - https://github.com/Matroska-Org/libebml/commit/88409e2a94dd3b40ff81d08bf6d92f486d036b24 - http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html - https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog - http://www.talosintelligence.com/reports/TALOS-2016-0037/
CVE ID: CVE-2015-8790 State: PUBLISHED Published: 2016-01-29T19:00:00 Last Updated: 2024-08-06T08:29:22.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3538 - http://www.securityfocus.com/bid/95124 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html - https://github.com/Matroska-Org/libebml/commit/ababb64e0c792ad2a314245233db0833b
pensuse-updates/2016-01/msg00035.html - https://github.com/Matroska-Org/libebml/commit/ababb64e0c792ad2a314245233db0833ba12036b - http://www.talosintelligence.com/reports/TALOS-2016-0036/ - http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html - https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog - http://www.securityfocus.com/bid/85307
CVE ID: CVE-2015-8791 State: PUBLISHED Published: 2016-01-29T19:00:00 Last Updated: 2024-08-06T08:29:22.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3538 - https://github.com/Matroska-Org/libebml/commit/24e5cd7c666b1ddd85619d60486db0a5481c1b90 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html - http://lists.matros
66b1ddd85619d60486db0a5481c1b90 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html - http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html - https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog
CVE ID: CVE-2015-8792 State: PUBLISHED Published: 2016-01-29T19:00:00 Last Updated: 2024-08-06T08:29:22.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Matroska-Org/libmatroska/blob/release-1.4.4/ChangeLog - https://github.com/Matroska-Org/libmatroska/commit/0a2d3e3644a7453b6513db2f9bc270f77943573f - http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html - http:
mmit/0a2d3e3644a7453b6513db2f9bc270f77943573f - http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html - http://www.debian.org/security/2016/dsa-3526 - http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html
CVE ID: CVE-2015-8793 State: PUBLISHED Published: 2016-01-29T19:00:00Z Last Updated: 2024-09-16T16:57:47.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the _mbox parameter in a mail task to the default URL, a different vulnerability than CVE-2011-2937. Additional Analyst Notes: - CVE Program Container: References: - https://roundcube.net/news/2015/06/05/updates-1.1.2-and-1.0.6-released/ - http://trac.roundcube.net/ticket/1490417 - http://trac.roundcube.net/wiki/Changelog#RELEASE1.1.2
CVE ID: CVE-2015-8794 State: PUBLISHED Published: 2016-01-29T19:00:00Z Last Updated: 2024-09-16T22:20:24.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full pathname in the _alt parameter, related to contact photo handling. Additional Analyst Notes: - CVE Program Container: References: - https://roundcube.net/news/2015/06/05/updates-1.1.2-and-1.0.6-released/ - http://trac.roundcube.net/ticket/1490379 - http://trac.roundcube.net/changeset/e84fafcec/github - http://trac.roundcube.net/change
c.roundcube.net/ticket/1490379 - http://trac.roundcube.net/changeset/e84fafcec/github - http://trac.roundcube.net/changeset/6ccd4c54b/github
CVE ID: CVE-2015-8795 State: PUBLISHED Published: 2016-02-15T02:00:00 Last Updated: 2024-08-06T08:29:22.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Admin UI in Apache Solr before 5.1 allow remote attackers to inject arbitrary web script or HTML via crafted fields that are mishandled during the rendering of the (1) Analysis page, related to webapp/web/js/scripts/analysis.js or (2) Schema-Browser page, related to webapp/web/js/scripts/schema-browser.js. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/SOLR-7346
CVE ID: CVE-2015-8796 State: PUBLISHED Published: 2016-02-15T02:00:00 Last Updated: 2024-08-06T08:29:22.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted schema-browse URL. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/SOLR-7920 - http://www.securityfocus.com/bid/85205
CVE ID: CVE-2015-8797 State: PUBLISHED Published: 2016-02-15T02:00:00 Last Updated: 2024-08-06T08:29:22.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter to a plugins/cache URI. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/SOLR-7949 - http://www-01.ibm.com/support/docview.wss?uid=swg21975544
CVE ID: CVE-2015-8798 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-06T08:29:22.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 MP6, Data Center Security: Server Advanced Server (DCS:SA) 6.x before 6.5 MP1 and 6.6 before MP1, and Data Center Security: Server Advanced Server and Agents (DCS:SA) through 6.6 MP1 allows remote authenticated users to execute arbitr
Security: Server Advanced Server and Agents (DCS:SA) through 6.6 MP1 allows remote authenticated users to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160607_00 - http://www.securityfocus.com/bid/90884
CVE ID: CVE-2015-8799 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-06T08:29:21.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 MP6, Data Center Security: Server Advanced Server (DCS:SA) 6.x before 6.5 MP1 and 6.6 before MP1, and Data Center Security: Server Advanced Server and Agents (DCS:SA) through 6.6 MP1 allows remote authenticated users to write update-p
Security: Server Advanced Server and Agents (DCS:SA) through 6.6 MP1 allows remote authenticated users to write update-package data to arbitrary agent locations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160607_00 - http://www.securityfocus.com/bid/90885
CVE ID: CVE-2015-8800 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-06T08:29:22.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 MP6, Data Center Security: Server Advanced Server (DCS:SA) 6.x before 6.5 MP1 and 6.6 before MP1, and Data Center Security: Server Advanced Server and Agents (DCS:SA) through 6.6 MP1 allow remote authenticated users to conduct argument-injection attacks by leveraging certain named-pipe access. A
.6 MP1 allow remote authenticated users to conduct argument-injection attacks by leveraging certain named-pipe access. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160607_00 - http://www.securityfocus.com/bid/90886
CVE ID: CVE-2015-8801 State: PUBLISHED Published: 2016-06-30T23:00:00 Last Updated: 2024-08-06T08:29:22.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6 MP5 allows local users to bypass intended restrictions on USB file transfer by conducting filesystem operations before the SEP device manager recognizes a new USB device. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01 - http://www.securitytracker.com/id/1036196 - http://www.securityfocus.com/
vid=security_advisory&year=&suid=20160628_01 - http://www.securitytracker.com/id/1036196 - http://www.securityfocus.com/bid/91446
CVE ID: CVE-2015-8802 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8803 State: PUBLISHED Published: 2016-02-23T19:00:00 Last Updated: 2024-08-06T08:29:22.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8805. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-02/msg00100.html - https://blog.fuzzing-project.org/38-Miscomputations-of-elliptic-curve-scalar-multiplications-i
s/2016-02/msg00100.html - https://blog.fuzzing-project.org/38-Miscomputations-of-elliptic-curve-scalar-multiplications-in-Nettle.html - https://lists.lysator.liu.se/pipermail/nettle-bugs/2015/003028.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177473.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00093.html - https://git.lysator.liu.se/nettle/nettle/commit/c71d2c9d20eeebb985e3872e4550137209e3ce4d - http://www.ubuntu.com/usn/USN-2897-1 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00091.html - http://www.openwall.com/lists/oss-security/2016/02/02/2 - http://rhn.redhat.com/errata/RHSA-2016-2582.html - http://lists.fedoraproject.org/pipe
lists/oss-security/2016/02/02/2 - http://rhn.redhat.com/errata/RHSA-2016-2582.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176807.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177229.html - https://lists.gnu.org/archive/html/info-gnu/2016-01/msg00006.html - http://www.openwall.com/lists/oss-security/2016/02/03/1
CVE ID: CVE-2015-8804 State: PUBLISHED Published: 2016-02-23T19:00:00 Last Updated: 2024-08-06T08:29:22.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-02/msg00100.html - https://blog.fuzzing-project.org/38-Miscomputations-of-elliptic-curve-scalar-multiplications-in-Nettle.html - https://git.lysator.liu.se/nettle/nettle/comm
-Miscomputations-of-elliptic-curve-scalar-multiplications-in-Nettle.html - https://git.lysator.liu.se/nettle/nettle/commit/fa269b6ad06dd13c901dbd84a12e52b918a09cd7 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00093.html - https://lists.lysator.liu.se/pipermail/nettle-bugs/2015/003024.html - http://www.ubuntu.com/usn/USN-2897-1 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00091.html - http://www.openwall.com/lists/oss-security/2016/02/02/2 - http://rhn.redhat.com/errata/RHSA-2016-2582.html - https://lists.gnu.org/archive/html/info-gnu/2016-01/msg00006.html - http://www.openwall.com/lists/oss-security/2016/02/03/1
CVE ID: CVE-2015-8805 State: PUBLISHED Published: 2016-02-23T19:00:00 Last Updated: 2024-08-06T08:29:22.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8803. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-02/msg00100.html - https://blog.fuzzing-project.org/38-Miscomputations-of-elliptic-curve-scalar-multiplications-i
s/2016-02/msg00100.html - https://blog.fuzzing-project.org/38-Miscomputations-of-elliptic-curve-scalar-multiplications-in-Nettle.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00093.html - https://git.lysator.liu.se/nettle/nettle/commit/c71d2c9d20eeebb985e3872e4550137209e3ce4d - http://www.ubuntu.com/usn/USN-2897-1 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00091.html - http://www.openwall.com/lists/oss-security/2016/02/02/2 - http://rhn.redhat.com/errata/RHSA-2016-2582.html - http://www.securityfocus.com/bid/84272 - http://www.openwall.com/lists/oss-security/2016/02/03/1
CVE ID: CVE-2015-8806 State: PUBLISHED Published: 2016-04-13T17:00:00 Last Updated: 2024-08-06T08:29:22.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring in a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=749115 - https://www.debian.org/security/2016/dsa-3593 - http://www.ubuntu.com/usn/USN-2994-1 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.openwall
om/usn/USN-2994-1 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.openwall.com/lists/oss-security/2016/02/03/5 - https://security.gentoo.org/glsa/201701-37 - http://www.securityfocus.com/bid/82071
CVE ID: CVE-2015-8807 State: PUBLISHED Published: 2016-04-13T16:00:00 Last Updated: 2024-08-06T08:29:22.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Webmail Edition before 5.2.12 allows remote attackers to inject arbitrary web script or HTML via vectors involving numeric form fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/02/06/4 - http://www.openwall.com/lists/oss-security/2016/02/06/5 - http://lists.fedora
wall.com/lists/oss-security/2016/02/06/4 - http://www.openwall.com/lists/oss-security/2016/02/06/5 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177484.html - http://lists.horde.org/archives/announce/2016/001149.html - https://github.com/horde/horde/commit/11d74fa5a22fe626c5e5a010b703cd46a136f253 - http://www.debian.org/security/2016/dsa-3496 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177584.html - http://lists.horde.org/archives/announce/2016/001148.html - https://github.com/horde/horde/blob/e838d4c800b0d1ecaf8b4cc613fd3af4f994c79c/bundles/webmail/docs/CHANGES
CVE ID: CVE-2015-8808 State: PUBLISHED Published: 2016-07-13T15:00:00 Last Updated: 2024-08-06T08:29:21.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted GIF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/02/06/1 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177834.html - http://www.securityfocus.com/bid/83058 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html - http://marc.info/?l=graphicsmagi
id/83058 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html - http://marc.info/?l=graphicsmagick-commit&m=142283721604323&w=2 - http://www.debian.org/security/2016/dsa-3746 - http://www.openwall.com/lists/oss-security/2016/02/06/3
CVE ID: CVE-2015-8812 State: PUBLISHED Published: 2016-04-27T17:00:00 Last Updated: 2024-08-06T08:29:22.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2967-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00031.html - http://www.ubuntu.com/usn/USN-2949-1 - http://www.securityfocus.com/bid/83218 - http://lists.opensuse.org/opensuse
tml - http://www.ubuntu.com/usn/USN-2949-1 - http://www.securityfocus.com/bid/83218 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.html - http://www.debian.org/security/2016/dsa-3503 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00028.html - http://www.ubuntu.com/usn/USN-2947-3 - http://www.ubuntu.com/usn/USN-2967-2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=67f1aee6f45059fd6b0f5b0ecb2c97ad0451f6b3 - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00029.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://lists.opensuse.org/opensuse-secu
ounce/2016-04/msg00029.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://www.ubuntu.com/usn/USN-2947-2 - https://bugzilla.redhat.com/show_bug.cgi?id=1303532 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.html - http://www.ubuntu.com/usn/USN-2947-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html - http://www.openwall.com/lists/oss-security/2016/02/11/1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.html - http://lists.opensuse.org/opensuse-security-
ttp://lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00036.html - http://www.ubuntu.com/usn/USN-2946-2 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00037.html - https://github.com/torvalds/linux/commit/67f1aee6f45059fd6b0f5b0ecb2c97ad0451f6b3 - http://www.ubuntu.com/usn/USN-2948-1 -
ps://github.com/torvalds/linux/commit/67f1aee6f45059fd6b0f5b0ecb2c97ad0451f6b3 - http://www.ubuntu.com/usn/USN-2948-1 - http://www.ubuntu.com/usn/USN-2946-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html - http://www.ubuntu.com/usn/USN-2948-2 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
CVE ID: CVE-2015-8813 State: PUBLISHED Published: 2017-03-03T16:00:00 Last Updated: 2024-08-06T08:29:22.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Page_Load function in Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs in Umbraco before 7.4.0 allows remote attackers to conduct server-side request forgery (SSRF) attacks via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://issues.umbraco.org/issue/U4-7457 - http://www.openwall.com/lists/oss-security/2016/02/17/1 - http://www.openwall.com/lists/oss-security/2016/02/18/8 - http://www.openwall.com/lists/oss-security/2016/02/17/5 - https://github.com/umbraco/Umbr