Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-488 - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796
CVE ID: CVE-2015-6713 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:24.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Function call implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-201
5-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-489 - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796
CVE ID: CVE-2015-6714 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:24.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Function bind implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-201
5-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796 - http://www.zerodayinitiative.com/advisories/ZDI-15-490
CVE ID: CVE-2015-6715 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:24.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Function apply implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6716, CVE-2015-6717, CVE-20
15-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796 - http://www.zerodayinitiative.com/advisories/ZDI-15-491
CVE ID: CVE-2015-6716 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:24.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ANSendForFormDistribution method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6717, CVE
-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-507 - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796
CVE ID: CVE-2015-6717 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:25.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DynamicAnnotStore method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-67
09, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-499 - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796
CVE ID: CVE-2015-6718 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:24.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CBSharedReviewIfOfflineDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716,
CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.zerodayinitiative.com/advisories/ZDI-15-503 - http://www.securitytracker.com/id/1033796
CVE ID: CVE-2015-6719 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:24.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CBSharedReviewCloseDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE
-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.zerodayinitiative.com/advisories/ZDI-15-504 - http://www.securitytracker.com/id/1033796
CVE ID: CVE-2015-6720 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:25.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ANRunSharedReviewEmailStep method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CV
E-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-506 - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796
CVE ID: CVE-2015-6721 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:24.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CBSharedReviewSecurityDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716,
CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796 - http://www.zerodayinitiative.com/advisories/ZDI-15-502
CVE ID: CVE-2015-6722 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:24.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CBSharedReviewStatusDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CV
E-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6723, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-501 - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796
CVE ID: CVE-2015-6723 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:24.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ANTrustPropagateAll method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-
6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6724, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796 - http://www.zerodayinitiative.com/advisories/ZDI-15-497
CVE ID: CVE-2015-6724 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:24.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ANSendForApproval method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-67
09, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6725, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-495 - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796
CVE ID: CVE-2015-6725 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:24.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ANSendForSharedReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-6707, CVE-2015-6708, CVE-2015-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-201
5-6709, CVE-2015-6710, CVE-2015-6711, CVE-2015-6712, CVE-2015-6713, CVE-2015-6714, CVE-2015-6715, CVE-2015-6716, CVE-2015-6717, CVE-2015-6718, CVE-2015-6719, CVE-2015-6720, CVE-2015-6721, CVE-2015-6722, CVE-2015-6723, CVE-2015-6724, CVE-2015-7614, CVE-2015-7616, CVE-2015-7618, CVE-2015-7619, CVE-2015-7620, and CVE-2015-7623. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796 - http://www.zerodayinitiative.com/advisories/ZDI-15-505
CVE ID: CVE-2015-6727 State: PUBLISHED Published: 2015-09-01T14:00:00 Last Updated: 2024-08-06T07:29:24.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" text. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wikimedia/mediawiki/commit/5faabfa1bbf65536ea36108887040198afcb3c82 - http://www.openwall.com/lists/oss-security/2015/08/27/6 - https://phabricator.wikimedia.org/T106893 - http://www.openwall.com/lists/oss-security/2015/08/12/6 - https://lists.
6 - https://phabricator.wikimedia.org/T106893 - http://www.openwall.com/lists/oss-security/2015/08/12/6 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-August/000179.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165193.html
CVE ID: CVE-2015-6728 State: PUBLISHED Published: 2015-09-01T14:00:00 Last Updated: 2024-08-06T07:29:24.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 does not perform token comparison in constant time, which allows remote attackers to guess the watchlist token and bypass CSRF protection via a timing attack. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201510-05 - http://www.openwall.com/lists/oss-security/2015/08/27/6 - http://www.openwall.com/lists/oss-security/2015/08/12/6 - https://lists.wikimedia.org/pipe
s/oss-security/2015/08/27/6 - http://www.openwall.com/lists/oss-security/2015/08/12/6 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-August/000179.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165193.html - http://www.securityfocus.com/bid/76334
CVE ID: CVE-2015-6729 State: PUBLISHED Published: 2015-09-01T14:00:00 Last Updated: 2024-08-06T07:29:24.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to inject arbitrary web script or HTML via the rel404 parameter, which is not properly handled in an error page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201510-05 - http://www.openwall.com/lists/oss-security/2015/08/27/6 - http://www.openwall.com/lists/oss-security/2015/08/12/6 - https://lists.wikimedia.org/pipermail/m
ecurity/2015/08/27/6 - http://www.openwall.com/lists/oss-security/2015/08/12/6 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-August/000179.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165193.html - http://www.securityfocus.com/bid/76334
CVE ID: CVE-2015-6730 State: PUBLISHED Published: 2015-09-01T14:00:00 Last Updated: 2024-08-06T07:29:24.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to inject arbitrary web script or HTML via the f parameter, which is not properly handled in an error page, related to "ForeignAPI images." Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201510-05 - http://www.openwall.com/lists/oss-security/2015/08/27/6 - http://www.openwall.com/lists/oss-security/2015/08/12/6 - https://list
ww.openwall.com/lists/oss-security/2015/08/27/6 - http://www.openwall.com/lists/oss-security/2015/08/12/6 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-August/000179.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165193.html - http://www.securityfocus.com/bid/76334
CVE ID: CVE-2015-6731 State: PUBLISHED Published: 2015-09-01T14:00:00 Last Updated: 2024-08-06T07:29:24.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via a (1) section_*, (2) template_*, (3) label_*, or (4) new_template parameter to Special:CreateForm or (5) target or (6) alt_form parameter to Special:FormEdit. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201510-05 - http://www.openwall.com/lists/oss-security/2015/08/27/6 - http://www.openwall.com/lists/oss-security
rg/glsa/201510-05 - http://www.openwall.com/lists/oss-security/2015/08/27/6 - http://www.openwall.com/lists/oss-security/2015/08/12/6 - https://phabricator.wikimedia.org/T103391 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-August/000179.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165193.html - http://www.securityfocus.com/bid/76334
CVE ID: CVE-2015-6732 State: PUBLISHED Published: 2015-09-01T14:00:00 Last Updated: 2024-08-06T07:29:24.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via the (1) wpSummary parameter to Special:FormEdit, the (2) "Template label (optional)" field in a form, or a (3) Field name in a template. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201510-05 - http://www.openwall.com/lists/oss-security/2015/08/27/6 - http://www.openwall.com/lists/oss-security/2015/08/12/6 - https:
tp://www.openwall.com/lists/oss-security/2015/08/27/6 - http://www.openwall.com/lists/oss-security/2015/08/12/6 - https://phabricator.wikimedia.org/T103391 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-August/000179.html - https://phabricator.wikimedia.org/T103761 - https://phabricator.wikimedia.org/T103765 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165193.html - http://www.securityfocus.com/bid/76334
CVE ID: CVE-2015-6733 State: PUBLISHED Published: 2015-09-01T14:00:00 Last Updated: 2024-08-06T07:29:24.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: GeSHi, as used in the SyntaxHighlight_GeSHi extension and MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2, allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201510-05 - http://www.openwall.com/lists/oss-security/2015/08/27/6 - http://www.openwall.com/lists/oss-security/2015/08/12/6 - https://phabricator.wikimedia.org/T101608 - https://lists.wikimedia.org/p
openwall.com/lists/oss-security/2015/08/12/6 - https://phabricator.wikimedia.org/T101608 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-August/000179.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165193.html - http://www.securityfocus.com/bid/76361