Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-2052 State: PUBLISHED Published: 2015-02-23T17:00:00 Last Updated: 2024-08-06T05:02:43.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary code via a long string in a GetDeviceSettings action to the HNAP interface. Additional Analyst Notes: - CVE Program Container: References: - http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10051 - http://www.securityfocus.com/bid/72623
CVE ID: CVE-2015-2053 State: PUBLISHED Published: 2015-02-23T17:00:00 Last Updated: 2024-08-06T05:02:43.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: The log viewer in McAfee Agent (MA) before 4.8.0 Patch 3 and 5.0.0, when the "Accept connections only from the ePO server" option is disabled, allows remote attackers to conduct clickjacking attacks via a crafted web page, aka an "http-generic-click-jacking" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10094 - http://www.securitytracker.com/id/1031821 - http://www.securityfocus.com/bid/74873
CVE ID: CVE-2015-2054 State: PUBLISHED Published: 2015-02-23T17:00:00 Last Updated: 2024-08-06T05:02:43.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra Wireless AirCard 760S, 762S, and 763S allows remote attackers to inject arbitrary headers via CRLF sequences in the save parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74875 - http://seclists.org/fulldisclosure/2015/Jan/58
CVE ID: CVE-2015-2055 State: PUBLISHED Published: 2015-02-23T17:00:00 Last Updated: 2024-08-06T05:02:43.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service via a long string in the oldpassword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/35859 - http://www.securityfocus.com/bid/74876
CVE ID: CVE-2015-2058 State: PUBLISHED Published: 2015-08-12T14:00:00 Last Updated: 2024-08-06T05:02:43.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jabberd2/jabberd2/issues/85 - http://www.openwall.com/lists/oss-security/2015/02/09/13 - http://www.openwall.com/lists/oss-security/2015/02/23/25 - http://www.securityfocus.com/bid/72731
CVE ID: CVE-2015-2059 State: PUBLISHED Published: 2015-08-12T14:00:00 Last Updated: 2024-08-06T05:02:43.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162537.html - http://www.debian.org/security/2016/dsa-3578 - http://lists.opensuse.org/opensuse-updates/2015-07/msg00042.html - https://git
//www.debian.org/security/2016/dsa-3578 - http://lists.opensuse.org/opensuse-updates/2015-07/msg00042.html - https://github.com/jabberd2/jabberd2/issues/85 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162549.html - http://www.securityfocus.com/bid/72736 - http://www.openwall.com/lists/oss-security/2015/02/23/25 - http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=2e97c279 - http://www.ubuntu.com/usn/USN-3068-1
CVE ID: CVE-2015-2060 State: PUBLISHED Published: 2019-11-29T20:55:44 Last Updated: 2024-08-06T05:02:43.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/02/18/3 - http://www.openwall.com/lists/oss-security/2015/02/23/16 - http://www.openwall.com/lists/oss-security/2015/02/23/24 - http://www.cabextract.org.uk/ - http://lists.fedor
02/23/16 - http://www.openwall.com/lists/oss-security/2015/02/23/24 - http://www.cabextract.org.uk/ - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151147.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151145.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:064
CVE ID: CVE-2015-2061 State: PUBLISHED Published: 2015-03-09T14:00:00 Last Updated: 2024-08-06T05:02:43.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the browser plugin for PTC Creo View allows remote attackers to execute arbitrary code via vectors involving setting a large buffer to an unspecified attribute. Additional Analyst Notes: - CVE Program Container: References: - https://support.ptc.com/appserver/cs/view/solution.jsp?n=CS172389 - http://www.securityfocus.com/bid/72836 - http://www.zerodayinitiative.com/advisories/ZDI-15-051/
CVE ID: CVE-2015-2062 State: PUBLISHED Published: 2020-02-08T17:08:14 Last Updated: 2024-08-06T05:02:43.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Huge-IT Slider (slider-image) plugin before 2.7.0 for WordPress allow remote administrators to execute arbitrary SQL commands via the removeslide parameter in a popup_posts or edit_cat action in the sliders_huge_it_slider page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130796/WordPress-Huge-IT-Slider-2.6.8-SQL-Injection.html - https://www.htbridge.com/advisory/HTB23250 - http://www.securityfocus.com/a
ss-Huge-IT-Slider-2.6.8-SQL-Injection.html - https://www.htbridge.com/advisory/HTB23250 - http://www.securityfocus.com/archive/1/archive/1/534852/100/0/threaded - https://wordpress.org/support/topic/huge-it-slider-security-vulnerability-notification-sql-injection
CVE ID: CVE-2015-2063 State: PUBLISHED Published: 2015-03-09T14:00:00 Last Updated: 2024-08-06T05:02:43.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in unace 1.2b allows remote attackers to cause a denial of service (crash) via a small file header in an ace archive, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775003 - http://www.debian.org/security/2015/dsa-3178 - http://www.openwall.com/lists/oss-security/2015/02/24/1
CVE ID: CVE-2015-2064 State: PUBLISHED Published: 2015-02-24T17:00:00 Last Updated: 2024-08-06T05:02:43.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in DLGuard 5, 4.6, and 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) c, or (3) redirect parameter to index.php or (4) search field (searchTerm parameter) in the main page. Additional Analyst Notes: - CVE Program Container: References: - http://tetraph.com/security/xss-vulnerability/dlguard-multiple-xss-cross-site-scripting-security-vulnerabilities/ - http://securityrelated.blogspot.com/2015/02/dlguard-multiple-xss-cross-site.html - ht
ipting-security-vulnerabilities/ - http://securityrelated.blogspot.com/2015/02/dlguard-multiple-xss-cross-site.html - http://www.securityfocus.com/bid/72684 - http://seclists.org/fulldisclosure/2015/Feb/66
CVE ID: CVE-2015-2065 State: PUBLISHED Published: 2015-02-24T17:00:00 Last Updated: 2024-08-06T05:02:43.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery (contus-video-gallery) plugin before 2.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the vid parameter in a rss action to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/contus-video-gallery/changelog/ - http://packetstormsecurity.com/files/130371/WordPress-Video-Gallery-2.7-SQL-Injection.html - http://www.securityfocus.com/bid/74882 - h
ormsecurity.com/files/130371/WordPress-Video-Gallery-2.7-SQL-Injection.html - http://www.securityfocus.com/bid/74882 - http://www.osvdb.org/118419 - http://www.exploit-db.com/exploits/36058
CVE ID: CVE-2015-2066 State: PUBLISHED Published: 2015-02-24T17:00:00 Last Updated: 2024-08-06T05:02:43.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in DLGuard 4.5 allows remote attackers to execute arbitrary SQL commands via the c parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72683 - http://seclists.org/fulldisclosure/2015/Feb/69 - http://tetraph.com/security/sql-injection-vulnerability/dlguard-sql-injection-security-vulnerabilities/ - http://securityrelated.blogspot.com/2015/02/dlguard-sql-injection-security.html
CVE ID: CVE-2015-2067 State: PUBLISHED Published: 2015-02-24T17:00:00 Last Updated: 2024-08-06T05:02:43.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in web/ajax_pluginconf.php in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130250/Magento-Server-MAGMI-Cross-Site-Scripting-Local-File-Inclusion.html - http://www.exploit-db.com/exploits/35996 - http://www.securityfocus.com/bid/74881
CVE ID: CVE-2015-2068 State: PUBLISHED Published: 2015-02-24T17:00:00 Last Updated: 2024-08-06T05:02:43.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allow remote attackers to inject arbitrary web script or HTML via the (1) profile parameter to web/magmi.php or (2) QUERY_STRING to web/magmi_import_run.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74879 - http://packetstormsecurity.com/files/130250/Magento-Server-MAGMI-Cross-Site-Scripting-Local-File-Inclusion.html - http://www.exploit-db.com/exploits/
m/files/130250/Magento-Server-MAGMI-Cross-Site-Scripting-Local-File-Inclusion.html - http://www.exploit-db.com/exploits/35996
CVE ID: CVE-2015-2069 State: PUBLISHED Published: 2015-02-24T17:00:00 Last Updated: 2024-08-06T05:02:43.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.11 for WordPress allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING in the wc-reports page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74885 - http://packetstormsecurity.com/files/130458/WordPress-WooCommerce-2.2.10-Cross-Site-Scripting.html - https://wordpress.org/plugins/woocommerce/changelog/ - http://seclists.org/fulldisclosure/2015/Feb/7
te-Scripting.html - https://wordpress.org/plugins/woocommerce/changelog/ - http://seclists.org/fulldisclosure/2015/Feb/75
CVE ID: CVE-2015-2070 State: PUBLISHED Published: 2015-02-24T17:00:00 Last Updated: 2024-08-06T05:02:43.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote attackers to execute arbitrary SQL commands via the catId parameter to cm/blogrss/feed. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130386/eTouch-Samepage-4.4.0.0.239-SQL-Injection-File-Read.html - http://osvdb.org/show/osvdb/118356 - http://www.exploit-db.com/exploits/36089 - http://seclists.org/fulldisclosure/2015/Feb/47 - http://www.securityfocus.com/bid/74883
CVE ID: CVE-2015-2071 State: PUBLISHED Published: 2015-02-24T17:00:00 Last Updated: 2024-08-06T05:02:43.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in cm/newui/blog/export.jsp in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the filepath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74887 - http://packetstormsecurity.com/files/130386/eTouch-Samepage-4.4.0.0.239-SQL-Injection-File-Read.html - http://osvdb.org/show/osvdb/118357 - http://www.exploit-db.com/exploits/36089 - http://seclists.org/fulldis
-Read.html - http://osvdb.org/show/osvdb/118357 - http://www.exploit-db.com/exploits/36089 - http://seclists.org/fulldisclosure/2015/Feb/47
CVE ID: CVE-2015-2072 State: PUBLISHED Published: 2015-02-27T15:00:00 Last Updated: 2024-08-06T05:02:43.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SAP HANA 73 (1.00.73.00.389160) and HANA Developer Edition 80 (1.00.80.00.391861) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) ide/core/plugins/editor/templates/trace/hanaTraceDetailService.xsjs or (2) xs/ide/editor/templates/trace/hanaTraceDetailService.xsjs, aka SAP Note 2069676. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130519/SAP-HANA-Web-based-Development-Workbe
- CVE Program Container: References: - http://packetstormsecurity.com/files/130519/SAP-HANA-Web-based-Development-Workbench-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/534747/100/0/threaded - http://seclists.org/fulldisclosure/2015/Feb/91 - http://www.securityfocus.com/bid/72773
CVE ID: CVE-2015-2073 State: PUBLISHED Published: 2021-08-09T18:03:08 Last Updated: 2024-08-06T05:02:43.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: The File RepositoRy Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to read arbitrary files via a full pathname, aka SAP Note 2018682. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130520/SAP-Business-Objects-Unauthorized-File-Repository-Server-Read.html - http://www.securityfocus.com/archive/1/archive/1/534748/100/0/threaded - http://seclists.org/fulldisclosure/2015/Feb/92 - http://www.securityfocus.com/bid/72774
CVE ID: CVE-2015-2074 State: PUBLISHED Published: 2021-08-09T18:03:10 Last Updated: 2024-08-06T05:02:43.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: The File Repository Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a full pathname, aka SAP Note 2018681. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130521/SAP-Business-Objects-Unauthorized-File-Repository-Server-Write.html - http://www.securityfocus.com/archive/1/archive/1/534749/100/0/threaded - http://seclists.org/fulldisclosure/2015/Feb/93 - http://www.securityfocus.com/bid/72776
CVE ID: CVE-2015-2075 State: PUBLISHED Published: 2015-02-27T15:00:00 Last Updated: 2024-08-06T05:02:43.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP Note 2011396. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534751/100/0/threaded - http://seclists.org/fulldisclosure/2015/Feb/95 - http://www.securityfocus.com/bid/72778 - http://packetstormsecurity.com/files/130522/SAP-Business-Objects-Unauthorized-Audit-Information-Delete.html
CVE ID: CVE-2015-2076 State: PUBLISHED Published: 2015-02-27T15:00:00 Last Updated: 2024-08-06T05:02:43.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka SAP Note 2011395. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534750/100/0/threaded - http://seclists.org/fulldisclosure/2015/Feb/94 - http://packetstormsecurity.com/files/130523/SAP-Business-Objects-Unauthorized-Audit-Information-Access.html - http://www.securityfocus.com/bid/72775
CVE ID: CVE-2015-2077 State: PUBLISHED Published: 2015-02-24T23:00:00 Last Updated: 2024-08-06T05:02:43.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SDK for Komodia Redirector with SSL Digestor, as used in Lavasoft Ad-Aware Web Companion 1.1.885.1766 and Ad-Aware AdBlocker (alpha) 1.3.69.1, Qustodio for Windows, Atom Security, Inc. StaffCop 5.8, and other products, uses the same X.509 certificate private key for a root CA certificate across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging knowledge of this key, as originally reported for Superfish VisualDiscovery on certain Lenovo Notebook lapt
y leveraging knowledge of this key, as originally reported for Superfish VisualDiscovery on certain Lenovo Notebook laptop products. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72693 - http://www.us-cert.gov/cas/techalerts/TA15-051A.html - http://www.theguardian.com/technology/2015/feb/19/lenovo-accused-compromising-user-security-installing-adware-pcs-superfish - http://blog.erratasec.com/2015/02/some-notes-on-superfish.html#.VOq6Yvn8Fp4 - http://blog.erratasec.com/2015/02/extracting-superfish-certificate.html#.VOq6Yfn8Fp4 - http://www.securitytracker.com/id/1031779 - http://www.kb.cert.org/vuls/id/529496 - http://www.wired.com/2015/02/le
p4 - http://www.securitytracker.com/id/1031779 - http://www.kb.cert.org/vuls/id/529496 - http://www.wired.com/2015/02/lenovo-superfish/ - https://www.facebook.com/notes/protect-the-graph/windows-ssl-interception-gone-wild/1570074729899339 - http://support.lenovo.com/us/en/product_security/superfish - https://blog.filippo.io/komodia-superfish-ssl-validation-is-broken/ - http://news.lenovo.com/article_display.cfm?article_id=1929 - http://marcrogers.org/2015/02/19/lenovo-installs-adware-on-customer-laptops-and-compromises-all-ssl/
CVE ID: CVE-2015-2078 State: PUBLISHED Published: 2015-02-24T23:00:00 Last Updated: 2024-08-06T05:02:43.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SDK for Komodia Redirector with SSL Digestor, as used in Lavasoft Ad-Aware Web Companion 1.1.885.1766 and Ad-Aware AdBlocker (alpha) 1.3.69.1, Qustodio for Windows, Atom Security, Inc. StaffCop 5.8, and other products, does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers, a different vulnerability than CVE-2015-2077. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA15-051A.html - http://blog.erratasec.
es: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA15-051A.html - http://blog.erratasec.com/2015/02/some-notes-on-superfish.html#.VOq6Yvn8Fp4 - http://blog.erratasec.com/2015/02/extracting-superfish-certificate.html#.VOq6Yfn8Fp4 - http://www.securitytracker.com/id/1031779 - http://www.kb.cert.org/vuls/id/529496 - https://www.facebook.com/notes/protect-the-graph/windows-ssl-interception-gone-wild/1570074729899339 - https://blog.filippo.io/komodia-superfish-ssl-validation-is-broken/
CVE ID: CVE-2015-2079 State: PUBLISHED Published: 2025-04-28T00:00:00.000Z Last Updated: 2025-04-28T15:26:11.894Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Usermin Products: Usermin Problem Types: CWE-96 Description: Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form of Perl open. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://code-white.com/public-vulnerability-list/ - https://code-white.com/blog/2015-05-cve-2015-2079-rce-usermin/
CVE ID: CVE-2015-2080 State: PUBLISHED Published: 2016-10-07T14:00:00 Last Updated: 2024-08-06T05:02:43.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Mar/12 - http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00074.html - http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00075.html - https://security.netapp.com/advisory/ntap-20190307-0005/ - http://www.securityfocus
lists/jetty-announce/msg00075.html - https://security.netapp.com/advisory/ntap-20190307-0005/ - http://www.securityfocus.com/bid/72768 - https://github.com/eclipse/jetty.project/blob/jetty-9.2.x/advisories/2015-02-24-httpparser-error-buffer-bleed.md - http://www.securitytracker.com/id/1031800 - http://packetstormsecurity.com/files/130567/Jetty-9.2.8-Shared-Buffer-Leakage.html - https://blog.gdssecurity.com/labs/2015/2/25/jetleak-vulnerability-remote-leakage-of-shared-buffers-in-je.html - http://www.securityfocus.com/archive/1/534755/100/1600/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151804.html
CVE ID: CVE-2015-2081 State: PUBLISHED Published: 2018-02-20T06:00:00 Last Updated: 2024-08-06T05:02:43.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.information-paradox.net/2015/02/cve-2015-2081-multiple-vulnerabilities.html
CVE ID: CVE-2015-2082 State: PUBLISHED Published: 2015-02-25T22:00:00 Last Updated: 2024-08-06T05:02:43.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Login.aspx in UNIT4 Prosoft HRMS before 8.14.330.43 allows remote attackers to inject arbitrary web script or HTML via the txtUserID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74896 - http://packetstormsecurity.com/files/130396/UNIT4-Prosoft-HRMS-8.14.230.47-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/534705/100/0/threaded
CVE ID: CVE-2015-2083 State: PUBLISHED Published: 2015-02-25T22:00:00 Last Updated: 2024-08-06T05:02:43.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Ilch CMS allows remote attackers to hijack the authentication of administrators for requests that add a value to a profile field via a profilefields request to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130441/Ilch-CMS-Cross-Site-Request-Forgery.html - http://www.securityfocus.com/bid/74898