Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-5285 State: PUBLISHED Published: 2015-10-29T20:00:00 Last Updated: 2024-08-06T06:41:09.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/38424/ - http://packetstormsecurity.com/files/133897/Kallithea-0.2.9-HTTP-Response-Splitting.html - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5267.php - https://kallithea-scm.org/security/cve-2015-5285.html
CVE ID: CVE-2015-5286 State: PUBLISHED Published: 2015-10-26T17:00:00 Last Updated: 2024-08-06T06:41:09.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting images that are being uploaded using a token that expires during the process. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9623. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/bugs/1498163 - http://www.securityfocus.com/bid/76943 - https://sec
Container: References: - https://bugs.launchpad.net/bugs/1498163 - http://www.securityfocus.com/bid/76943 - https://security.openstack.org/ossa/OSSA-2015-020.html - http://rhn.redhat.com/errata/RHSA-2015-1897.html
CVE ID: CVE-2015-5287 State: PUBLISHED Published: 2015-12-07T18:00:00 Last Updated: 2024-08-06T06:41:09.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2505.html - https://www.exploit-db.com/exploits/38832/ - http://www.openwall.com/lists/oss-security/2015/12/01/1 - http://www.oracle.com
s://www.exploit-db.com/exploits/38832/ - http://www.openwall.com/lists/oss-security/2015/12/01/1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://bugzilla.redhat.com/show_bug.cgi?id=1266837 - http://www.securityfocus.com/bid/78137 - https://github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740e - http://packetstormsecurity.com/files/154592/ABRT-sosreport-Privilege-Escalation.html
CVE ID: CVE-2015-5288 State: PUBLISHED Published: 2015-10-26T14:00:00 Last Updated: 2024-08-06T06:41:09.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9.4.5 allows attackers to cause a denial of service (server crash) or read arbitrary server memory via a "too-short" salt. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77049 - http://www.postgresql.org/docs/9.3/static/release-9-3-10.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html - http://www.pos
static/release-9-3-10.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html - http://www.postgresql.org/docs/9.4/static/release-9-4-5.html - http://www.postgresql.org/docs/9.0/static/release-9-0-23.html - http://www.ubuntu.com/usn/USN-2772-1 - https://security.gentoo.org/glsa/201701-33 - http://www.postgresql.org/docs/9.2/static/release-9-2-14.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172316.html - http://lists.opensuse.org/opensuse-updates/2015-11/msg00040.html - http://lists.opensuse.org/opensuse-updates/2015-11/msg00033.html - http://www.po
pensuse-updates/2015-11/msg00040.html - http://lists.opensuse.org/opensuse-updates/2015-11/msg00033.html - http://www.postgresql.org/docs/9.1/static/release-9-1-19.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169094.html - http://www.postgresql.org/about/news/1615/ - http://www.debian.org/security/2016/dsa-3475 - http://www.debian.org/security/2015/dsa-3374 - http://www.securitytracker.com/id/1033775
CVE ID: CVE-2015-5289 State: PUBLISHED Published: 2015-10-26T14:00:00 Last Updated: 2024-08-06T06:41:09.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in json parsing in PostgreSQL before 9.3.x before 9.3.10 and 9.4.x before 9.4.5 allow attackers to cause a denial of service (server crash) via unspecified vectors, which are not properly handled in (1) json or (2) jsonb values. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77048 - http://www.postgresql.org/docs/9.3/static/release-9-3-10.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html - http://www.postgre
ic/release-9-3-10.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html - http://www.postgresql.org/docs/9.4/static/release-9-4-5.html - http://www.ubuntu.com/usn/USN-2772-1 - https://security.gentoo.org/glsa/201701-33 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172316.html - http://lists.opensuse.org/opensuse-updates/2015-11/msg00033.html - http://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commit%3Bh=08fa47c4850cea32c3116665975bca219fbf2fe6 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169094.html - http://www.postgre
5bca219fbf2fe6 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169094.html - http://www.postgresql.org/about/news/1615/ - http://www.debian.org/security/2015/dsa-3374 - http://www.securitytracker.com/id/1033775
CVE ID: CVE-2015-5290 State: PUBLISHED Published: 2019-12-26T20:33:40 Last Updated: 2024-08-06T06:41:09.265Z Vendors: ircd-ratbox Products: ircd-ratbox Problem Types: memory leak Description: A Denial of Service vulnerability exists in ircd-ratbox 3.0.9 in the MONITOR Command Handler. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1271113 - http://www.openwall.com/lists/oss-security/2015/10/11/1 - http://www.openwall.com/lists/oss-security/2015/10/12/1 - https://github.com/skyhighwings/CVE-2015-5290
CVE ID: CVE-2015-5291 State: PUBLISHED Published: 2015-11-02T19:00:00 Last Updated: 2024-08-06T06:41:09.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long hostname to the server name indication (SNI) extension, which is not properly handled when creating a ClientHello message. NOTE: this identifier has been SPLIT per ADT3 due to different affected version ranges. See CVE-2015-8036 for the session ticket issue that was introduced in
per ADT3 due to different affected version ranges. See CVE-2015-8036 for the session ticket issue that was introduced in 1.3.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3468 - https://guidovranken.files.wordpress.com/2015/10/cve-2015-5291.pdf - https://guidovranken.wordpress.com/2015/10/07/cve-2015-5291/ - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169625.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170317.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169765.html - https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-a
ail/package-announce/2015-October/169765.html - https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2015-01 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00013.html - https://security.gentoo.org/glsa/201706-18 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00119.html
CVE ID: CVE-2015-5292 State: PUBLISHED Published: 2015-10-29T16:00:00 Last Updated: 2024-08-06T06:41:09.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in System Security Services Daemon (SSSD) 1.10 before 1.13.1 allows remote authenticated users to cause a denial of service (memory consumption) via a large number of logins that trigger parsing of PAC blobs during Kerberos authentication. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2355.html - http://rhn.redhat.com/errata/RHSA-2015-2019.html - http://permalink.gmane.org/gma
edhat.com/errata/RHSA-2015-2355.html - http://rhn.redhat.com/errata/RHSA-2015-2019.html - http://permalink.gmane.org/gmane.linux.redhat.sssd.user/3422 - http://www.securitytracker.com/id/1034038 - http://www.securityfocus.com/bid/77529 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://fedorahosted.org/sssd/attachment/ticket/2803/0001-Fix-memory-leak-in-sssdpac_verify.patch - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169613.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169110.html - https://bugzilla.redhat.com/show_bug.cgi?id=1267580 - http://lists.fedoraproject.org/pipermail/package-ann
169110.html - https://bugzilla.redhat.com/show_bug.cgi?id=1267580 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169597.html - https://fedorahosted.org/sssd/ticket/2803 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1
CVE ID: CVE-2015-5293 State: PUBLISHED Published: 2017-08-24T20:00:00 Last Updated: 2024-08-06T06:41:09.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when "boot protocol" is set to None, which might allow remote attackers to communicate with a system designated to be unreachable. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2015-5293 - https://bugzilla.redhat.com/show_bug.cgi?id=1267714
CVE ID: CVE-2015-5294 State: REJECTED Published: 2016-02-23T17:00:00 Last Updated: 2016-02-23T16:57:02 Description: No description available.
CVE ID: CVE-2015-5295 State: PUBLISHED Published: 2016-01-20T16:00:00 Last Updated: 2024-08-06T06:41:09.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5.0.x before 5.0.1 (liberty) allows remote authenticated users to cause a denial of service (memory consumption) or determine the existence of local files via the resource type in a template, as demonstrated by file:///dev/zero. Additional Analyst Notes: - CVE Program Container: References: - https://security.openstack.org/ossa/OSSA-2016-003.html - http://www.securityfocus.com/bid/81438 - http://www.oracle.com/technetwork/topics/secu
ack.org/ossa/OSSA-2016-003.html - http://www.securityfocus.com/bid/81438 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176700.html - http://rhn.redhat.com/errata/RHSA-2016-0266.html - https://bugs.launchpad.net/heat/+bug/1496277
CVE ID: CVE-2015-5296 State: PUBLISHED Published: 2015-12-29T22:00:00 Last Updated: 2024-08-06T06:41:09.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections that are encrypted but unsigned, which allows man-in-the-middle attackers to conduct encrypted-to-unencrypted downgrade attacks by modifying the client-server data stream, related to clidfs.c, libsmb_server.c, and smbXcli_base.c. Additional Analyst Notes: - CVE Program Container: References: - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=a819d2b440aafa3138d95ff6e8b824da885a70e9 - http://lists.fedoraproject.org/pipermail/packag
g/?p=samba.git%3Ba=commit%3Bh=a819d2b440aafa3138d95ff6e8b824da885a70e9 - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=1ba49b8f389eda3414b14410c7fbcb4041ca06b1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html - http://www.ubuntu.com/usn/USN-2855-2 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html - http://www.secu
letinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html - http://www.securityfocus.com/bid/79732 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993 - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=d724f835acb9f4886c0001af32cd325dbbf1f895 - http://www.securitytracker.com/id/1034493 - http://ww
amba.git%3Ba=commit%3Bh=d724f835acb9f4886c0001af32cd325dbbf1f895 - http://www.securitytracker.com/id/1034493 - http://www.debian.org/security/2016/dsa-3433 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://security.gentoo.org/glsa/201612-47 - https://bugzilla.redhat.com/show_bug.cgi?id=1290292 - https://www.samba.org/samba/security/CVE-2015-5296.html - http://www.ubuntu.com/usn/USN-2855-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html
CVE ID: CVE-2015-5297 State: PUBLISHED Published: 2019-07-31T22:03:56 Last Updated: 2024-08-06T06:41:09.351Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: The pixman Project Products: pixman Problem Types: CWE-190 Description: An integer overflow issue has been reported in the general_composite_rect() function in pixman prior to version 0.32.8. An attacker could exploit this issue to cause an application using pixman to crash or, potentially, execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-5297 - https://bugs.freedesktop.org/show_bug.cgi?id=92027
CVE ID: CVE-2015-5298 State: PUBLISHED Published: 2022-07-07T18:35:40 Last Updated: 2024-08-06T06:41:09.316Z Vendors: n/a Products: Jenkins Google Login Plugin Problem Types: CWE-287 Description: The Google Login Plugin (versions 1.0 and 1.1) allows malicious anonymous users to authenticate successfully against Jenkins instances that are supposed to be locked down to a particular Google Apps domain through client-side request modification. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2015-10-12/ - http://exfiltrated.com/research-CVE-2015-5298.php
CVE ID: CVE-2015-5299 State: PUBLISHED Published: 2015-12-29T22:00:00 Last Updated: 2024-08-06T06:41:09.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shadow_copy2_get_shadow_copy_data function in modules/vfs_shadow_copy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not verify that the DIRECTORY_LIST access right has been granted, which allows remote attackers to access snapshots by visiting a shadow copy directory. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg000
permail/package-announce/2015-December/174391.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html - http://www.ubuntu.com/usn/USN-2855-2 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html - http://www.securityfocus.com/bid/79729 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html - http://lists.fedora
2016-01/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.html - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=675fd8d771f9d43e354dba53ddd9b5483ae0a1d7 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993 - http://www.securitytracker.com/id/1034493 - http://www.debian.org/security/2016/dsa-3433 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html - https://www.samba.org/samba/security/CVE-2015-5299.html - http://www.oracle.com/tech
ty-announce/2016-04/msg00048.html - https://www.samba.org/samba/security/CVE-2015-5299.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://security.gentoo.org/glsa/201612-47 - https://bugzilla.redhat.com/show_bug.cgi?id=1276126 - http://www.ubuntu.com/usn/USN-2855-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html
CVE ID: CVE-2015-5300 State: PUBLISHED Published: 2017-07-21T14:00:00 Last Updated: 2024-08-06T06:41:09.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart). Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/err
service (abort and restart). Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1930.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - http://seclists.org/bugtraq/2016/Feb/164 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.ubuntu.com/usn/USN-2783-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html - https://ics-cert.us-cert.gov/advisories/ICSA-15-356-01 - https://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://support.ntp.org/bin/vi
1 - https://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://support.ntp.org/bin/view/Main/SecurityNotice#January_2016_NTP_4_2_8p5_Securit - https://bugzilla.redhat.com/show_bug.cgi?id=1271076 - https://www-01.ibm.com/support/docview.wss?uid=swg21980676 - https://support.citrix.com/article/CTX220112 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.html - https://www.ibm.com/support/home/docdisplay?lndocid=migr-5099428 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170684.html - http://www.debian.org/security/2015/dsa-3388 - https://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206
ttp://www.debian.org/security/2015/dsa-3388 - https://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://aix.software.ibm.com/aix/efixes/security/ntp_advisory5.asc - https://www.cs.bu.edu/~goldbe/NTPattack.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html - http://www.securitytracker.com/id/1034670 - https://www-01.ibm.com/support/docview.wss?uid=isg3T1024073 - http://www.securityfocus.com/bid/77312 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html - https://www.freebsd.org/security/advisories/FreeBSD-SA-16:02.ntp.asc -
pensuse-security-announce/2016-05/msg00048.html - https://www.freebsd.org/security/advisories/FreeBSD-SA-16:02.ntp.asc - https://www-01.ibm.com/support/docview.wss?uid=swg21979393 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html - https://www-01.ibm.com/support/docview.wss?uid=nas8N1021264 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html - https://www-01.ibm.com/support/docview.wss?uid=isg3T1023885 - https://bto.bluecoat.com/security-advisory/sa113 - https://www-01.ibm.com/support/docview.wss?uid=swg21983501 - https://www-01.ibm.com/support/docview.wss?uid=ssg1S1005821 - http://support.ntp.org/bin/view/Main/NtpBug2956 - https://www-01.i
www-01.ibm.com/support/docview.wss?uid=ssg1S1005821 - http://support.ntp.org/bin/view/Main/NtpBug2956 - https://www-01.ibm.com/support/docview.wss?uid=swg21983506 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html - https://security.netapp.com/advisory/ntap-20171004-0001/
CVE ID: CVE-2015-5301 State: PUBLISHED Published: 2015-11-17T15:00:00 Last Updated: 2024-08-06T06:41:09.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated users to cause a denial of service by deleting a SAML2 Service Provider (SP). Additional Analyst Notes: - CVE Program Container: References: - https://fedorahosted.org/ipsilon/wiki/Releases/v1.0.2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171076.html - http://lists.fedoraproject.org/pipermail/package-announce/20
.org/pipermail/package-announce/2015-November/171076.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171052.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171067.html - http://www.openwall.com/lists/oss-security/2015/10/27/8 - https://fedorahosted.org/ipsilon/wiki/Releases/v1.1.1 - https://pagure.io/ipsilon/9dec97c3c83928d231ea10f4160523a13803e594 - https://bugzilla.redhat.com/show_bug.cgi?id=1271530
CVE ID: CVE-2015-5302 State: PUBLISHED Published: 2015-12-07T18:00:00 Last Updated: 2024-08-06T06:41:09.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: libreport 2.0.7 before 2.6.3 only saves changes to the first file when editing a crash report, which allows remote attackers to obtain sensitive information via unspecified vectors related to the (1) backtrace, (2) cmdline, (3) environ, (4) open_fds, (5) maps, (6) smaps, (7) hostname, (8) remote, (9) ks.cfg, or (10) anaconda-tb file attachment included in a Red Hat Bugzilla bug report. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2505.html - http://www.securityfocus.co