Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-1360 State: PUBLISHED Published: 2015-01-27T11:00:00 Last Updated: 2024-08-06T04:40:18.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data that is improperly handled during text drawing, related to gpu/GrBitmapTextContext.cpp and gpu/GrDistanceFieldTextContext.cpp, a different vulnerability than CVE-2015-1205. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.chromium.org/636233008 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html
ences: - https://codereview.chromium.org/636233008 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://security.gentoo.org/glsa/glsa-201502-13.xml - https://code.google.com/p/chromium/issues/detail?id=416289 - https://code.google.com/p/chromium/issues/detail?id=449894
CVE ID: CVE-2015-1361 State: PUBLISHED Published: 2015-01-27T11:00:00 Last Updated: 2024-08-06T04:40:18.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: platform/image-decoders/ImageFrame.h in Blink, as used in Google Chrome before 40.0.2214.91, does not initialize a variable that is used in calls to the Skia SkBitmap::setAlphaType function, which might allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document, a different vulnerability than CVE-2015-1205. Additional Analyst Notes: - CVE Program Container: References: - http://src.chromium.org/viewvc/blink?view=revision&revision=183296 - http://googlechromerelease
Container: References: - http://src.chromium.org/viewvc/blink?view=revision&revision=183296 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://security.gentoo.org/glsa/glsa-201502-13.xml - https://code.google.com/p/chromium/issues/detail?id=411329 - https://code.google.com/p/chromium/issues/detail?id=449894
CVE ID: CVE-2015-1362 State: PUBLISHED Published: 2015-01-27T17:00:00Z Last Updated: 2024-09-16T23:41:03.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Customize 35mm tab in Two Pilots Exif Pilot 4.7.2 allows remote attackers to execute arbitrary code via a long string in the maker element in an XML file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130037/Exif-Pilot-4.7.2-Buffer-Overflow.html - http://www.exploit-db.com/exploits/35870
CVE ID: CVE-2015-1363 State: PUBLISHED Published: 2015-01-27T17:00:00Z Last Updated: 2024-09-16T22:02:24.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Free Reprintables ArticleFR 3.0.5 allows remote attackers to inject arbitrary web script or HTML via the q parameter to search/v/. Additional Analyst Notes: - CVE Program Container: References: - http://www.itas.vn/news/itas-team-found-out-XSS-vulnerability-in-articlefr-cms-73.html - http://seclists.org/fulldisclosure/2015/Jan/101 - http://packetstormsecurity.com/files/130066/articleFR-CMS-3.0.5-Cross-Site-Scripting.html
CVE ID: CVE-2015-1364 State: PUBLISHED Published: 2015-01-27T17:00:00Z Last Updated: 2024-09-17T00:26:10.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the getProfile function in system/profile.functions.php in Free Reprintables ArticleFR 3.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter to register/. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/35857 - http://www.itas.vn/news/itas-team-found-out-a-sql-injection-vulnerability-in-articlefr-cms-72.html - http://seclists.org/fulldisclosure/2015/Jan/81
CVE ID: CVE-2015-1365 State: PUBLISHED Published: 2015-01-27T17:00:00 Last Updated: 2024-08-06T04:40:18.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress allows remote attackers to write to arbitrary files via a .. (dot dot) in the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jan/75 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=1067992%40pixabay-images%2Ftrunk%2Fpixabay-images.php&old=926633%40pixabay-images%2Ftrunk%2Fpixabay-images.php - https://exchange.xforce
y-images%2Ftrunk%2Fpixabay-images.php&old=926633%40pixabay-images%2Ftrunk%2Fpixabay-images.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/100036 - http://osvdb.org/show/osvdb/117147 - http://www.exploit-db.com/exploits/35846 - http://www.securityfocus.com/archive/1/534505/100/0/threaded - http://www.openwall.com/lists/oss-security/2015/01/25/5 - https://www.mogwaisecurity.de/advisories/MSA-2015-01.txt - http://packetstormsecurity.com/files/130017/WordPress-Pixarbay-Images-2.3-XSS-Bypass-Upload-Traversal.html - https://wordpress.org/plugins/pixabay-images/changelog/
CVE ID: CVE-2015-1366 State: PUBLISHED Published: 2015-01-27T17:00:00 Last Updated: 2024-08-06T04:40:18.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the image_user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jan/75 - http://www.securityfocus.com/bid/73931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100039 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=1067992%40pixabay-images
ities/100039 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=1067992%40pixabay-images%2Ftrunk%2Fpixabay-images.php&old=926633%40pixabay-images%2Ftrunk%2Fpixabay-images.php - http://osvdb.org/show/osvdb/117144 - http://www.exploit-db.com/exploits/35846 - http://www.securityfocus.com/archive/1/534505/100/0/threaded - http://www.openwall.com/lists/oss-security/2015/01/25/5 - https://www.mogwaisecurity.de/advisories/MSA-2015-01.txt - http://packetstormsecurity.com/files/130017/WordPress-Pixarbay-Images-2.3-XSS-Bypass-Upload-Traversal.html
CVE ID: CVE-2015-1367 State: PUBLISHED Published: 2015-01-27T17:00:00 Last Updated: 2024-08-06T04:40:18.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CatBot 0.4.2 allows remote attackers to execute arbitrary SQL commands via the lastcatbot parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534490/100/0/threaded - http://seclists.org/fulldisclosure/2015/Jan/63 - http://packetstormsecurity.com/files/129990/CatBot-0.4.2-SQL-Injection.html - http://www.vulnerability-lab.com/get_content.php?id=1408 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100043
CVE ID: CVE-2015-1368 State: PUBLISHED Published: 2015-01-27T17:00:00 Last Updated: 2024-08-06T04:40:18.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Ansible Tower (aka Ansible UI) before 2.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) order_by parameter to credentials/, (2) inventories/, (3) projects/, or (4) users/3/permissions/ in api/v1/ or the (5) next_run parameter to api/v1/schedules/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99924 - http://osvdb.org/show/osvdb/116963 - http://osvdb.org/show/osvdb/116962 -
ge.xforce.ibmcloud.com/vulnerabilities/99924 - http://osvdb.org/show/osvdb/116963 - http://osvdb.org/show/osvdb/116962 - http://osvdb.org/show/osvdb/116961 - http://www.securityfocus.com/bid/72023 - http://packetstormsecurity.com/files/129944/Ansible-Tower-2.0.2-XSS-Privilege-Escalation-Authentication-Missing.html - http://www.securityfocus.com/archive/1/534464/100/0/threaded - http://osvdb.org/show/osvdb/116964 - http://osvdb.org/show/osvdb/116965 - http://seclists.org/fulldisclosure/2015/Jan/52 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150113-1_Ansible-Tower_multiple-vulnerabilities_v10.txt - http://www.exploit-db.com/exploits/35786
CVE ID: CVE-2015-1369 State: PUBLISHED Published: 2015-01-27T17:00:00 Last Updated: 2024-08-06T04:40:18.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Sequelize before 2.0.0-rc7 for Node.js allows remote attackers to execute arbitrary SQL commands via the order parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sequelize/sequelize/pull/2919 - https://nodesecurity.io/advisories/sequelize-sql-injection-order - http://www.openwall.com/lists/oss-security/2015/01/23/2
CVE ID: CVE-2015-1370 State: PUBLISHED Published: 2015-01-27T17:00:00Z Last Updated: 2024-08-06T04:40:18.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in marked 0.3.2 and earlier for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks via a vbscript tag in a link. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chjj/marked/issues/492 - https://nodesecurity.io/advisories/marked_vbscript_injection - http://www.openwall.com/lists/oss-security/2015/01/23/2 - https://github.com/evilpacket/marked/commit/3c191144939107c45a7fa11ab6cb88be6694a1ba
CVE ID: CVE-2015-1371 State: PUBLISHED Published: 2015-01-27T17:00:00Z Last Updated: 2024-09-17T02:27:09.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in ferretCMS 1.0.4-alpha allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in custom/uploads/. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JRogaishio/ferretCMS/issues/63 - http://www.securityfocus.com/bid/72287 - http://www.openwall.com/lists/oss-security/2015/01/23/3 - http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-10.h
enwall.com/lists/oss-security/2015/01/23/3 - http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-10.html - http://seclists.org/fulldisclosure/2015/Jan/98
CVE ID: CVE-2015-1372 State: PUBLISHED Published: 2015-01-27T17:00:00Z Last Updated: 2024-09-16T16:39:02.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ferretCMS 1.0.4-alpha allows remote attackers to execute arbitrary SQL commands via the p parameter in an update action to admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JRogaishio/ferretCMS/issues/63 - http://www.securityfocus.com/bid/72287 - http://www.openwall.com/lists/oss-security/2015/01/23/3 - http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-10.html - http://seclists.org/fulldisclosure/2015/Jan/98
CVE ID: CVE-2015-1373 State: PUBLISHED Published: 2015-01-27T17:00:00Z Last Updated: 2024-09-17T00:42:11.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter in a search request, (2) username in a login request, which is not properly handled when logging the event, or (3) page title in an insert action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JRogaishio/ferretCMS/issues/63 - http://www.securityfocus.com/bid/72287 - http://www.openwall.com/lists/oss-security/20
/JRogaishio/ferretCMS/issues/63 - http://www.securityfocus.com/bid/72287 - http://www.openwall.com/lists/oss-security/2015/01/23/3 - http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-10.html - http://seclists.org/fulldisclosure/2015/Jan/98
CVE ID: CVE-2015-1374 State: PUBLISHED Published: 2015-01-27T17:00:00Z Last Updated: 2024-09-17T04:04:26.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow remote attackers to hijack the authentication of administrators for requests that conduct (1) cross-site scripting (XSS), (2) SQL injection, or (3) unrestricted file upload attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JRogaishio/ferretCMS/issues/63 - http://www.openwall.com/lists/oss-security/2015/01/23/3
CVE ID: CVE-2015-1375 State: PUBLISHED Published: 2015-01-28T11:00:00 Last Updated: 2024-08-06T04:40:18.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload functionality, which allows remote attackers to write to arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jan/75 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=1067992%40pixabay-images%2Ftrunk%2Fpixabay-images.php&old=926633%40pixabay-images%2Ftrunk%2Fpixabay-images.php - http://www.osvdb.org/117146 -
es%2Ftrunk%2Fpixabay-images.php&old=926633%40pixabay-images%2Ftrunk%2Fpixabay-images.php - http://www.osvdb.org/117146 - http://www.exploit-db.com/exploits/35846 - http://www.securityfocus.com/archive/1/534505/100/0/threaded - http://www.openwall.com/lists/oss-security/2015/01/25/5 - http://packetstormsecurity.com/files/130017/WordPress-Pixarbay-Images-2.3-XSS-Bypass-Upload-Traversal.html
CVE ID: CVE-2015-1376 State: PUBLISHED Published: 2015-01-28T11:00:00 Last Updated: 2024-08-06T04:40:18.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not validate hostnames, which allows remote authenticated users to write to arbitrary files via an upload URL with a host other than pixabay.com. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jan/75 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=1067992%40pixabay-images%2Ftrunk%2Fpixabay-images.php&old=926633%40pixabay-images%2Ftrunk%2Fpixabay-images.php -
e=&new=1067992%40pixabay-images%2Ftrunk%2Fpixabay-images.php&old=926633%40pixabay-images%2Ftrunk%2Fpixabay-images.php - http://www.exploit-db.com/exploits/35846 - http://www.securityfocus.com/archive/1/534505/100/0/threaded - http://www.openwall.com/lists/oss-security/2015/01/25/5 - http://packetstormsecurity.com/files/130017/WordPress-Pixarbay-Images-2.3-XSS-Bypass-Upload-Traversal.html
CVE ID: CVE-2015-1377 State: PUBLISHED Published: 2015-02-10T20:00:00 Last Updated: 2024-08-06T04:40:18.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink attack on an unspecified file. Additional Analyst Notes: - CVE Program Container: References: - http://www.webmin.com/security.html - http://www.webmin.com/changes.html - http://secunia.com/advisories/62157
CVE ID: CVE-2015-1378 State: PUBLISHED Published: 2017-08-07T17:00:00 Last Updated: 2024-08-06T04:40:18.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: cmdlineopts.clp in grml-debootstrap in Debian 0.54, 0.68.x before 0.68.1, 0.7x before 0.78 is sourced without checking that the local directory is writable by non-root users. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2015-1378/ - https://github.com/grml/grml-debootstrap/issues/59 - http://www.openwall.com/lists/oss-security/2015/01/27/17 - http://cve.killedkenny.io/cve/CVE-2015-1378 - https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1378.html
CVE ID: CVE-2015-1379 State: PUBLISHED Published: 2017-06-08T21:00:00 Last Updated: 2024-08-06T04:40:18.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service (process freeze or crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.dest-unreach.org/socat/ - http://www.openwall.com/lists/oss-security/2015/04/06/4 - http://www.securityfocus.com/bid/72321 - http://www.openwall.com/lists/oss-security/2015/01/27/19 - https://bugzilla.redhat.com/show_bug.cgi?id=1185711
CVE ID: CVE-2015-1380 State: PUBLISHED Published: 2015-02-03T16:00:00 Last Updated: 2024-08-06T04:40:18.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded body. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/26/4 - http://secunia.com/advisories/62899 - http://www.securityfocus.com/bid/72355 - http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/ChangeLog?revision=1.197&view=markup - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://ijbswa.cvs.sourceforg
w=markup - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/currentjcc.c/?r1=1.433&r2=1.434 - http://www.openwall.com/lists/oss-security/2015/01/27/20 - http://lists.opensuse.org/opensuse-updates/2015-02/msg00031.html
CVE ID: CVE-2015-1381 State: PUBLISHED Published: 2015-02-03T16:00:00 Last Updated: 2024-08-06T04:40:18.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to cause a denial of service (segmentation fault or memory consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/26/4 - http://secunia.com/advisories/62899 - http://www.debian.org/security/2015/dsa-3145 - http://secunia.com/advisories/62775 - http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/ChangeLog?revision=1.197&view=markup -
ia.com/advisories/62775 - http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/ChangeLog?revision=1.197&view=markup - http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/pcrs.c?r1=1.46&r2=1.47 - http://www.openwall.com/lists/oss-security/2015/01/27/20 - http://lists.opensuse.org/opensuse-updates/2015-02/msg00031.html
CVE ID: CVE-2015-1382 State: PUBLISHED Published: 2015-02-03T16:00:00 Last Updated: 2024-08-06T04:40:18.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: parsers.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to an HTTP time header. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/26/4 - http://secunia.com/advisories/62899 - http://www.debian.org/security/2015/dsa-3145 - http://secunia.com/advisories/62775 - http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/ChangeLog?revision=1.197&view=markup - http://www.openwall.com/lists/oss-
bswa.cvs.sourceforge.net/viewvc/ijbswa/current/ChangeLog?revision=1.197&view=markup - http://www.openwall.com/lists/oss-security/2015/01/27/20 - http://ijbswa.cvs.sourceforge.net/viewvc/ijbswa/current/parsers.c?r1=1.297&r2=1.298 - http://lists.opensuse.org/opensuse-updates/2015-02/msg00031.html
CVE ID: CVE-2015-1383 State: PUBLISHED Published: 2015-02-02T15:00:00 Last Updated: 2024-08-06T04:40:18.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the geo search widget in the Geo Mashup plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search key. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jan/113 - https://wordpress.org/plugins/geo-mashup/changelog/ - http://www.openwall.com/lists/oss-security/2015/01/27/26
CVE ID: CVE-2015-1384 State: PUBLISHED Published: 2015-02-03T16:00:00 Last Updated: 2024-08-06T04:40:18.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Banner Effect Header plugin before 1.2.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the banner_effect_divid parameter in the BannerEffectOptions page to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534592/100/0/threaded - http://seclists.org/fulldisclosure/2015/Feb/2 - https://wordpress.org/plugins/banner-effect-header/changelog/ - https://www.netsparker.
.org/fulldisclosure/2015/Feb/2 - https://wordpress.org/plugins/banner-effect-header/changelog/ - https://www.netsparker.com/cve-2015-1384-xss-vulnerability-in-banner-effect-header/
CVE ID: CVE-2015-1385 State: PUBLISHED Published: 2015-02-02T15:00:00 Last Updated: 2024-08-06T04:40:18.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Blubrry PowerPress Podcasting plugin before 6.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cat parameter in a powerpress-editcategoryfeed action in the powerpressadmin_categoryfeeds.php page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130155/Blubrry-PowerPress-6.0-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/72362 - http://www.securityfocus.
55/Blubrry-PowerPress-6.0-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/72362 - http://www.securityfocus.com/archive/1/534577/100/0/threaded - https://wordpress.org/plugins/powerpress/changelog/ - http://seclists.org/fulldisclosure/2015/Jan/130 - https://www.netsparker.com/cve-2015-1385-xss-vulnerability-in-blubrry-powerpress/
CVE ID: CVE-2015-1386 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T04:40:18.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in unshield 1.0-1. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/27/27 - https://bugzilla.redhat.com/show_bug.cgi?id=1185717
CVE ID: CVE-2015-1387 State: REJECTED Published: 2020-02-17T16:25:02 Last Updated: 2020-02-17T16:25:02 Description: No description available.
CVE ID: CVE-2015-1388 State: PUBLISHED Published: 2015-03-24T17:00:00 Last Updated: 2024-08-06T04:40:18.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "RAP console" feature in ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4 on Aruba access points in Remote Access Point (AP) mode allows remote attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-004.txt
CVE ID: CVE-2015-1389 State: PUBLISHED Published: 2015-05-28T14:00:00 Last Updated: 2024-08-06T04:40:18.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote attackers to inject arbitrary web script or HTML via the username parameter to tips/tipsLoginSubmit.action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132060/Aruba-ClearPass-Policy-Manager-6.4-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/37172/ - http://seclists.org/fulldisclosure/2015/May/115 - http://www.arubanetworks.com/assets/ale
ploit-db.com/exploits/37172/ - http://seclists.org/fulldisclosure/2015/May/115 - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-006.txt - https://github.com/cmaruti/reports/blob/master/aruba_clearpass.pdf