Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-5942 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:06:34.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-5927. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html - https://support.apple.com/HT205375 - http://lists.apple.com/archi
CVE ID: CVE-2015-5943 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:06:34.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: SecurityAgent in Apple OS X before 10.11.1 does not prevent synthetic clicks from reaching keychain windows, which allows attackers to bypass intended access restrictions via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - https://support.apple.com/HT205375
CVE ID: CVE-2015-5944 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:06:34.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreText in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - https://support.apple.com/HT205375
CVE ID: CVE-2015-5945 State: PUBLISHED Published: 2015-10-23T21:00:00 Last Updated: 2024-08-06T07:06:34.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sandbox subsystem in Apple OS X before 10.11.1 allows local users to gain privileges via vectors involving NVRAM parameters. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - https://support.apple.com/HT205375
CVE ID: CVE-2015-5946 State: PUBLISHED Published: 2017-08-07T20:00:00 Last Updated: 2024-08-06T07:06:34.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in SuiteCRM 7.2.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/03/02/5 - http://www.openwall.com/lists/oss-security/2015/08/06/6 - http://xiphosresearch.com/2016/03/01/Vulnerability-Inheritance-across-Forks.html
CVE ID: CVE-2015-5947 State: PUBLISHED Published: 2017-09-06T21:00:00 Last Updated: 2024-08-06T07:06:34.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/salesagility/SuiteCRM/commit/b1b3fd61c7697ad2073cd253d31c9462929e7bb5 - http://www.openwall.com/lists/oss-security/2015/08/06/6 - https://github.com/salesagility/SuiteCRM/issues/333 - https://github.com/XiphosResearch/exploits/tree/master/suiteshell
CVE ID: CVE-2015-5948 State: PUBLISHED Published: 2017-09-06T21:00:00 Last Updated: 2024-08-06T07:06:34.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-5947. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/08/06/6 - https://github.com/salesagility/SuiteCRM/issues/333 - https://github.com/salesagility/SuiteCRM/commit/b1b3fd61c7697ad2073cd253d31c9462929e7bb5 - https://github.com/XiphosResearch/exploits/tree/master/suiteshell
CVE ID: CVE-2015-5949 State: PUBLISHED Published: 2015-08-25T17:00:00 Last Updated: 2024-08-06T07:06:35.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: VideoLAN VLC media player 2.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted 3GP file, which triggers the freeing of arbitrary pointers. Additional Analyst Notes: - CVE Program Container: References: - https://git.videolan.org/?p=vlc/vlc-2.2.git%3Ba=commitdiff%3Bh=ce91452460a75d7424b165c4dc8db98114c3cbd9%3Bhp=9e12195d3e4316278af1fa4bcb6a705ff27456fd - http://www.debian.org/security/2015/dsa-3342 - https://security.gentoo.org/glsa/201603-08 - http://www.openwall.
456fd - http://www.debian.org/security/2015/dsa-3342 - https://security.gentoo.org/glsa/201603-08 - http://www.openwall.com/lists/oss-security/2015/08/20/8 - http://www.securityfocus.com/archive/1/536287/100/0/threaded - https://www.ocert.org/advisories/ocert-2015-009.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00040.html - http://www.openwall.com/lists/oss-security/2015/08/20/3 - http://packetstormsecurity.com/files/133266/VLC-2.2.1-Arbitrary-Pointer-Dereference.html
CVE ID: CVE-2015-5950 State: PUBLISHED Published: 2015-09-29T00:00:00 Last Updated: 2024-08-06T07:06:35.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privileges via a crafted ioctl call. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/len_3313 - https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04
.com/us/en/product_security/len_3313 - https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04815468 - http://www.ubuntu.com/usn/USN-2747-1 - http://www.securitytracker.com/id/1033662 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04815468 - http://nvidia.custhelp.com/app/answers/detail/a_id/3763/~/cve-2015-5950-memory-corruption-due-to-an-unsanitized-pointer-in-the-nvidia
CVE ID: CVE-2015-5951 State: PUBLISHED Published: 2020-01-06T20:32:12 Last Updated: 2024-08-06T07:06:34.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: A file upload issue exists in the specid parameter in Thomson Reuters FATCH before 5.2, which allows malicious users to upload arbitrary PHP files to the web root and execute system commands. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133003/Thomson-Reuters-FATCA-Arbitrary-File-Upload.html - http://www.securityfocus.com/bid/76271 - http://seclists.org/fulldisclosure/2015/Aug/25 - http://www.securityfocus.com/archive/1/536163/100/0/threaded - https://seclists.org/bugtra
/fulldisclosure/2015/Aug/25 - http://www.securityfocus.com/archive/1/536163/100/0/threaded - https://seclists.org/bugtraq/2015/Aug/32
CVE ID: CVE-2015-5952 State: PUBLISHED Published: 2020-01-15T16:27:54 Last Updated: 2024-08-06T07:06:35.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Thomson Reuters for FATCA before 5.2 allows remote attackers to execute arbitrary files via the item parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Aug/24
CVE ID: CVE-2015-5953 State: PUBLISHED Published: 2015-10-21T15:00:00 Last Updated: 2024-08-06T07:06:35.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the activity application in ownCloud Server before 7.0.5 and 8.0.x before 8.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a " (double quote) character in a filename in a shared folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3373 - https://owncloud.org/security/advisory/?id=oc-sa-2015-010
CVE ID: CVE-2015-5954 State: PUBLISHED Published: 2015-10-21T18:00:00 Last Updated: 2024-08-06T07:06:35.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virtual filesystem in ownCloud Server before 6.0.9, 7.0.x before 7.0.7, and 8.0.x before 8.0.5 does not consider that NULL is a valid getPath return value, which allows remote authenticated users to bypass intended access restrictions and gain access to users files via a sharing link to a file with a deleted parent folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3373 - https://owncloud.org/security/advisory/?id=oc-sa-2015-011
CVE ID: CVE-2015-5955 State: PUBLISHED Published: 2015-10-29T20:00:00 Last Updated: 2024-08-06T07:06:35.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators to obtain sensitive credential and cookie information by reading authentication headers. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.org/security/advisory/?id=oc-sa-2015-013
CVE ID: CVE-2015-5956 State: PUBLISHED Published: 2015-09-16T14:00:00 Last Updated: 2024-08-06T07:06:34.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting (XSS) attacks via a base64 encoded data URI, as demonstrated by the (1) returnUrl parameter to show_rechis.php and the (2) redirect_url parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-009/ - http://seclists.org/fulldisclo
https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-009/ - http://seclists.org/fulldisclosure/2015/Sep/57 - http://www.securitytracker.com/id/1033551 - http://packetstormsecurity.com/files/133551/Typo3-CMS-6.2.14-4.5.40-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/536464/100/0/threaded
CVE ID: CVE-2015-5957 State: PUBLISHED Published: 2015-09-28T20:00:00 Last Updated: 2024-08-06T07:06:34.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the DumpSysVar function in var.c in Remind before 3.1.15 allows attackers to have unspecified impact via a long name. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/08/07/1 - http://www.securityfocus.com/bid/76099 - http://lists.roaringpenguin.com/pipermail/remind-fans/2015/003172.html - http://www.openwall.com/lists/oss-security/2015/07/29/2 - http://lists.opensuse.org/opensuse-updates/2015-09/msg00025.html
CVE ID: CVE-2015-5958 State: PUBLISHED Published: 2017-08-31T22:00:00 Last Updated: 2024-08-06T07:06:34.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpFileManager 0.9.8 allows remote attackers to execute arbitrary commands via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132865/phpFileManager-0.9.8-Remote-Command-Execution.html
CVE ID: CVE-2015-5959 State: PUBLISHED Published: 2017-09-06T21:00:00 Last Updated: 2024-08-06T07:06:35.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Froxlor before 0.9.33.2 with the default configuration/setup might allow remote attackers to obtain the database password by reading /logs/sql-error.log. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76097 - https://github.com/Froxlor/Froxlor/commit/8558533a9148a2a0302c9c177abff8e4e4075b92 - http://www.openwall.com/lists/oss-security/2015/08/07/2
CVE ID: CVE-2015-5960 State: PUBLISHED Published: 2015-08-08T00:00:00 Last Updated: 2024-08-06T07:06:34.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox OS before 2.2 allows physically proximate attackers to bypass the pass-code protection mechanism and access USB Mass Storage (UMS) media volumes by using the USB interface for a mount operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76254 - http://www.mozilla.org/security/announce/2015/mfsa2015-74.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1111725
CVE ID: CVE-2015-5961 State: PUBLISHED Published: 2015-08-08T00:00:00 Last Updated: 2024-08-06T07:06:34.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows man-in-the-middle attackers to bypass intended access restrictions by spoofing that server. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1123433 - http://www.securityfocus.com/bid/76255 - http://www.mozilla.org/security/announce/2015/mfsa2015-75.html
CVE ID: CVE-2015-5962 State: PUBLISHED Published: 2015-08-08T00:00:00 Last Updated: 2024-08-06T07:06:34.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in the buffer-management implementation in the graphics layer in Mozilla Firefox OS before 2.2 might allow attackers to cause a denial of service (memory corruption) via a negative value of a size parameter. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1145389 - http://www.securityfocus.com/bid/76253 - http://www.mozilla.org/security/announce/2015/mfsa2015-77.html
CVE ID: CVE-2015-5963 State: PUBLISHED Published: 2015-08-24T14:00:00 Last Updated: 2024-08-06T07:06:34.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause a denial of service (session store consumption or session record removal) via a large number of requests to contrib.auth.views.logout, which triggers the creation of an empty session record. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172084.html - http://list
ntainer: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172084.html - http://lists.opensuse.org/opensuse-updates/2015-09/msg00026.html - http://rhn.redhat.com/errata/RHSA-2015-1894.html - http://www.debian.org/security/2015/dsa-3338 - http://www.securitytracker.com/id/1033318 - http://rhn.redhat.com/errata/RHSA-2015-1767.html - http://lists.opensuse.org/opensuse-updates/2015-09/msg00035.html - http://www.ubuntu.com/usn/USN-2720-1 - http://rhn.redhat.com/errata/RHSA-2015-1766.html - https://access.redhat.com/errata/RHSA-2015:1876 - http://www.securityfocus.com/bid/76428 - https://www.djangoproject.com/weblog/2015/aug/18/security-releases/ - http://www.or
://www.securityfocus.com/bid/76428 - https://www.djangoproject.com/weblog/2015/aug/18/security-releases/ - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-5964 State: PUBLISHED Published: 2015-08-24T14:00:00 Last Updated: 2024-08-06T07:06:34.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service (session store consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172084.html - http://rhn.redhat.com/errata/RHSA-2015
://lists.fedoraproject.org/pipermail/package-announce/2015-November/172084.html - http://rhn.redhat.com/errata/RHSA-2015-1894.html - http://www.debian.org/security/2015/dsa-3338 - http://www.securitytracker.com/id/1033318 - http://rhn.redhat.com/errata/RHSA-2015-1767.html - http://www.ubuntu.com/usn/USN-2720-1 - http://rhn.redhat.com/errata/RHSA-2015-1766.html - http://www.securityfocus.com/bid/76440 - https://www.djangoproject.com/weblog/2015/aug/18/security-releases/ - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-5965 State: PUBLISHED Published: 2015-08-11T14:00:00 Last Updated: 2024-08-06T07:06:34.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL-VPN feature in Fortinet FortiOS before 4.3.13 only checks the first byte of the TLS MAC in finished messages, which makes it easier for remote attackers to spoof encrypted content via a crafted MAC field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76065 - http://www.fortiguard.com/advisory/FG-IR-15-016/ - http://www.securitytracker.com/id/1033256 - https://security.gentoo.org/glsa/201508-01 - https://vivaldi.net/en-US/blogs/entry/the-poodle-has-friends
CVE ID: CVE-2015-5966 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:48 Description: No description available.
CVE ID: CVE-2015-5967 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:35 Description: No description available.
CVE ID: CVE-2015-5968 State: PUBLISHED Published: 2016-03-18T10:00:00 Last Updated: 2024-08-06T07:06:34.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7017078
CVE ID: CVE-2015-5969 State: PUBLISHED Published: 2016-04-08T15:00:00 Last Updated: 2024-08-06T07:06:35.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in openSUSE Leap 42.1 and the mariadb package before 10.0.22-2.21.2 in openSUSE 13.2 and before 10.0.22-3.1 in SUSE Linux Enterprise (SLE) 12.1 and openSUSE Leap 42.1 allows local users to discover database credentials by listing a process and its arguments. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html -
es: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html - https://www.suse.com/support/update/announcement/2016/suse-su-20160296-1.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00050.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00039.html - https://bugzilla.suse.com/957174
CVE ID: CVE-2015-5970 State: PUBLISHED Published: 2016-02-18T22:00:00 Last Updated: 2024-08-06T07:06:34.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ChangePassword RPC method in Novell ZENworks Configuration Management (ZCM) 11.3 and 11.4 allows remote attackers to conduct XPath injection attacks, and read arbitrary text files, via a malformed query involving a system entity reference. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-16-167 - https://www.novell.com/support/kb/doc.php?id=7017240
CVE ID: CVE-2015-5971 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:16:05 Description: No description available.
CVE ID: CVE-2015-5972 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:16:05 Description: No description available.
CVE ID: CVE-2015-5973 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:53 Description: No description available.
CVE ID: CVE-2015-5974 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:58 Description: No description available.
CVE ID: CVE-2015-5975 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:38 Description: No description available.
CVE ID: CVE-2015-5976 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:29 Description: No description available.
CVE ID: CVE-2015-5977 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:54 Description: No description available.
CVE ID: CVE-2015-5978 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:32 Description: No description available.
CVE ID: CVE-2015-5979 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:16:07 Description: No description available.
CVE ID: CVE-2015-5980 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:31 Description: No description available.
CVE ID: CVE-2015-5981 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:47 Description: No description available.
CVE ID: CVE-2015-5982 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:26 Description: No description available.
CVE ID: CVE-2015-5983 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:59 Description: No description available.
CVE ID: CVE-2015-5984 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:32 Description: No description available.
CVE ID: CVE-2015-5985 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:51 Description: No description available.
CVE ID: CVE-2015-5986 State: PUBLISHED Published: 2015-09-05T01:00:00 Last Updated: 2024-08-06T07:06:35.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Oct/msg00009.html - https://kb.isc.org/article/AA-01438 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165810.html - https://support.apple.com/HT205376 - https://kc.mcafee.
ject.org/pipermail/package-announce/2015-September/165810.html - https://support.apple.com/HT205376 - https://kc.mcafee.com/corporate/index?page=content&id=SB10134 - https://kb.isc.org/article/AA-01291 - https://kb.isc.org/article/AA-01307 - https://security.gentoo.org/glsa/201510-01 - http://www.securitytracker.com/id/1033453 - http://www.securityfocus.com/bid/76618 - https://kb.isc.org/article/AA-01305 - https://kb.isc.org/article/AA-01306 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167465.html - https://security.netapp.com/advisory/ntap-20190730-0001/
CVE ID: CVE-2015-5987 State: PUBLISHED Published: 2015-12-31T16:00:00 Last Updated: 2024-08-06T07:06:35.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Belkin F9K1102 2 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/201168
CVE ID: CVE-2015-5988 State: PUBLISHED Published: 2015-12-31T16:00:00 Last Updated: 2024-08-06T07:06:35.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blank password, which allows remote attackers to obtain administrative privileges by leveraging a LAN session. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/201168