Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-0501 State: PUBLISHED Published: 2015-04-16T16:00:00 Last Updated: 2024-08-06T04:10:10.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Compiling. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201507-19 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 - http://www.debian.org/security/2015/dsa-3229 - http://www.securitytracker.com/id/1032121 - http://www.debian.org/security/2015/dsa-3311 - http://rhn.redhat
/dsa-3229 - http://www.securitytracker.com/id/1032121 - http://www.debian.org/security/2015/dsa-3311 - http://rhn.redhat.com/errata/RHSA-2015-1647.html - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://rhn.redhat.com/errata/RHSA-2015-1628.html - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html - http://www.ubuntu.com/usn/USN-2575-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:227 - https://mariadb.com/kb/en/mariadb/mariadb-5543-release-notes/ - http://rhn.redhat.com/errata/RHSA-2015-1629.html - http://rhn.redhat.com/errata/RHSA-2015-1665.html
CVE ID: CVE-2015-0502 State: PUBLISHED Published: 2015-04-16T16:00:00 Last Updated: 2024-08-06T04:10:10.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1 and 8.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032127 - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
CVE ID: CVE-2015-0503 State: PUBLISHED Published: 2015-04-16T16:00:00 Last Updated: 2024-08-06T04:10:10.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201507-19 - http://www.securitytracker.com/id/1032121 - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html
CVE ID: CVE-2015-0504 State: PUBLISHED Published: 2015-04-16T16:00:00 Last Updated: 2024-08-06T04:10:10.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Error Messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://www.securitytracker.com/id/1032129
CVE ID: CVE-2015-0505 State: PUBLISHED Published: 2015-04-16T16:00:00 Last Updated: 2024-08-06T04:10:10.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via vectors related to DDL. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201507-19 - http://www.debian.org/security/2015/dsa-3229 - http://www.securitytracker.com/id/1032121 - http://www.debian.org/security/2015/dsa-3311 - http://rhn.redhat.com/errata/RHSA-2015-1647.html - http://www.oracle.com/technetwork/topics/security/cpuap
15/dsa-3311 - http://rhn.redhat.com/errata/RHSA-2015-1647.html - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://rhn.redhat.com/errata/RHSA-2015-1628.html - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html - http://www.ubuntu.com/usn/USN-2575-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:227 - https://mariadb.com/kb/en/mariadb/mariadb-5543-release-notes/ - http://rhn.redhat.com/errata/RHSA-2015-1629.html - http://www.securityfocus.com/bid/74112 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - http://r
.securityfocus.com/bid/74112 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - http://rhn.redhat.com/errata/RHSA-2015-1665.html
CVE ID: CVE-2015-0506 State: PUBLISHED Published: 2015-04-16T16:00:00 Last Updated: 2024-08-06T04:10:10.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2015-0508. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201507-19 - http://www.securitytracker.com/id/1032121 - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html
CVE ID: CVE-2015-0507 State: PUBLISHED Published: 2015-04-16T16:00:00 Last Updated: 2024-08-06T04:10:11.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Memcached. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201507-19 - http://www.securitytracker.com/id/1032121 - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html
CVE ID: CVE-2015-0508 State: PUBLISHED Published: 2015-04-16T16:00:00 Last Updated: 2024-08-06T04:10:10.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability than CVE-2015-0506. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201507-19 - http://www.securitytracker.com/id/1032121 - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html
CVE ID: CVE-2015-0509 State: PUBLISHED Published: 2015-04-16T16:00:00 Last Updated: 2024-08-06T04:10:10.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to Reporting and Analysis. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032123 - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
CVE ID: CVE-2015-0510 State: PUBLISHED Published: 2015-04-16T16:00:00 Last Updated: 2024-08-06T04:10:10.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Commerce Platform component in Oracle Commerce Platform 9.4, 10.0, and 10.2 allows remote attackers to affect integrity via vectors related to Dynamo Application Framework - HTML Admin User Interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
CVE ID: CVE-2015-0511 State: PUBLISHED Published: 2015-04-16T16:00:00 Last Updated: 2024-08-06T04:10:11.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : SP. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201507-19 - http://www.securitytracker.com/id/1032121 - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html
CVE ID: CVE-2015-0512 State: PUBLISHED Published: 2015-02-02T01:00:00 Last Updated: 2024-08-06T04:10:10.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in EMC Unisphere Central before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72374 - http://www.securitytracker.com/id/1031684 - http://archives.neohapsis.com/archives/bugtraq/2015-01/0147.html
CVE ID: CVE-2015-0513 State: PUBLISHED Published: 2015-01-21T11:00:00 Last Updated: 2024-08-06T04:10:11.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging privileged access to set crafted values of unspecified fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72259 - http://www.securitytracker.com/id/1031567 - http://archives.neohapsis.com/archives/bugtraq/2015-01/0092.html
CVE ID: CVE-2015-0514 State: PUBLISHED Published: 2015-01-21T11:00:00 Last Updated: 2024-08-06T04:10:11.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 might allow remote attackers to obtain cleartext data-center discovery credentials by leveraging certain SRM access to conduct a decryption attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.securify.nl/advisory/SFY20141101/emc_m_r__watch4net__data_storage_collector_credentials_are_not_properly_protected.html - http://www.securitytracker.com/id/1031567 - http://www.securityfocus.com/archive/1/534923/100/0/threaded - http://seclists
tp://www.securitytracker.com/id/1031567 - http://www.securityfocus.com/archive/1/534923/100/0/threaded - http://seclists.org/fulldisclosure/2015/Mar/112 - http://archives.neohapsis.com/archives/bugtraq/2015-01/0092.html - http://www.securityfocus.com/bid/72257 - http://packetstormsecurity.com/files/130910/EMC-M-R-Watch4net-Insecure-Credential-Storage.html
CVE ID: CVE-2015-0515 State: PUBLISHED Published: 2015-01-21T11:00:00 Last Updated: 2024-08-06T04:10:10.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to execute arbitrary code by uploading and then accessing an executable file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031567 - http://www.securityfocus.com/bid/72256 - http://archives.neohapsis.com/archives/bugtraq/2015-01/0092.html
CVE ID: CVE-2015-0516 State: PUBLISHED Published: 2015-01-21T11:00:00 Last Updated: 2024-08-06T04:10:10.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to read arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031567 - http://www.securityfocus.com/archive/1/534929/100/0/threaded - http://www.securityfocus.com/bid/72255 - http://archives.neohapsis.com/archives/bugtraq/2015-01/0092.html - https://www.securify.nl/advisory/SFY20141105/path_traversal_vulnerability_i
sis.com/archives/bugtraq/2015-01/0092.html - https://www.securify.nl/advisory/SFY20141105/path_traversal_vulnerability_in_emc_m_r__watch4net__mib_browser.html - http://seclists.org/fulldisclosure/2015/Mar/116
CVE ID: CVE-2015-0517 State: PUBLISHED Published: 2015-02-14T15:00:00 Last Updated: 2024-08-06T04:10:11.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 places the MD5 hash of an encryption passphrase in log files, which allows remote authenticated users to obtain sensitive information by reading a file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100874 - http://www.securitytracker.com/id/1031693 - http://www.securityfocus.com/bid/72501 - http://archives.neohapsis.com/archives/bugtraq/2015-02/0031.h
.com/id/1031693 - http://www.securityfocus.com/bid/72501 - http://archives.neohapsis.com/archives/bugtraq/2015-02/0031.html
CVE ID: CVE-2015-0518 State: PUBLISHED Published: 2015-02-14T15:00:00 Last Updated: 2024-08-06T04:10:11.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 allows remote authenticated users to obtain superuser privileges via an unspecified method call that modifies group permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100875 - http://www.securityfocus.com/bid/72502 - http://archives.neohapsis.com/archives/bugtraq/20
.com/vulnerabilities/100875 - http://www.securityfocus.com/bid/72502 - http://archives.neohapsis.com/archives/bugtraq/2015-02/0031.html
CVE ID: CVE-2015-0519 State: PUBLISHED Published: 2015-02-14T15:00:00 Last Updated: 2024-08-06T04:10:10.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: The InputAccel Database (IADB) installation process in EMC Captiva Capture 7.0 before patch 25 and 7.1 before patch 13 places a cleartext InputAccel (IA) SQL password in a DAL log file, which allows local users to obtain sensitive information by reading a file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130284/EMC-Captiva-Capture-Sensitive-Information-Disclosure.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/100748 - http://archives.neohapsis.com/archives/
-Disclosure.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/100748 - http://archives.neohapsis.com/archives/bugtraq/2015-02/0043.html
CVE ID: CVE-2015-0520 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-0521 State: PUBLISHED Published: 2015-03-12T10:00:00 Last Updated: 2024-08-06T04:10:10.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the CMP shared secret parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Mar/47 - http://packetstormsecurity.com/files/130769/RSA-Digital-Certificate-Solution-XSS-Denial-Of-Service.html - http://www.securitytracker.com/id/1
urity.com/files/130769/RSA-Digital-Certificate-Solution-XSS-Denial-Of-Service.html - http://www.securitytracker.com/id/1031912
CVE ID: CVE-2015-0522 State: PUBLISHED Published: 2015-03-12T10:00:00 Last Updated: 2024-08-06T04:10:11.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allows remote attackers to inject arbitrary web script or HTML via vectors related to the email address parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Mar/47 - http://packetstormsecurity.com/files/130769/RSA-Digital-Certificate-Solution-XSS-Denial-Of-Service.html - http://www.securitytracker.com/id/1031912
CVE ID: CVE-2015-0523 State: PUBLISHED Published: 2015-03-12T10:00:00 Last Updated: 2024-08-06T04:10:11.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allow remote attackers to cause an Administration Server denial of service via an invalid MIME e-mail message with a multipart/* Content-Type header. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Mar/47 - http://packetstormsecurity.com/files/130769/RSA-Digital-Certificate-Solution-XSS-Denial-Of-Service.html - http://www.securitytracker.com/id/1031912
CVE ID: CVE-2015-0524 State: PUBLISHED Published: 2015-03-12T10:00:00 Last Updated: 2024-08-06T04:10:10.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534930/100/0/threaded - https://www.securify.nl/advisory/SFY20141113/emc_secure_remote_services_virtual_edition_provisioning_component_is_affected_by_sql_injection.html - http://seclists.org/fulldisclosure/2015/
ices_virtual_edition_provisioning_component_is_affected_by_sql_injection.html - http://seclists.org/fulldisclosure/2015/Mar/119 - http://seclists.org/bugtraq/2015/Mar/40 - http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.html
CVE ID: CVE-2015-0525 State: PUBLISHED Published: 2015-03-12T10:00:00 Last Updated: 2024-08-06T04:10:11.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534928/100/0/threaded - http://seclists.org/bugtraq/2015/Mar/40 - http://seclists.org/fulldisclosure/2015/Mar/118 - https://www.securify.nl/advisory/SFY20141112/command_injection_vulnerability_in_emc_secure_remote_services_virtual_edition.html
/www.securify.nl/advisory/SFY20141112/command_injection_vulnerability_in_emc_secure_remote_services_virtual_edition.html - http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.html
CVE ID: CVE-2015-0526 State: PUBLISHED Published: 2015-06-22T15:00:00 Last Updated: 2024-08-06T04:10:11.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Validation Manager (RVM) 3.2 before build 201 allow remote attackers to inject arbitrary web script or HTML via the (1) displayMode or (2) wrapPreDisplayMode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032590 - http://seclists.org/bugtraq/2015/Jun/88
CVE ID: CVE-2015-0527 State: PUBLISHED Published: 2015-03-24T00:00:00 Last Updated: 2024-08-06T04:10:10.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum xCelerated Management System (xMS) 1.1 before P14 stores cleartext Windows Service credentials in a batch file during Documentum Platform and xCelerated Composition Platform (xCP) provisioning, which allows local users to obtain sensitive information by reading a file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Mar/134 - http://packetstormsecurity.com/files/130959/EMC-Documentum-xMS-Sensitive-Information-Disclosure.html
CVE ID: CVE-2015-0528 State: PUBLISHED Published: 2015-03-29T10:00:00 Last Updated: 2024-08-06T04:10:10.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPC daemon in EMC Isilon OneFS 6.5.x and 7.0.x before 7.0.2.13, 7.1.0 before 7.1.0.6, 7.1.1 before 7.1.1.2, and 7.2.0 before 7.2.0.1 allows local users to gain privileges by leveraging an ability to modify system files. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/131035/EMC-Isilon-OneFS-Privilege-Escalation.html - http://seclists.org/bugtraq/2015/Mar/162
CVE ID: CVE-2015-0529 State: PUBLISHED Published: 2015-04-05T01:00:00 Last Updated: 2024-08-06T04:10:11.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/131250/EMC-PowerPath-Virtual-Appliance-Undocumented-User-Accounts.html - http://seclists.org/bugtraq/2015/Apr/1
CVE ID: CVE-2015-0530 State: PUBLISHED Published: 2015-04-17T01:00:00 Last Updated: 2024-08-06T04:10:11.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in an unspecified function in nsr_render_log in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before 8.2.1.2 allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Apr/103 - http://www.securitytracker.com/id/1032147
CVE ID: CVE-2015-0531 State: PUBLISHED Published: 2015-05-07T01:00:00 Last Updated: 2024-08-06T04:10:10.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC SourceOne Email Management before 7.2 does not have a lockout mechanism for invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032238 - http://seclists.org/bugtraq/2015/May/22 - http://packetstormsecurity.com/files/131748/EMC-SourceOne-Email-Management-Account-Lockout-Policy.html
CVE ID: CVE-2015-0532 State: PUBLISHED Published: 2015-05-01T10:00:00 Last Updated: 2024-08-06T04:10:11.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Identity Management and Governance (IMG) 6.9 before P04 and 6.9.1 before P01 does not properly restrict password resets, which allows remote attackers to obtain access via crafted use of the reset process for an arbitrary valid account name, as demonstrated by a privileged account. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Apr/204 - http://www.securitytracker.com/id/1032218 - http://packetstormsecurity.com/files/131710/RSA-IMG-6.9-6.9.1-Insecure-Password-Reset.htm
curitytracker.com/id/1032218 - http://packetstormsecurity.com/files/131710/RSA-IMG-6.9-6.9.1-Insecure-Password-Reset.html
CVE ID: CVE-2015-0533 State: PUBLISHED Published: 2015-08-20T10:00:00 Last Updated: 2024-08-06T04:10:11.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier allow remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message, a similar issue to CVE-2014-3572. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Aug/84 - http://www.securityfocus.com/bid/76377