Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-7971 State: PUBLISHED Published: 2015-10-30T15:00:00 Last Updated: 2024-08-06T08:06:31.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hypercalls, which allows local guests to cause a denial of service via a sequence of crafted (1) HYPERCALL_xenoprof_op hypercalls, which are not properly handled in the do_xenoprof_op function in common/xenoprof.c, or (2) HYPERVISOR_xenpmu_op hypercalls, which are not properly handled in the do_xenpmu_op function in arch/x86/cpu/vpmu.c. Additional Analyst Notes: - CVE Program Container: References: - http://suppo
xenpmu_op function in arch/x86/cpu/vpmu.c. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX202404 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171249.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171082.html - http://www.securityfocus.com/bid/77363 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html - http://www.debian.org/security/2015/dsa-3414 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171185.html - https://security.gentoo.org/glsa/201604-03 - http://www.securitytracker.com/id/1034035 - http://xenbits.xen.org/xsa/advisory-152.html
CVE ID: CVE-2015-7972 State: PUBLISHED Published: 2015-10-30T15:00:00 Last Updated: 2024-08-06T08:06:31.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post function in tools/libxl/libxl_dom.c in Xen 3.4.x through 4.6.x do not properly calculate the balloon size when using the populate-on-demand (PoD) system, which allows local HVM guest users to cause a denial of service (guest crash) via unspecified vectors related to "heavy memory pressure." Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX202404 - http://lists.fedoraproject.org/pipermai
E Program Container: References: - http://support.citrix.com/article/CTX202404 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171249.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171082.html - http://xenbits.xen.org/xsa/advisory-153.html - http://www.securityfocus.com/bid/77365 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html - http://www.debian.org/security/2015/dsa-3414 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171185.html - https://security.gentoo.org/glsa/201604-03 - http://www.securitytracker.com/id/1034036
CVE ID: CVE-2015-7973 State: PUBLISHED Published: 2017-01-30T21:00:00 Last Updated: 2024-08-06T08:06:31.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd - http://www.ubuntu.com/usn/USN-3096-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf0376
nce/2016-04/msg00060.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - http://support.ntp.org/bin/view/Main/NtpBug2935 - http://www.securitytracker.com/id/1034782 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html - https://www.kb.cert.org/vuls/id/718152 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us - https://security.netapp.com/advisory/ntap-20171031-0001/ - http://lists.opensuse.org/opensuse-security-a
bhf03750en_us - https://security.netapp.com/advisory/ntap-20171031-0001/ - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html - http://www.securityfocus.com/bid/81963 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc - https://bto.bluecoat.com/security-advisory/sa113 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html - https://security.gentoo.org/glsa/201607-15 - https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11
CVE ID: CVE-2015-7974 State: PUBLISHED Published: 2016-01-26T19:00:00 Last Updated: 2024-08-06T08:06:31.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key." Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintel.com/reports/TALOS-2016-0071/ - http://www.debian.org/security/2016/dsa-3629 - http://www.securityfocus.com/bid/81960 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na
ttp://www.securityfocus.com/bid/81960 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us - http://support.ntp.org/bin/view/Main/NtpBug2936 - http://www.securitytracker.com/id/1034782 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us - http://rhn.redhat.com/errata/RHSA-2016-2583.html - https://security.netapp.com/advisory/ntap-20171031-0001/ - http://bugs.ntp.org/show_bug.cgi?id=2936 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc - https://security.gentoo.org/glsa/201607-15 - https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf - https://us-cert.cisa.gov/ics/advis
org/glsa/201607-15 - https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11
CVE ID: CVE-2015-7975 State: PUBLISHED Published: 2017-01-30T21:00:00 Last Updated: 2024-08-06T08:06:31.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service (application crash). Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd - http://www.ubuntu.com/usn/USN-3096-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=e
e.org/opensuse-security-announce/2016-04/msg00060.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us - http://www.securityfocus.com/bid/81959 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - http://www.securitytracker.com/id/1034782 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html - https://www.kb.cert.org/vuls/id/718152 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us - https://security.netapp.com/advisory/ntap-20171031-0001/ - http://lists.opensuse.org
US&docId=emr_na-hpesbhf03750en_us - https://security.netapp.com/advisory/ntap-20171031-0001/ - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html - http://support.ntp.org/bin/view/Main/NtpBug2937 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc - https://bto.bluecoat.com/security-advisory/sa113 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html - https://security.gentoo.org/glsa/201607-15
CVE ID: CVE-2015-7976 State: PUBLISHED Published: 2017-01-30T21:00:00 Last Updated: 2024-08-06T08:06:31.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd - http://www.ubuntu.com/usn/USN-3096-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html - http://lists.opensuse.org/opensuse-securi
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - http://www.securitytracker.com/id/1034782 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html - https://www.kb.cert.org/vuls/id/718152 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html - http://support.ntp.org/bin/view/Main/NtpBug2938 - https://security.netapp.com/advisory/ntap-20171031-0001/ - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - http://lists.opensuse.org/opensuse-securit
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc - https://bto.bluecoat.com/security-advisory/sa113 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html - https://security.gentoo.org/glsa/201607-15
CVE ID: CVE-2015-7977 State: PUBLISHED Published: 2017-01-30T21:00:00 Last Updated: 2024-08-06T08:06:31.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd - http://www.ubuntu.com/usn/USN-3096-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html - http://www.debian.org/security/2016/dsa-3629 - http://support.ntp.org/bin/view/Main/NtpBug2939 -
016-04/msg00060.html - http://www.debian.org/security/2016/dsa-3629 - http://support.ntp.org/bin/view/Main/NtpBug2939 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - http://www.securitytracker.com/id/1034782 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html - https://www.kb.cert.org/vuls/id/718152 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html - http://rhn.redhat.com/errata/RHSA-2016-2583.html - https://security.netapp.com/advisory/ntap-
2016-January/176434.html - http://rhn.redhat.com/errata/RHSA-2016-2583.html - https://security.netapp.com/advisory/ntap-20171031-0001/ - http://www.securityfocus.com/bid/81815 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html - http://rhn.redhat.com/errata/RHSA-2016-0780.html - http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc - h
/opensuse-security-announce/2016-04/msg00059.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc - https://bto.bluecoat.com/security-advisory/sa113 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html - https://security.gentoo.org/glsa/201607-15 - https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11
CVE ID: CVE-2015-7978 State: PUBLISHED Published: 2017-01-30T21:00:00 Last Updated: 2024-08-06T08:06:31.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd - http://www.ubuntu.com/usn/USN-3096-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html - http://www.debian.org/security/2016/dsa-3629 - http
ists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html - http://www.debian.org/security/2016/dsa-3629 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - http://www.securitytracker.com/id/1034782 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html - https://www.kb.cert.org/vuls/id/718152 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html - http://rhn.redhat.com/errata/RHSA-2016-2583.html - https://security.netapp.com/advisory/ntap-2017
-January/176434.html - http://rhn.redhat.com/errata/RHSA-2016-2583.html - https://security.netapp.com/advisory/ntap-20171031-0001/ - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html - http://rhn.redhat.com/errata/RHSA-2016-0780.html - http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - http://www.securityfocus.com/bid/81962 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc - https
nsuse-security-announce/2016-04/msg00059.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc - https://bto.bluecoat.com/security-advisory/sa113 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html - https://security.gentoo.org/glsa/201607-15
CVE ID: CVE-2015-7979 State: PUBLISHED Published: 2017-01-30T21:00:00 Last Updated: 2024-08-06T08:06:31.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd - http://www.ubuntu.com/usn/USN-3096-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html - http://www.debian.org/security/2016/dsa-362
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html - http://www.debian.org/security/2016/dsa-3629 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://access.redhat.com/errata/RHSA-2016:1141 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - http://www.securitytracker.com/id/1034782 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html - https://www.kb.cert.org/vuls/id/718152 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html - http://rhn.redhat.com/e
rg/vuls/id/718152 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html - http://rhn.redhat.com/errata/RHSA-2016-1552.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html - http://rhn.redhat.com/errata/RHSA-2016-2583.html - https://security.netapp.com/advisory/ntap-20171031-0001/ - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html - http://www.securityfocus.com/bid/81816 - http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security - http://lists.fedoraproject.org/pipermail/package-ann
.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc - https://bto.bluecoat.com/security-advisory/sa113 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html - https://security.gentoo.org/glsa/201607-15 - https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11
CVE ID: CVE-2015-7980 State: PUBLISHED Published: 2017-10-02T18:00:00 Last Updated: 2024-08-06T08:06:31.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Compass Rose module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "embedding a JavaScript library from an external source that was not reliable." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/10/26/2 - http://www.openwall.com/lists/oss-security/2015/10/24/4 - https://www.drupal.org/node/2546174 - http://www.securityfocus.com/bid
ww.openwall.com/lists/oss-security/2015/10/24/4 - https://www.drupal.org/node/2546174 - http://www.securityfocus.com/bid/76247 - https://www.drupal.org/node/2545132
CVE ID: CVE-2015-7981 State: PUBLISHED Published: 2015-11-24T20:00:00 Last Updated: 2024-08-06T08:06:31.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77304 - http://www.openwall.com/lists/oss-security/2015/10/26/1 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00160.html - http://sourceforge.net/pr
oss-security/2015/10/26/1 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00160.html - http://sourceforge.net/projects/libpng/files/libpng10/1.0.64/ - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172647.html - https://security.gentoo.org/glsa/201611-08 - http://www.openwall.com/lists/oss-security/2015/10/26/3 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172663.html - http://sourceforge.net/projects/libpng/files/libpng12/1.2.54/ - https://access.redhat.com/errata/RHSA-2016:1430 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172620.html - http://www.debian.org/security/2015/dsa-3399 - http://rhn.redhat.c
ipermail/package-announce/2015-November/172620.html - http://www.debian.org/security/2015/dsa-3399 - http://rhn.redhat.com/errata/RHSA-2015-2595.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://sourceforge.net/projects/libpng/files/libpng14/1.4.17/ - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.securitytracker.com/id/1034393 - http://sourceforge.net/p/libpng/bugs/241/ - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00033.html - http://www.ubuntu.com/usn/USN-2815-1 - http://rhn.redhat.com/errata/RHSA-2015-2594.html
CVE ID: CVE-2015-7984 State: PUBLISHED Published: 2015-11-19T20:00:00 Last Updated: 2024-08-06T08:06:31.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Horde before 5.2.8, Horde Groupware before 5.2.11, and Horde Groupware Webmail Edition before 5.2.11 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary (1) commands via the cmd parameter to admin/cmdshell.php, (2) SQL queries via the sql parameter to admin/sqlshell.php, or (3) PHP code via the php parameter to admin/phpshell.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.horde
php parameter to admin/phpshell.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.horde.org/archives/announce/2015/001124.html - http://lists.horde.org/archives/announce/2015/001138.html - https://www.exploit-db.com/exploits/38765/ - http://www.debian.org/security/2015/dsa-3391 - http://lists.horde.org/archives/announce/2015/001137.html - https://www.htbridge.com/advisory/HTB23272
CVE ID: CVE-2015-7985 State: PUBLISHED Published: 2015-11-24T20:00:00 Last Updated: 2024-08-06T08:06:31.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Valve Steam 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/536961/100/0/threaded - http://packetstormsecurity.com/files/134513/Steam-2.10.91.91-Weak-File-Permissions-Privilege-Escalation.html
CVE ID: CVE-2015-7986 State: PUBLISHED Published: 2015-10-27T16:00:00 Last Updated: 2024-08-06T08:06:31.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTTP request, aka SAP Security Note 2197428. Additional Analyst Notes: - CVE Program Container: References: - http://scn.sap.com/community/security/blog/2015/10/14/sap-security-notes-october-2015--review - https://www.exploit-db.com/exploits/39382/ - http://packetstormsecurity.com/files/135416/SAP-HANA-hdbindexserver-Memory-Corruption.html - http://www.securityfocus.co
http://packetstormsecurity.com/files/135416/SAP-HANA-hdbindexserver-Memory-Corruption.html - http://www.securityfocus.com/archive/1/537376/100/0/threaded - https://erpscan.io/advisories/erpscan-15-024-sap-hana-hdbindexserver-memory-corruption/ - http://seclists.org/fulldisclosure/2016/Jan/94
CVE ID: CVE-2015-7987 State: PUBLISHED Published: 2016-06-26T01:00:00 Last Updated: 2024-08-06T08:06:31.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2) GetValueForMACAddr, (3) rfc3110_import, or (4) CopyNSEC3ResourceRecord function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036181 - https://support.apple.com/HT206846 - http://www.kb.cert.org/vuls/id/143335 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htm
- http://www.kb.cert.org/vuls/id/143335 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.securityfocus.com/bid/91323