Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
r_na-c05390722 - https://helpx.adobe.com/security/products/flash-player/apsb15-23.html - http://www.securityfocus.com/bid/76795 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00022.html - https://security.gentoo.org/glsa/201509-07 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
CVE ID: CVE-2015-5582 State: PUBLISHED Published: 2015-09-22T10:00:00 Last Updated: 2024-08-06T06:50:03.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5588, and CVE-2015-6677. Additional Analyst Notes: - CVE Program Container: References: -
-5578, CVE-2015-5580, CVE-2015-5588, and CVE-2015-6677. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1814.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00023.html - http://www.securitytracker.com/id/1033629 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00024.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04939841 - http://www.securityfocus.com/bid/76799 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://helpx.ad
CVE ID: CVE-2015-5583 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T06:50:03.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to bypass intended sandbox restrictions and obtain sensitive PDF information by launching a print job on a remote printer, a different vulnerability than CVE-2015-6705, CVE-2015-6706, and CVE-2015-7624. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/securi
6706, and CVE-2015-7624. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796 - http://www.zerodayinitiative.com/advisories/ZDI-15-468
CVE ID: CVE-2015-5584 State: PUBLISHED Published: 2015-09-22T10:00:00 Last Updated: 2024-08-06T06:50:03.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, and CVE-2015-6682. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1814.h
CVE ID: CVE-2015-5585 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-5586 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T06:50:03.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621. Additional Analyst Notes: - C
-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796
CVE ID: CVE-2015-5587 State: PUBLISHED Published: 2015-09-22T10:00:00 Last Updated: 2024-08-06T06:50:03.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1814.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 -
/errata/RHSA-2015-1814.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00023.html - http://www.securitytracker.com/id/1033629 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00024.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04939841 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://helpx.adobe.com/security/products/flash-player/apsb15-23.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00022.html - https://security.gentoo.org/glsa/201509-07 - http:
lists.opensuse.org/opensuse-security-announce/2015-09/msg00022.html - https://security.gentoo.org/glsa/201509-07 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html - http://www.securityfocus.com/bid/76797 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
CVE ID: CVE-2015-5588 State: PUBLISHED Published: 2015-09-22T10:00:00 Last Updated: 2024-08-06T06:50:03.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, and CVE-2015-6677. Additional Analyst Notes: - CVE Program Container: References: -
-5578, CVE-2015-5580, CVE-2015-5582, and CVE-2015-6677. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1814.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00023.html - http://www.securitytracker.com/id/1033629 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00024.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04939841 - http://www.securityfocus.com/bid/76799 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://helpx.ad
CVE ID: CVE-2015-5589 State: PUBLISHED Published: 2016-05-16T10:00:00 Last Updated: 2024-08-06T06:50:03.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: The phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 does not validate a file pointer before a close operation, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted TAR archive that is mishandled in a Phar::convertToData call. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=69958 - http://www.debian.org/security/2015/dsa-33
CVE Program Container: References: - https://bugs.php.net/bug.php?id=69958 - http://www.debian.org/security/2015/dsa-3344 - http://www.securityfocus.com/bid/75974 - http://php.net/ChangeLog-5.php - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=bf58162ddf970f63502837f366930e44d6a992cf - http://openwall.com/lists/oss-security/2015/07/18/1
CVE ID: CVE-2015-5590 State: PUBLISHED Published: 2016-01-19T02:00:00 Last Updated: 2024-08-06T06:50:03.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling of an e-mail attachment by the imap PHP extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75970 - http://www.debian.org/security/2015/dsa-3344 - https://bugs.php.net/bug.php
: - http://www.securityfocus.com/bid/75970 - http://www.debian.org/security/2015/dsa-3344 - https://bugs.php.net/bug.php?id=69923 - http://www.php.net/ChangeLog-5.php - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=6dedeb40db13971af45276f80b5375030aa7e76f - http://openwall.com/lists/oss-security/2015/07/18/1
CVE ID: CVE-2015-5591 State: PUBLISHED Published: 2019-12-31T20:42:39 Last Updated: 2024-08-06T06:50:02.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Zenphoto before 1.4.9 allow remote administrators to execute arbitrary SQL commands. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132667/ZenPhoto-1.4.8-XSS-SQL-Injection-Traversal.html - http://software-talk.org/blog/2015/07/second-order-sql-injection-reflected-xss-path-traversal-function-execution-vulnerability-zenphoto/ - http://www.zenphoto.org/news/zenphoto-1.4.9 - https://www.openwall.com/lists/oss-security/2015/07/18/3
CVE ID: CVE-2015-5592 State: PUBLISHED Published: 2019-12-31T20:42:43 Last Updated: 2024-08-06T06:50:03.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist in sanitize_string in Zenphoto before 1.4.9 allows remote attackers to conduct cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132667/ZenPhoto-1.4.8-XSS-SQL-Injection-Traversal.html - http://software-talk.org/blog/2015/07/second-order-sql-injection-reflected-xss-path-traversal-function-execution-vulnerability-zenphoto/ - http://www.zenphoto.org/news/zenphoto-1.4.9 - https://www.openwall.com/lists/oss-security/2015/07/
erability-zenphoto/ - http://www.zenphoto.org/news/zenphoto-1.4.9 - https://www.openwall.com/lists/oss-security/2015/07/18/3
CVE ID: CVE-2015-5593 State: PUBLISHED Published: 2019-12-31T20:42:46 Last Updated: 2024-08-06T06:50:03.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sanitize_string function in Zenphoto before 1.4.9 does not properly sanitize HTML tags, which allows remote attackers to perform a cross-site scripting (XSS) attack by wrapping a payload in "<<script></script>script>payload<script></script></script>", or in an image tag, with the payload as the onerror event. Additional Analyst Notes: - CVE Program Container: References: - https://software-talk.org/blog/2015/07/second-order-sql-injection-reflected-xss-path-traversal-function-execution-vulnerability-zenphoto/ - http://www.z
015/07/second-order-sql-injection-reflected-xss-path-traversal-function-execution-vulnerability-zenphoto/ - http://www.zenphoto.org/news/zenphoto-1.4.9 - http://www.openwall.com/lists/oss-security/2015/07/18/3
CVE ID: CVE-2015-5594 State: PUBLISHED Published: 2017-07-25T18:00:00 Last Updated: 2024-08-06T06:50:02.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sanitize_string function in ZenPhoto before 1.4.9 utilized the html_entity_decode function after input sanitation, which might allow remote attackers to perform a cross-site scripting (XSS) via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - http://www.zenphoto.org/news/zenphoto-1.4.9 - https://software-talk.org/blog/2015/07/second-order-sql-injection-reflected-xss-path-traversal-function-execution-vulnerability-zenphoto/ - http://www.openwall.com/lists/oss-security/2015/07/18/3 - http://
traversal-function-execution-vulnerability-zenphoto/ - http://www.openwall.com/lists/oss-security/2015/07/18/3 - http://cve.killedkenny.io/cve/CVE-2015-5594
CVE ID: CVE-2015-5595 State: PUBLISHED Published: 2019-12-31T20:42:50 Last Updated: 2024-08-06T06:50:03.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin.php in Zenphoto before 1.4.9 allows remote attackers to hijack the authentication of admin users for requests that may cause a denial of service (resource consumption). Additional Analyst Notes: - CVE Program Container: References: - https://software-talk.org/blog/2015/07/second-order-sql-injection-reflected-xss-path-traversal-function-execution-vulnerability-zenphoto/ - http://www.zenphoto.org/news/zenphoto-1.4.9 - http://www.openwall.com/lists/oss-security/2015/07/18/3
CVE ID: CVE-2015-5596 State: REJECTED Published: 2022-07-08T17:37:25 Last Updated: 2022-07-08T17:37:25 Description: No description available.
CVE ID: CVE-2015-5597 State: REJECTED Published: 2022-07-08T17:37:28 Last Updated: 2022-07-08T17:37:28 Description: No description available.
CVE ID: CVE-2015-5598 State: REJECTED Published: 2022-07-08T17:37:32 Last Updated: 2022-07-08T17:37:32 Description: No description available.
CVE ID: CVE-2015-5599 State: PUBLISHED Published: 2015-08-18T15:00:00 Last Updated: 2024-08-06T06:50:03.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) albumid or (2) name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/07/20/1 - http://www.vapid.dhs.org/advisory.php?v=132 - http://seclists.org/fulldisclosure/2015/Jul/64 - http://packetstormsecurity.com/files/132671/WordPress-WP-PowerPlayGallery-3.3-File-Upload-SQL-Injection.html
CVE ID: CVE-2015-5600 State: PUBLISHED Published: 2015-08-03T00:00:00 Last Updated: 2024-08-06T06:50:03.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list. Additional Analyst Notes: - CVE Program Contain
nt that provides a different password for each pam element on this list. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.ubuntu.com/usn/USN-2710-2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128992 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://ww
docId=emr_na-c05128992 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://security.gentoo.org/glsa/201512-04 - https://kc.mcafee.com/corporate/index?page=content&id=SB10136 - https://security.netapp.com/advisory/ntap-20151106-0001/ - http://rhn.redhat.com/errata/RHSA-2016-0466.html - http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c.diff?r1=1.42&r2=1.43&f=h - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10697 - http://lists.apple.com/archives/security-a
9645.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10697 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c - https://kc.mcafee.com/corporate/index?page=content&id=SB10157 - http://www.securityfocus.com/bid/75990 - http://www.securityfocus.com/bid/91787 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html - http://www.securityfocus.com/bid/92012 - https://support.apple.com/kb/HT205031 - https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html - http://ope
https://support.apple.com/kb/HT205031 - https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html - http://openwall.com/lists/oss-security/2015/07/23/4 - http://www.ubuntu.com/usn/USN-2710-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162955.html - http://www.securitytracker.com/id/1032988 - http://seclists.org/fulldisclosure/2015/Jul/92 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - https://www.arista.com/en/support/advisories-notices/security-advisories/1174-security-advisory-12 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-5601 State: PUBLISHED Published: 2019-07-29T15:41:14 Last Updated: 2024-08-06T06:50:03.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files. Additional Analyst Notes: - CVE Program Container: References: - https://open.edx.org/announcements/CVE-2015-5601
CVE ID: CVE-2015-5602 State: PUBLISHED Published: 2015-11-17T15:00:00 Last Updated: 2024-08-06T06:50:03.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home/*/*/file.txt." Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.sudo.ws/show_bug.cgi?id=707 - http://www.sudo.ws/stable.html#1.8.15 - http://www.securitytracker.com/id/1034392 - http://www.debian.org/security/2016/dsa-3440 - https://security.gentoo.org/glsa/201606-13 - http://www.oracle.com/technetwork/t
www.debian.org/security/2016/dsa-3440 - https://security.gentoo.org/glsa/201606-13 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171024.html - https://www.exploit-db.com/exploits/37710/ - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171054.html
CVE ID: CVE-2015-5603 State: PUBLISHED Published: 2015-09-21T19:00:00 Last Updated: 2024-08-06T06:50:03.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related to "Velocity Template Injection Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://confluence.atlassian.com/jira/jira-and-hipchat-for-jira-plugin-security-advisory-2015-08-26-776650785.html - https://www.exploit-db.com/exploits/38905/ - http://packetstormsecurity.com/files/133401/Jira-HipChat-For-Jira-Java-Code-Execution.html - http:
com/exploits/38905/ - http://packetstormsecurity.com/files/133401/Jira-HipChat-For-Jira-Java-Code-Execution.html - http://www.rapid7.com/db/modules/exploit/multi/http/jira_hipchat_template - http://www.securityfocus.com/archive/1/536374/100/0/threaded - https://www.exploit-db.com/exploits/38551/
CVE ID: CVE-2015-5605 State: PUBLISHED Published: 2015-07-23T00:00:00 Last Updated: 2024-08-06T06:50:03.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: The regular-expression implementation in Google V8, as used in Google Chrome before 44.0.2403.89, mishandles interrupts, which allows remote attackers to cause a denial of service (application crash) via crafted JavaScript code, as demonstrated by an error in garbage collection during allocation of a stack-overflow exception message. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=512110 - http://www.securityfocus.com/bid/76007 - https://chromium.googlesource
e.google.com/p/chromium/issues/detail?id=512110 - http://www.securityfocus.com/bid/76007 - https://chromium.googlesource.com/v8/v8.git/+/c67cb287a901ddf03d4ae4dafcf431d09fd3e22c - http://rhn.redhat.com/errata/RHSA-2015-1499.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html - http://www.securitytracker.com/id/1033031 - https://code.google.com/p/chromium/issues/detail?id=469480 - http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
CVE ID: CVE-2015-5606 State: PUBLISHED Published: 2019-04-03T18:51:22 Last Updated: 2024-08-06T06:50:02.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vordel XML Gateway (acquired by Axway) version 7.2.2 could allow remote attackers to cause a denial of service via a specially crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://www.excellium-services.com/cert-xlm-advisory/cve-2015-5606/
CVE ID: CVE-2015-5607 State: PUBLISHED Published: 2017-09-20T16:00:00 Last Updated: 2024-08-06T06:50:03.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery in the REST API in IPython 2 and 3. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1243842 - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162671.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162936.html - https://github.com/ipython/ipython/commit/1415a9710407e7c14900531813c15ba6165f0816 - https://github.com/ipython/ipython/commit/a05fe052a18810e92d9be8c1185952c13fe4e5b0 - http://www.openw
13c15ba6165f0816 - https://github.com/ipython/ipython/commit/a05fe052a18810e92d9be8c1185952c13fe4e5b0 - http://www.openwall.com/lists/oss-security/2015/07/21/3
CVE ID: CVE-2015-5608 State: PUBLISHED Published: 2017-09-20T18:00:00 Last Updated: 2024-08-06T06:50:03.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Joomla! CMS 3.0.0 through 3.4.1. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/617-20150601-core-open-redirect.html - http://www.securityfocus.com/bid/76496
CVE ID: CVE-2015-5609 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T06:50:02.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the Image Export plugin 1.1 for WordPress allows remote attackers to read and delete arbitrary files via a full pathname in the file parameter to download.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapid.dhs.org/advisory.php?v=135 - http://www.openwall.com/lists/oss-security/2015/07/21/1 - http://www.openwall.com/lists/oss-security/2015/07/13/10