Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-0291 State: PUBLISHED Published: 2015-03-19T00:00:00 Last Updated: 2024-08-06T04:03:10.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10110 - http://www.securityfocus.com/bid/73235 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://marc.info/
urityfocus.com/bid/73235 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://bto.bluecoat.com/security-advisory/sa92 - https://www.openssl.org/news/secadv_20150319.txt - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=76343947ada960b6269090638f5391068daee88d - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabili
echnetwork/security-advisory/cpuoct2017-3236626.html - http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.securitytracker.com/id/1031929 - https://security.gentoo.org/glsa/201503-11 - https://bugzilla.redhat.com/show_bug.cgi?id=1202338 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-0292 State: PUBLISHED Published: 2015-03-19T00:00:00 Last Updated: 2024-08-06T04:03:10.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10110 - http://www.oracle.com/technetwork/topics/securi
ences: - https://kc.mcafee.com/corporate/index?page=content&id=SB10110 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://rhn.redhat.com/errata/RHSA-2015-0715.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680 - http://www.debian.org/security/2015/dsa-3197 - http://www.ubuntu.com/usn/USN-2537-1 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html - https://bto.bluecoat.com/security-advisory/sa92 - https://www.openssl.org/news/secadv_20150319.txt - https://rt.openssl.org/Ticket/Display.html?id=2608&user=guest&pass=guest - http://www.oracle.com/technetwork/top
9.txt - https://rt.openssl.org/Ticket/Display.html?id=2608&user=guest&pass=guest - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html - https://bugzilla.redhat.com/show_bug.cgi?id=1202395 - https://access.redhat.com/articles/1384453 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.securityfocus.com/bid/73228 - http://marc.info/?l=bugtraq&m=143213830203296&w=2 - http://www.fortiguard.com/advisory/2015-03-24-openssl-vulner
73228 - http://marc.info/?l=bugtraq&m=143213830203296&w=2 - http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0716.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=d0666f289ac013094bbbf547bfbcd616199b7d2d - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2015-0752.html - http://rhn.redhat.com/errata/RHSA-2015-0800.html - http://ww
1.html - http://rhn.redhat.com/errata/RHSA-2015-0752.html - http://rhn.redhat.com/errata/RHSA-2015-0800.html - http://www.securitytracker.com/id/1031929 - http://marc.info/?l=bugtraq&m=143213830203296&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html - https://support.citrix.com/article/CTX216642 - https://security.gentoo.org/glsa/201503-11 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-0293 State: PUBLISHED Published: 2015-03-19T00:00:00 Last Updated: 2024-08-06T04:03:10.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10110 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://rhn.redhat.com/errata/RHSA-2015-0715.html - http://lists.opensu
network/topics/security/cpujul2015-2367936.html - http://rhn.redhat.com/errata/RHSA-2015-0715.html - http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680 - http://www.ubuntu.com/usn/USN-2537-1 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html - https://bto.bluecoat.com/security-advisory/sa92 - https://www.openssl.org/news/secadv_20150319.txt - https://bugzilla.redhat.com/show_bug.cgi?id=1202404 - http://lists.opensuse.org/opensuse-security-announce/2016-0
.txt - https://bugzilla.redhat.com/show_bug.cgi?id=1202404 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=86f8fb0e344d62454f8daf3e15236b2b59210756 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html - http://lists.ap
an2016-2367955.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - https://access.redhat.com/articles/1384453 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html - http://marc.info/?l=bugtraq&m=143213830203296&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:063 - http://lists.opensuse.org/opensuse-security-
296&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:063 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html - http://rhn.redhat.com/errata/RHSA-2015-0716.html - http://support.apple.com/kb/HT204942 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html - https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg0000
ecurity/advisories/FreeBSD-SA-15%3A06.openssl.asc - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2015-0752.html - http://rhn.redhat.com/errata/RHSA-2015-0800.html - http://www.securityfocus.com/bid/73232 - http://www.securitytracker.com/id/1031929 - http://marc.info/?l=bugtraq&m=143213830203296&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://lists.opensuse.org/opensuse-security-announce/201
tp://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html - https://support.citrix.com/article/CTX216642 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html - https://security.gentoo.org/glsa/201503-11 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-0294 State: PUBLISHED Published: 2020-01-27T15:12:11 Last Updated: 2024-08-06T04:03:10.950Z Vendors: GnuTLS Products: GnuTLS Problem Types: Cryptography Description: GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1196323 - https://gitlab.com/gnutls/gnutls/commit/6e76e9b9fa845b76b0b9a45f05f4b54a052578ff - http://www.debian.org/security/2015/dsa-3191
CVE ID: CVE-2015-0295 State: PUBLISHED Published: 2015-03-25T14:00:00 Last Updated: 2024-08-06T04:03:10.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73029 - http://lists.qt-project.org/pipermail/announce/2015-February/000059.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html - http://lists.fedoraproject.org/pipermail
p://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html - http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html - http://www.ubuntu.com/usn/USN-2626-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html
CVE ID: CVE-2015-0296 State: PUBLISHED Published: 2017-10-06T22:00:00 Last Updated: 2024-08-06T04:03:10.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154198.html - http://www.securityfocus.com/bid/72826 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154424.html - http://www.openwall.com/lists/
2826 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154424.html - http://www.openwall.com/lists/oss-security/2015/02/27/6 - https://bugzilla.redhat.com/show_bug.cgi?id=1197082
CVE ID: CVE-2015-0297 State: PUBLISHED Published: 2015-04-24T14:00:00 Last Updated: 2024-08-06T04:03:10.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the (1) ServerInvokerServlet or (2) SchedulerService or (3) cause a denial of service (disk consumption) via the ContentManager. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0862.html - http://www.securitytracker.com/id/1032181
CVE ID: CVE-2015-0298 State: PUBLISHED Published: 2015-08-24T14:00:00 Last Updated: 2024-08-06T04:03:10.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2.Alpha1 allows remote attackers to inject arbitrary web script or HTML via a crafted MCMP message. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1641.html - http://rhn.redhat.com/errata/RHSA-2015-1642.html - https://issues.jboss.org/browse/MODCLUSTER-453
CVE ID: CVE-2015-0299 State: PUBLISHED Published: 2015-09-29T19:00:00 Last Updated: 2024-08-06T04:03:10.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open Source Point of Sale 2.3.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133737/Open-Source-Point-Of-Sale-2.3.1-Cross-Site-Scripting.html
CVE ID: CVE-2015-0300 State: REJECTED Published: 2020-11-05T22:16:33 Last Updated: 2020-11-05T22:16:33 Description: No description available.
CVE ID: CVE-2015-0301 State: PUBLISHED Published: 2015-01-13T23:00:00 Last Updated: 2024-08-06T04:03:10.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do not properly validate files, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62371 - http://security.gentoo.org/glsa/glsa-201502-02.xml - ht
m Container: References: - http://secunia.com/advisories/62371 - http://security.gentoo.org/glsa/glsa-201502-02.xml - http://secunia.com/advisories/62740 - http://secunia.com/advisories/62177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99981 - http://helpx.adobe.com/security/products/flash-player/apsb15-01.html - http://secunia.com/advisories/62252 - http://www.securitytracker.com/id/1031525 - http://secunia.com/advisories/62187 - http://www.securityfocus.com/bid/72034
CVE ID: CVE-2015-0302 State: PUBLISHED Published: 2015-01-13T23:00:00 Last Updated: 2024-08-06T04:03:11.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to obtain sensitive keystroke information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62371 - http://security.gentoo.org/glsa/glsa-201502-02.xml -
ram Container: References: - http://secunia.com/advisories/62371 - http://security.gentoo.org/glsa/glsa-201502-02.xml - http://secunia.com/advisories/62740 - http://secunia.com/advisories/62177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99982 - http://helpx.adobe.com/security/products/flash-player/apsb15-01.html - http://secunia.com/advisories/62252 - http://www.securitytracker.com/id/1031525 - http://secunia.com/advisories/62187 - http://www.securityfocus.com/bid/72035
CVE ID: CVE-2015-0303 State: PUBLISHED Published: 2015-01-13T23:00:00 Last Updated: 2024-08-06T04:03:10.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0306. Additional Analyst Notes: - CVE Program Container: References: - http://secun
ifferent vulnerability than CVE-2015-0306. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62371 - http://security.gentoo.org/glsa/glsa-201502-02.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/99983 - http://secunia.com/advisories/62740 - http://secunia.com/advisories/62177 - http://helpx.adobe.com/security/products/flash-player/apsb15-01.html - http://secunia.com/advisories/62252 - http://www.securitytracker.com/id/1031525 - http://secunia.com/advisories/62187 - http://www.securityfocus.com/bid/72031
CVE ID: CVE-2015-0304 State: PUBLISHED Published: 2015-01-13T23:00:00 Last Updated: 2024-08-06T04:03:10.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/
lity than CVE-2015-0309. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62371 - http://security.gentoo.org/glsa/glsa-201502-02.xml - http://secunia.com/advisories/62740 - http://secunia.com/advisories/62177 - https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1089 - http://helpx.adobe.com/security/products/flash-player/apsb15-01.html - http://secunia.com/advisories/62252 - http://www.securitytracker.com/id/1031525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99985 - http://secunia.com/advisories/62187 - http://www.securityfocus.com/bid/72032
CVE ID: CVE-2015-0305 State: PUBLISHED Published: 2015-01-13T23:00:00 Last Updated: 2024-08-06T04:03:11.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62371 - http://security.gentoo.org/glsa/glsa-201502-02.
E Program Container: References: - http://secunia.com/advisories/62371 - http://security.gentoo.org/glsa/glsa-201502-02.xml - http://secunia.com/advisories/62740 - http://www.securityfocus.com/bid/72033 - http://secunia.com/advisories/62177 - http://helpx.adobe.com/security/products/flash-player/apsb15-01.html - http://secunia.com/advisories/62252 - http://www.securitytracker.com/id/1031525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99987 - http://secunia.com/advisories/62187
CVE ID: CVE-2015-0306 State: PUBLISHED Published: 2015-01-13T23:00:00 Last Updated: 2024-08-06T04:03:11.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0303. Additional Analyst Notes: - CVE Program Container: References: - http://secun
ifferent vulnerability than CVE-2015-0303. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62371 - http://security.gentoo.org/glsa/glsa-201502-02.xml - http://secunia.com/advisories/62740 - http://secunia.com/advisories/62177 - http://www.securityfocus.com/bid/72036 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99984 - http://helpx.adobe.com/security/products/flash-player/apsb15-01.html - http://secunia.com/advisories/62252 - http://www.securitytracker.com/id/1031525 - http://secunia.com/advisories/62187
CVE ID: CVE-2015-0307 State: PUBLISHED Published: 2015-01-13T23:00:00 Last Updated: 2024-08-06T04:03:11.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advis
read) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62371 - http://security.gentoo.org/glsa/glsa-201502-02.xml - http://secunia.com/advisories/62740 - http://secunia.com/advisories/62177 - http://helpx.adobe.com/security/products/flash-player/apsb15-01.html - http://secunia.com/advisories/62252 - http://www.securitytracker.com/id/1031525 - http://www.securityfocus.com/bid/72037 - http://secunia.com/advisories/62187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99988
CVE ID: CVE-2015-0308 State: PUBLISHED Published: 2015-01-13T23:00:00 Last Updated: 2024-08-06T04:03:11.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62371 - http://security.gentoo.org/glsa/glsa