Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
er.com/id/1031872 - https://access.redhat.com/errata/RHSA-2015:0708 - http://www.securityfocus.com/bid/72317 - http://rhn.redhat.com/errata/RHSA-2015-0661.html - http://www.securityfocus.com/archive/1/534545/100/0/threaded - http://rhn.redhat.com/errata/RHSA-2015-0662.html - http://packetstormsecurity.com/files/130105/Apache-Qpid-0.30-Crash.html - http://mail-archives.apache.org/mod_mbox/www-announce/201501.mbox/%3C54C60497.5060504%40apache.org%3E - http://rhn.redhat.com/errata/RHSA-2015-0660.html - https://bugzilla.redhat.com/show_bug.cgi?id=1186302 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178606.html - http://rhn.redhat.com/errata/RHSA-2015-0707.html
CVE ID: CVE-2015-0225 State: PUBLISHED Published: 2015-04-03T14:00:00 Last Updated: 2024-08-06T04:03:10.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request. Additional Analyst Notes: - CVE Program Container: References: - http://www.mail-archive.com/user%40cassandra.apache.org/msg41819.html - http://rhn.redhat.com/errata/RHSA-2015-1947.html - http://www.securityfocus.com/bid/73478 - http://www.securityfocus.com/archive/1
.redhat.com/errata/RHSA-2015-1947.html - http://www.securityfocus.com/bid/73478 - http://www.securityfocus.com/archive/1/535154/100/0/threaded - http://packetstormsecurity.com/files/131249/Apache-Cassandra-Remote-Code-Execution.html - http://www.securitytracker.com/id/1034002
CVE ID: CVE-2015-0226 State: PUBLISHED Published: 2017-10-30T14:00:00 Last Updated: 2024-08-06T04:03:10.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plaintext form of a symmetric key via a series of crafted messages. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-2487. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1376 - http://rhn.redhat.com/errata/RHSA-2015-0849.html - http:
References: - https://access.redhat.com/errata/RHSA-2016:1376 - http://rhn.redhat.com/errata/RHSA-2015-0849.html - http://rhn.redhat.com/errata/RHSA-2015-1176.html - http://rhn.redhat.com/errata/RHSA-2015-1177.html - http://rhn.redhat.com/errata/RHSA-2015-0848.html - http://rhn.redhat.com/errata/RHSA-2015-0846.html - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03900en_us - https://ws.apache.org/wss4j/advisories/CVE-2015-0226.txt.asc - http://rhn.redhat.com/errata/RHSA-2015-0847.html - http://www.securityfocus.com/bid/72553 - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
CVE ID: CVE-2015-0227 State: PUBLISHED Published: 2015-02-12T16:00:00 Last Updated: 2024-08-06T04:03:10.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache WSS4J before 1.6.17 and 2.x before 2.0.2 allows remote attackers to bypass the requireSignedEncryptedDataElements configuration via a vectors related to "wrapping attacks." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0773.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/100837 - http://rhn.redhat.com/errata/RHSA-2015-0849.html - http://rhn.redhat.com/errata/RHSA-2015-1176.html - http://rhn.redhat.com/errata/RHSA-2015-1177.html - http://rhn.redhat.com
p://rhn.redhat.com/errata/RHSA-2015-1176.html - http://rhn.redhat.com/errata/RHSA-2015-1177.html - http://rhn.redhat.com/errata/RHSA-2015-0848.html - http://rhn.redhat.com/errata/RHSA-2015-0846.html - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03900en_us - http://ws.apache.org/wss4j/advisories/CVE-2015-0227.txt.asc - http://www.securityfocus.com/bid/72557 - http://rhn.redhat.com/errata/RHSA-2015-0847.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
CVE ID: CVE-2015-0228 State: PUBLISHED Published: 2015-03-08T02:00:00 Last Updated: 2024-08-06T04:03:10.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-03/msg00006.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://advisories.mageia.org/MGASA-2015
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://advisories.mageia.org/MGASA-2015-0099.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.ubuntu.com/usn/USN-2523-1 - http://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x/CHANGES - http://rhn.redhat.com/errata/RHSA-2015-1666.html - http://www.securitytracker.com/id/1032967 - https://github.com/apache/httpd/commit/643f0fcf3b8ab09a68f0ecd2aa37aafeda3e63ef - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://www.securityfocus.com/bid/91787 - https://support.apple.com/kb/HT205031 - http://lists.apple.com/archives/security
ttp://www.securityfocus.com/bid/91787 - https://support.apple.com/kb/HT205031 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html - https://support.apple.com/HT205219 - http://www.securityfocus.com/bid/73041 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455
%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://github.com/apache/httpd/commit/78eb3b9235515652ed141353d98c239237030410 - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272
f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2015-0229 State: REJECTED Published: 2017-02-04T18:00:00 Last Updated: 2017-02-04T17:57:01 Description: No description available.
CVE ID: CVE-2015-0230 State: REJECTED Published: 2018-07-09T16:00:00 Last Updated: 2018-07-09T15:57:01 Description: No description available.
CVE ID: CVE-2015-0231 State: PUBLISHED Published: 2015-01-27T11:00:00 Last Updated: 2024-08-06T04:03:10.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/securit
fix for CVE-2014-8142. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2015:032 - http://www.debian.org/security/2015/dsa-3195 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=1185397 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:079 - http://www.oracle.com/technetwork/to
16-2867209.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:079 - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html - https://support.apple.com/HT205267 - http://www.php.net/ChangeLog-5.php - https://github.com/php/php-src/commit/b585a3aed7880a5fa5c18e2b838fc96f40e075bd - http://rhn.redhat.com/errata/RHSA-2015-1135.html - https://bugs.php.net/bug.php?id=68710 - http://rhn.redhat.com/errata/RHSA-2015-1053.html - https://security.gentoo.org/glsa/201503-03 - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://advisories.mage
https://security.gentoo.org/glsa/201503-03 - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://advisories.mageia.org/MGASA-2015-0040.html - https://security.gentoo.org/glsa/201606-10 - http://rhn.redhat.com/errata/RHSA-2015-1066.html - http://www.securityfocus.com/bid/72539
CVE ID: CVE-2015-0232 State: PUBLISHED Published: 2015-01-27T11:00:00 Last Updated: 2024-08-06T04:03:10.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2015:032 - http://www.debian.org/security/2015/dsa-3195 - http://www.securityfocus.com/bid/72541 - http://marc.info/?l=bugtr
:032 - http://www.debian.org/security/2015/dsa-3195 - http://www.securityfocus.com/bid/72541 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2fc178cf448d8e1b95d1314e47eeef610729e0df - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=21bc7464f454fec18a9ec024c738f195602fee2a - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
bc7464f454fec18a9ec024c738f195602fee2a - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - https://bugs.php.net/bug.php?id=68799 - http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html - https://support.apple.com/HT205267 - http://www.php.net/ChangeLog-5.php - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=55001de6d8c6ed2aada870a76de1e4b4558737bf - https://bugzilla.redhat.com/show_bug.cgi?id=1185472 - http://rhn.redhat.com/errata/RHSA-2015-1135.html - http://rhn.redhat.com/errata/RHSA-2015-1053.html - https://security.gentoo.org/glsa/201503-03 - http://advisories.mageia.org/MGASA-2015-0040.html - http://rhn.redhat.com/errata/RHSA-2015-1066.html - h
lsa/201503-03 - http://advisories.mageia.org/MGASA-2015-0040.html - http://rhn.redhat.com/errata/RHSA-2015-1066.html - http://rhn.redhat.com/errata/RHSA-2015-1218.html
CVE ID: CVE-2015-0233 State: PUBLISHED Published: 2017-08-28T19:00:00 Last Updated: 2024-08-06T04:03:10.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple insecure Temporary File vulnerabilities in 389 Administration Server before 1.1.38. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1183151 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151954.html
CVE ID: CVE-2015-0234 State: PUBLISHED Published: 2017-08-28T20:00:00 Last Updated: 2024-08-06T04:03:10.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple temporary file creation vulnerabilities in pki-core 10.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1183176 - https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-0234.html
CVE ID: CVE-2015-0235 State: PUBLISHED Published: 2015-01-28T19:00:00 Last Updated: 2024-08-06T04:03:10.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72325 - http://marc.info/?l=bugtraq&m=142296726407499&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21696131 - http://secunia.com/advisories/62883 - http:
6726407499&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21696131 - http://secunia.com/advisories/62883 - http://secunia.com/advisories/62691 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - http://packetstormsecurity.com/files/130974/Exim-GHOST-glibc-gethostbyname-Buffer-Overflow.html - https://support.apple.com/HT205375 - http://marc.info/?l=bugtraq&m=142722450701342&w=2 - http://seclists.org/oss-sec/2015/q1/269 - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://secunia.com/advisories/62698 - http://secunia.com/advisor
le/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://secunia.com/advisories/62698 - http://secunia.com/advisories/62640 - http://www.securitytracker.com/id/1032909 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://bto.bluecoat.com/security-advisory/sa90 - http://www-01.ibm.com/support/docview.wss?uid=swg21696618 - http://www-01.ibm.com/support/docview.wss?uid=swg21696600 - http://www.idirect.net/Partners/~/media/Files/CVE/iDirect-Posted-Common-Vulnerabilities-and-Exposures.pdf - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - https://www.sopho
e/2015/Sep/msg00008.html - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - https://www.sophos.com/en-us/support/knowledgebase/121879.aspx - http://secunia.com/advisories/62688 - http://secunia.com/advisories/62865 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www-01.ibm.com/support/docview.wss?uid=swg21696243 - http://marc.info/?l=bugtraq&m=142721102728110&w=2 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10100 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://secunia.com/advisories/62812 - http://secuni
w.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://secunia.com/advisories/62812 - http://secunia.com/advisories/62879 - http://marc.info/?l=bugtraq&m=142781412222323&w=2 - http://linux.oracle.com/errata/ELSA-2015-0090.html - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://secunia.com/advisories/62871 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://secunia.com/advisories/62690 - http://secunia.com/advisories/62692 - https://support.apple.com/HT205267 - https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes - http://secunia.com/adviso
t.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes - http://secunia.com/advisories/62681 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10671 - http://marc.info/?l=bugtraq&m=142781412222323&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21696526 - http://marc.info/?l=bugtraq&m=142721102728110&w=2 - http://secunia.com/advisories/62667 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04874668 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:039 - https://www.f-secure.com/en/web/labs_global/fsc-2015-1 - http://www-01.ibm.com/support/docview.wss?uid=swg21696602 - http://secunia.com/advis
com/en/web/labs_global/fsc-2015-1 - http://www-01.ibm.com/support/docview.wss?uid=swg21696602 - http://secunia.com/advisories/62517 - http://support.apple.com/kb/HT204942 - http://blogs.sophos.com/2015/01/29/sophos-products-and-the-ghost-vulnerability-affecting-linux/ - http://www-01.ibm.com/support/docview.wss?uid=swg21695695 - http://secunia.com/advisories/62680 - http://secunia.com/advisories/62813 - http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.html - https://security.gentoo.org/glsa/201503-04 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - http://tools.cisco.com/security/center/content/CiscoSe
racle.com/technetwork/security-advisory/cpuoct2018-4428296.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150128-ghost - http://www.securityfocus.com/bid/91787 - http://packetstormsecurity.com/files/130171/Exim-ESMTP-GHOST-Denial-Of-Service.html - http://rhn.redhat.com/errata/RHSA-2015-0126.html - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://www.securityfocus.com/archive/1/534845/100/0/threaded - http://secunia.com/advisories/62715 - https://www.qualys.com/research/security-advisories/GHOST-CVE-2015-0235.txt - http://www-01.ibm.com/support/docview.wss?uid=swg21695835 - http://seclists.org/oss-sec/2015/q1/274 - ht
2015-0235.txt - http://www-01.ibm.com/support/docview.wss?uid=swg21695835 - http://seclists.org/oss-sec/2015/q1/274 - http://marc.info/?l=bugtraq&m=143145428124857&w=2 - http://seclists.org/fulldisclosure/2015/Jan/111 - http://www-01.ibm.com/support/docview.wss?uid=swg21695774 - http://secunia.com/advisories/62870 - https://security.netapp.com/advisory/ntap-20150127-0001/ - http://linux.oracle.com/errata/ELSA-2015-0092.html - http://www-01.ibm.com/support/docview.wss?uid=swg21695860 - http://www.debian.org/security/2015/dsa-3142 - https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability - http://secunia.com/advisories/62816 - http://secunia.com/advisories
vulnerabilities/2015/01/27/the-ghost-vulnerability - http://secunia.com/advisories/62816 - http://secunia.com/advisories/62758 - http://seclists.org/fulldisclosure/2019/Jun/18 - https://seclists.org/bugtraq/2019/Jun/14 - http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html - https://cert-portal.siemens.com/productcert/pdf/ssa-994726.pdf - http://www.openwall.com/lists/oss-security/2021/05/04/7 - http://seclists.org/fulldisclosure/2021/Sep/0 - http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html - https://www.arista.com/en/support/advisories-notices/security-a
njection-Cross-Site-Scripting-Vulnerable-Software.html - https://www.arista.com/en/support/advisories-notices/security-advisories/1053-security-advisory-9 - http://seclists.org/fulldisclosure/2022/Jun/36 - http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html
CVE ID: CVE-2015-0236 State: PUBLISHED Published: 2015-01-29T15:00:00 Last Updated: 2024-08-06T04:03:10.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the virDomainSnapshotGetXMLDesc interface or (2) image to the virDomainSaveImageGetXMLDesc interface. Additional Analyst Notes: - CVE Program Container: References: - http://security.libvirt.org/2015/0001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:070 - http://advisories.mageia.org/MGASA-2015-0046.html - http://lists.opensuse.org/opensuse-updates/2015-0
e=MDVSA-2015:070 - http://advisories.mageia.org/MGASA-2015-0046.html - http://lists.opensuse.org/opensuse-updates/2015-02/msg00028.html - http://secunia.com/advisories/62766 - http://rhn.redhat.com/errata/RHSA-2015-0323.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:035 - http://www.ubuntu.com/usn/USN-2867-1
CVE ID: CVE-2015-0237 State: PUBLISHED Published: 2015-05-01T15:00:00 Last Updated: 2024-08-06T04:03:10.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service (prevent host start) by creating a long snapshot chain. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032231 - http://rhn.redhat.com/errata/RHSA-2015-0888.html
CVE ID: CVE-2015-0238 State: PUBLISHED Published: 2017-09-25T19:00:00 Last Updated: 2024-08-06T04:03:10.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: selinux-policy as packaged in Red Hat OpenShift 2 allows attackers to obtain process listing information via a privilege escalation attack. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2015-0238 - https://bugzilla.redhat.com/show_bug.cgi?id=1184739
CVE ID: CVE-2015-0239 State: PUBLISHED Published: 2015-03-02T11:00:00 Last Updated: 2024-08-06T04:03:10.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: The em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the guest OS lacks SYSENTER MSR initialization, allows guest OS users to gain guest OS privileges or cause a denial of service (guest OS crash) by triggering use of a 16-bit code segment for emulation of a SYSENTER instruction. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2515-1 - http://www.debian.org/security/2015/dsa-3170 - http://www.securityfocus.com/bid/72842 - http://www.openwall.c
N-2515-1 - http://www.debian.org/security/2015/dsa-3170 - http://www.securityfocus.com/bid/72842 - http://www.openwall.com/lists/oss-security/2015/01/27/6 - https://bugzilla.redhat.com/show_bug.cgi?id=1186448 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f3747379accba8e95d70cec0eae0582c8c182050 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - https://github.com/torvalds/linux/commit/f3747379accba8e95d70cec0eae0582c8c182050 - http://www.ubuntu.com/usn/USN-2514-1 - http://www.ubuntu.com/usn/USN-2518-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.kernel.org/pub/linux/