Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
https://bugzilla.redhat.com/show_bug.cgi?id=1194747 - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://php.net/ChangeLog-5.php - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html - https://support.apple.com/HT205267 - https://bugs.php.net/bug.php?id=68901 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b2cf3f064b8f5efef89bb084521b61318c71781b - http://www.securityfocus.com/bid/73037 - http://rhn.redhat.com/errata/RHSA-2015-1135.html - http://rhn.redhat.com/errata/RHSA-2015-1053.html - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://openwall.com/lists/oss-security/2015/03/15/6 - https://security.gentoo.org/glsa/201606-10 - http://rhn.redhat.co
http://openwall.com/lists/oss-security/2015/03/15/6 - https://security.gentoo.org/glsa/201606-10 - http://rhn.redhat.com/errata/RHSA-2015-1066.html - http://rhn.redhat.com/errata/RHSA-2015-1218.html
CVE ID: CVE-2015-2302 State: REJECTED Published: 2016-02-05T02:00:00 Last Updated: 2016-02-05T01:57:01 Description: No description available.
CVE ID: CVE-2015-2303 State: REJECTED Published: 2016-02-05T02:00:00 Last Updated: 2016-02-05T01:57:01 Description: No description available.
CVE ID: CVE-2015-2304 State: PUBLISHED Published: 2015-03-15T19:00:00 Last Updated: 2024-08-06T05:10:16.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035996 - http://advisories.mageia.org/MGASA-2015-0106.html - https://github.com/libarchive/libarchive/commit/59357157706d47c365b2227739e17daba3607526 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00065.html - https://github.com/libarchive/libarchive/pull
07526 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00065.html - https://github.com/libarchive/libarchive/pull/110 - https://www.freebsd.org/security/advisories/FreeBSD-SA-16:22.libarchive.asc - http://www.openwall.com/lists/oss-security/2015/01/16/7 - http://www.debian.org/security/2015/dsa-3180 - http://www.ubuntu.com/usn/USN-2549-1 - https://groups.google.com/forum/#%21msg/libarchive-discuss/dN9y1VvE1Qk/Z9uerigjQn0J - https://security.gentoo.org/glsa/201701-03 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:157 - http://www.openwall.com/lists/oss-security/2015/01/07/5
CVE ID: CVE-2015-2305 State: PUBLISHED Published: 2015-03-30T10:00:00 Last Updated: 2024-08-06T05:10:15.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72611 - http://www.debian.org/security/2015/dsa-3195 - http://openwall.com/lists/oss-security/2015/03/11/8
focus.com/bid/72611 - http://www.debian.org/security/2015/dsa-3195 - http://openwall.com/lists/oss-security/2015/03/11/8 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://www.securitytracker.com/id/1031947 - http://php.net/ChangeLog-5.php - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html - http://www.ubuntu.com/usn/USN-2594-1 - https://support.apple.com/HT205267 - http://www.ubuntu.com/usn/USN-2572-1 - http://blog.clamav.net/2015/
sn/USN-2594-1 - https://support.apple.com/HT205267 - http://www.ubuntu.com/usn/USN-2572-1 - http://blog.clamav.net/2015/04/clamav-0987-has-been-released.html - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html - http://www.kb.cert.org/vuls/id/695940 - http://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html - http://openwall.com/lists/oss-security/2015/02/07/14 - https://guidovranken.wordpress.com/2015/02/04/full-disclosure-heap-overflow-in-h-spencers-regex-library-on-32-bit-systems/ - http://rhn.redhat.com/errata/RHSA-2015-1053.html - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://rhn.redhat.com/errata/RHSA-2015-1066.html
CVE ID: CVE-2015-2308 State: PUBLISHED Published: 2015-06-24T10:00:00 Last Updated: 2024-08-06T05:10:16.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in the HttpCache class in HttpKernel in Symfony 2.x before 2.3.27, 2.4.x and 2.5.x before 2.5.11, and 2.6.x before 2.6.6 allows remote attackers to execute arbitrary PHP code via a language="php" attribute of a SCRIPT element. Additional Analyst Notes: - CVE Program Container: References: - https://symfony.com/blog/cve-2015-2308-esi-code-injection - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000089 - http://jvn.jp/en/jp/JVN19578958/index.html - http://www.securityfocus.com/bid/75357
CVE ID: CVE-2015-2310 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T05:10:16.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service or possibly obtain sensitive information from memory via a crafted message, related to pointer validation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-02-0-c%2B%2B-integer-overflow.md - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780565 - http://www.openwall.com/lists/oss-security
eger-overflow.md - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780565 - http://www.openwall.com/lists/oss-security/2015/03/17/3 - https://github.com/capnproto/capnproto/commit/f343f0dbd0a2e87f17cd74f14186ed73e3fbdbfa
CVE ID: CVE-2015-2311 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T05:10:16.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow remote peers to cause a denial of service or possibly obtain sensitive information from memory or execute arbitrary code via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780566 - http://www.openwall.com/lists/oss-security/2015/03/17/3 - https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-02-1-c%2B%2B-integer-underflow.m
3/17/3 - https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-02-1-c%2B%2B-integer-underflow.md - https://github.com/capnproto/capnproto/commit/26bcceda72372211063d62aab7e45665faa83633
CVE ID: CVE-2015-2312 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T05:10:16.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service (CPU and possibly general resource consumption) via a list with a large number of elements. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/capnproto/capnproto/commit/104870608fde3c698483fdef6b97f093fc15685d - http://www.openwall.com/lists/oss-security/2015/03/17/3 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780567 - https://github.com/capnproto/capnproto/blob/master/securit
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780567 - https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-02-2-all-cpu-amplification.md
CVE ID: CVE-2015-2313 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T05:10:15.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when an application invokes the totalSize method on an object reader, allows remote peers to cause a denial of service (CPU consumption) via a crafted small message, which triggers a "tight" for loop. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-2312. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/capnproto/capnproto/commit/80149744bdafa3ad4eedc83f8ab675e27baee868 - https://github.com/capnproto/capnp
ps://github.com/capnproto/capnproto/commit/80149744bdafa3ad4eedc83f8ab675e27baee868 - https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-05-0-c%2B%2B-addl-cpu-amplification.md - http://www.openwall.com/lists/oss-security/2015/03/17/3 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780568
CVE ID: CVE-2015-2314 State: PUBLISHED Published: 2015-03-17T15:00:00 Last Updated: 2024-08-06T05:10:16.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the lang parameter in the HTTP Referer header in a wp-link-ajax action to comments/feed. Additional Analyst Notes: - CVE Program Container: References: - http://klikki.fi/adv/wpml.html - http://wpml.org/2015/03/wpml-security-update-bug-and-fix/ - http://www.osvdb.org/119541 - http://seclists.org/fulldisclosure/2015/Mar/71 - http://www.securityfocus.com/archive/1/534862/100/0/threaded - http://
http://seclists.org/fulldisclosure/2015/Mar/71 - http://www.securityfocus.com/archive/1/534862/100/0/threaded - http://packetstormsecurity.com/files/130810/WordPress-WPML-XSS-Deletion-SQL-Injection.html
CVE ID: CVE-2015-2315 State: PUBLISHED Published: 2015-03-17T15:00:00 Last Updated: 2024-08-06T05:10:16.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the target parameter in a reminder_popup action to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://klikki.fi/adv/wpml.html - http://wpml.org/2015/03/wpml-security-update-bug-and-fix/ - http://seclists.org/fulldisclosure/2015/Mar/71 - http://www.securityfocus.com/archive/1/534862/100/0/threaded - http://packetstormsecurity.com/files/130
re/2015/Mar/71 - http://www.securityfocus.com/archive/1/534862/100/0/threaded - http://packetstormsecurity.com/files/130810/WordPress-WPML-XSS-Deletion-SQL-Injection.html
CVE ID: CVE-2015-2316 State: PUBLISHED Published: 2015-03-25T14:00:00 Last Updated: 2024-08-06T05:10:16.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of service (infinite loop) by increasing the length of the input string. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2539-1 - http://www.securityfocus.com/bid/73322 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155421.html - http://www.oracle.com/technetwork/topics
p://lists.fedoraproject.org/pipermail/package-announce/2015-April/155421.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://lists.opensuse.org/opensuse-updates/2015-04/msg00001.html - https://www.djangoproject.com/weblog/2015/mar/18/security-releases/
CVE ID: CVE-2015-2317 State: PUBLISHED Published: 2015-03-25T14:00:00 Last Updated: 2024-08-06T05:10:16.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not properly validate URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a control character in a URL, as demonstrated by a \x08javascript: URL. Additional Analyst Notes: - CVE Program Container: References: - http://ubuntu.com/usn/usn-2539-1 - http://www.securityfocus.com/bid/73319 - http://www.debian.org/security/2015/dsa-3204 - http://lists.fedoraproject.
-1 - http://www.securityfocus.com/bid/73319 - http://www.debian.org/security/2015/dsa-3204 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155421.html - http://lists.opensuse.org/opensuse-updates/2015-09/msg00035.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:195 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00001.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160263.html - https://www.djangoproject.com/weblog/2015/mar/18/security-releases/
CVE ID: CVE-2015-2318 State: PUBLISHED Published: 2018-01-08T19:00:00 Last Updated: 2024-08-06T05:10:16.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate clients by leveraging missing handshake state validation, aka a "SMACK SKIP-TLS" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2547-1 - https://mitls.org/pages/attacks/SMACK#skip - https://bugzilla.redhat.com/show_bug.cgi?id=1202869 - http://www.securityfocus.com/bid/73253 - http://www.openwall.com/lists/oss-security/2015/03/17/9 - http:/
i?id=1202869 - http://www.securityfocus.com/bid/73253 - http://www.openwall.com/lists/oss-security/2015/03/17/9 - http://www.mono-project.com/news/2015/03/07/mono-tls-vulnerability/ - https://www.debian.org/security/2015/dsa-3202 - https://github.com/mono/mono/commit/1509226c41d74194c146deb173e752b8d3cdeec4
CVE ID: CVE-2015-2319 State: PUBLISHED Published: 2018-01-08T19:00:00 Last Updated: 2024-08-06T05:10:15.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TLS stack in Mono before 3.12.1 makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2547-1 - http://www.securityfocus.com/bid/73250 - https://bugzilla.redhat.com/show_bug.cgi?id=1202869 - https://mitls.org/pages/attacks/SMACK#freak - http://www.openwall.com/lists/oss-security/2015/03/17/9
g.cgi?id=1202869 - https://mitls.org/pages/attacks/SMACK#freak - http://www.openwall.com/lists/oss-security/2015/03/17/9 - http://www.mono-project.com/news/2015/03/07/mono-tls-vulnerability/ - https://www.debian.org/security/2015/dsa-3202 - https://github.com/mono/mono/commit/9c38772f094168d8bfd5bc73bf8925cd04faad10
CVE ID: CVE-2015-2320 State: PUBLISHED Published: 2018-01-08T19:00:00 Last Updated: 2024-08-06T05:10:16.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2547-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1202869 - http://www.securityfocus.com/bid/73256 - https://github.com/mono/mono/commit/b371da6b2d68b4cdd0f21d6342af6c42794f998b - http://www.openwall.com/lists/oss-security/2015/03/17/9 - http://www.mono-project.com/news/2015/03/07/mono-tls-vulne
b - http://www.openwall.com/lists/oss-security/2015/03/17/9 - http://www.mono-project.com/news/2015/03/07/mono-tls-vulnerability/ - https://www.debian.org/security/2015/dsa-3202
CVE ID: CVE-2015-2321 State: PUBLISHED Published: 2015-08-13T14:00:00 Last Updated: 2024-08-06T05:10:16.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Job Manager plugin 0.7.22 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the email field. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132931/WordPress-Job-Manager-0.7.22-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/37738/ - https://wpvulndb.com/vulnerabilities/8129
CVE ID: CVE-2015-2323 State: PUBLISHED Published: 2015-08-11T14:00:00 Last Updated: 2024-08-06T05:10:16.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: FortiOS 5.0.x before 5.0.12 and 5.2.x before 5.2.4 supports anonymous, export, RC4, and possibly other weak ciphers when using TLS to connect to FortiGuard servers, which allows man-in-the-middle attackers to spoof TLS content by modifying packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/FG-IR-15-021/ - http://www.securitytracker.com/id/1033092 - http://fortiguard.com/advisory/2015-07-24-weak-ciphers-suites-are-presented-towards-fortiguard-servers
CVE ID: CVE-2015-2324 State: PUBLISHED Published: 2018-02-19T19:00:00 Last Updated: 2024-08-06T05:10:15.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the filemanager in the Photo Gallery plugin before 1.2.13 for WordPress allows remote authenticated users with edit permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wp-plugins/photo-gallery/blob/master/readme.txt - https://fortiguard.com/zeroday/FG-VD-15-009
CVE ID: CVE-2015-2325 State: PUBLISHED Published: 2020-01-14T16:46:55 Last Updated: 2024-08-06T05:10:15.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression with a group containing a forward reference repeated a large number of times within a repeated outer group that has a zero minimum quantifier. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html - https://bugs.exim
VE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html - https://bugs.exim.org/show_bug.cgi?id=1591 - https://www.pcre.org/original/changelog.txt - https://fortiguard.com/zeroday/FG-VD-15-015
CVE ID: CVE-2015-2326 State: PUBLISHED Published: 2020-01-14T16:46:57 Last Updated: 2024-08-06T05:10:16.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular expression with a group containing both a forward referencing subroutine call and a recursive back reference, as demonstrated by "((?+1)(\1))/". Additional Analyst Notes: - CVE Program Container: References: - https://bugs.exim.org/show_bug.cgi?id=1592 - http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html - https://www.pcre.org/original/changelog
cgi?id=1592 - http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html - https://www.pcre.org/original/changelog.txt - https://fortiguard.com/zeroday/FG-VD-15-016
CVE ID: CVE-2015-2327 State: PUBLISHED Published: 2015-12-02T01:00:00 Last Updated: 2024-08-06T05:10:16.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: PCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ pattern and related patterns with certain internal recursive back references, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/11/29/1 - http://www.fortiguard.com/advisory/FG-VD-15-010
References: - http://www.openwall.com/lists/oss-security/2015/11/29/1 - http://www.fortiguard.com/advisory/FG-VD-15-010/ - http://www.securityfocus.com/bid/74924 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - https://bugs.exim.org/show_bug.cgi?id=1503 - https://jira.mongodb.org/browse/SERVER-17252 - http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup
CVE ID: CVE-2015-2328 State: PUBLISHED Published: 2015-12-02T01:00:00 Last Updated: 2024-08-06T05:10:16.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/11/29/1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096
all.com/lists/oss-security/2015/11/29/1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886 - http://rhn.redhat.com/errata/RHSA-2016-1025.html - http://www.securityfocus.com/bid/74924 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.fortiguard.com/advisory/FG-VD-15-014/ - https://jira.mongodb.org/browse/SERVER-17252 - https://bugs.exim.org/show_bug.cgi?id=1515 - http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup
CVE ID: CVE-2015-2329 State: PUBLISHED Published: 2018-02-08T23:00:00 Last Updated: 2024-08-06T05:10:16.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted order. Additional Analyst Notes: - CVE Program Container: References: - https://raw.githubusercontent.com/woocommerce/woocommerce/master/CHANGELOG.txt - https://fortiguard.com/zeroday/FG-VD-15-020
CVE ID: CVE-2015-2330 State: PUBLISHED Published: 2017-03-10T02:00:00 Last Updated: 2024-08-06T05:10:16.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, including, for example, secure cookies. Additional Analyst Notes: - CVE Program Container: References: - https://webkitgtk.org/security/WSA-2015-0002.html - http://www.openwall.com/lists/oss-security/2015/03/17/11 - https://bugs.webkit.org/show_bug.cgi?id=142244 - https://trac.webkit.org/changeset/181074 - https://security.gentoo.org/glsa/201706-15 - http://www.openwall.com/lists/oss-security/2015/03/18/4
CVE ID: CVE-2015-2331 State: PUBLISHED Published: 2015-03-30T10:00:00 Last Updated: 2024-08-06T05:10:16.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ZIP archive that contains many entries, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3198 - http://git.php.ne