Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-2014 State: PUBLISHED Published: 2015-08-23T01:00:00 Last Updated: 2024-08-06T05:02:42.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the web server in IBM Domino 8.5 before 8.5.3 FP6 IF9 and 9.0 before 9.0.1 FP4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or cross-site scripting (XSS) attacks via a crafted URL, aka SPR SJAR9DNGDA. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033271 - http://www-01.ibm.com/support/docview.wss?uid=swg21963016
CVE ID: CVE-2015-2015 State: PUBLISHED Published: 2015-08-23T01:00:00 Last Updated: 2024-08-06T05:02:43.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pubnames.ntf (aka the Directory template) in the web server in IBM Domino before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH8WBPRN. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033271 - http://www-01.ibm.com/support/docview.wss?uid=swg21963016
CVE ID: CVE-2015-2016 State: PUBLISHED Published: 2015-10-04T01:00:00 Last Updated: 2024-08-06T05:02:43.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated users to execute arbitrary commands with root privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21965813
CVE ID: CVE-2015-2017 State: PUBLISHED Published: 2015-11-08T22:00:00 Last Updated: 2024-08-06T05:02:42.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0.0.12, and 8.5 before 8.5.5.8 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/78457 - http://www.securitytracker.com/id/1034096 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI45266 - http://www-01.ibm.com/support/docview.wss?ui
om/id/1034096 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI45266 - http://www-01.ibm.com/support/docview.wss?uid=swg21966837
CVE ID: CVE-2015-2018 State: PUBLISHED Published: 2015-08-23T15:00:00 Last Updated: 2024-08-06T05:02:42.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Integration Bus 9 and 10 before 10.0.0.1 and WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.7 do not ensure that the correct security profile is selected, which allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21961734 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT07773
CVE ID: CVE-2015-2019 State: PUBLISHED Published: 2015-06-28T15:00:00 Last Updated: 2024-08-06T05:02:42.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 does not prevent caching of documents retrieved in SSL sessions, which allows physically proximate attackers to obtain sensitive information by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032734 - http://www-01.ibm.com/support/docview.wss?uid=swg21960659 - http://www.securityf
://www.securitytracker.com/id/1032734 - http://www-01.ibm.com/support/docview.wss?uid=swg21960659 - http://www.securityfocus.com/bid/75437
CVE ID: CVE-2015-2020 State: PUBLISHED Published: 2018-03-29T18:00:00 Last Updated: 2024-08-06T05:02:43.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MyScript SDK before 1.3 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function. Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/system/files/conference/woot15/woot15-paper-peles.pdf - https://alephsecurity.com/vulns/aleph-2015006
CVE ID: CVE-2015-2023 State: PUBLISHED Published: 2016-01-02T21:00:00 Last Updated: 2024-08-06T05:02:42.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IBM i Access 7.1 on Windows allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=nas8N1020996 - https://www.exploit-db.com/exploits/38751/ - http://www-01.ibm.com/support/docview.wss?uid=swg1SI57907
CVE ID: CVE-2015-2025 State: PUBLISHED Published: 2015-10-04T01:00:00 Last Updated: 2024-08-06T05:02:42.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21966044 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI44105 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI44098
CVE ID: CVE-2015-2026 State: PUBLISHED Published: 2015-10-04T01:00:00 Last Updated: 2024-08-06T05:02:42.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21966044 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI44105 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI44098
CVE ID: CVE-2015-2027 State: PUBLISHED Published: 2015-10-04T01:00:00 Last Updated: 2024-08-06T05:02:42.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 improperly performs logout actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21966044 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI44105 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI44098
CVE ID: CVE-2015-2028 State: PUBLISHED Published: 2015-10-04T01:00:00 Last Updated: 2024-08-06T05:02:42.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21966044 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI44105 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI44098
CVE ID: CVE-2015-2029 State: PUBLISHED Published: 2015-10-04T01:00:00 Last Updated: 2024-08-06T05:02:43.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote attackers to hijack web sessions via a session identifier. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21966044 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI44105 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI44098
CVE ID: CVE-2015-2030 State: PUBLISHED Published: 2015-10-04T01:00:00 Last Updated: 2024-08-06T05:02:42.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 has an improper account-lockout setting, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21966044 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI44105 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI44098
CVE ID: CVE-2015-2031 State: PUBLISHED Published: 2015-10-04T01:00:00 Last Updated: 2024-08-06T05:02:42.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21966044 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI44105 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI44098
CVE ID: CVE-2015-2033 State: PUBLISHED Published: 2015-02-20T11:00:00 Last Updated: 2024-08-06T05:02:42.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Anyterm Daemon in Infoblox Network Automation NetMRI before NETMRI-23483 allows remote attackers to execute arbitrary commands with root privileges via a crafted terminal/anyterm-module request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73423 - http://unsecurityresearch.com/index.php?option=com_content&view=article&id=46&Itemid=53 - https://support.infoblox.com/app/answers/detail/a_id/3666/kw/NETMRI-23483
CVE ID: CVE-2015-2034 State: PUBLISHED Published: 2015-02-20T16:00:00 Last Updated: 2024-08-06T05:02:43.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administrative backend in Piwigo before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://sroesemann.blogspot.de/2015/01/sroeadv-2015-06.html - http://www.securityfocus.com/bid/72690 - http://seclists.org/fulldisclosure/2015/Feb/73 - http://packetstormsecurity.com/files/130432/CMS-Piwigo-2.7.3-Cross-Site-Scripting-SQL-Injection.html - http://piwigo.org/r
tp://packetstormsecurity.com/files/130432/CMS-Piwigo-2.7.3-Cross-Site-Scripting-SQL-Injection.html - http://piwigo.org/releases/2.7.4 - http://piwigo.org/forum/viewtopic.php?id=25179 - http://sroesemann.blogspot.de/2015/02/report-for-advisory-sroeadv-2015-06.html
CVE ID: CVE-2015-2035 State: PUBLISHED Published: 2015-02-20T16:00:00 Last Updated: 2024-08-06T05:02:43.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the administrative backend in Piwigo before 2.7.4 allows remote administrators to execute arbitrary SQL commands via the user parameter in the history page to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://sroesemann.blogspot.de/2015/01/sroeadv-2015-06.html - http://seclists.org/fulldisclosure/2015/Feb/73 - http://packetstormsecurity.com/files/130432/CMS-Piwigo-2.7.3-Cross-Site-Scripting-SQL-Injection.html - http://piwigo.org/releases/2.7.4 - http://piwigo.org/
/130432/CMS-Piwigo-2.7.3-Cross-Site-Scripting-SQL-Injection.html - http://piwigo.org/releases/2.7.4 - http://piwigo.org/forum/viewtopic.php?id=25179 - http://www.securityfocus.com/bid/72689 - http://sroesemann.blogspot.de/2015/02/report-for-advisory-sroeadv-2015-06.html
CVE ID: CVE-2015-2039 State: PUBLISHED Published: 2015-02-20T16:00:00 Last Updated: 2024-08-06T05:02:43.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Acobot Live Chat & Contact Form plugin 2.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings or (2) conduct cross-site scripting (XSS) attacks via the acobot_token parameter in the acobot page to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100813 - https://exchange.xforce.ibmcloud.c
ontainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100814 - http://packetstormsecurity.com/files/130306/WordPress-Acobot-Live-Chat-And-Contact-Form-2.0-CSRF-XSS.html
CVE ID: CVE-2015-2040 State: PUBLISHED Published: 2015-02-20T16:00:00 Last Updated: 2024-08-06T05:02:42.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin 2.8.26 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit_time parameter in the CF7DBPluginSubmissions page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130311/WordPress-Contact-Form-DB-2.8.26-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/100818
CVE ID: CVE-2015-2041 State: PUBLISHED Published: 2015-04-21T10:00:00 Last Updated: 2024-08-06T05:02:43.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/llc/sysctl_net_llc.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive information from kernel memory or possibly have unspecified other impact by accessing a sysctl entry. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/6b8d9117ccb4f81b1244aafa7bc70ef8fa45fc49 - http://www.securityfocus.com/bid/72729 - http://www.ubuntu.com/usn/USN-2562-1 - http://www.ubuntu.com/usn/USN-2565-1 - h
http://www.securityfocus.com/bid/72729 - http://www.ubuntu.com/usn/USN-2562-1 - http://www.ubuntu.com/usn/USN-2565-1 - http://www.ubuntu.com/usn/USN-2561-1 - http://www.ubuntu.com/usn/USN-2564-1 - http://www.ubuntu.com/usn/USN-2563-1 - http://www.debian.org/security/2015/dsa-3237 - https://bugzilla.redhat.com/show_bug.cgi?id=1195350 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html - http://www.ubuntu.com/usn/USN-2560-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6b8d9117ccb4f81b1244aafa7bc70ef8fa45fc49 - http://www.openwall.com/lists/oss-security/2015
/linux-2.6.git%3Ba=commit%3Bh=6b8d9117ccb4f81b1244aafa7bc70ef8fa45fc49 - http://www.openwall.com/lists/oss-security/2015/02/20/19 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2015-2042 State: PUBLISHED Published: 2015-04-21T10:00:00 Last Updated: 2024-08-06T05:02:43.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/rds/sysctl.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive information from kernel memory or possibly have unspecified other impact by accessing a sysctl entry. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2562-1 - http://www.ubuntu.com/usn/USN-2565-1 - http://www.ubuntu.com/usn/USN-2561-1 - http://www.ubuntu.com/usn/USN-2564-1 - http://www.ubuntu.com/usn/USN-2563-1 - http://www.securi
ntu.com/usn/USN-2561-1 - http://www.ubuntu.com/usn/USN-2564-1 - http://www.ubuntu.com/usn/USN-2563-1 - http://www.securityfocus.com/bid/72730 - http://www.debian.org/security/2015/dsa-3237 - https://bugzilla.redhat.com/show_bug.cgi?id=1195355 - http://www.ubuntu.com/usn/USN-2560-1 - http://www.openwall.com/lists/oss-security/2015/02/20/20 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=db27ebb111e9f69efece08e4cb6a34ff980f8896 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html - https://github.com/torvalds/linux/commit/db27ebb111e9f69efece08e4cb6a34ff980f8896
CVE ID: CVE-2015-2043 State: PUBLISHED Published: 2015-02-25T22:00:00 Last Updated: 2024-08-06T05:02:43.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web script or HTML via the (1) bt, (2) variable, or (3) et parameter to myspeed/db/historyitem. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130490/MyConnection-Server-8.2b-Cross-Site-Scripting.html
CVE ID: CVE-2015-2044 State: PUBLISHED Published: 2015-03-12T14:00:00 Last Updated: 2024-08-06T05:02:43.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: The emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly initialize data, which allow local HVM guest users to obtain sensitive information via vectors involving an unsupported access size. Additional Analyst Notes: - CVE Program Container: References: - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm - https://security.gentoo.org/glsa/201504-04 - http://support.citrix.com/article/CTX200484 - http://lists.fedoraproject.org/pipermail/package-an
o.org/glsa/201504-04 - http://support.citrix.com/article/CTX200484 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152588.html - http://xenbits.xen.org/xsa/advisory-121.html - http://www.securitytracker.com/id/1031836 - http://www.securityfocus.com/bid/72954 - http://www.debian.org/security/2015/dsa-3181 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152483.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html - http://www.securitytracker.com/id/1031806
CVE ID: CVE-2015-2045 State: PUBLISHED Published: 2015-03-12T14:00:00 Last Updated: 2024-08-06T05:02:43.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm - https://security.gentoo.org/glsa/201504-04 - http://support.citrix.com/article/CTX200484 - http://www.securityfocus.com/bid/72955 - http://lists.fedoraproject.org/pipermail/
upport.citrix.com/article/CTX200484 - http://www.securityfocus.com/bid/72955 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152588.html - http://www.debian.org/security/2015/dsa-3181 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152483.html - http://www.securitytracker.com/id/1031837 - http://xenbits.xen.org/xsa/advisory-122.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html - http://www.securitytracker.com/id/1031806
CVE ID: CVE-2015-2046 State: PUBLISHED Published: 2017-08-28T15:00:00 Last Updated: 2024-08-06T05:02:43.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MantisBT 1.2.13 and later before 1.2.20. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1191130 - http://www.openwall.com/lists/oss-security/2015/02/21/2 - http://www.openwall.com/lists/oss-security/2015/02/21/1
CVE ID: CVE-2015-2047 State: PUBLISHED Published: 2015-02-23T17:00:00 Last Updated: 2024-08-06T05:02:42.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rsaauth extension in TYPO3 4.3.0 through 4.3.14, 4.4.0 through 4.4.15, 4.5.0 through 4.5.39, and 4.6.0 through 4.6.18, when configured for the frontend, allows remote attackers to bypass authentication via a password that is casted to an empty value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72763 - https://review.typo3.org/#/c/37013/ - http://lists.opensuse.org/opensuse-updates/2016-08/msg00106.html - http://www.securitytracker.com/id/1031824 - http://www.openwall.co
opensuse.org/opensuse-updates/2016-08/msg00106.html - http://www.securitytracker.com/id/1031824 - http://www.openwall.com/lists/oss-security/2015/02/22/4 - http://www.openwall.com/lists/oss-security/2015/02/22/8 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-001/ - http://www.debian.org/security/2015/dsa-3164
CVE ID: CVE-2015-2048 State: PUBLISHED Published: 2015-02-23T17:00:00Z Last Updated: 2024-09-16T17:38:32.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10049
CVE ID: CVE-2015-2049 State: PUBLISHED Published: 2015-02-23T17:00:00 Last Updated: 2024-08-06T05:02:43.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39192/ - http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10049 - http://www.kb.cert.org/vuls/id/377348
CVE ID: CVE-2015-2050 State: PUBLISHED Published: 2015-02-23T17:00:00 Last Updated: 2024-08-06T05:02:43.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DAP-1320 Rev Ax with firmware before 1.21b05 allows attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10050 - http://www.securityfocus.com/bid/73143 - http://www.kb.cert.org/vuls/id/184100
CVE ID: CVE-2015-2051 State: PUBLISHED Published: 2015-02-23T17:00:00.000Z Last Updated: 2025-10-22T00:05:33.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10051 - https://www.exploit-db.com/exploits/37171/ - http://www.securityfocus.com/bid/72623 - http://www.securityfocus.com/bid/74870 - https://supportannouncement.us.dlink.com/
p://www.securityfocus.com/bid/72623 - http://www.securityfocus.com/bid/74870 - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10282