Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-1747 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:15.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1732, CVE-2015-1742, CVE-2015-1750, and CVE-2015-1753. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056 - http://www.zerodayinitiative.com/advisories/ZDI-15-250 - http://www.securityf
-updates/securitybulletins/2015/ms15-056 - http://www.zerodayinitiative.com/advisories/ZDI-15-250 - http://www.securityfocus.com/bid/74986 - http://www.securitytracker.com/id/1032521
CVE ID: CVE-2015-1748 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:15.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-1743. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056 - http://www.zerodayinitiative.com/advisories/ZDI-15-251 - http://www.securityfocus.com/bid/74997 - http://www.securitytracker.com/id/1032521
CVE ID: CVE-2015-1749 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-1750 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:15.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1732, CVE-2015-1742, CVE-2015-1747, and CVE-2015-1753. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74987 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056 - http://www.securitytracker.com/id/10
CVE ID: CVE-2015-1751 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:15.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056 - http://www.securityfocus.com/bid/74988 - https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1098 - http://
.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1098 - http://www.securitytracker.com/id/1032521
CVE ID: CVE-2015-1752 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:15.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1741. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74989 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056 - http://www.securitytracker.com/id/1032521
CVE ID: CVE-2015-1753 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:16.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1732, CVE-2015-1742, CVE-2015-1747, and CVE-2015-1750. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056 - http://www.securitytracker.com/id/1032521 - http://www.securityfocus.com/bid/
-updates/securitybulletins/2015/ms15-056 - http://www.securitytracker.com/id/1032521 - http://www.securityfocus.com/bid/74990
CVE ID: CVE-2015-1754 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:16.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056 - http://www.securityfocus.com/bid/74991 - http://www.securitytracker.com/id/1032521
CVE ID: CVE-2015-1755 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:16.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1731, CVE-2015-1736, and CVE-2015-1737. Additional Analyst Notes: - CVE Program Container: References: - https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1204 - https://docs.microsoft.com/en-us/security-upd
security-intelligence/vulnerability-reports/articles/index.xhtml?id=1204 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056 - http://www.securitytracker.com/id/1032521 - http://www.zerodayinitiative.com/advisories/ZDI-15-254 - http://www.securityfocus.com/bid/74992
CVE ID: CVE-2015-1756 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:16.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted web site that is accessed with the F12 Developer Tools feature of Internet Explorer, aka "Microsoft Common Control Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.micr
ontrol Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-060 - http://www.securityfocus.com/bid/75017 - http://www.securitytracker.com/id/1032524
CVE ID: CVE-2015-1757 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:15.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in adfs/ls in Active Directory Federation Services (AD FS) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 allows remote attackers to inject arbitrary web script or HTML via the wct parameter, aka "ADFS XSS Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75023 - http://www.securitytracker.com/id/1032526 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-0
p://www.securitytracker.com/id/1032526 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-062
CVE ID: CVE-2015-1758 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:15.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the LoadLibrary function in the kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a Trojan horse DLL in an unspecified directory, aka "Windows LoadLibrary EoP Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75004 - http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000086.html - https://docs.microsof
://www.securityfocus.com/bid/75004 - http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000086.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-063 - http://jvn.jp/en/jp/JVN18146081/index.html - http://www.securitytracker.com/id/1032527
CVE ID: CVE-2015-1759 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:16.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032523 - http://www.securityfocus.com/bid/75014 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-059
CVE ID: CVE-2015-1760 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:15.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032523 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-059 - http://www.securityfocus.com/bid/75015
CVE ID: CVE-2015-1761 State: PUBLISHED Published: 2015-07-14T23:00:00 Last Updated: 2024-08-06T04:54:16.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 uses an incorrect class during casts of unspecified pointers, which allows remote authenticated users to gain privileges by leveraging certain write access, aka "SQL Server Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032893 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-058 - https://h20566.www2.hpe.com/portal/site/
s://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-058 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05382740
CVE ID: CVE-2015-1762 State: PUBLISHED Published: 2015-07-14T23:00:00 Last Updated: 2024-08-06T04:54:16.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014, when transactional replication is configured, does not prevent use of uninitialized memory in unspecified function calls, which allows remote authenticated users to execute arbitrary code by leveraging certain permissions and making a crafted query, as demonstrated by the VIEW SERVER STATE permission, aka "SQL Server Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytra
e Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032893 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-058
CVE ID: CVE-2015-1763 State: PUBLISHED Published: 2015-07-14T23:00:00 Last Updated: 2024-08-06T04:54:15.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 does not prevent use of uninitialized memory in certain attempts to execute virtual functions, which allows remote authenticated users to execute arbitrary code via a crafted query, aka "SQL Server Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032893 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-058
CVE ID: CVE-2015-1764 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:15.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy and send HTTP traffic to intranet servers via a crafted request, related to a Server-Side Request Forgery (SSRF) issue, aka "Exchange Server-Side Request Forgery Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-064 - http://www.securityfocus.com/bid/75007 - http://www.securitytracke
us/security-updates/securitybulletins/2015/ms15-064 - http://www.securityfocus.com/bid/75007 - http://www.securitytracker.com/id/1032528
CVE ID: CVE-2015-1765 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:16.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to read the browser history via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74994 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056 - http://www.securitytracker.com/id/1032521
CVE ID: CVE-2015-1766 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:16.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1735, CVE-2015-1740, CVE-2015-1744, and CVE-2015-1745. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74993 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056 - http://www.securitytracker
d/74993 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056 - http://www.securitytracker.com/id/1032521
CVE ID: CVE-2015-1767 State: PUBLISHED Published: 2015-07-14T21:00:00 Last Updated: 2024-08-06T04:54:16.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2401 and CVE-2015-2408. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032894 - http://www.zerodayinitiative.com/advisories/ZDI-15-568 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065
CVE ID: CVE-2015-1768 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:16.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka "Win32k Memory Corruption Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75024 - http://www.securitytracker.com/id/1032525 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061
CVE ID: CVE-2015-1769 State: PUBLISHED Published: 2015-08-15T00:00:00.000Z Last Updated: 2025-10-21T23:55:58.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Mount Manager Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://blogs.technet.com/b/srd/archive/2015/08/11/defendin
CVE Program Container: - CISA ADP Vulnrichment: References: - http://blogs.technet.com/b/srd/archive/2015/08/11/defending-against-cve-2015-1769-a-logical-issue-exploited-via-a-malicious-usb-stick.aspx - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-085 - http://www.securitytracker.com/id/1033244
CVE ID: CVE-2015-1770 State: PUBLISHED Published: 2015-06-10T01:00:00.000Z Last Updated: 2025-10-21T23:56:00.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/75016 - http://www.securitytracker.com/id/1032523 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-059
CVE ID: CVE-2015-1771 State: PUBLISHED Published: 2015-06-10T01:00:00 Last Updated: 2024-08-06T04:54:15.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allows remote attackers to hijack the authentication of arbitrary users, aka "Exchange Cross-Site Request Forgery Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75011 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-064 - http://www.securitytracker.com/id/1032528
CVE ID: CVE-2015-1772 State: PUBLISHED Published: 2015-12-21T11:00:00 Last Updated: 2024-08-06T04:54:16.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, mishandles simple unauthenticated and anonymous bind configurations, which allows remote attackers to bypass authentication via a crafted LDAP request. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.apache.org/mod_mbox/www-announce/201505.mbox/%3CCAOpgucy52yzNN1FaRcxwhZmx8ZtNRjmK6V0Bxk4svAD-R1q70Q%40mail.gmail.com%3E
.apache.org/mod_mbox/www-announce/201505.mbox/%3CCAOpgucy52yzNN1FaRcxwhZmx8ZtNRjmK6V0Bxk4svAD-R1q70Q%40mail.gmail.com%3E - http://www-01.ibm.com/support/docview.wss?uid=swg21969546 - https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html - http://www.securitytracker.com/id/1034365
CVE ID: CVE-2015-1773 State: PUBLISHED Published: 2015-04-08T01:00:00 Last Updated: 2024-08-06T04:54:15.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in asdoc/templates/index.html in Apache Flex before 4.14.1 allows remote attackers to inject arbitrary web script or HTML by providing a crafted URI to JavaScript code generated by the asdoc component. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Apr/42 - http://www.securityfocus.com/bid/73954 - https://helpx.adobe.com/security/products/flex/apsb15-08.html - http://www.securitytracker.com/id/1032107
CVE ID: CVE-2015-1774 State: PUBLISHED Published: 2015-04-28T14:00:00 Last Updated: 2024-08-06T04:54:16.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032205 - http://www.debian.org/security/2015/dsa-3236 - http://www.openoffice.org/security/cves/CVE-2015-1774.html - http://lists.fedoraproject.org/pipermail/package-an
-3236 - http://www.openoffice.org/security/cves/CVE-2015-1774.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156582.html - http://www.securitytracker.com/id/1032206 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157550.html - http://www.securityfocus.com/bid/74338 - https://www.libreoffice.org/about-us/security/advisories/cve-2015-1774/ - http://rhn.redhat.com/errata/RHSA-2015-1458.html - http://lists.opensuse.org/opensuse-updates/2015-05/msg00015.html - https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1094 - http://www.ubuntu.com/usn/USN-2578-1 - https://security.gentoo.org
/vulnerability-reports/articles/index.xhtml?id=1094 - http://www.ubuntu.com/usn/USN-2578-1 - https://security.gentoo.org/glsa/201603-05
CVE ID: CVE-2015-1775 State: PUBLISHED Published: 2015-11-02T19:00:00 Last Updated: 2024-08-06T04:54:15.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call. Additional Analyst Notes: - CVE Program Container: References: - https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities - http://www.openwall.com/lists/oss-security/2015/10/13/2
CVE ID: CVE-2015-1776 State: PUBLISHED Published: 2016-04-19T21:00:00 Last Updated: 2024-08-06T04:54:15.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials file on disk when the Intermediate data encryption feature is enabled, which allows local users to obtain sensitive information by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.apache.org/mod_mbox/hadoop-general/201602.mbox/%3CCAGCyb56CPgQMcxZ7jP87SfM5OKGx+E49DtrzCTQ6+nQf2a4nSA%40mail.gmail.com%3E - http://www.securityfocus.com/bid/832
2.mbox/%3CCAGCyb56CPgQMcxZ7jP87SfM5OKGx+E49DtrzCTQ6+nQf2a4nSA%40mail.gmail.com%3E - http://www.securityfocus.com/bid/83259
CVE ID: CVE-2015-1777 State: PUBLISHED Published: 2018-04-12T15:00:00 Last Updated: 2024-08-06T04:54:15.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: rhnreg_ks in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Gluster Storage 2.1 and Enterprise Linux (RHEL) 5, 6, and 7 does not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to prevent system registration via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72943 - https://bugzilla.redhat.com/show_bug.cgi?id=1198740 - http://www.openwall.com/lists/oss-security/2015/03/04/7