Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-5689 State: PUBLISHED Published: 2015-09-20T20:00:00 Last Updated: 2024-08-06T06:59:04.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite (GSS) before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution (DS) before 7.6 HF4 12.0.0.7045 performs improper sign-extend operations before array-element accesses, which allows remote attackers to execute arbitrary code, cause a denial of service (application crash), or possibly obtain sensitive information via a crafted Ghost image. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-15-419/
e. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-15-419/ - http://www.securitytracker.com/id/1033577 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150902_00 - http://www.securityfocus.com/bid/76498
CVE ID: CVE-2015-5690 State: PUBLISHED Published: 2015-09-20T20:00:00 Last Updated: 2024-08-06T06:59:04.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging a "redirect." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033625 - http://www.securityfocus.com/bid/76725 - http://www.zerodayinitiative.com/advisories/ZDI-15-444/ - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advis
ive.com/advisories/ZDI-15-444/ - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150916_00
CVE ID: CVE-2015-5691 State: PUBLISHED Published: 2015-09-20T20:00:00 Last Updated: 2024-08-06T06:59:04.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP scripts in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, as demonstrated an attack against admin_messages.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033625 - http://www.securityfocus.com/bid/76728 - http://www.zerodayinitiative.com/advisories/ZDI-15-443/ - http://w
id/1033625 - http://www.securityfocus.com/bid/76728 - http://www.zerodayinitiative.com/advisories/ZDI-15-443/ - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150916_00
CVE ID: CVE-2015-5692 State: PUBLISHED Published: 2015-09-20T20:00:00 Last Updated: 2024-08-06T06:59:03.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary code by uploading a file with a safe extension and content type, and then leveraging an improper Sudo configuration to make this a setuid-root file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033625 - http://www.zerodayinitiative.com/advisories/ZDI-15-443/ - http://www.symantec.com/security_r
itytracker.com/id/1033625 - http://www.zerodayinitiative.com/advisories/ZDI-15-443/ - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150916_00 - http://www.securityfocus.com/bid/76726
CVE ID: CVE-2015-5693 State: PUBLISHED Published: 2015-09-20T20:00:00 Last Updated: 2024-08-06T06:59:04.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands via vectors related to "traffic capture." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76731 - http://www.securitytracker.com/id/1033625 - http://www.zerodayinitiative.com/advisories/ZDI-15-444/ - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory
444/ - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150916_00
CVE ID: CVE-2015-5694 State: PUBLISHED Published: 2019-11-22T14:13:24 Last Updated: 2024-08-06T06:59:03.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Designate does not enforce the DNS protocol limit concerning record set sizes Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2015-5694 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-5694 - http://www.openwall.com/lists/oss-security/2015/07/29/6 - http://www.openwall.com/lists/oss-security/2015/07/28/11
CVE ID: CVE-2015-5695 State: PUBLISHED Published: 2017-08-31T22:00:00 Last Updated: 2024-08-06T06:59:04.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted resource record set. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1245241 - http://www.openwall.com/lists/oss-security/2015/07/29/6 - https://launchpadlibrarian.net/211525251/bug-1471161
1245241 - http://www.openwall.com/lists/oss-security/2015/07/29/6 - https://launchpadlibrarian.net/211525251/bug-1471161-quotas-master.patch - https://bugs.launchpad.net/designate/+bug/1471161 - http://lists.openstack.org/pipermail/openstack/2015-July/013548.html - http://www.openwall.com/lists/oss-security/2015/07/28/11
CVE ID: CVE-2015-5696 State: PUBLISHED Published: 2015-08-14T18:00:00 Last Updated: 2024-08-06T06:59:03.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dell Netvault Backup before 10.0.5 allows remote attackers to cause a denial of service (crash) via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132928/Dell-Netvault-Backup-10.0.1.24-Denial-Of-Service.html - http://www.securitytracker.com/id/1033145 - http://www.securityfocus.com/archive/1/536111/100/0/threaded - https://www.exploit-db.com/exploits/37739/
CVE ID: CVE-2015-5697 State: PUBLISHED Published: 2015-08-31T10:00:00 Last Updated: 2024-08-06T06:59:03.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_bitmap_file function in drivers/md/md.c in the Linux kernel before 4.1.6 does not initialize a certain bitmap data structure, which allows local users to obtain sensitive information from kernel memory via a GET_BITMAP_FILE ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2748-1 - http://www.ubuntu.com/usn/USN-2751-1 - http://www.ubuntu.com/usn/USN-2731-1 - https://github.com/torvalds/linux/commit/b6878d9e03043695dbf3fa1caa6dfc09db225b16 - http://lists.opensuse.
/USN-2731-1 - https://github.com/torvalds/linux/commit/b6878d9e03043695dbf3fa1caa6dfc09db225b16 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html - http://www.openwall.com/lists/oss-security/2015/07/28/2 - http://www.securityfocus.com/bid/76066 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.ubuntu.com/usn/USN-2752-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1249011 - http://www.debian.org/security/2015/dsa-3329 - http://www.ubuntu.com/usn/USN-2732-1 - http://www.ubuntu.com/usn/USN-2749-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163661.html - http://www.kernel.org/pub/linux/kernel
tp://lists.fedoraproject.org/pipermail/package-announce/2015-August/163661.html - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b6878d9e03043695dbf3fa1caa6dfc09db225b16 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164137.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164193.html - http://www.securitytracker.com/id/1033211 - http://www.ubuntu.com/usn/USN-2777-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163711.html
CVE ID: CVE-2015-5698 State: PUBLISHED Published: 2015-08-30T00:00:00 Last Updated: 2024-08-06T06:59:03.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033419 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-134003.pdf - https://ics-cert.us-cert.gov/advisories/ICSA-15-239-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-1340
.pdf - https://ics-cert.us-cert.gov/advisories/ICSA-15-239-02 - https://cert-portal.siemens.com/productcert/pdf/ssa-134003.pdf - http://packetstormsecurity.com/files/172315/Siemens-SIMATIC-S7-1200-Cross-Site-Request-Forgery.html
CVE ID: CVE-2015-5699 State: PUBLISHED Published: 2017-10-20T21:00:00 Last Updated: 2024-08-06T06:59:03.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Switch Configuration Tools Backend (clcmd_server) in Cumulus Linux 2.5.3 and earlier allows local users to execute arbitrary commands via shell metacharacters in a cl-rctl command label. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Aug/23
CVE ID: CVE-2015-5700 State: PUBLISHED Published: 2017-08-25T18:00:00 Last Updated: 2024-08-06T06:59:03.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write to arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/07/30/6 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775139 - https://www.tug.org/svn/texlive/trunk/Build/source/texk/kpathsea/mktexlsr?view=log - https://www.tug.org/svn/texlive/trunk/Build/source/texk/kpathsea/mktexlsr?r1=19613&r2=22885 - https://bugzilla.redhat.com/show
//www.tug.org/svn/texlive/trunk/Build/source/texk/kpathsea/mktexlsr?r1=19613&r2=22885 - https://bugzilla.redhat.com/show_bug.cgi?id=1181167 - https://usn.ubuntu.com/3788-1/
CVE ID: CVE-2015-5701 State: PUBLISHED Published: 2017-08-25T18:00:00 Last Updated: 2024-08-06T06:59:04.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to write to arbitrary files via a symlink attack. NOTE: this vulnerability exists due to the reversion of a fix of CVE-2015-5700. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/07/30/6 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775139 - https://www.tug.org/svn/texlive/trunk/Build/source/texk/kpathsea/mktexlsr?view=log - https://www.tug.org/svn/texlive/trunk/Buil
/www.tug.org/svn/texlive/trunk/Build/source/texk/kpathsea/mktexlsr?view=log - https://www.tug.org/svn/texlive/trunk/Build/source/texk/kpathsea/mktexlsr?r1=19613&r2=22885 - https://bugzilla.redhat.com/show_bug.cgi?id=1181167
CVE ID: CVE-2015-5703 State: PUBLISHED Published: 2015-09-28T16:00:00 Last Updated: 2024-08-06T06:59:03.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the public key discovery API call in Open-Xchange OX Guard before 2.0.0-rev8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/536523/100/0/threaded - http://software.open-xchange.com/products/guard/doc/Release_Notes_for_Patch_Release_2626_7.6.2_2015-08-03.pdf - http://packetstormsecurity.com/files/133672/Guard-2.0.0-rev7-SQL-Injection.html
CVE ID: CVE-2015-5704 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-06T06:59:04.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163710.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794260 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163705.html - http://www.securityfocus.com/bid/76143 - https://bugzilla.redhat.com/show_bug.cgi?id=1249635 - http://www.openwall.com/lists/oss-sec
ecurityfocus.com/bid/76143 - https://bugzilla.redhat.com/show_bug.cgi?id=1249635 - http://www.openwall.com/lists/oss-security/2015/08/01/7 - https://anonscm.debian.org/cgit/collab-maint/devscripts.git/commit/?id=c0687bcde23108dd42e146573c368b6905e6b8e8
CVE ID: CVE-2015-5705 State: PUBLISHED Published: 2017-09-06T21:00:00 Last Updated: 2024-08-06T06:59:04.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename. Additional Analyst Notes: - CVE Program Container: References: - https://anonscm.debian.org/cgit/collab-maint/devscripts.git/commit/?id=d8f8fa1d8e4151fa62997cb74403f97ab0d7e1a2 - https://bugzilla.redhat.com/show_bug.cgi?id=1249645 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163710.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794260 -
ject.org/pipermail/package-announce/2015-August/163710.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794260 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163705.html - http://www.openwall.com/lists/oss-security/2015/08/01/7
CVE ID: CVE-2015-5706 State: PUBLISHED Published: 2015-08-31T10:00:00 Last Updated: 2024-08-06T06:59:03.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the path_openat function in fs/namei.c in the Linux kernel 3.x and 4.x before 4.0.4 allows local users to cause a denial of service or possibly have unspecified other impact via O_TMPFILE filesystem operations that leverage a duplicate cleanup operation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-01-01.html - http://twitter.com/grsecurity/statuses/597127122910490624 - http://www.ubuntu.com/usn/USN-2680-1 - http://www.kernel.
- http://twitter.com/grsecurity/statuses/597127122910490624 - http://www.ubuntu.com/usn/USN-2680-1 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.4 - https://bugzilla.redhat.com/show_bug.cgi?id=1250047 - http://www.securityfocus.com/bid/76142 - http://www.debian.org/security/2015/dsa-3329 - https://github.com/torvalds/linux/commit/f15133df088ecadd141ea1907f2c96df67c729f0 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f15133df088ecadd141ea1907f2c96df67c729f0 - http://www.ubuntu.com/usn/USN-2681-1 - http://www.openwall.com/lists/oss-security/2015/08/01/5
CVE ID: CVE-2015-5707 State: PUBLISHED Published: 2015-10-19T10:00:00 Last Updated: 2024-08-06T06:59:04.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2738-1 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00030.html - http://www.ubuntu.com/usn/USN-2733-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux
015-11/msg00030.html - http://www.ubuntu.com/usn/USN-2733-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdc81f45e9f57858da6351836507fbcf1b7583ee - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00029.html - http://www.ubuntu.com/usn/USN-2750-1 - http://www.ubuntu.com/usn/USN-2737-1 - https://source.android.com/security/bulletin/2017-07-01 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html - http://www.debian.org/security/2015/dsa-3329 - http://www.securitytracker.com/id/1033521 - https://bugzilla.redhat.com/show_bug.cgi?id=1250030 - https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee - ht
hat.com/show_bug.cgi?id=1250030 - https://github.com/torvalds/linux/commit/fdc81f45e9f57858da6351836507fbcf1b7583ee - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=451a2886b6bf90e2fb378f7c46c655450fb96e81 - http://www.ubuntu.com/usn/USN-2760-1 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html - http://www.ubuntu.com/usn/USN-2759-1 - https://github.com/torvalds/linux/commit/451a2886b6bf90e2fb378f7c46c655450fb96e81 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.ht
nsuse-security-announce/2015-11/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00027.html - http://www.ubuntu.com/usn/USN-2734-1 - http://www.openwall.com/lists/oss-security/2015/08/01/6 - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00031.html - http://www.securityfocus.com/bid/76145
CVE ID: CVE-2015-5711 State: PUBLISHED Published: 2015-09-29T18:00:00 Last Updated: 2024-08-06T06:59:04.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: TIBCO Managed File Transfer Internet Server before 7.2.5, Managed File Transfer Command Center before 7.2.5, Slingshot before 1.9.4, and Vault before 2.0.1 allow remote authenticated users to obtain sensitive information via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/assets/blt423f06fbac6ee0c6/2015-003-advisory.txt - http://www.tibco.com/mk/advisory.jsp - http://www.securitytracker.com/id/1033678
CVE ID: CVE-2015-5712 State: PUBLISHED Published: 2015-10-28T10:00:00 Last Updated: 2024-08-06T06:59:04.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1 and Spotfire Analytics Platform before 7.0.2 for AWS Marketplace allow remote authenticated users to obtain sensitive system information by visiting an unspecified URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034011 - http://www.tibco.com/mk/advisory.jsp - http://www.tibco.com/assets/blt3a3a55ab42f2f5cd/2015-
itytracker.com/id/1034011 - http://www.tibco.com/mk/advisory.jsp - http://www.tibco.com/assets/blt3a3a55ab42f2f5cd/2015-004-advisory.txt
CVE ID: CVE-2015-5713 State: PUBLISHED Published: 2015-10-28T10:00:00 Last Updated: 2024-08-06T06:59:04.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1 and Spotfire Analytics Platform before 7.0.2 for AWS Marketplace allow remote attackers to obtain sensitive log information by visiting an unspecified URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034011 - http://www.tibco.com/mk/advisory.jsp - http://www.tibco.com/assets/blt3a3a55ab42f2f5cd/2015-004-advisory.
m/id/1034011 - http://www.tibco.com/mk/advisory.jsp - http://www.tibco.com/assets/blt3a3a55ab42f2f5cd/2015-004-advisory.txt
CVE ID: CVE-2015-5714 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T06:59:04.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web script or HTML by leveraging the mishandling of unclosed HTML elements during processing of shortcode tags. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8186 - https://codex.wordpress.org/Version_4.3.1 - http://www.debian.org/security/2015/dsa-3375 - https://github.com/WordPress/WordPress/commit/f72b21af23da6b6d54208e5c1d65ececdaa109c8 - https://wordpress.or
dsa-3375 - https://github.com/WordPress/WordPress/commit/f72b21af23da6b6d54208e5c1d65ececdaa109c8 - https://wordpress.org/news/2015/09/wordpress-4-3-1/ - http://www.securitytracker.com/id/1033979 - http://www.debian.org/security/2015/dsa-3383 - https://security-tracker.debian.org/tracker/CVE-2015-5714 - http://www.securityfocus.com/bid/76745
CVE ID: CVE-2015-5715 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T06:59:04.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 allows remote authenticated users to bypass intended access restrictions, and arrange for a private post to be published and sticky, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76748 - https://security-tracker.debian.org/tracker/CVE-2015-5715 - https://codex.wordpress.org/Version_4.3.1 - http://www.debian.org/security/2015/dsa-3375 -
.org/tracker/CVE-2015-5715 - https://codex.wordpress.org/Version_4.3.1 - http://www.debian.org/security/2015/dsa-3375 - https://wordpress.org/news/2015/09/wordpress-4-3-1/ - https://github.com/WordPress/WordPress/commit/9c57f3a4291f2311ae05f22c10eedeb0f69337ab - https://wpvulndb.com/vulnerabilities/8188 - http://www.securitytracker.com/id/1033979 - http://www.debian.org/security/2015/dsa-3383
CVE ID: CVE-2015-5717 State: PUBLISHED Published: 2015-08-31T10:00:00 Last Updated: 2024-08-06T06:59:04.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Siemens COMPAS Mobile application before 1.6 for Android does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-504631.pdf
CVE ID: CVE-2015-5718 State: PUBLISHED Published: 2015-08-12T14:00:00 Last Updated: 2024-08-06T06:59:04.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the handle_debug_network function in the manager in Websense Content Gateway before 8.0.0 HF02 allows remote administrators to cause a denial of service (crash) via a crafted diagnostic command line request to submit_net_debug.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/kbarticle/v8-0-0-About-Hotfix-02-for-Websense-Content-Gateway - http://packetstormsecurity.com/files/132968/Websense-Triton-Content-Manager-8.0.0-Build-1165-Buffer-