Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ts/oss-security/2016/02/18/8 - http://www.openwall.com/lists/oss-security/2016/02/17/5 - https://github.com/umbraco/Umbraco-CMS/commit/924a016ffe7ae7ea6d516c07a7852f0095eddbce - http://www.openwall.com/lists/oss-security/2016/02/16/10
CVE ID: CVE-2015-8814 State: PUBLISHED Published: 2017-03-03T16:00:00 Last Updated: 2024-08-06T08:29:22.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Umbraco before 7.4.0 allows remote attackers to bypass anti-forgery security measures and conduct cross-site request forgery (CSRF) attacks as demonstrated by editing user account information in the templates.asmx.cs file. Additional Analyst Notes: - CVE Program Container: References: - http://issues.umbraco.org/issue/U4-7459 - https://github.com/umbraco/Umbraco-CMS/commit/18c3345e47663a358a042652e697b988d6a380eb - http://www.openwall.com/lists/oss-security/2016/02/16/10
CVE ID: CVE-2015-8815 State: PUBLISHED Published: 2017-03-03T16:00:00 Last Updated: 2024-08-06T08:29:22.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Umbraco before 7.4.0 allow remote attackers to inject arbitrary web script or HTML via the name parameter to (1) the media page, (2) the developer data edit page, or (3) the form page. Additional Analyst Notes: - CVE Program Container: References: - http://issues.umbraco.org/issue/U4-7461 - http://www.openwall.com/lists/oss-security/2016/02/16/10
CVE ID: CVE-2015-8816 State: PUBLISHED Published: 2016-04-27T17:00:00 Last Updated: 2024-08-06T08:29:22.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://lists.opensuse.org/opensuse-security-announce/2016-
ensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html - https://github.com/torvalds/linux/commit/e50293ef9775c5f1cf3fcc093037dd6a8c5684ea - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html - http://www.debian.org/security/2016/dsa-3503 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.5 - http://lists.opensuse.org/opensuse-security-announc
3503 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.5 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html - http://www.securityfocus.com/bid/83363 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - https://bugzilla.redhat.com/show_bug.cgi?id=1311589 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html - http://source.android.com/security/bulletin/2016-07-01.html - http://lists
use-security-announce/2016-04/msg00019.html - http://source.android.com/security/bulletin/2016-07-01.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html - http://www.openwall.com/lists/oss-security/2016/02/23/5 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg0
org/opensuse-security-announce/2016-08/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e50293ef9775c5f1cf3fcc093037dd6a8c5684ea
CVE ID: CVE-2015-8817 State: PUBLISHED Published: 2016-12-29T22:00:00 Last Updated: 2024-08-06T08:29:22.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator) built to use 'address_space_translate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pci_dma_read/write calls. Affects QEMU versions >= 1.6.0 and <= 2.3.1. A privileged user inside guest could use this flaw to crash the guest instance resulting in DoS. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2671.html - https://bugzilla.redhat.com/show_bug.cgi?id=1300771 - http://git.qemu.o
tp://rhn.redhat.com/errata/RHSA-2016-2671.html - https://bugzilla.redhat.com/show_bug.cgi?id=1300771 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=23820dbfc79d1c9dce090b4c555994f2bb6a69b3 - http://rhn.redhat.com/errata/RHSA-2016-2706.html - http://www.openwall.com/lists/oss-security/2016/03/01/1 - http://www.openwall.com/lists/oss-security/2016/03/01/10 - http://rhn.redhat.com/errata/RHSA-2016-2705.html - https://lists.gnu.org/archive/html/qemu-stable/2016-01/msg00060.html - http://rhn.redhat.com/errata/RHSA-2016-2670.html - http://rhn.redhat.com/errata/RHSA-2016-2704.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c3c1bb99d1c11978d9ce94d1bdcf0705378c1459
CVE ID: CVE-2015-8818 State: PUBLISHED Published: 2016-12-29T22:00:00 Last Updated: 2024-08-06T08:29:22.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2671.html - https://bugzilla.redhat.com/show_bug.cgi?id=1300771 - http://rhn.redhat.com/errata/RHSA-2016-2706.html - http://www.openwall.com/lists/oss-security/2016/03/01/1 - http://www.open
://rhn.redhat.com/errata/RHSA-2016-2706.html - http://www.openwall.com/lists/oss-security/2016/03/01/1 - http://www.openwall.com/lists/oss-security/2016/03/01/10 - http://rhn.redhat.com/errata/RHSA-2016-2705.html - http://rhn.redhat.com/errata/RHSA-2016-2670.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63 - http://rhn.redhat.com/errata/RHSA-2016-2704.html
CVE ID: CVE-2015-8819 State: REJECTED Published: 2022-07-08T17:37:39 Last Updated: 2022-07-08T17:37:39 Description: No description available.
CVE ID: CVE-2015-8820 State: PUBLISHED Published: 2016-03-04T23:00:00 Last Updated: 2024-08-06T08:29:22.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-20
15-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, CVE-2015-8455, CVE-2015-8652, CVE-2015-8654, CVE-2015-8656, CVE-2015-8657, and CVE-2015-8658. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-661 - https://helpx.adobe.com/security/products/flash-player/apsb15-32.html - http://www.securityfocus.com/bid/84160
CVE ID: CVE-2015-8821 State: PUBLISHED Published: 2016-03-04T23:00:00 Last Updated: 2024-08-06T08:29:21.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via crafted MPEG-4 data, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063,
431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, CVE-2015-8454, CVE-2015-8653, CVE-2015-8655, and CVE-2015-8822. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/flash-player/apsb15-32.html - http://www.zerodayinitiative.com/advisories/ZDI-15-663 - http://www.securityfocus.com/bid/84162
CVE ID: CVE-2015-8822 State: PUBLISHED Published: 2016-03-04T23:00:00 Last Updated: 2024-08-06T08:29:22.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via crafted MPEG-4 data, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063,
431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, CVE-2015-8454, CVE-2015-8653, CVE-2015-8655, and CVE-2015-8821. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-664 - https://helpx.adobe.com/security/products/flash-player/apsb15-32.html
CVE ID: CVE-2015-8823 State: PUBLISHED Published: 2016-04-22T18:00:00 Last Updated: 2024-08-06T08:29:22.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via crafted text property, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-
2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436,
CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, CVE-2015-8454, CVE-2015-8653, CVE-2015-8655, CVE-2015-8821, and CVE-2015-8822. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/flash-player/apsb15-32.html - http://www.zerodayinitiative.com/advisories/ZDI-15-665
CVE ID: CVE-2015-8824 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8825 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8826 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8827 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8828 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8829 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8830 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-06T08:29:22.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec. NOTE: this vulnerability exists because of a CVE-2012-6701 regression. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3083 - https://github.com/torvalds/linux/commit/4c185ce06dca14f5cea192f5a2c981ef50663f2b - http://www.ubuntu.com/usn/USN-2970-1 - https://access.re
orvalds/linux/commit/4c185ce06dca14f5cea192f5a2c981ef50663f2b - http://www.ubuntu.com/usn/USN-2970-1 - https://access.redhat.com/errata/RHSA-2018:1854 - http://www.debian.org/security/2016/dsa-3503 - http://www.ubuntu.com/usn/USN-2969-1 - http://www.ubuntu.com/usn/USN-2968-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1314275 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4f4b82694fe48b02f7a881a1797131a6dad1364 - http://www.ubuntu.com/usn/USN-2968-2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4c185ce06dca14f5cea192f5a2c981ef50663f2b - http://www.openwall.com/lists/oss-security/2016/03/02/9 - https://access.redhat.com/errata/RHSA
a192f5a2c981ef50663f2b - http://www.openwall.com/lists/oss-security/2016/03/02/9 - https://access.redhat.com/errata/RHSA-2018:3096 - https://github.com/torvalds/linux/commit/c4f4b82694fe48b02f7a881a1797131a6dad1364
CVE ID: CVE-2015-8831 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T08:29:22.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/comments.php in Dotclear before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the author name in a comment. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134353/dotclear-2.8.1-Cross-Site-Scripting.html - http://www.openwall.com/lists/oss-security/2016/03/07/5 - https://blog.curesec.com/article/blog/dotclear-281-XSS-94.html - http://www.openwall.com/lists/oss-security/2016/03/05/4 - http://dotclea
sec.com/article/blog/dotclear-281-XSS-94.html - http://www.openwall.com/lists/oss-security/2016/03/05/4 - http://dotclear.org/blog/post/2015/10/25/Dotclear-2.8.2 - http://www.securityfocus.com/bid/96377 - https://hg.dotclear.org/dotclear/rev/65e65154dadf - http://seclists.org/fulldisclosure/2015/Nov/59
CVE ID: CVE-2015-8832 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T08:29:22.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple incomplete blacklist vulnerabilities in inc/core/class.dc.core.php in Dotclear before 2.8.2 allow remote authenticated users with "manage their own media items" and "manage their own entries and comments" permissions to execute arbitrary PHP code by uploading a file with a (1) .pht, (2) .phps, or (3) .phtml extension. Additional Analyst Notes: - CVE Program Container: References: - https://hg.dotclear.org/dotclear/rev/198580bc3d80 - http://www.openwall.com/lists/oss-security/2016/03/07/5 - http://www.openwall.com/list
r.org/dotclear/rev/198580bc3d80 - http://www.openwall.com/lists/oss-security/2016/03/07/5 - http://www.openwall.com/lists/oss-security/2016/03/05/4 - http://dotclear.org/blog/post/2015/10/25/Dotclear-2.8.2 - http://www.securityfocus.com/bid/96379 - http://seclists.org/fulldisclosure/2015/Nov/58 - https://blog.curesec.com/article/blog/dotclear-281-Code-Execution-93.html - http://packetstormsecurity.com/files/134352/dotclear-2.8.1-Shell-Upload.html
CVE ID: CVE-2015-8833 State: PUBLISHED Published: 2016-04-08T16:00:00 Last Updated: 2024-08-06T08:29:22.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3528 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00095.html - https://lists.cypherpunks.ca/pipermail/otr-users/2016-March/002582.html - h
se-security-announce/2016-03/msg00095.html - https://lists.cypherpunks.ca/pipermail/otr-users/2016-March/002582.html - https://bugs.otr.im/projects/pidgin-otr/repository/revisions/aaf551b9dd5cbba8c4abaa3d4dc7ead860efef94 - https://bugs.otr.im/issues/128 - https://bugs.otr.im/issues/88 - https://blog.fuzzing-project.org/39-Heap-use-after-free-in-Pidgin-OTR-plugin-CVE-2015-8833.html - https://security.gentoo.org/glsa/201701-10 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00109.html - http://www.openwall.com/lists/oss-security/2016/03/09/13 - http://www.securityfocus.com/bid/84295 - http://www.openwall.com/lists/oss-security/2016/03/09/8
CVE ID: CVE-2015-8834 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T08:29:22.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3440. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2015/05/wordpress-4-2-2/ - https://codex.wordpress.org/Version_4.2.2 - http://www.debian.org/security/2016/d
ss.org/news/2015/05/wordpress-4-2-2/ - https://codex.wordpress.org/Version_4.2.2 - http://www.debian.org/security/2016/dsa-3639
CVE ID: CVE-2015-8835 State: PUBLISHED Published: 2016-05-16T10:00:00 Last Updated: 2024-08-06T08:29:22.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not properly retrieve keys, which allows remote attackers to cause a denial of service (NULL pointer dereference, type confusion, and application crash) or possibly execute arbitrary code via crafted serialized data representing a numerically indexed _cookies array, related to the SoapClient::__call method in ext/soap/soap.c. Additional Analyst Notes: - CVE Program Container: References: - http://w
SoapClient::__call method in ext/soap/soap.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2952-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html - http://www.ubuntu.com/usn/USN-2952-2 - http://php.net/ChangeLog-5.php - http://www.securityfocus.com/bid/84426 - https://bugs.php.net/bug.php?id=70081 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html
CVE ID: CVE-2015-8836 State: PUBLISHED Published: 2016-03-30T10:00:00 Last Updated: 2024-08-06T08:29:22.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the isofs_real_read_zf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ZF block size in an ISO file, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/02/23/9 - http://www.openwall.com/lists/oss-security/2015/02/06/7 - https://bugzilla.redhat.com/show_bug.cgi?id=863102 - https://bugz
p://www.openwall.com/lists/oss-security/2015/02/06/7 - https://bugzilla.redhat.com/show_bug.cgi?id=863102 - https://bugzilla.redhat.com/show_bug.cgi?id=861358 - http://www.debian.org/security/2016/dsa-3551
CVE ID: CVE-2015-8837 State: PUBLISHED Published: 2016-03-30T10:00:00 Last Updated: 2024-08-06T08:29:22.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the isofs_real_readdir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long pathname in an ISO file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=862211 - http://www.openwall.com/lists/oss-security/2015/02/23/9 - http://www.openwall.com/lists/oss-security/2015/02/06/7 - https://bugzilla.redhat.com/show_bug.cgi?id=863091 - http://
- http://www.openwall.com/lists/oss-security/2015/02/06/7 - https://bugzilla.redhat.com/show_bug.cgi?id=863091 - http://www.debian.org/security/2016/dsa-3551 - https://security.gentoo.org/glsa/202007-20
CVE ID: CVE-2015-8838 State: PUBLISHED Published: 2016-05-16T10:00:00 Last Updated: 2024-08-06T08:29:22.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2952-1 - https://bugs.php.net/bug.php?id=69669 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html - http://lists.opensuse.org/opensuse-securi
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html - http://www.ubuntu.com/usn/USN-2952-2 - http://php.net/ChangeLog-5.php - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=97aa752fee61fccdec361279adbfb17a3c60f3f4 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html
CVE ID: CVE-2015-8839 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-06T08:29:22.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause a denial of service (disk corruption) by writing to a page that is associated with a different user's file after unsynchronized hole punching and page-fault handling. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1323577 - http://www.ubuntu.com/usn/USN-3006-1 - http://www.securitytracker.com/id/1035455 - https://github.com/torvalds/linux/commit/e