Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-2807 State: PUBLISHED Published: 2015-09-01T14:00:00 Last Updated: 2024-08-06T05:24:39.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in js/window.php in the Navis DocumentCloud plugin before 0.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133350/WordPress-Navis-DocumentCloud-0.1-Cross-Site-Scripting.html - https://wpvulndb.com/vulnerabilities/8164 - https://wordpress.org/plugins/navis-documentcloud/changelog/ - http://seclists.org/fulldisclosure/2015/Aug/78
ies/8164 - https://wordpress.org/plugins/navis-documentcloud/changelog/ - http://seclists.org/fulldisclosure/2015/Aug/78 - https://security.dxw.com/advisories/publicly-exploitable-xss-in-wordpress-plugin-navis-documentcloud/
CVE ID: CVE-2015-2808 State: PUBLISHED Published: 2015-04-01T00:00:00 Last Updated: 2024-08-06T05:24:38.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue. Additional Analyst Notes: - CVE Program Container: References: - http://marc.
g LSB values, aka the "Bar Mitzvah" issue. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=143818140118771&w=2 - http://rhn.redhat.com/errata/RHSA-2015-1243.html - http://rhn.redhat.com/errata/RHSA-2015-1007.html - http://marc.info/?l=bugtraq&m=143817899717054&w=2 - http://marc.info/?l=bugtraq&m=144493176821532&w=2 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://rhn.redhat.com/errata/RHSA-2015-1006.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773256 - https://kb.juniper.net/JSA10783 - http://www.securitytracker.com/id/1033737 - http://lists.opensuse.org/opensuse-sec
6 - https://kb.juniper.net/JSA10783 - http://www.securitytracker.com/id/1033737 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html - http://marc.info/?l=bugtraq&m=144060576831314&w=2 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://www.securitytracker.com/id/1036222 - http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034 - http://marc.info/?l=bugtraq&m=143817899717054&w=2 - http://www-304.ibm.com/support/docview.wss?uid=swg21960769 - https://security.gentoo.org/glsa/201512-10 - http://rhn.redhat.com/errata/RHSA-2015-1229.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04708650 - http:
dhat.com/errata/RHSA-2015-1229.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04708650 - http://www.securitytracker.com/id/1032600 - http://www.securitytracker.com/id/1032910 - http://www.ubuntu.com/usn/USN-2706-1 - http://rhn.redhat.com/errata/RHSA-2015-1526.html - http://marc.info/?l=bugtraq&m=143817021313142&w=2 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.securitytracker.com/id/1032599 - http://marc.info/?l=bugtraq&m=144104533800819&w=2 - http://www-304.ibm.com/support/docview.wss?uid=swg21903565 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190 - https://h20566.www2.hpe.com/h
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04711380 - https://kc.mcafee.com/corporate/index?page=content&id=SB10163 - http://marc.info/?l=bugtraq&m=144043644216842&w=2 - http://www.securitytracker.com/id/1032734 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV71892 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193347 - http://www.securitytracker.com/id/1033769 - http://www.securitytracker.com/id/1032707 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html - http://marc.info/?l=bugtraq&m=143817021313142&w=2 - http
opensuse.org/opensuse-security-announce/2015-07/msg00040.html - http://marc.info/?l=bugtraq&m=143817021313142&w=2 - http://rhn.redhat.com/errata/RHSA-2015-1091.html - http://marc.info/?l=bugtraq&m=144069189622016&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV71888 - http://rhn.redhat.com/errata/RHSA-2015-1228.html - http://marc.info/?l=bugtraq&m=144060606031437&w=2 - http://www.securitytracker.com/id/1032708 - http://www.huawei.com/en/psirt/security-advisories/hw-454055 - http://www.debian.org/security/2015/dsa-3316 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://ww
announce/2015-12/msg00000.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.securitytracker.com/id/1033415 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246 - http://marc.info/?l=bugtraq&m=143818140118771&w=2 - https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098709 - http://marc.info/?l=bugtraq&m=144104565600964&w=2 - http://marc.info/?l=bugtraq&m=144493176821532&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21883640 - http://marc.info/?l=bugtraq&m=144102017024820&w=2 - http://www.securitytracker.com/id/1033432 - http://marc.info/?l=bugtraq&m=143629696317098&w=2 - http://list
024820&w=2 - http://www.securitytracker.com/id/1033432 - http://marc.info/?l=bugtraq&m=143629696317098&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html - http://www.securitytracker.com/id/1032858 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04687922 - http://www.securitytracker.com/id/1032788 - http://www.ubuntu.com/usn/USN-2696-1 - https://www.blackhat.com/docs/asia-15/materials/asia-15-Mantin-Bar-Mitzvah-Attack-Breaking-SSL-With-13-Year-Old-RC4-Weakness-wp.pdf - http://www.debian.org/security/2015/dsa-3339 - http://rhn.redhat.com/errata/RHSA-2015-1020.html - http://rhn.redhat.com/errata/RHSA-2015-1242.html - http://kb.juni
9 - http://rhn.redhat.com/errata/RHSA-2015-1020.html - http://rhn.redhat.com/errata/RHSA-2015-1242.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html - http://www.securitytracker.com/id/1033431 - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454055.htm - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988 - http://www.securitytracker.com/id/1032868 - http://marc.info/?l=bugtraq&m=144059703728085&w=2 - http://www.oracle.com/technetwork
w.securitytracker.com/id/1032868 - http://marc.info/?l=bugtraq&m=144059703728085&w=2 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://www.securityfocus.com/bid/91787 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html - http://rhn.redhat.com/errata/RHSA-2015-1241.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://rhn.redhat.com/errata/RHSA-2015-1230.html - ht
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://rhn.redhat.com/errata/RHSA-2015-1230.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888 - http://marc.info/?l=bugtraq&m=143456209711959&w=2 - http://www.securitytracker.com/id/1033386 - http://marc.info/?l=bugtraq&m=143741441012338&w=2 - http://www.securitytracker.com/id/1033072 - http://marc.info/?l=bugtraq&m=143741441012338&w=2 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-
ecurity-announce/2015-06/msg00014.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119 - http://rhn.redhat.com/errata/RHSA-2015-1021.html - http://www-304.ibm.com/support/docview.wss?uid=swg21960015 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html - http://marc.info/?l=bugtraq&m=144059660127919&w=2 - http://www.securityfocus.com/bid/73684 - http://www.securitytracker.com/id/1032990 - http://www.securitytracker.com/id/1033071 - http://lists.opensuse.org/open
- http://www.securitytracker.com/id/1032990 - http://www.securitytracker.com/id/1033071 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html - https://www.secpod.com/blog/cve-2015-2808-bar-mitzvah-attack-in-rc4-2/
CVE ID: CVE-2015-2809 State: PUBLISHED Published: 2015-04-01T01:00:00 Last Updated: 2024-08-06T05:24:39.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Multicast DNS (mDNS) responder in Synology DiskStation Manager (DSM) before 3.1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets to the Avahi component. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-9TLSHD - http://www.securityfocus.com/bid/73683 - http://www.kb.cert.org/vuls/id/
- http://www.kb.cert.org/vuls/id/BLUU-9TLSHD - http://www.securityfocus.com/bid/73683 - http://www.kb.cert.org/vuls/id/550620
CVE ID: CVE-2015-2810 State: PUBLISHED Published: 2015-05-15T22:00:00 Last Updated: 2024-08-06T05:24:38.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the HwpApp::CHncSDS_Manager function in Hancom Office HanWord processor, as used in Hwp 2014 VP before 9.1.0.2342, HanWord Viewer 2007 and Viewer 2010 8.5.6.1158, and HwpViewer 2014 VP 9.1.0.2186, allows remote attackers to cause a denial of service (crash) and possibly "influence the program's execution flow" via a document with a large paragraph size, which triggers heap corruption. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Apr/89 - http://www.securi
tional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Apr/89 - http://www.securityfocus.com/bid/74153
CVE ID: CVE-2015-2811 State: PUBLISHED Published: 2015-04-01T14:00:00 Last Updated: 2024-08-06T05:24:38.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in ReportXmlViewer in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2111939. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jun/64 - http://www.securityfocus.com/archive/1/535827/100/800/threaded - http://packetstormsecurity.com/files/132358/SAP-NetWeaver-Portal-7.31-XXE-Injection.html - http://www.securityfocus.com/bid/73691 - https://erp
ity.com/files/132358/SAP-NetWeaver-Portal-7.31-XXE-Injection.html - http://www.securityfocus.com/bid/73691 - https://erpscan.io/advisories/erpscan-15-006-sap-netweaver-portal-reportxmlviewer-xxe/
CVE ID: CVE-2015-2812 State: PUBLISHED Published: 2015-04-01T14:00:00 Last Updated: 2024-08-06T05:24:38.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in XMLValidationComponent in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2093966. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/535826/100/800/threaded - http://seclists.org/fulldisclosure/2015/Jun/62 - https://erpscan.io/advisories/erpscan-15-004-sap-netweaver-portal-xmlvalidationcomponent-xxe/ - http://packetstormsecurity.com/files/132
io/advisories/erpscan-15-004-sap-netweaver-portal-xmlvalidationcomponent-xxe/ - http://packetstormsecurity.com/files/132356/SAP-NetWeaver-Portal-7.31-XXE-Injection.html
CVE ID: CVE-2015-2813 State: PUBLISHED Published: 2015-04-01T14:00:00 Last Updated: 2024-08-06T05:24:38.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in SAP Mobile Platform allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125358. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jun/63 - http://www.securityfocus.com/archive/1/535828/100/800/threaded - http://www.securityfocus.com/bid/73692 - https://erpscan.io/advisories/erpscan-15-005-sap-mobile-platform-xxe/ - http://packetstormsecurity.com/files/132357/SAP-Mobile-Platform-2.3-
dvisories/erpscan-15-005-sap-mobile-platform-xxe/ - http://packetstormsecurity.com/files/132357/SAP-Mobile-Platform-2.3-XXE-Injection.html
CVE ID: CVE-2015-2814 State: PUBLISHED Published: 2015-04-01T14:00:00 Last Updated: 2024-08-06T05:24:38.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP EMR Unwired (com.sap.mobile.healthcare.emr.v2) and Clinical Task Tracker (com.sap.mobile.healthcare.ctt) does not properly restrict access, which allows remote attackers to change the backendurl, clientid, ssourl, and infopageurl settings via unspecified vectors, aka SAP Security Note 2117079. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-15-002-sap-mobile-healthcare-emr-v2-unauthorized-access/ - http://www.securityfocus.com/bid/73701
CVE ID: CVE-2015-2815 State: PUBLISHED Published: 2015-04-01T14:00:00 Last Updated: 2024-08-06T05:24:38.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the C_SAPGPARAM function in the NetWeaver Dispatcher in SAP KERNEL 7.00 (7000.52.12.34966) and 7.40 (7400.12.21.30308) allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, aka SAP Security Note 2063369. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jun/61 - http://packetstormsecurity.com/files/132353/SAP-NetWeaver-Dispatcher-Buffer-Overflow.html - http://www.securityfocus.com/archi
/packetstormsecurity.com/files/132353/SAP-NetWeaver-Dispatcher-Buffer-Overflow.html - http://www.securityfocus.com/archive/1/535825/100/800/threaded - http://www.securityfocus.com/bid/73897 - https://erpscan.io/advisories/erpscan-15-003-sapkernel-c_sapgparam-rce-dos/
CVE ID: CVE-2015-2816 State: PUBLISHED Published: 2015-04-01T14:00:00 Last Updated: 2024-08-06T05:24:38.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XcListener in SAP Afaria 7.0.6001.5 does not properly restrict access, which allows remote attackers to have unspecified impact via a crafted request, aka SAP Security Note 2134905. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/535830/100/800/threaded - http://www.securityfocus.com/bid/73708 - http://packetstormsecurity.com/files/132363/SAP-Afaria-7-Missing-Authorization-Check.html - http://seclists.org/fulldisclosure/2015/Jun/67 - https://erpscan.io/advisories/erps
7-Missing-Authorization-Check.html - http://seclists.org/fulldisclosure/2015/Jun/67 - https://erpscan.io/advisories/erpscan-15-009-sap-afaria-7-xclistener-missing-authorization-check/
CVE ID: CVE-2015-2817 State: PUBLISHED Published: 2015-04-01T14:00:00 Last Updated: 2024-08-06T05:24:38.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SAP Management Console in SAP NetWeaver 7.40 allows remote attackers to obtain sensitive information via the ReadProfile parameters, aka SAP Security Note 2091768. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132359/SAP-Management-Console-Information-Disclosure.html - https://erpscan.io/advisories/erpscan-15-007-sap-management-console-readprofile-parameters-information-disclosure/ - http://www.securityfocus.com/bid/73705 - http://www.securityfocus.com/archive/1/53582
rameters-information-disclosure/ - http://www.securityfocus.com/bid/73705 - http://www.securityfocus.com/archive/1/535829/100/800/threaded - http://seclists.org/fulldisclosure/2015/Jun/65
CVE ID: CVE-2015-2818 State: PUBLISHED Published: 2015-04-01T14:00:00 Last Updated: 2024-08-06T05:24:39.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125513. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-15-011-sap-mobile-platform-xxe - http://www.securityfocus.com/bid/73896
CVE ID: CVE-2015-2819 State: PUBLISHED Published: 2015-04-01T14:00:00 Last Updated: 2024-08-06T05:24:38.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP Sybase SQL Anywhere 11 and 16 allows remote attackers to cause a denial of service (crash) via a crafted request, aka SAP Security Note 2108161. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/535831/100/800/threaded - http://www.securityfocus.com/bid/74317 - https://erpscan.io/advisories/erpscan-15-010-sybase-sql-anywhere-11-and-16-dos/ - http://packetstormsecurity.com/files/132364/SYBASE-SQL-Anywhere-12-16-Denial-Of-Service.html - http://seclists.org/fulldisclosure/
ketstormsecurity.com/files/132364/SYBASE-SQL-Anywhere-12-16-Denial-Of-Service.html - http://seclists.org/fulldisclosure/2015/Jun/68
CVE ID: CVE-2015-2820 State: PUBLISHED Published: 2015-04-01T14:00:00 Last Updated: 2024-08-06T05:24:38.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in XcListener in SAP Afaria 7.0.6001.5 allows remote attackers to cause a denial of service (process termination) via a crafted request, aka SAP Security Note 2132584. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132362/SAP-Afaria-7-Denial-Of-Service.html - http://www.securityfocus.com/archive/1/535832/100/800/threaded - http://seclists.org/fulldisclosure/2015/Jun/66 - https://erpscan.io/advisories/erpscan-15-008-sap-afaria-7-xclistener-buffer-overflow/ -
org/fulldisclosure/2015/Jun/66 - https://erpscan.io/advisories/erpscan-15-008-sap-afaria-7-xclistener-buffer-overflow/ - http://www.securityfocus.com/bid/73898
CVE ID: CVE-2015-2821 State: PUBLISHED Published: 2015-04-01T14:00:00 Last Updated: 2024-08-06T05:24:38.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 Neos 1.1.x before 1.1.3 and 1.2.x before 1.2.3 allows remote editors to access, create, and modify content nodes in the workspace of other editors via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-neos/typo3-neos-sa-2015-001/ - http://www.securityfocus.com/bid/73700
CVE ID: CVE-2015-2822 State: PUBLISHED Published: 2015-04-08T16:00:00 Last Updated: 2024-08-06T05:24:38.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2 and SIMATIC WinCC Runtime Advanced before WinCC (TIA Portal) 13 SP1 Upd2 allow man-in-the-middle attackers to cause a denial of service via crafted packets on TCP port 102. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74028 - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-487246.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-487246.pdf
CVE ID: CVE-2015-2823 State: PUBLISHED Published: 2015-04-08T16:00:00 Last Updated: 2024-08-06T05:24:39.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC HMI Basic Panels 2nd Generation before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC WinCC Runtime Advanced before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC WinCC Runtime Professional before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Basic Panels 1st Generation (WinCC TIA Portal), SIMATIC HMI Mobile Panel 277 (WinCC TIA Portal), SIMATIC HMI Multi Panels (WinCC TIA Portal), and SIMATIC WinCC 7.x before 7.3 Upd4 allow remote attackers to complete authenti
C HMI Multi Panels (WinCC TIA Portal), and SIMATIC WinCC 7.x before 7.3 Upd4 allow remote attackers to complete authentication by leveraging knowledge of a password hash without knowledge of the associated password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74040 - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-487246.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-487246.pdf
CVE ID: CVE-2015-2824 State: PUBLISHED Published: 2015-04-06T15:00:00 Last Updated: 2024-08-06T05:24:38.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Simple Ads Manager plugin before 2.7.97 for WordPress allow remote attackers to execute arbitrary SQL commands via a (1) hits[][] parameter in a sam_hits action to sam-ajax.php; the (2) cstr parameter in a load_posts action to sam-ajax-admin.php; the (3) searchTerm parameter in a load_combo_data action to sam-ajax-admin.php; or the (4) subscriber, (5) contributor, (6) author, (7) editor, (8) admin, or (9) sadmin parameter in a load_users action to sam-ajax-admin.php. Additional Ana
(6) author, (7) editor, (8) admin, or (9) sadmin parameter in a load_users action to sam-ajax-admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/535168/100/0/threaded - https://plugins.trac.wordpress.org/changeset/1136202/simple-ads-manager - http://www.securityfocus.com/archive/1/535165/100/0/threaded - http://www.securityfocus.com/bid/73698 - https://www.exploit-db.com/exploits/36613/ - https://wordpress.org/plugins/simple-ads-manager/changelog/ - http://www.itas.vn/news/ITAS-Team-found-out-multiple-critical-vulnerabilities-in-Hakin9-IT-Security-Magazine-78.html - http://seclists.org/fulldisclosure/2015/Apr/7 - http://packets
-vulnerabilities-in-Hakin9-IT-Security-Magazine-78.html - http://seclists.org/fulldisclosure/2015/Apr/7 - http://packetstormsecurity.com/files/131280/WordPress-Simple-Ads-Manager-2.5.94-2.5.96-SQL-Injection.html - http://seclists.org/fulldisclosure/2015/Apr/6
CVE ID: CVE-2015-2825 State: PUBLISHED Published: 2015-04-21T15:00:00 Last Updated: 2024-08-06T05:24:38.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified by the path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/36614/ - http://packetstormsecurity.com/files/131282/WordPress-Simple-Ads-Manager-2.5.94-File-Upload.html -