Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-2659 State: PUBLISHED Published: 2015-07-16T10:00:00 Last Updated: 2024-08-06T05:24:37.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 8u45 and Java SE Embedded 8u33 allows remote attackers to affect availability via unknown vectors related to Security. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://www.securityfocus.com/bid/75877 - http://www.securitytracker.com/id/1032910 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html - http://rhn.redhat.com/errata/RHSA-2015-1228.html - https://securit
rg/opensuse-security-announce/2015-07/msg00040.html - http://rhn.redhat.com/errata/RHSA-2015-1228.html - https://security.gentoo.org/glsa/201603-11 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727 - http://rhn.redhat.com/errata/RHSA-2015-1241.html
CVE ID: CVE-2015-2660 State: PUBLISHED Published: 2015-07-16T10:00:00 Last Updated: 2024-08-06T05:24:38.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect confidentiality and integrity via vectors related to Oracle Agile PLM Framework. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://www.securitytracker.com/id/1032915
CVE ID: CVE-2015-2661 State: PUBLISHED Published: 2015-07-16T10:00:00 Last Updated: 2024-08-06T05:24:37.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows local users to affect availability via unknown vectors related to Client. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75813 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://www.securitytracker.com/id/1032911 - http://rhn.redhat.com/errata/RHSA-2015-1646.html - http://lists.opensuse.org/opensuse-updates/2015-09/msg00042.html - http://www.ubuntu.com/usn/USN-2674-1 -
5-1646.html - http://lists.opensuse.org/opensuse-updates/2015-09/msg00042.html - http://www.ubuntu.com/usn/USN-2674-1 - https://security.gentoo.org/glsa/201610-06 - http://rhn.redhat.com/errata/RHSA-2015-1630.html
CVE ID: CVE-2015-2662 State: PUBLISHED Published: 2015-07-16T10:00:00 Last Updated: 2024-08-06T05:24:37.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to DHCP Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://www.securitytracker.com/id/1032914 - http://www.securityfocus.com/bid/75886
CVE ID: CVE-2015-2663 State: PUBLISHED Published: 2015-07-16T10:00:00 Last Updated: 2024-08-06T05:24:38.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, and 6.3.0 through 6.3.7 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Business Process Automation. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://www.securitytracker.com/id/1032915
CVE ID: CVE-2015-2664 State: PUBLISHED Published: 2015-07-16T10:00:00 Last Updated: 2024-08-06T05:24:37.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1243.html - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://www.securitytracker.com/id/1032910 - http://rhn.redhat.com/errata/RHSA-2015-1485.html - http://www.securityfocus.com/bid/75857 - http://rhn.redhat.com/
910 - http://rhn.redhat.com/errata/RHSA-2015-1485.html - http://www.securityfocus.com/bid/75857 - http://rhn.redhat.com/errata/RHSA-2015-1544.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html - https://security.gentoo.org/glsa/201603-11 - http://rhn.redhat.com/errata/RHSA-2015-1486.html - http://rhn.redhat.com/errata/RHSA-2015-1242.html - http://rhn.redhat.com/errata/RHSA-2015-1488.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html - http://rhn.redhat.com/errata/RHSA-2015-1241.h
tp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html - http://rhn.redhat.com/errata/RHSA-2015-1241.html - http://rhn.redhat.com/errata/RHSA-2015-1604.html
CVE ID: CVE-2015-2665 State: PUBLISHED Published: 2015-06-17T18:00:00 Last Updated: 2024-08-06T05:24:38.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183449.html - http://www.cacti.net/release_notes_0_8_8d.php - http://www.securitytracker.com/id/1032672 - http://www.fortiguard.com/advisory/FG-VD-15-017/ - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183919.html - http://www
com/advisory/FG-VD-15-017/ - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183919.html - http://www.securityfocus.com/bid/75309 - http://www.debian.org/security/2015/dsa-3295 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183454.html
CVE ID: CVE-2015-2666 State: PUBLISHED Published: 2015-05-27T10:00:00 Last Updated: 2024-08-06T05:24:37.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the get_matching_model_microcode function in arch/x86/kernel/cpu/microcode/intel_early.c in the Linux kernel before 4.0 allows context-dependent attackers to gain privileges by constructing a crafted microcode header and leveraging root privileges for write access to the initrd. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153329.html - http://www.securitytracker.com/id/1032414 - http://www.openwall.com/lists
mail/package-announce/2015-March/153329.html - http://www.securitytracker.com/id/1032414 - http://www.openwall.com/lists/oss-security/2015/03/20/18 - https://github.com/torvalds/linux/commit/f84598bd7c851f8b0bf8cd0d7c3be0d73c432ff4 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f84598bd7c851f8b0bf8cd0d7c3be0d73c432ff4 - http://rhn.redhat.com/errata/RHSA-2015-1534.html - https://bugzilla.redhat.com/show_bug.cgi?id=1204722
CVE ID: CVE-2015-2667 State: PUBLISHED Published: 2015-05-18T15:00:00 Last Updated: 2024-08-06T05:24:38.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in GNS3 1.2.3 allows local users to gain privileges via a Trojan horse uuid.dll in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74710 - http://packetstormsecurity.com/files/131731/GNS3-1.2.3-DLL-Hijacking.html
CVE ID: CVE-2015-2668 State: PUBLISHED Published: 2015-05-12T19:00:00 Last Updated: 2024-08-06T05:24:37.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a crafted xz archive file. Additional Analyst Notes: - CVE Program Container: References: - http://ubuntu.com/usn/usn-2594-1 - https://security.gentoo.org/glsa/201512-08 - http://www.securityfocus.com/bid/74472 - http://blog.clamav.net/2015/04/clamav-0987-has-been-released.html - http://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html
CVE ID: CVE-2015-2670 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-2671 State: REJECTED Published: 2022-07-08T17:36:19 Last Updated: 2022-07-08T17:36:19 Description: No description available.
CVE ID: CVE-2015-2672 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-06T05:24:38.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xsave/xrstor implementation in arch/x86/include/asm/xsave.h in the Linux kernel before 3.19.2 creates certain .altinstr_replacement pointers and consequently does not provide any protection against instruction faulting, which allows local users to cause a denial of service (panic) by triggering a fault, as demonstrated by an unaligned memory operand or a non-canonical address memory operand. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.2 - http:
alyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=06c8173eb92bbfc03a0fe8bb64315857d0badd06 - https://github.com/torvalds/linux/commit/06c8173eb92bbfc03a0fe8bb64315857d0badd06 - http://www.openwall.com/lists/oss-security/2015/03/22/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1204729
CVE ID: CVE-2015-2673 State: PUBLISHED Published: 2017-10-06T22:00:00 Last Updated: 2024-08-06T05:24:38.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for WordPress allow remote attackers to gain administrator privileges and execute arbitrary code via the option_name and option_value parameters. Additional Analyst Notes: - CVE Program Container: References: - http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure/
CVE ID: CVE-2015-2674 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T05:24:37.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Restkit allows man-in-the-middle attackers to spoof TLS servers by leveraging use of the ssl.wrap_socket function in Python with the default CERT_NONE value for the cert_reqs argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/03/23/7 - https://github.com/benoitc/restkit/issues/140 - https://bugzilla.redhat.com/show_bug.cgi?id=1202837
CVE ID: CVE-2015-2675 State: PUBLISHED Published: 2017-08-18T18:00:00 Last Updated: 2024-08-06T05:24:38.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, which allows remote attackers to cause a denial of service (application crash) via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interface on an object representing a Flickr account. Additional Analyst Notes: - CVE Program Container: References: - https://git.gnome.org/browse/librest/commit/?id=b50ace7738ea03817acdad87fb2b338a86018329 - https://bugzilla.gnome.org
- https://git.gnome.org/browse/librest/commit/?id=b50ace7738ea03817acdad87fb2b338a86018329 - https://bugzilla.gnome.org/show_bug.cgi?id=742644 - https://bugzilla.redhat.com/show_bug.cgi?id=1199049 - http://rhn.redhat.com/errata/RHSA-2015-2237.html - https://bugzilla.redhat.com/show_bug.cgi?id=1183982 - http://www.openwall.com/lists/oss-security/2015/03/23/8
CVE ID: CVE-2015-2676 State: PUBLISHED Published: 2015-03-23T16:00:00 Last Updated: 2024-08-06T05:24:37.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to start_apply.htm. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Mar/42 - http://www.securityfocus.com/bid/73294 - http://packetstormsecurity.com/files/130724/ASUS-RT-G32-Cross-Site-Request-Forgery-Cross-Site-Scripting.html -
/73294 - http://packetstormsecurity.com/files/130724/ASUS-RT-G32-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - http://websecurity.com.ua/7644/
CVE ID: CVE-2015-2677 State: PUBLISHED Published: 2015-03-23T16:00:00 Last Updated: 2024-08-06T05:24:37.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ocPortal before 9.0.17 allow remote authenticated users to inject arbitrary web script or HTML via the (1) title or (2) text field in the cms_calendar page to cms/index.php; unspecified fields in (3) the cms_polls page to cms/index.php or (4) a new topic in the topics page to forum/index.php; or (5) a new PT (private topic/private message) in the topics page to forum/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/ar
age to forum/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534817/100/0/threaded - http://ocportal.com/site/news/view/security_issues/xss-vulnerability-patch.htm - http://packetstormsecurity.com/files/130729/ocPortal-9.0.16-Cross-Site-Scripting.html - http://www.securitytracker.com/id/1031962 - http://ocportal.com/site/news/view/new-releases/ocportal-9-0-17-released.htm
CVE ID: CVE-2015-2678 State: PUBLISHED Published: 2015-03-23T16:00:00 Last Updated: 2024-08-06T05:24:37.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter in the categories page to gxadmin/index.php or (2) page parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5233.php - http://www.securityfocus.com/bid/73301 - https://github.com/semplon/GeniXCMS/issues/7 - http://blog.metalgenix.com/genixcms-v0-0-2-release-securit
om/bid/73301 - https://github.com/semplon/GeniXCMS/issues/7 - http://blog.metalgenix.com/genixcms-v0-0-2-release-security-and-bug-fixes/17 - http://www.exploit-db.com/exploits/36321 - https://github.com/semplon/GeniXCMS/commit/698245488343396185b1b49e7482ee5b25541815 - http://osvdb.org/show/osvdb/119394 - http://packetstormsecurity.com/files/130771/GeniXCMS-0.0.1-Cross-Site-Scripting.html
CVE ID: CVE-2015-2679 State: PUBLISHED Published: 2015-03-23T16:00:00 Last Updated: 2024-08-06T05:24:38.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php or (2) username parameter to gxadmin/login.php. Additional Analyst Notes: - CVE Program Container: References: - http://blog.metalgenix.com/update-security-fix-and-add-newsletter-module/16 - http://osvdb.org/show/osvdb/119392 - https://github.com/semplon/GeniXCMS/issues/7 - http://www.exploit-db.com/exploits/36321 - https://github.com/semplon/GeniXCMS/commit
ub.com/semplon/GeniXCMS/issues/7 - http://www.exploit-db.com/exploits/36321 - https://github.com/semplon/GeniXCMS/commit/698245488343396185b1b49e7482ee5b25541815 - http://blog.metalgenix.com/genixcms-v0-0-2-release-security-and-bug-fixes/17 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5232.php - http://www.securityfocus.com/bid/73297 - http://osvdb.org/show/osvdb/119393 - http://packetstormsecurity.com/files/130770/GeniXCMS-0.0.1-SQL-Injection.html
CVE ID: CVE-2015-2680 State: PUBLISHED Published: 2015-03-23T16:00:00 Last Updated: 2024-08-06T05:24:37.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in MetalGenix GeniXCMS before 0.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request in the users page to gxadmin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://blog.metalgenix.com/update-security-fix-and-add-newsletter-module/16 - https://github.com/semplon/GeniXCMS/issues/7 - http://osvdb.org/show/osvdb/119391 - http://www.securityfocus.com/bid/73299 - http://w
b.com/semplon/GeniXCMS/issues/7 - http://osvdb.org/show/osvdb/119391 - http://www.securityfocus.com/bid/73299 - http://www.exploit-db.com/exploits/36321 - https://github.com/semplon/GeniXCMS/commit/698245488343396185b1b49e7482ee5b25541815 - http://packetstormsecurity.com/files/130772/GeniXCMS-0.0.1-Cross-Site-Request-Forgery.html - http://blog.metalgenix.com/genixcms-v0-0-2-release-security-and-bug-fixes/17 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5234.php
CVE ID: CVE-2015-2681 State: PUBLISHED Published: 2015-03-23T16:00:00 Last Updated: 2024-08-06T05:24:38.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) next_page, (2) group_id, (3) action_script, or (4) flag parameter to start_apply.htm. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Mar/42 - http://packetstormsecurity.com/files/130724/ASUS-RT-G32-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - http://websecurity.com.ua/7644/ -
y.com/files/130724/ASUS-RT-G32-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - http://websecurity.com.ua/7644/ - http://www.securityfocus.com/bid/73296
CVE ID: CVE-2015-2682 State: PUBLISHED Published: 2015-03-26T14:00:00 Last Updated: 2024-08-06T05:24:37.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to conf/securitydbData.xml. Additional Analyst Notes: - CVE Program Container: References: - https://www.securify.nl/advisory/SFY20140802/citrix_command_center_allows_downloading_of_configuration_files.html - http://seclists.org/fulldisclosure/2015/Mar/126 - http://packetstormsecurity.com/files/130928/Citrix-Command-Center-Configuration-Disclosure.html - https://www.exploit-db.com/exploits/36
rmsecurity.com/files/130928/Citrix-Command-Center-Configuration-Disclosure.html - https://www.exploit-db.com/exploits/36441/ - http://support.citrix.com/article/CTX200584 - http://www.securitytracker.com/id/1031993 - http://www.securityfocus.com/bid/73309
CVE ID: CVE-2015-2683 State: PUBLISHED Published: 2015-03-26T14:00:00 Last Updated: 2024-08-06T05:24:38.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions (JMX) Servlet, which allows remote attackers to execute arbitrary code via unspecified vectors to servlets/Jmx_dynamic. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534933/100/0/threaded - http://www.securityfocus.com/bid/73313 - http://packetstormsecurity.com/files/130930/Citrx-Command-Center-Advent-JMX-Servlet-Accessible.htm
focus.com/bid/73313 - http://packetstormsecurity.com/files/130930/Citrx-Command-Center-Advent-JMX-Servlet-Accessible.html - http://seclists.org/fulldisclosure/2015/Mar/127 - https://www.securify.nl/advisory/SFY20140804/advent_jmx_servlet_of_citrx_command_center_is_accessible_to_unauthenticated_users.html - http://support.citrix.com/article/CTX200584 - http://www.securitytracker.com/id/1031993
CVE ID: CVE-2015-2684 State: PUBLISHED Published: 2015-03-31T14:00:00 Last Updated: 2024-08-06T05:24:38.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial of service (crash) via a crafted SAML message. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3207 - http://www.securityfocus.com/bid/73314 - https://shibboleth.net/community/advisories/secadv_20150319.txt
CVE ID: CVE-2015-2686 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-06T05:24:38.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/socket.c in the Linux kernel 3.19 before 3.19.3 does not validate certain range data for (1) sendto and (2) recvfrom system calls, which allows local users to gain privileges by leveraging a subsystem that uses the copy_from_iter function in the iov_iter interface, as demonstrated by the Bluetooth subsystem. Additional Analyst Notes: - CVE Program Container: References: - http://grsecurity.net/~spender/viro.txt - http://www.securityfocus.com/bid/73286 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/
ro.txt - http://www.securityfocus.com/bid/73286 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4de930efc23b92ddf88ce91c405ee645fe6e27ea - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3 - http://twitter.com/grsecurity/statuses/579050211605102592 - http://twitter.com/grsecurity/statuses/579060953477701632 - http://twitter.com/grsecurity/statuses/579075689439059968 - http://www.openwall.com/lists/oss-security/2015/03/23/14 - https://github.com/torvalds/linux/commit/4de930efc23b92ddf88ce91c405ee645fe6e27ea - https://bugzilla.redhat.com/show_bug.cgi?id=1205242
CVE ID: CVE-2015-2687 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T05:24:38.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/03/24/10 - https://review.openstack.org/#/c/338929/ - http://www.securityfocus.com/bid/77505 - https://bugs.launchpad.net/nova/+bug/1419577 - https://bugzilla.redhat.com/show_bug.cgi?id=1205313 - http://www.openwall.com/lists/oss-security/2015/03/25/3
CVE ID: CVE-2015-2688 State: PUBLISHED Published: 2020-01-24T17:46:21 Last Updated: 2024-08-06T05:24:38.426Z Vendors: The Tor Project Products: Tor Problem Types: Other Description: buf_pullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected arrival times of buffers with invalid layouts, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://lists.torproject.org/pipermail/tor-talk/2015-March/037281.html - https://trac.torproject.org/projects/tor/ticket/15083
CVE ID: CVE-2015-2689 State: PUBLISHED Published: 2020-01-24T17:46:17 Last Updated: 2024-08-06T05:24:37.938Z Vendors: The Tor Project Products: Tor Problem Types: Other Description: Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle pending-connection resolve states during periods of high DNS load, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://lists.torproject.org/pipermail/tor-talk/2015-March/037281.html - https://trac.torproject.org/projects/tor/ticket/14129