Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-4607 State: PUBLISHED Published: 2015-06-16T16:00:00 Last Updated: 2024-08-06T06:18:12.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the Frontend User Upload (feupload) extension 0.5.0 and earlier for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension using a frontend form, then accessing it via a direct request to the file in the fileadmin folder. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-006/ - http://www.securityfocus.com/bid/75248
CVE ID: CVE-2015-4608 State: PUBLISHED Published: 2015-06-16T16:00:00 Last Updated: 2024-08-06T06:18:12.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the BE User Log (beko_beuserlog) extension 1.1.1 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75247 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-007/
CVE ID: CVE-2015-4609 State: PUBLISHED Published: 2015-06-16T16:00:00 Last Updated: 2024-08-06T06:18:12.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the wt_directory extension before 1.4.2 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/wt_directory - http://www.securityfocus.com/bid/75253 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-008/
CVE ID: CVE-2015-4610 State: PUBLISHED Published: 2015-06-16T16:00:00 Last Updated: 2024-08-06T06:18:12.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Store Locator (locator) extension before 3.3.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-009/ - http://typo3.org/extensions/repository/view/locator - http://www.securityfocus.com/bid/75262
CVE ID: CVE-2015-4611 State: PUBLISHED Published: 2015-06-16T16:00:00 Last Updated: 2024-08-06T06:18:12.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Smoelenboek (ncgov_smoelenboek) extension before 1.0.9 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75259 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-010/ - http://typo3.org/extensions/repository/view/ncgov_smoelenboek
CVE ID: CVE-2015-4612 State: PUBLISHED Published: 2015-06-16T16:00:00 Last Updated: 2024-08-06T06:18:12.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the "FAQ - Frequently Asked Questions" (js_faq) extension before 1.2.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-012/ - http://www.securityfocus.com/bid/75256 - http://typo3.org/extensions/repository/view/js_faq
CVE ID: CVE-2015-4613 State: PUBLISHED Published: 2015-06-16T16:00:00 Last Updated: 2024-08-06T06:18:12.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the backend module in the Developer Log (devlog) extension before 2.11.4 for TYPO3 allows remote editors to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-011/ - http://www.securityfocus.com/bid/75257 - http://typo3.org/extensions/repository/view/devlog
CVE ID: CVE-2015-4614 State: PUBLISHED Published: 2015-07-08T16:00:00 Last Updated: 2024-08-06T06:18:12.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in includes/Function.php in the Easy2Map plugin before 1.2.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the mapName parameter in an e2m_img_save_map_name action to wp-admin/admin-ajax.php and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/1191455/easy2map - https://www.exploit-db.com/exploits/37534/ - http://www.vapid.dhs.org/advisory.php?v=131 - http://seclists.org/fu
2map - https://www.exploit-db.com/exploits/37534/ - http://www.vapid.dhs.org/advisory.php?v=131 - http://seclists.org/fulldisclosure/2015/Jul/18 - https://wordpress.org/plugins/easy2map/changelog/ - http://www.securityfocus.com/archive/1/535922/100/0/threaded
CVE ID: CVE-2015-4615 State: PUBLISHED Published: 2019-02-15T21:00:00 Last Updated: 2024-08-06T06:18:12.219Z Vendors: Steven Ellis Products: Easy2map-photos WordPress Plugin Problem Types: SQL Injection in easy2map-photos wordpress plugin v1.09 Description: Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML, mapCSSXML, mapHTML,mapID variables Additional Analyst Notes: - CVE Program Container: References: - http://www.vapid.dhs.org/advisory.php?v=130 - https://wordpress.org/plugins/easy2map-photos
CVE ID: CVE-2015-4616 State: PUBLISHED Published: 2015-07-08T16:00:00 Last Updated: 2024-08-06T06:18:12.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.2.5 for WordPress allows remote attackers to create arbitrary files via a .. (dot dot) in the map_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/1191455/easy2map - https://www.exploit-db.com/exploits/37534/ - http://www.vapid.dhs.org/advisory.php?v=131 - http://seclists.org/fulldisclosure/2015/Jul/18 - http://www.securityfocus.com/archive/1/535922/100/0/t
isory.php?v=131 - http://seclists.org/fulldisclosure/2015/Jul/18 - http://www.securityfocus.com/archive/1/535922/100/0/threaded
CVE ID: CVE-2015-4617 State: PUBLISHED Published: 2019-02-15T21:00:00 Last Updated: 2024-08-06T06:18:12.017Z Vendors: Steven Ellis Products: Easy2map-photos WordPress Plugin Problem Types: Path traversal in easy2map-photos wordpress plugin v1.09 Description: Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave.php allows path traversal when specifying file names creating files outside of the upload directory. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/easy2map-photos - http://www.vapidlabs.com/advisory.php?v=130
CVE ID: CVE-2015-4619 State: PUBLISHED Published: 2017-09-07T20:00:00 Last Updated: 2024-08-06T06:18:12.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Spina before commit bfe44f289e336f80b6593032679300c493735e75. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75216 - http://www.openwall.com/lists/oss-security/2015/06/16/20 - https://github.com/denkGroot/Spina/commit/bfe44f289e336f80b6593032679300c493735e75
CVE ID: CVE-2015-4620 State: PUBLISHED Published: 2015-07-08T14:00:00 Last Updated: 2024-08-06T06:18:12.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) by constructing crafted zone data and then making a query for a name in that zone. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162286.html - http://lists.opensuse.org/opensuse-security-anno
ts.fedoraproject.org/pipermail/package-announce/2015-July/162286.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html - https://kb.juniper.net/JSA10783 - https://kb.isc.org/article/AA-01438 - http://www.securitytracker.com/id/1032799 - http://www.ubuntu.com/usn/USN-2669-1 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00013.html - http://lists.opensuse.org/opensuse-updates/2015-07/msg00038.html - http://rhn.redhat.com/errata/RHSA-2015-1471.html - http://rhn.redhat.com/errata/RHSA-2015-1443.html - http://www.debian.org/security/2015/dsa-3304 - https://kb.isc.org/article/AA-01307 - https://kc.mcafee.com/corporate/index?page=content&id=SB10124 - h
/2015/dsa-3304 - https://kb.isc.org/article/AA-01307 - https://kc.mcafee.com/corporate/index?page=content&id=SB10124 - https://kb.isc.org/article/AA-01267 - http://www.securityfocus.com/bid/75588 - https://security.gentoo.org/glsa/201510-01 - http://marc.info/?l=bugtraq&m=143740940810833&w=2 - http://marc.info/?l=bugtraq&m=143740940810833&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162040.html - https://kb.isc.org/article/AA-01305 - https://kb.isc.org/article/AA-01306 - https://security.netapp.com/advisory/ntap-20190903-0003/
CVE ID: CVE-2015-4624 State: PUBLISHED Published: 2017-03-31T15:00:00 Last Updated: 2024-08-06T06:18:12.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40609/ - http://packetstormsecurity.com/files/133052/WiFi-Pineapple-Predictable-CSRF-Token.html - http://www.securityfocus.com/archive/1/536184/100/500/threaded - http://packetstormsecurity.com/files/139212/Hak5-WiFi-Pineapple-Preconfiguration-Command-Injection-2.html
CVE ID: CVE-2015-4625 State: PUBLISHED Published: 2015-10-26T19:00:00 Last Updated: 2024-08-06T06:18:12.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value. Additional Analyst Notes: - CVE Program Container: References: - http://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html - http://www.securityfocus.com/bid/75267 - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html - http://lists.opensuse.org/o
id/75267 - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html - http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html - http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html - http://www.openwall.com/lists/oss-security/2015/06/09/1 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html - http://www.openwall.com/lists/oss-security/2015/06/08/3 - http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html - http://www.openwall.com/lists/oss-security/2015/06/16/21 - http://www.securitytracker.com/id/1035023
CVE ID: CVE-2015-4626 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T06:18:11.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: B.A.S C2Box before 4.0.0 (r19171) relies on client-side validation, which allows remote attackers to "corrupt the business logic" via a negative value in an overdraft. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/136450/C2Box-4.0.0-r19171-Validation-Bypass.html
CVE ID: CVE-2015-4627 State: PUBLISHED Published: 2017-09-07T20:00:00 Last Updated: 2024-08-06T06:18:12.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Pragyan CMS 3.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/delta/pragyan/issues/207
CVE ID: CVE-2015-4628 State: PUBLISHED Published: 2015-06-18T10:00:00 Last Updated: 2024-08-06T06:18:12.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in application/controllers/admin/questiongroups.php in LimeSurvey before 2.06+ Build 150618 allows remote authenticated administrators to execute arbitrary SQL commands via the sid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LimeSurvey/LimeSurvey/commit/e15861a65b7028adfc23ef6af8563f645e318548 - http://www.securityfocus.com/bid/75301 - https://github.com/LimeSurvey/LimeSurvey/pull/331 - https://bugs.limesurvey.org/view.php?id=9694 - https://github.c
01 - https://github.com/LimeSurvey/LimeSurvey/pull/331 - https://bugs.limesurvey.org/view.php?id=9694 - https://github.com/LimeSurvey/LimeSurvey/commit/b09edc0dbd18d8459ade4c7c941e562c16564f9e
CVE ID: CVE-2015-4629 State: PUBLISHED Published: 2017-09-07T20:00:00 Last Updated: 2024-08-06T06:18:12.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication, and perform other unspecified actions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75194 - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-441178.htm
CVE ID: CVE-2015-4630 State: PUBLISHED Published: 2018-10-18T20:00:00 Last Updated: 2024-08-06T06:18:12.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to (1) hijack the authentication of administrators for requests that create a user via a request to members/memberentry.pl or (2) give a user superlibrarian permission via a request to members/member-flags.pl or (3) hijack the authentication of arbitrary users for requests that conduct cross-site scripting (XSS) attacks via the addshelf parameter
uthentication of arbitrary users for requests that conduct cross-site scripting (XSS) attacks via the addshelf parameter to opac-shelves.pl. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/132458/Koha-ILS-3.20.x-CSRF-XSS-Traversal-SQL-Injection.html - https://www.sba-research.org/2015/06/24/researchers-of-sba-research-found-several-critical-security-vulnerabilities-in-the-koha-library-software-via-combinatorial-testing/ - https://www.exploit-db.com/exploits/37389/ - https://koha-community.org/security-release-koha-3-16-12/ - https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14423 - https://seclists.org/fulldisclosure/2015/Jun/80
12/ - https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14423 - https://seclists.org/fulldisclosure/2015/Jun/80 - https://koha-community.org/security-release-koha-3-18-8/ - https://koha-community.org/security-release-koha-3-20-1/ - https://koha-community.org/koha-3-14-16-released/
CVE ID: CVE-2015-4631 State: PUBLISHED Published: 2018-10-18T20:00:00 Last Updated: 2024-08-06T06:18:12.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to inject arbitrary web script or HTML via the (1) tag parameter to opac-search.pl; the (2) value parameter to authorities/authorities-home.pl; the (3) delay parameter to acqui/lateorders.pl; the (4) authtypecode or (5) tagfield to admin/auth_subfields_structure.pl; the (6) tagfield parameter to admin/marc_subfields_structure.pl; the (7) limit parameter
in/auth_subfields_structure.pl; the (6) tagfield parameter to admin/marc_subfields_structure.pl; the (7) limit parameter to catalogue/search.pl; the (8) bookseller_filter, (9) callnumber_filter, (10) EAN_filter, (11) ISSN_filter, (12) publisher_filter, or (13) title_filter parameter to serials/serials-search.pl; or the (14) author, (15) collectiontitle, (16) copyrightdate, (17) isbn, (18) manageddate_from, (19) manageddate_to, (20) publishercode, (21) suggesteddate_from, or (22) suggesteddate_to parameter to suggestion/suggestion.pl; or the (23) direction, (24) display or (25) addshelf parameter to opac-shelves.pl. Additional Analyst Notes: - CVE Program Container: References: - https://pack
25) addshelf parameter to opac-shelves.pl. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/132458/Koha-ILS-3.20.x-CSRF-XSS-Traversal-SQL-Injection.html - https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14418 - https://www.sba-research.org/2015/06/24/researchers-of-sba-research-found-several-critical-security-vulnerabilities-in-the-koha-library-software-via-combinatorial-testing/ - https://www.exploit-db.com/exploits/37389/ - https://koha-community.org/security-release-koha-3-16-12/ - https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14423 - https://seclists.org/fulldisclosure/2015/Jun/80 - https://koha-community.org/sec
y.org/bugzilla3/show_bug.cgi?id=14423 - https://seclists.org/fulldisclosure/2015/Jun/80 - https://koha-community.org/security-release-koha-3-18-8/ - https://koha-community.org/security-release-koha-3-20-1/ - https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14416 - https://koha-community.org/koha-3-14-16-released/
CVE ID: CVE-2015-4632 State: PUBLISHED Published: 2018-10-18T20:00:00 Last Updated: 2024-08-06T06:18:12.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the template_path parameter to (1) svc/virtualshelves/search or (2) svc/members/search. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/132458/Koha-ILS-3.20.x-CSRF-XSS-Traversal-SQL-Injection.html - https://www.sba-research.org/2015/06/24/resea
y.com/files/132458/Koha-ILS-3.20.x-CSRF-XSS-Traversal-SQL-Injection.html - https://www.sba-research.org/2015/06/24/researchers-of-sba-research-found-several-critical-security-vulnerabilities-in-the-koha-library-software-via-combinatorial-testing/ - https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14408 - https://koha-community.org/security-release-koha-3-16-12/ - https://seclists.org/fulldisclosure/2015/Jun/80 - https://koha-community.org/security-release-koha-3-18-8/ - https://koha-community.org/security-release-koha-3-20-1/ - https://www.exploit-db.com/exploits/37388/ - https://koha-community.org/koha-3-14-16-released/
CVE ID: CVE-2015-4633 State: PUBLISHED Published: 2018-10-18T20:00:00 Last Updated: 2024-08-06T06:18:12.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow (1) remote attackers to execute arbitrary SQL commands via the number parameter to opac-tags_subject.pl in the OPAC interface or (2) remote authenticated users to execute arbitrary SQL commands via the Filter or (3) Criteria parameter to reports/borrowers_out.pl in the Staff interface. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.koha-community.org/b
the Staff interface. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14426 - https://packetstormsecurity.com/files/132458/Koha-ILS-3.20.x-CSRF-XSS-Traversal-SQL-Injection.html - https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14412 - https://www.sba-research.org/2015/06/24/researchers-of-sba-research-found-several-critical-security-vulnerabilities-in-the-koha-library-software-via-combinatorial-testing/ - https://koha-community.org/security-release-koha-3-16-12/ - https://www.exploit-db.com/exploits/37387/ - https://seclists.org/fulldisclosure/2015/Jun/80 - https://koha-community.org/security-release-koha-3-
/exploits/37387/ - https://seclists.org/fulldisclosure/2015/Jun/80 - https://koha-community.org/security-release-koha-3-18-8/ - https://koha-community.org/security-release-koha-3-20-1/ - https://koha-community.org/koha-3-14-16-released/
CVE ID: CVE-2015-4634 State: PUBLISHED Published: 2015-08-11T14:00:00 Last Updated: 2024-08-06T06:18:12.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-07/msg00052.html - http://www.securitytracker.com/id/1032989 - http://www.cacti.net/release_notes_0_8_8e.php - http://www.debian.org/security/2015/dsa-3312 - http://bugs.cacti.net/view.php?id=2577
CVE ID: CVE-2015-4637 State: PUBLISHED Published: 2015-07-16T14:00:00 Last Updated: 2024-08-06T06:18:12.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST API in F5 BIG-IQ Cloud, Device, and Security 4.4.0 and 4.5.0 before HF2 and ADC 4.5.0 before HF2, when configured for LDAP remote authentication and the LDAP server allows anonymous BIND operations, allows remote attackers to obtain an authentication token for arbitrary users by guessing an LDAP user account name. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/kb/en-us/solutions/public/16000/800/sol16861.html
CVE ID: CVE-2015-4638 State: PUBLISHED Published: 2015-09-18T14:00:00 Last Updated: 2024-08-06T06:18:12.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.3.0 through 11.5.2 and 11.6.0 through 11.6.0 HF4, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.2.1 through 11.3.0, and BIG-IP PSM 11.2.1 through 11.4.1 allows remote attackers to cause a denial of service (Traffic Management Microkernel restart) via a fragmented packet. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/kb/en-us/solutions/public/17000/100/sol17155.html - http://www
E Program Container: References: - https://support.f5.com/kb/en-us/solutions/public/17000/100/sol17155.html - http://www.securitytracker.com/id/1033578
CVE ID: CVE-2015-4639 State: PUBLISHED Published: 2017-07-21T14:00:00 Last Updated: 2024-08-06T06:18:12.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in opac-addbybiblionumber.pl in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, and 3.20.x before 3.20.1 allows remote attackers to inject arbitrary web script or HTML via a crafted list name. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14416#c4 - https://koha-community.org/security-release-koha-3-16-12/ - https://koha-community.org/security-release-koha-3-20-1/ - https://koha-community.org/koha-3-14-16-rel
e-koha-3-16-12/ - https://koha-community.org/security-release-koha-3-20-1/ - https://koha-community.org/koha-3-14-16-released/