Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-8296 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8297 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8298 State: PUBLISHED Published: 2018-09-24T19:00:00 Last Updated: 2024-08-06T08:13:32.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the login page in RXTEC RXAdmin UPDATE 06 / 2012 allow remote attackers to execute arbitrary SQL commands via the (1) loginpassword, (2) loginusername, (3) zusatzlicher, or (4) groupid parameter to index.htm, or the (5) rxtec cookie to index.htm. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134525/RXTEC-RXAdmin-SQL-Injection.html - https://github.com/sbaresearch/advisories/tree/public/2015/RXTEC_20150513 - http://seclists.org/ful
SQL-Injection.html - https://github.com/sbaresearch/advisories/tree/public/2015/RXTEC_20150513 - http://seclists.org/fulldisclosure/2015/Nov/90
CVE ID: CVE-2015-8299 State: PUBLISHED Published: 2017-08-29T15:00:00 Last Updated: 2024-08-06T08:13:32.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Group messages monitor (Falcon) in KNX ETS 4.1.5 (Build 3246) allows remote attackers to execute arbitrary code via a crafted KNXnet/IP UDP packet. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134524/KNX-ETS-4.1.5-Build-3246-Buffer-Overflow.html - https://github.com/sbaresearch/advisories/tree/public/2015/knAx_20150101
CVE ID: CVE-2015-8300 State: PUBLISHED Published: 2017-08-28T21:00:00 Last Updated: 2024-08-06T08:13:32.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Polycom BToE Connector before 3.0.0 uses weak permissions (Everyone: Full Control) for "Program Files (x86)\polycom\polycom btoe connector\plcmbtoesrv.exe," which allows local users to gain privileges via a Trojan horse file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134523/Polycom-BTOE-Connector-2.3.0-Local-Privilege-Escalation.html - https://github.com/sbaresearch/advisories/tree/public/2015/Polycom_20150513 - http://seclists.org/fulldisclosure/2015/Nov/88
CVE ID: CVE-2015-8303 State: PUBLISHED Published: 2016-01-08T19:00:00 Last Updated: 2024-08-06T08:13:32.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei Document Security Management (DSM) with software before V100R002C05SPC661 does not clear the clipboard when closing a secure file, which allows local users to obtain sensitive information by pasting the contents to another file. Additional Analyst Notes: - CVE Program Container: References: - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-462410.htm
CVE ID: CVE-2015-8304 State: PUBLISHED Published: 2016-04-13T14:00:00 Last Updated: 2024-08-06T08:13:32.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Huawei P7 phones with software before P7-L07 V100R001C01B606 allows remote attackers to gain privileges via a crafted application with the system or camera permission. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-01-smartphone-en
CVE ID: CVE-2015-8305 State: PUBLISHED Published: 2016-04-07T19:00:00 Last Updated: 2024-08-06T08:13:32.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei Sophia-L10 smartphones with software before P7-L10C900B852 allow attackers to cause a denial of service (system panic) via a crafted application with the system or camera privilege. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-02-smartphone-en
CVE ID: CVE-2015-8306 State: PUBLISHED Published: 2016-01-12T19:00:00 Last Updated: 2024-08-06T08:13:32.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 allows attackers to cause a denial of service (system crash) or execute arbitrary code via an unspecified parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-03-smartphone-en
CVE ID: CVE-2015-8307 State: PUBLISHED Published: 2016-04-07T20:00:00 Last Updated: 2024-08-06T08:13:32.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230, and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application with the graphics permission, aka an "interface access
vice (system crash) or gain privileges via a crafted application with the graphics permission, aka an "interface access control vulnerability," a different vulnerability than CVE-2015-8680. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-04-smartphone-en
CVE ID: CVE-2015-8308 State: PUBLISHED Published: 2017-08-24T20:00:00 Last Updated: 2024-08-06T08:13:31.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: LXDM before 0.5.2 did not start X server with -auth, which allows local users to bypass authentication with X connections. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1284460 - http://www.openwall.com/lists/oss-security/2015/11/20/6
CVE ID: CVE-2015-8309 State: PUBLISHED Published: 2017-03-27T15:00:00 Last Updated: 2024-08-06T08:13:32.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to read arbitrary files via the "value" parameter to "download." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/devsnd/cherrymusic/commit/62dec34a1ea0741400dd6b6c660d303dcd651e86 - https://github.com/devsnd/cherrymusic/issues/598 - http://www.securityfocus.com/bid/97149 - https://www.exploit-db.com/exploits/40361/ - http://www.fomori.org/cherrymusic/Changes.html
CVE ID: CVE-2015-8310 State: PUBLISHED Published: 2017-03-27T15:00:00 Last Updated: 2024-08-06T08:13:32.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to inject arbitrary web script or HTML via the playlistname field when creating a new playlist. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/devsnd/cherrymusic/commit/62dec34a1ea0741400dd6b6c660d303dcd651e86 - https://github.com/devsnd/cherrymusic/issues/598 - http://www.securityfocus.com/bid/97148 - http://www.fomori.org/cherrymusic/Changes.html
CVE ID: CVE-2015-8312 State: PUBLISHED Published: 2016-05-13T16:00:00 Last Updated: 2024-08-06T08:13:32.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service (memory overwrite and system crash) via a pioctl with an input buffer size of 4096 bytes. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3569 - https://www.openafs.org/dl/1.6.16/RELNOTES-1.6.16 - http://git.openafs.org/?p=openafs.git%3Ba=commitdiff%3Bh=2ef863720da4d9f368aaca0461c672a3008195ca
CVE ID: CVE-2015-8313 State: PUBLISHED Published: 2019-12-20T13:10:23 Last Updated: 2024-08-06T08:13:32.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: GnuTLS incorrectly validates the first byte of padding in CBC modes Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2015-8313 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-8313 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2015-8313 - http://www.securityfocus.com/bid/78327 - http://www.debian.org/security/2015/dsa-3408 - http://www.securityfocus.com/archive/1/537012/100/0/threaded - https://blog.hboeck.de/archives/877-A-little-POODLE-left-in-GnuTLS-old
curityfocus.com/archive/1/537012/100/0/threaded - https://blog.hboeck.de/archives/877-A-little-POODLE-left-in-GnuTLS-old-versions.html
CVE ID: CVE-2015-8314 State: PUBLISHED Published: 2023-12-12T00:00:00.000Z Last Updated: 2025-05-27T14:34:06.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rubysec.com/advisories/CVE-2015-8314/ - https://github.com/advisories/GHSA-746g-3gfp-hfhw - https://github.com/heartcombo/devise/commit/c92996646aba2d25b2c3e235fe0c4f1a84b70d24
CVE ID: CVE-2015-8315 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T08:13:32.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ms package before 0.7.1 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a "regular expression denial of service (ReDoS)." Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.securityfocus.com/bid/96389 - https://nodesecurity.io/advisories/46 - http://www.openwall.com/lists/oss-security/2016/04/20/11 - https://support.f5.com/csp/article/K46337613?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2015-8316 State: PUBLISHED Published: 2017-09-06T21:00:00 Last Updated: 2024-08-06T08:13:32.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in LightDM (aka Light Display Manager) 1.14.3, 1.16.x before 1.16.6 when the XDMCP server is enabled allows remote attackers to cause a denial of service (process crash) via an XDMCP request packet with no address. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1284574 - http://www.openwall.com/lists/oss-security/2015/11/22/1 - https://bugs.launchpad.net/lightdm/+bug/1516831
CVE ID: CVE-2015-8317 State: PUBLISHED Published: 2015-12-15T21:00:00 Last Updated: 2024-08-06T08:13:32.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html - https://bugzilla.redhat.com/show_bug.cgi?id=1281930 - http://www.debian.org/security/2015/dsa-3430 - http://lists.apple.com/archives/securi
dhat.com/show_bug.cgi?id=1281930 - http://www.debian.org/security/2015/dsa-3430 - http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html - https://support.apple.com/HT206901 - http://rhn.redhat.com/errata/RHSA-2016-1089.html - https://bugzilla.gnome.org/show_bug.cgi?id=751603 - https://git.gnome.org/browse/libxml2/commit/?id=9aa37588ee78a06ca1379a9d9356eab16686099c - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.securityfocus.com/bid/91826 - http://www.ubuntu.com/usn/USN-2834-
ecurity/linuxbulletinoct2015-2719645.html - http://www.securityfocus.com/bid/91826 - http://www.ubuntu.com/usn/USN-2834-1 - http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html - http://www.securitytracker.com/id/1034243 - http://rhn.redhat.com/errata/RHSA-2015-2549.html - https://blog.fuzzing-project.org/28-Libxml2-Several-out-of-bounds-reads.html - http://marc.info/?l=bugtraq&m=145382616617563&w=2 - https://git.gnome.org/browse/libxml2/commit/?id=709a952110e98621c9b78c4f26462a9d8333102e - http://www.securityfocus.com/bid/77681 - http://www.openwall.com/lists/oss-security/2015/11/22/3 - https://h2
8333102e - http://www.securityfocus.com/bid/77681 - http://www.openwall.com/lists/oss-security/2015/11/22/3 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://www.openwall.com/lists/oss-security/2015/11/21/1 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html - https://support.apple.com/HT206905 - https://support.apple.com/HT206903 - https://bugzilla.gnome.org/show_bug.cgi?id=751631 - https://support.apple.com/HT206902 - https://support.apple.com/HT206904 - https://support.apple.com/HT206899
CVE ID: CVE-2015-8318 State: PUBLISHED Published: 2016-04-07T20:00:00 Last Updated: 2024-08-06T08:13:32.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the HIFI driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230, and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability th
s to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2015-8319. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-04-smartphone-en
CVE ID: CVE-2015-8319 State: PUBLISHED Published: 2016-04-07T20:00:00 Last Updated: 2024-08-06T08:13:32.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the HIFI driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230, and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability th
s to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2015-8318. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-04-smartphone-en
CVE ID: CVE-2015-8320 State: PUBLISHED Published: 2015-11-23T11:00:00 Last Updated: 2024-08-06T08:13:32.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Cordova-Android before 3.7.0 improperly generates random values for BridgeSecret data, which makes it easier for attackers to conduct bridge hijacking attacks by predicting a value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77679 - https://cordova.apache.org/announcements/2015/11/20/security.html - http://packetstormsecurity.com/files/134496/Apache-Cordova-Android-3.6.4-BridgeSecret-Weak-Randomization.html - http://www.securityfocus.com/archive/1/536945/100/0/threa
e-Cordova-Android-3.6.4-BridgeSecret-Weak-Randomization.html - http://www.securityfocus.com/archive/1/536945/100/0/threaded
CVE ID: CVE-2015-8322 State: PUBLISHED Published: 2017-02-07T17:00:00 Last Updated: 2024-08-06T08:13:32.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp OnCommand System Manager 8.3.x before 8.3.2 allows remote authenticated users to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/index?page=content&id=9010070 - https://security.netapp.com/advisory/ntap-20160310-0003/
CVE ID: CVE-2015-8324 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-06T08:13:32.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0855.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://bugzilla.redhat.
55.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://bugzilla.redhat.com/show_bug.cgi?id=1267261 - http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.34 - https://github.com/torvalds/linux/commit/744692dc059845b2a3022119871846e74d4f6e11 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=744692dc059845b2a3022119871846e74d4f6e11 - http://www.openwall.com/lists/oss-security/2015/11/23/2
CVE ID: CVE-2015-8325 State: PUBLISHED Published: 2016-05-01T00:00:00 Last Updated: 2024-08-06T08:13:32.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/86187 - http://www.debian.org/security/2016/dsa-3550 - https://people.canonical.com/~ubu
ttp://www.securityfocus.com/bid/86187 - http://www.debian.org/security/2016/dsa-3550 - https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-8325.html - https://bugzilla.redhat.com/show_bug.cgi?id=1328012 - http://rhn.redhat.com/errata/RHSA-2017-0641.html - http://rhn.redhat.com/errata/RHSA-2016-2588.html - http://www.securitytracker.com/id/1036487 - https://anongit.mindrot.org/openssh.git/commit/?id=85bdcd7c92fe7ff133bbc4e10a65c91810f88755 - https://security-tracker.debian.org/tracker/CVE-2015-8325 - https://security.gentoo.org/glsa/201612-18 - https://security.netapp.com/advisory/ntap-20180628-0001/ - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-8326 State: PUBLISHED Published: 2017-06-07T14:00:00 Last Updated: 2024-08-06T08:13:32.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user. Additional Analyst Notes: - CVE Program Container: References: - https://metacpan.org/source/MRASH/IPTables-Parse-1.6/Changes - https://github.com/mtrmac/IPTables-Parse/commit/b400b976d81140f6971132e94eb7657b5b0a2b87 - https://bugzilla.redhat.com/show_bug.cgi?id=1267962 - http://www.openwall.com/lists/oss-security/2015/11/24/10
CVE ID: CVE-2015-8327 State: PUBLISHED Published: 2015-12-17T19:00:00 Last Updated: 2024-08-06T08:13:32.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2831-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.securityfocus.com/bid/78524 - https://lists.debian.org/debian-printing/2015/11/msg00020.html -
2952096.html - http://www.securityfocus.com/bid/78524 - https://lists.debian.org/debian-printing/2015/11/msg00020.html - http://www.ubuntu.com/usn/USN-2831-2 - http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/annotate/head:/NEWS - http://www.debian.org/security/2015/dsa-3429 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=806886 - http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7406 - http://rhn.redhat.com/errata/RHSA-2016-0491.html - https://lists.debian.org/debian-printing/2015/12/msg00001.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00065.html - http://www.debian.org/security/2015/dsa-3411
CVE ID: CVE-2015-8328 State: PUBLISHED Published: 2015-11-24T20:00:00 Last Updated: 2024-08-06T08:13:32.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NVAPI support layer in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows allows local users to obtain sensitive information, cause a denial of service (crash), or possibly gain privileges via unknown vectors. NOTE: this identifier was SPLIT from CVE-2015-7869 per ADT2 and ADT3 due to different vulnerability types and affected versions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034176
ted versions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034176 - http://nvidia.custhelp.com/app/answers/detail/a_id/3808/kw/security
CVE ID: CVE-2015-8329 State: PUBLISHED Published: 2015-11-24T20:00:00 Last Updated: 2024-08-06T08:13:32.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) uses weak encryption (Base64 and DES), which allows attackers to conduct downgrade attacks and decrypt passwords via unspecified vectors, aka SAP Security Note 2240274. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-15-031-using-base64-and-des-in-sap-mii/ - http://packetstormsecurity.com/files/135761/SAP-MII-12.2-14.0-15.0-Cryptography-Issues.html - http://seclists.org/fulldisclosure/2016/Feb/68
CVE ID: CVE-2015-8330 State: PUBLISHED Published: 2015-11-24T20:00:00 Last Updated: 2024-08-06T08:13:32.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PCo agent in SAP Plant Connectivity (PCo) allows remote attackers to cause a denial of service (memory corruption and agent crash) via crafted xMII requests, aka SAP Security Note 2238619. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Feb/69 - https://www.onapsis.com/blog/analyzing-sap-security-notes-november-2015 - https://erpscan.io/advisories/erpscan-15-032-sap-pco-agent-dos-vulnerability/ - http://www.securityfocus.com/archive/1/537517/100/0/threaded - http://p
rpscan-15-032-sap-pco-agent-dos-vulnerability/ - http://www.securityfocus.com/archive/1/537517/100/0/threaded - http://packetstormsecurity.com/files/135775/SAP-PCo-2.2-2.3-15.0-15.1-Denial-Of-Service.html