Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-0255 State: PUBLISHED Published: 2015-02-13T15:00:00 Last Updated: 2024-08-06T04:03:10.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-02/msg00085.html - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - https://security.gentoo.org/glsa/201504-06 - http://advisories.mag
technetwork/topics/security/cpujul2015-2367936.html - https://security.gentoo.org/glsa/201504-06 - http://advisories.mageia.org/MGASA-2015-0073.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://www.securityfocus.com/bid/72578 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.debian.org/security/2015/dsa-3160 - http://www.ubuntu.com/usn/USN-2500-1 - http://www.x.org/wiki/Development/Security/Advisory-2015-02-10/ - http://lists.opensuse.org/opensuse-updates/2015-02/msg00086.html - http://rhn.redhat.com/errata/RHSA-2015-0797.html
CVE ID: CVE-2015-0256 State: REJECTED Published: 2022-07-08T17:35:48 Last Updated: 2022-07-08T17:35:48 Description: No description available.
CVE ID: CVE-2015-0257 State: PUBLISHED Published: 2015-05-01T15:00:00 Last Updated: 2024-08-06T04:03:10.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ovirt-engine-dwhd service and a plugin during service startup, which allows local users to obtain sensitive information by reading files in the directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032231 - http://rhn.redhat.com/errata/RHSA-2015-0888.html
CVE ID: CVE-2015-0258 State: PUBLISHED Published: 2020-02-17T17:46:29 Last Updated: 2024-08-06T04:03:10.663Z Vendors: n/a Products: Collabtive Problem Types: Other Description: Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a (1) .php3, (2) .php4, (3) .php5, or (4) .phtml extension. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133736/Collabtive-2.0-Shell-Upload.html - https://github.com/philippK-de/Collabtive/commit/9ce6301583669d0a8ecb4d23fb56e34b68511335 - https://lists.debia
d.html - https://github.com/philippK-de/Collabtive/commit/9ce6301583669d0a8ecb4d23fb56e34b68511335 - https://lists.debian.org/debian-lts-announce/2020/02/msg00031.html - https://usn.ubuntu.com/4590-1/
CVE ID: CVE-2015-0259 State: PUBLISHED Published: 2015-04-01T14:00:00 Last Updated: 2024-08-06T04:03:10.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Additional Analyst Notes: - CVE Program Container: References: - http://lists.openstack.org/pipermail/openstack-announce/2015-March/000341.html - http://rhn.redhat.com/errata/RHSA-2015-0844.html - http://rhn.redhat.com/errata/RHSA-2015-0790.html - http://rhn.redhat.com/errat
n.redhat.com/errata/RHSA-2015-0844.html - http://rhn.redhat.com/errata/RHSA-2015-0790.html - http://rhn.redhat.com/errata/RHSA-2015-0843.html - https://bugs.launchpad.net/nova/+bug/1409142
CVE ID: CVE-2015-0260 State: PUBLISHED Published: 2015-02-16T15:00:00 Last Updated: 2024-08-06T04:03:10.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method. Additional Analyst Notes: - CVE Program Container: References: - https://kallithea-scm.org/security/cve-2015-0260.html - https://rhodecode.com/blog/rhodecode-enterprise-security-release/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/100888 - http://www.securityfocus.com/bid/72573 - http://seclists.org/oss-sec/2015/q1/505
CVE ID: CVE-2015-0261 State: PUBLISHED Published: 2015-03-24T17:00:00 Last Updated: 2024-08-06T04:03:10.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153834.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:125 - http://packetstormsecurity.com/files/130730/tcpdump-Denia
p://www.mandriva.com/security/advisories?name=MDVSA-2015:125 - http://packetstormsecurity.com/files/130730/tcpdump-Denial-Of-Service-Code-Execution.html - https://access.redhat.com/errata/RHSA-2017:1871 - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://www.securitytracker.com/id/1031937 - https://security.gentoo.org/glsa/201510-04 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153999.html - http://advisories.mageia.org/MGASA-2015-0114.html - http://www.ubuntu.com/usn/USN-2580-1 - http://www.securityfocus.com/archive/1/534829/100/0/threaded - http://lists.opensuse.org/opensuse-updates/2015-03/msg00084.html - http://www.mandriva.c
chive/1/534829/100/0/threaded - http://lists.opensuse.org/opensuse-updates/2015-03/msg00084.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:182 - https://bugzilla.redhat.com/show_bug.cgi?id=1201792 - http://www.securityfocus.com/bid/73019 - http://www.debian.org/security/2015/dsa-3193
CVE ID: CVE-2015-0262 State: REJECTED Published: 2018-02-21T14:00:00 Last Updated: 2018-02-21T13:57:01 Description: No description available.
CVE ID: CVE-2015-0263 State: PUBLISHED Published: 2015-06-03T20:00:00 Last Updated: 2024-08-06T04:03:10.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1539.html - http://rhn.redhat.com/errata/RHSA-2015-1041.html - https://git-wip-us.apache.org/repos/asf?p=camel.git%3Ba=commitdiff%3Bh=7d19340bcdb42f7aae584d9c5003ac4f7ddaee36 - http:
https://git-wip-us.apache.org/repos/asf?p=camel.git%3Ba=commitdiff%3Bh=7d19340bcdb42f7aae584d9c5003ac4f7ddaee36 - http://rhn.redhat.com/errata/RHSA-2015-1538.html - http://www.securitytracker.com/id/1032442 - https://camel.apache.org/security-advisories.data/CVE-2015-0263.txt.asc - https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E
CVE ID: CVE-2015-0264 State: PUBLISHED Published: 2015-06-03T20:00:00 Last Updated: 2024-08-06T04:03:10.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML (1) String or (2) GenericFile object in an XPath query. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1539.html - http://securitytracker.com/id/1032442 - https://git-wip-us.apache.org/repos/asf?p=camel.git%3Ba=commitdiff%3Bh=1df559649a96a1ca036837
tytracker.com/id/1032442 - https://git-wip-us.apache.org/repos/asf?p=camel.git%3Ba=commitdiff%3Bh=1df559649a96a1ca0368373387e542f46e4820da - http://rhn.redhat.com/errata/RHSA-2015-1041.html - http://rhn.redhat.com/errata/RHSA-2015-1538.html - https://camel.apache.org/security-advisories.data/CVE-2015-0264.txt.asc - https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E
CVE ID: CVE-2015-0265 State: PUBLISHED Published: 2016-04-11T19:00:00 Last Updated: 2024-08-06T04:03:10.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Policy Admin Tool in Apache Ranger before 0.5.0 allows remote attackers to inject arbitrary web script or HTML via the HTTP User-Agent header. Additional Analyst Notes: - CVE Program Container: References: - https://mail-archives.apache.org/mod_mbox/ranger-dev/201508.mbox/%3CD1E7EC30.9D53F%25vel%40apache.org%3E - http://www.slideshare.net/wojdwo/big-problems-with-big-data-hadoop-interfaces-security - https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Rang
h-big-data-hadoop-interfaces-security - https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger - http://www.securityfocus.com/bid/76208
CVE ID: CVE-2015-0266 State: PUBLISHED Published: 2016-04-11T19:00:00 Last Updated: 2024-08-06T04:03:10.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Policy Admin Tool in Apache Ranger before 0.5.0 allows remote authenticated users to bypass intended access restrictions via direct access to module URLs. Additional Analyst Notes: - CVE Program Container: References: - https://mail-archives.apache.org/mod_mbox/ranger-dev/201508.mbox/%3CD1E7EC30.9D53F%25vel%40apache.org%3E - http://www.slideshare.net/wojdwo/big-problems-with-big-data-hadoop-interfaces-security - http://www.securityfocus.com/bid/76221 - https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+foun
urity - http://www.securityfocus.com/bid/76221 - https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
CVE ID: CVE-2015-0267 State: PUBLISHED Published: 2015-05-19T18:00:00 Last Updated: 2024-08-06T04:03:10.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74622 - http://rhn.redhat.com/errata/RHSA-2015-0986.html
CVE ID: CVE-2015-0268 State: PUBLISHED Published: 2015-02-16T15:00:00 Last Updated: 2024-08-06T04:03:10.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vgic_v2_to_sgi function in arch/arm/vgic-v2.c in Xen 4.5.x, when running on ARM hardware with general interrupt controller (GIC) version 2, allows local guest users to cause a denial of service (host crash) by writing an invalid value to the GICD.SGIR register. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100868 - http://www.securitytracker.com/id/1031746 - http://xenbits.xen.org/xsa/advisory-117.html - http://www.securityfocus.com/bid/72591
CVE ID: CVE-2015-0269 State: PUBLISHED Published: 2017-05-26T17:00:00 Last Updated: 2024-08-06T04:03:10.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated "back end" users to view files outside their file mounts or the document root via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://contao.org/en/news/contao-3_2_19.html - https://contao.org/en/news/directory-traversal-vulnerability-cve-2015-0269.html - https://contao.org/en/news/contao-3_4_4.html
CVE ID: CVE-2015-0270 State: PUBLISHED Published: 2019-10-25T13:33:19 Last Updated: 2024-08-06T04:03:10.732Z Vendors: Zend Products: Zend Framework Problem Types: SQL injection Description: Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter. Additional Analyst Notes: - CVE Program Container: References: - https://framework.zend.com/security/advisory/ZF2015-02
CVE ID: CVE-2015-0271 State: PUBLISHED Published: 2015-03-10T14:00:00 Last Updated: 2024-08-06T04:03:10.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: The log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard (horizon) allows remote attackers to read arbitrary files via a crafted path. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0841.html - http://rhn.redhat.com/errata/RHSA-2015-0645.html - http://rhn.redhat.com/errata/RHSA-2015-0840.html
CVE ID: CVE-2015-0272 State: PUBLISHED Published: 2015-11-17T15:00:00 Last Updated: 2024-08-06T04:03:10.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability than CVE-2015-8215. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html - http://www.ubuntu.com/usn/USN-2792-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2015-
ensuse.org/opensuse-security-announce/2015-12/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.securityfocus.com/bid/76814 - http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d5fc88e573fa58b93034b04d35a2454f5d28cad9 - https://bugzilla.redhat.com/show_bug.cgi?id=1192132 - http://lists.opensuse.org/opensuse-se
b93034b04d35a2454f5d28cad9 - https://bugzilla.redhat.com/show_bug.cgi?id=1192132 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
CVE ID: CVE-2015-0273 State: PUBLISHED Published: 2015-03-30T10:00:00 Last Updated: 2024-08-06T04:03:10.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3195 - http:/
. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3195 - http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html - https://support.apple.com/HT205375 - http://www.ubuntu.com/usn/USN-2535-1 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://bugs.php.net/bug.php?id=68942 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:079 - http://www.oracle.com/technetwork/topics/security/bulletinjul201
.mandriva.com/security/advisories?name=MDVSA-2015:079 - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://php.net/ChangeLog-5.php - https://bugzilla.redhat.com/show_bug.cgi?id=1194730 - https://support.apple.com/HT205267 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html - http://www.securitytracker.com/id/1031945 - http://support.apple.com/kb/HT204942 - http://www.securityfocus.com/bid/72701 - http://lists.opensuse.org/opensuse
945 - http://support.apple.com/kb/HT204942 - http://www.securityfocus.com/bid/72701 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html - http://rhn.redhat.com/errata/RHSA-2015-1135.html - http://rhn.redhat.com/errata/RHSA-2015-1053.html - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=71335e6ebabc1b12c057d8017fd811892ecdfd24 - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - https://security.gentoo.org/glsa/201606-10 - http://rhn.redhat.com/errata/RHSA-2015-1066.html - http://rhn.redhat.com/errata/RHSA-2015-1218.html
CVE ID: CVE-2015-0274 State: PUBLISHED Published: 2015-03-16T10:00:00 Last Updated: 2024-08-06T04:03:10.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a denial of service (transaction overrun and data corruption) or possibly gain privileges by leveraging XFS filesystem access. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2544-1 - https://github.com/torvalds/linux/commit/8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59 - http://rhn.redhat.com/errata/RHSA-2015-0694.html - http:/
rvalds/linux/commit/8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59 - http://rhn.redhat.com/errata/RHSA-2015-0694.html - http://rhn.redhat.com/errata/RHSA-2015-0290.html - https://bugzilla.redhat.com/show_bug.cgi?id=1195248 - http://www.securitytracker.com/id/1031853 - http://www.ubuntu.com/usn/USN-2543-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59
CVE ID: CVE-2015-0275 State: PUBLISHED Published: 2015-10-19T10:00:00 Last Updated: 2024-08-06T04:03:10.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service (BUG) via a crafted fallocate zero-range request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034454 - https://bugzilla.redhat.com/show_bug.cgi?id=1193907 - http://www.spinics.net/lists/linux-ext4/msg47193.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2af21aae11972fa924374ddcf52e88347cf5a8 - http://rhn.redhat
nel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2af21aae11972fa924374ddcf52e88347cf5a8 - http://rhn.redhat.com/errata/RHSA-2015-1778.html - http://rhn.redhat.com/errata/RHSA-2015-1787.html - http://www.securityfocus.com/bid/75139 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://github.com/torvalds/linux/commit/0f2af21aae11972fa924374ddcf52e88347cf5a8 - http://www.openwall.com/lists/oss-security/2015/02/23/14 - https://support.f5.com/csp/article/K05211147
CVE ID: CVE-2015-0276 State: PUBLISHED Published: 2017-09-21T14:00:00 Last Updated: 2024-08-06T04:03:10.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/04/10/8 - http://www.securityfocus.com/bid/74052 - https://kallithea-scm.org/security/cve-2015-0276.html
CVE ID: CVE-2015-0277 State: PUBLISHED Published: 2015-08-17T20:00:00 Last Updated: 2024-08-06T04:03:10.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction is specified, which allows remote attackers to log in to other users' accounts via a crafted SAML assertion. NOTE: this identifier has been SPLIT per ADT2 due to different vulnerability types. See CVE-2015-6254 for lack of validation for the Destination attribute in a Response element in a SAML assertion. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.co
ponse element in a SAML assertion. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0849.html - http://rhn.redhat.com/errata/RHSA-2015-0848.html - http://rhn.redhat.com/errata/RHSA-2015-0846.html - https://bugzilla.redhat.com/show_bug.cgi?id=1194832 - https://issues.jboss.org/browse/PLINK-678 - http://rhn.redhat.com/errata/RHSA-2015-0847.html
CVE ID: CVE-2015-0278 State: PUBLISHED Published: 2015-05-18T15:00:00 Last Updated: 2024-08-06T04:03:10.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21msg/libuv/0JZxwLMtsMI/jraczskYWWQJ - http://www.mandriva.com/security/advisories?name=MDVSA-2015:228 - http://advisories.mageia.org/MGASA-2015-0186.html - https://lists.fedoraproject.org/pipermail/package-announce/2015-February/150526.html - https://github.com/libuv/libuv/pull/215 -
ists.fedoraproject.org/pipermail/package-announce/2015-February/150526.html - https://github.com/libuv/libuv/pull/215 - https://github.com/libuv/libuv/commit/66ab38918c911bcff025562cf06237d7fedaba0c - https://security.gentoo.org/glsa/201611-10
CVE ID: CVE-2015-0279 State: PUBLISHED Published: 2015-03-26T14:00:00 Last Updated: 2024-08-06T04:03:10.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1192140 - http://rhn.redhat.com/errata/RHSA-2015-0719.html - http://jvn.jp/en/jp/JVN56297719/index.html - http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html - http://seclists.org/fulldisclosure/2019/Jul/21 - http://packetstormsecurity.com/files/153734/Tufin-Se
2015-001959.html - http://seclists.org/fulldisclosure/2019/Jul/21 - http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html - http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html - http://seclists.org/fulldisclosure/2020/Mar/21
CVE ID: CVE-2015-0280 State: REJECTED Published: 2022-07-08T17:35:54 Last Updated: 2022-07-08T17:35:54 Description: No description available.
CVE ID: CVE-2015-0281 State: REJECTED Published: 2022-07-08T17:35:58 Last Updated: 2022-07-08T17:35:58 Description: No description available.