Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-8618 State: PUBLISHED Published: 2016-01-27T20:00:00 Last Updated: 2024-08-06T08:20:43.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175642.html - http://www.openwall.com/lists/oss-security/2016/01/13/7 - https://go-review.googlesource.com/#/c/17672/ - https://groups.google.com/forum/#%21topic/golang-an
urity/2016/01/13/7 - https://go-review.googlesource.com/#/c/17672/ - https://groups.google.com/forum/#%21topic/golang-announce/MEATuOi_ei4 - https://github.com/golang/go/issues/13515 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00077.html - http://www.openwall.com/lists/oss-security/2015/12/22/9 - http://www.openwall.com/lists/oss-security/2015/12/21/6 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176179.html
CVE ID: CVE-2015-8619 State: PUBLISHED Published: 2017-04-13T17:00:00 Last Updated: 2024-08-06T08:20:43.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service (out-of-bounds write and application crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/12/23/1 - http://www.securityfocus.com/bid/79668 - https://security.gentoo.org/glsa/201604-01 - https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02930.html - http://www.debian.org/security/2016/dsa-3471
CVE ID: CVE-2015-8620 State: PUBLISHED Published: 2016-04-13T14:00:00 Last Updated: 2024-08-06T08:20:43.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Avast virtualization driver (aswSnx.sys) in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus before 11.1.2253 allows local users to gain privileges via a Unicode file path in an IOCTL request. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/135859/Avast-11.1.2245-Heap-Overflow.html - http://seclists.org/fulldisclosure/2016/Feb/94 - https://www.nettitude.co.uk/exploiting-a-kernel-paged-pool-buffer-overflow-in-avast-virtual
fulldisclosure/2016/Feb/94 - https://www.nettitude.co.uk/exploiting-a-kernel-paged-pool-buffer-overflow-in-avast-virtualization-driver/ - http://www.securitytracker.com/id/1035093
CVE ID: CVE-2015-8621 State: PUBLISHED Published: 2017-08-07T17:00:00 Last Updated: 2024-08-06T08:20:43.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: t-coffee before 11.00.8cbe486-2 allows local users to write to ~/.t_coffee globally. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751579 - https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-8621.html - http://www.openwall.com/lists/oss-security/2015/12/23/4 - http://cve.killedkenny.io/cve/CVE-2015-8621 - https://security-tracker.debian.org/tracker/CVE-2015-8621/
CVE ID: CVE-2015-8622 State: PUBLISHED Published: 2017-03-23T20:00:00 Last Updated: 2024-08-06T08:20:43.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1, when is configured with a relative URL, allows remote authenticated users to inject arbitrary web script or HTML via wikitext, as demonstrated by a wikilink to a page named "javascript:alert('XSS!')." Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html - http://www.openwall.com/lists/oss-securit
//lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html - http://www.openwall.com/lists/oss-security/2015/12/23/7 - https://phabricator.wikimedia.org/T117899 - http://www.openwall.com/lists/oss-security/2015/12/21/8
CVE ID: CVE-2015-8623 State: PUBLISHED Published: 2017-03-23T20:00:00 Last Updated: 2024-08-06T08:20:43.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: The User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12 and 1.24.x before 1.24.5 does not perform token comparison in constant time before returning, which allows remote attackers to guess the edit token and bypass CSRF protection via a timing attack, a different vulnerability than CVE-2015-8624. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html - http://www.openwall.com/lists/oss-security/2015/12/23/7 -
a.org/pipermail/mediawiki-announce/2015-December/000186.html - http://www.openwall.com/lists/oss-security/2015/12/23/7 - https://phabricator.wikimedia.org/T119309 - http://www.openwall.com/lists/oss-security/2015/12/21/8 - https://gerrit.wikimedia.org/r/#/c/156336/5/includes/User.php
CVE ID: CVE-2015-8624 State: PUBLISHED Published: 2017-03-23T20:00:00 Last Updated: 2024-08-06T08:20:43.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 does not perform token comparison in constant time before determining if a debugging message should be logged, which allows remote attackers to guess the edit token and bypass CSRF protection via a timing attack, a different vulnerability than CVE-2015-8623. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announc
Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html - http://www.openwall.com/lists/oss-security/2015/12/23/7 - https://phabricator.wikimedia.org/T119309 - http://www.openwall.com/lists/oss-security/2015/12/21/8
CVE ID: CVE-2015-8625 State: PUBLISHED Published: 2017-03-23T20:00:00 Last Updated: 2024-08-06T08:20:43.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly sanitize parameters when calling the cURL library, which allows remote attackers to read arbitrary files via an @ (at sign) character in unspecified POST array parameters. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html - http://www.openwall.com/lists/oss-security/2015/12/23/7 - https://phabricator.wikimedia.org/T118032
cember/000186.html - http://www.openwall.com/lists/oss-security/2015/12/23/7 - https://phabricator.wikimedia.org/T118032 - http://www.openwall.com/lists/oss-security/2015/12/21/8
CVE ID: CVE-2015-8626 State: PUBLISHED Published: 2017-03-23T20:00:00 Last Updated: 2024-08-06T08:20:43.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: The User::randomPassword function in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 generates passwords smaller than $wgMinimalPasswordLength, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html - http://www.openwall.com/lists/oss-security/2015/12/23/7 - http://www.openwall.com/lists/oss-security/2015
/000186.html - http://www.openwall.com/lists/oss-security/2015/12/23/7 - http://www.openwall.com/lists/oss-security/2015/12/21/8 - https://phabricator.wikimedia.org/T115522
CVE ID: CVE-2015-8627 State: PUBLISHED Published: 2017-03-23T20:00:00 Last Updated: 2024-08-06T08:20:43.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly normalize IP addresses containing zero-padded octets, which might allow remote attackers to bypass intended access restrictions by using an IP address that was not supposed to have been allowed. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T97897 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html - http://www.openwall.com/lists/oss
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html - http://www.openwall.com/lists/oss-security/2015/12/23/7 - http://www.openwall.com/lists/oss-security/2015/12/21/8
CVE ID: CVE-2015-8628 State: PUBLISHED Published: 2017-03-23T20:00:00 Last Updated: 2024-08-06T08:20:43.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 allow remote attackers to obtain sensitive user login information via crafted links combined with page view statistics. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html - http://www.openwall.com/lists/oss
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-December/000186.html - http://www.openwall.com/lists/oss-security/2015/12/23/7 - https://phabricator.wikimedia.org/T109724 - http://www.openwall.com/lists/oss-security/2015/12/21/8
CVE ID: CVE-2015-8629 State: PUBLISHED Published: 2016-02-13T02:00:00 Last Updated: 2024-08-06T08:20:43.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters exist as expected, which allows remote authenticated users to obtain sensitive information or cause a denial of service (out-of-bounds read) via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3466 - http://www.securityfocus.com/bid/82801 - http://www.oracle.com/technetwork/topics/
w.debian.org/security/2016/dsa-3466 - http://www.securityfocus.com/bid/82801 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html - http://rhn.redhat.com/errata/RHSA-2016-0493.html - http://krbdev.mit.edu/rt/Ticket/Display.html?id=8341 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securitytracker.com/id/1034914 - http://rhn.redhat.com/errata/RHSA-2016-0532.html - https://github.com/krb5/krb5/commit/df17a1224a3406f57477bcd372c61e04c0e5a5bb - http://lists.opensuse.org/opensuse-updates/2016-02/msg00110.html
CVE ID: CVE-2015-8630 State: PUBLISHED Published: 2016-02-13T02:00:00 Last Updated: 2024-08-06T08:20:43.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by specifying KADM5_POLICY with a NULL policy name. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3466 - http://krbdev.mit.edu/rt/Ticket/Display.html?id=8342 - htt
References: - http://www.debian.org/security/2016/dsa-3466 - http://krbdev.mit.edu/rt/Ticket/Display.html?id=8342 - http://www.securitytracker.com/id/1034915 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html - http://rhn.redhat.com/errata/RHSA-2016-0532.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00110.html - https://github.com/krb5/krb5/commit/b863de7fbf080b15e347a736fdda0a82d42f4f6b
CVE ID: CVE-2015-8631 State: PUBLISHED Published: 2016-02-13T02:00:00 Last Updated: 2024-08-06T08:20:43.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (memory consumption) via a request specifying a NULL principal name. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3466 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html - htt
pics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00059.html - http://www.securitytracker.com/id/1034916 - http://rhn.redhat.com/errata/RHSA-2016-0493.html - http://krbdev.mit.edu/rt/Ticket/Display.html?id=8343 - https://github.com/krb5/krb5/commit/83ed75feba32e46f736fcce0d96a0445f29b96c2 - http://rhn.redhat.com/errata/RHSA-2016-0532.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00110.html
CVE ID: CVE-2015-8634 State: PUBLISHED Published: 2015-12-28T23:00:00 Last Updated: 2024-08-06T08:20:43.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649,
CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, and CVE-2015-8650. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00048.html - http://www.securitytracker.com/id/1034544 - http://rhn.redhat.com/errata/RHSA-2015-2697.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - https://helpx.adobe.com/security/products/flash-player/apsb16-01.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00046.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c0539
ty-announce/2015-12/msg00046.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00047.html - https://www.exploit-db.com/exploits/39221/ - http://www.securityfocus.com/bid/79701 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00045.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
CVE ID: CVE-2015-8635 State: PUBLISHED Published: 2015-12-28T23:00:00 Last Updated: 2024-08-06T08:20:43.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649,
ty-announce/2015-12/msg00046.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://www.exploit-db.com/exploits/39220/ - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00047.html - http://www.securityfocus.com/bid/79701 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00045.html - https://security.gentoo.org/glsa/201601-03 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
CVE ID: CVE-2015-8636 State: PUBLISHED Published: 2015-12-28T23:00:00 Last Updated: 2024-08-06T08:20:43.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8459, CVE-2015-8460, and CVE-2015-8645. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-
and CVE-2015-8645. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00048.html - http://www.securitytracker.com/id/1034544 - http://rhn.redhat.com/errata/RHSA-2015-2697.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - https://www.exploit-db.com/exploits/39219/ - https://helpx.adobe.com/security/products/flash-player/apsb16-01.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00046.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://www.securityfocus.com/bid/79700 - http://lists.opensuse.org/
e/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://www.securityfocus.com/bid/79700 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00047.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00045.html - https://security.gentoo.org/glsa/201601-03 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
CVE ID: CVE-2015-8637 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8638 State: PUBLISHED Published: 2015-12-28T23:00:00 Last Updated: 2024-08-06T08:20:43.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8635, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649,
CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, and CVE-2015-8650. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00048.html - http://www.securitytracker.com/id/1034544 - http://rhn.redhat.com/errata/RHSA-2015-2697.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - https://helpx.adobe.com/security/products/flash-player/apsb16-01.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00046.html - http://www.zerodayinitiative.com/advisories/ZDI-15-648 - https://h20566.www2.hpe.com
ty-announce/2015-12/msg00046.html - http://www.zerodayinitiative.com/advisories/ZDI-15-648 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00047.html - http://www.securityfocus.com/bid/79701 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00045.html - https://security.gentoo.org/glsa/201601-03 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
CVE ID: CVE-2015-8639 State: PUBLISHED Published: 2015-12-28T23:00:00 Last Updated: 2024-08-06T08:20:43.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649,
CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, and CVE-2015-8650. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00048.html - http://www.securitytracker.com/id/1034544 - http://rhn.redhat.com/errata/RHSA-2015-2697.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - https://helpx.adobe.com/security/products/flash-player/apsb16-01.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00046.html - http://www.zerodayinitiative.com/advisories/ZDI-15-649 - https://h20566.www2.hpe.com
ty-announce/2015-12/msg00046.html - http://www.zerodayinitiative.com/advisories/ZDI-15-649 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00047.html - http://www.securityfocus.com/bid/79701 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00045.html - https://security.gentoo.org/glsa/201601-03 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
CVE ID: CVE-2015-8640 State: PUBLISHED Published: 2015-12-28T23:00:00 Last Updated: 2024-08-06T08:20:43.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649,
CVE-2015-8639, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, and CVE-2015-8650. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00048.html - http://www.securitytracker.com/id/1034544 - http://rhn.redhat.com/errata/RHSA-2015-2697.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - https://helpx.adobe.com/security/products/flash-player/apsb16-01.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00046.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c0539
ty-announce/2015-12/msg00046.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00047.html - http://www.securityfocus.com/bid/79701 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00045.html - https://security.gentoo.org/glsa/201601-03 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388