Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
//www.ubuntu.com/usn/USN-3006-1 - http://www.securitytracker.com/id/1035455 - https://github.com/torvalds/linux/commit/ea3d7209ca01da209cda6f0dea8be9cc4b7a933b - http://www.ubuntu.com/usn/USN-3005-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ea3d7209ca01da209cda6f0dea8be9cc4b7a933b - https://access.redhat.com/errata/RHSA-2017:2669 - http://www.openwall.com/lists/oss-security/2016/04/01/4 - http://www.securityfocus.com/bid/85798 - https://access.redhat.com/errata/RHSA-2017:2077 - http://www.ubuntu.com/usn/USN-3007-1 - https://access.redhat.com/errata/RHSA-2017:1842 - https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html - https://lists.debian.org/
m/errata/RHSA-2017:1842 - https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
CVE ID: CVE-2015-8840 State: PUBLISHED Published: 2016-04-08T00:00:00 Last Updated: 2024-08-06T08:29:22.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML Data Archiving Service (XML DAS) in SAP NetWeaver AS Java does not check authorization, which allows remote authenticated users to obtain sensitive information, gain privileges, or possibly have unspecified other impact via requests to (1) webcontent/cas/cas_enter.jsp, (2) webcontent/cas/cas_validate.jsp, or (3) webcontent/aas/aas_store.jsp, aka SAP Security Note 1945215. Additional Analyst Notes: - CVE Program Container: References: - http://scn.sap.com/community/security/blog/2015/07/15/sap-security-notes-july-2015 -
VE Program Container: References: - http://scn.sap.com/community/security/blog/2015/07/15/sap-security-notes-july-2015 - https://erpscan.io/advisories/erpscan-15-017-sap-netweaver-j2ee-das-service-unauthorized-access/
CVE ID: CVE-2015-8841 State: PUBLISHED Published: 2016-04-08T16:00:00Z Last Updated: 2024-09-17T00:21:24.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary code via a large number of languages in an EPOC installation file of type SIS_FILE_MULTILANG. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136082/ESET-NOD32-Heap-Overflow.html - http://www.virusradar.com/en/update/info/11861 - https://bugs.chromium.org/p/project-zero/issues/detail?id=466
CVE ID: CVE-2015-8842 State: PUBLISHED Published: 2016-04-20T16:00:00 Last Updated: 2024-08-06T08:29:22.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/systemd/systemd/commit/afae249efa4774c6676738ac5de6aeb4daf4889f - http://www.openwall.com/lists/oss-security/2016/04/08/15 - http://www.openwall.com/lists/oss-security/2016/04/08/14 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00109.html - http://list
ll.com/lists/oss-security/2016/04/08/14 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00109.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00044.html - https://bugzilla.suse.com/show_bug.cgi?id=972612
CVE ID: CVE-2015-8843 State: PUBLISHED Published: 2016-04-13T15:00:00Z Last Updated: 2024-09-16T17:33:36.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php#FRD-35 - http://www.zerodayinitiative.com/advisories/ZDI-15-640
CVE ID: CVE-2015-8844 State: PUBLISHED Published: 2016-04-27T17:00:00 Last Updated: 2024-08-06T08:29:22.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: The signal implementation in the Linux kernel before 4.3.5 on powerpc platforms does not check for an MSR with both the S and T bits set, which allows local users to cause a denial of service (TM Bad Thing exception and panic) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.5 - http://www.openwall.com/lists/oss-security/2016/04/13/1 - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://git.kernel.org/cgit/linux/kernel/gi
ss-security/2016/04/13/1 - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d2b9d2a5ad5ef04ff978c9923d19730cb05efd55 - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://www.securitytracker.com/id/1035594 - https://github.com/torvalds/linux/commit/d2b9d2a5ad5ef04ff978c9923d19730cb05efd55 - https://bugzilla.redhat.com/show_bug.cgi?id=1326540
CVE ID: CVE-2015-8845 State: PUBLISHED Published: 2016-04-27T17:00:00 Last Updated: 2024-08-06T08:29:22.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend mode exists before proceeding with a tm_reclaim call, which allows local users to cause a denial of service (TM Bad Thing exception and panic) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/
pensuse-security-announce/2016-06/msg00054.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7f821fc9c77a9b01fe7b1d6e72717b33d8d64142 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - http://www.openwall.com/lists/oss-security/2016/04/13/1 - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://www.securitytracker.com/id/1035594 - https://bugzilla.redhat.com/show_bug.cgi?id=1326540 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - https://github.com/torvalds/linux/commit/7f821fc9c77a9b01fe
nsuse.org/opensuse-security-announce/2016-08/msg00044.html - https://github.com/torvalds/linux/commit/7f821fc9c77a9b01fe7b1d6e72717b33d8d64142 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE ID: CVE-2015-8851 State: PUBLISHED Published: 2020-01-30T20:43:26 Last Updated: 2024-08-06T08:29:22.071Z Vendors: node-uuid Products: node-uuid Problem Types: Other Description: node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/broofa/node-uuid/commit/672f3834ed02c798aa021c618d0a5666c8da000d - https://nodesecurity.io/advisories/93 - http://www.openwall.com/lists/oss-security/2016/04/13/8 - https://bugzilla.redhat.com/show_bug.cgi?id=1327056
CVE ID: CVE-2015-8852 State: PUBLISHED Published: 2016-04-25T14:00:00 Last Updated: 2024-08-06T08:29:22.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r (carriage return) character in conjunction with multiple Content-Length headers in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3553 - https://www.varnish-cache.org/lists/pipermail/varnish-announce/2015-March/000701.html - http://www.openwall.com/
-3553 - https://www.varnish-cache.org/lists/pipermail/varnish-announce/2015-March/000701.html - http://www.openwall.com/lists/oss-security/2016/04/18/7 - https://security.gentoo.org/glsa/201607-10 - https://github.com/varnish/Varnish-Cache/commit/29870c8fe95e4e8a672f6f28c5fbe692bea09e9c - https://github.com/varnish/Varnish-Cache/commit/85e8468bec9416bd7e16b0d80cb820ecd2b330c3 - http://www.openwall.com/lists/oss-security/2016/04/16/1 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00064.html
CVE ID: CVE-2015-8853 State: PUBLISHED Published: 2016-05-25T15:00:00 Last Updated: 2024-08-06T08:29:22.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of service (infinite loop) via crafted utf-8 data, as demonstrated by "a\x80." Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-75 - http://www.openwall.com/lists/oss-security/2016/04/20/7 - https://usn.ubuntu.com/3625-2/ - http://www.openwall.com/lists/oss-security/2016/04/20/5 - https://rt.perl.org/Public/Bug/Display.h
.ubuntu.com/3625-2/ - http://www.openwall.com/lists/oss-security/2016/04/20/5 - https://rt.perl.org/Public/Bug/Display.html?id=123562 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.securityfocus.com/bid/86707 - https://bugzilla.redhat.com/show_bug.cgi?id=1329106 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http://perl5.git.perl.org/perl.git/commitdiff/22b433eff9a1ffa2454e18405a56650f07b385b5 - https://usn.ubuntu.com/3625-1/ - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183592.html
CVE ID: CVE-2015-8854 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T08:29:22.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service (CPU consumption) via unspecified vectors that trigger a "catastrophic backtracking issue for the em inline rule," aka a "regular expression denial of service (ReDoS)." Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/23 - http://www.openwall.com/lists/oss-security/2016/04/20/11 - https://support.f5.com/csp/article/K05052081?utm_source=f5support&amp%3Butm_medium=RSS - https://lists.fedora
04/20/11 - https://support.f5.com/csp/article/K05052081?utm_source=f5support&amp%3Butm_medium=RSS - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BO2RMVVZVV6NFTU46B5RYRK7ZCXYARZS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6BJG6RGDH7ZWVVAUFBFI5L32RSMQN2S/
CVE ID: CVE-2015-8855 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T08:29:22.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: The semver package before 4.3.2 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a "regular expression denial of service (ReDoS)." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/86957 - https://nodesecurity.io/advisories/31 - http://www.openwall.com/lists/oss-security/2016/04/20/11
CVE ID: CVE-2015-8856 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T08:29:22.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the serve-index package before 1.6.3 for Node.js allows remote attackers to inject arbitrary web script or HTML via a crafted file or directory name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96392 - https://nodesecurity.io/advisories/34 - http://www.openwall.com/lists/oss-security/2016/04/20/11
CVE ID: CVE-2015-8857 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T08:29:22.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: The uglify-js package before 2.4.24 for Node.js does not properly account for non-boolean values when rewriting boolean expressions, which might allow attackers to bypass security mechanisms or possibly have unspecified other impact by leveraging improperly rewritten Javascript. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96410 - https://nodesecurity.io/advisories/39 - http://www.openwall.com/lists/oss-security/2016/04/20/11
CVE ID: CVE-2015-8858 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T08:29:22.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of service (CPU consumption) via crafted input in a parse call, aka a "regular expression denial of service (ReDoS)." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96409 - https://nodesecurity.io/advisories/48 - http://www.openwall.com/lists/oss-security/2016/04/20/11
CVE ID: CVE-2015-8859 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T08:29:22.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96435 - https://nodesecurity.io/advisories/56 - http://www.openwall.com/lists/oss-security/2016/04/20/11
CVE ID: CVE-2015-8860 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T08:29:22.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tar package before 2.0.0 for Node.js allows remote attackers to write to arbitrary files via a symlink attack in an archive. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/57 - http://www.openwall.com/lists/oss-security/2016/04/20/11
CVE ID: CVE-2015-8861 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T08:29:22.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: The handlebars package before 4.0.0 for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging a template with an attribute that is not quoted. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2016-18 - https://www.sourceclear.com/blog/handlebars_vulnerability_research_findings/ - http://www.securityfocus.com/bid/96434 - http://www.openwall.com/lists/oss-security/2016/04/20/11
CVE ID: CVE-2015-8862 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T08:29:22.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: mustache package before 2.2.1 for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging a template with an attribute that is not quoted. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/62 - http://www.securityfocus.com/bid/96436 - https://www.tenable.com/security/tns-2016-18 - http://www.openwall.com/lists/oss-security/2016/04/20/11
CVE ID: CVE-2015-8863 State: PUBLISHED Published: 2016-05-06T17:00:00 Last Updated: 2024-08-06T08:29:22.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a denial of service (crash) via a long JSON-encoded number, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-1106.html - http://rhn.redhat.com/errata/RHSA-2016-1099.html - http://www.openwall.com/lists/oss-security/2016/04/23/2 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00012.html - http://rhn.redhat.com/errata/RHSA-2016-1
16/04/23/2 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00012.html - http://rhn.redhat.com/errata/RHSA-2016-1098.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802231 - https://github.com/stedolan/jq/commit/8eb1367ca44e772963e704a700ef72ae2e12babd - https://github.com/stedolan/jq/issues/995 - http://www.openwall.com/lists/oss-security/2016/04/23/1 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00014.html - https://security.gentoo.org/glsa/201612-20
CVE ID: CVE-2015-8864 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T08:29:22.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/roundcube/roundcubemail/commit/40d7342dd9c9bd2a1d613edc848ed95a4d71aa18 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00078.html - https://github.com/roundcube/roundcubemail/wiki/Changelog#release-115 - http://li
ensuse-updates/2016-08/msg00078.html - https://github.com/roundcube/roundcubemail/wiki/Changelog#release-115 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00079.html - https://github.com/roundcube/roundcubemail/releases/tag/1.0.9 - https://github.com/roundcube/roundcubemail/issues/4949 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00095.html - https://github.com/roundcube/roundcubemail/releases/tag/1.1.5
CVE ID: CVE-2015-8865 State: PUBLISHED Published: 2016-05-20T10:00:00 Last Updated: 2024-08-06T08:29:22.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo component in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5, mishandles continuation-level jumps, which allows context-dependent attackers to cause a denial of service (buffer overflow and application crash) or possibly execute arbitrary code via a crafted magic file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2952-1 - https://github.com/file/file/commit/6713ca45e7757297381f4b4cd
iner: References: - http://www.ubuntu.com/usn/USN-2952-1 - https://github.com/file/file/commit/6713ca45e7757297381f4b4cdb9cf5e624a9ad36 - http://www.php.net/ChangeLog-7.php - https://security.gentoo.org/glsa/201611-22 - http://www.securityfocus.com/bid/85802 - https://support.apple.com/HT206567 - https://usn.ubuntu.com/3686-1/ - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.debian.org/security/2016/dsa-3560 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fe13566c93f118a15a96320a546c7878fd0cfc5e - https://bugs.php.net/bug.php?id=71527 - http://www.ubuntu.com/usn/USN-2952-2 - https://usn.ubuntu.com/3686-2/ - http://lists.apple.com/archives/security-announce/2016/May/msg00004
om/usn/USN-2952-2 - https://usn.ubuntu.com/3686-2/ - http://lists.apple.com/archives/security-announce/2016/May/msg00004.html - http://www.php.net/ChangeLog-5.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html - https://security.gentoo.org/glsa/201701-42 - http://www.openwall.com/lists/oss-security/2016/04/24/1 - http://bugs.gw.com/view.php?id=522
CVE ID: CVE-2015-8866 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T08:29:22.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxml_disable_entity_loader changes in other threads, which allows remote attackers to conduct XML External Entity (XXE) and XML Entity Expansion (XEE) attacks via a crafted XML document, a related issue to CVE-2015-5161. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2952-1 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=de31324c221c1791b26350ba106cc26bad2
p://www.ubuntu.com/usn/USN-2952-1 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=de31324c221c1791b26350ba106cc26bad23ace9 - https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1509817 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.ubuntu.com/usn/USN-2952-2 - http://www.php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=64938 - http://www.securityfocus.com/bid/87470 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00033.html - http://www.openwall.com/lists/oss-security/2016/04/24/1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00056.html
CVE ID: CVE-2015-8867 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T08:29:22.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: The openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 incorrectly relies on the deprecated RAND_pseudo_bytes function, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2952-1 - http://www.php.net/ChangeLog-7.php - https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1534203 - http://rhn.redhat
1 - http://www.php.net/ChangeLog-7.php - https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1534203 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=16023f3e3b9c06cf677c3c980e8d574e4c162827 - http://www.ubuntu.com/usn/USN-2952-2 - https://bugs.php.net/bug.php?id=70014 - http://www.php.net/ChangeLog-5.php - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00033.html - http://www.openwall.com/lists/oss-security/2016/04/24/1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00056.html
CVE ID: CVE-2015-8868 State: PUBLISHED Published: 2016-05-06T17:00:00 Last Updated: 2024-08-06T08:29:22.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freedesktop.org/show_bug.cgi?id=93476 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00068.html - http://www.debian.org/security/2016/dsa
gi?id=93476 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00068.html - http://www.debian.org/security/2016/dsa-3563 - https://security.gentoo.org/glsa/201611-15 - http://rhn.redhat.com/errata/RHSA-2016-2580.html - http://www.securityfocus.com/bid/89324 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183142.html - https://poppler.freedesktop.org/releases.html - http://www.openwall.com/lists/oss-security/2016/04/12/1 - https://cgit.freedesktop.org/poppler/poppler/commit/?id=b3425dd3261679958cd56c0f71995c15d2124433 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00077.html - http://www.ubuntu.com/usn/USN-2958-1 - http://lists.fedoraproject.org/pipermail/
pensuse-updates/2016-06/msg00077.html - http://www.ubuntu.com/usn/USN-2958-1 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183107.html