Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-8509 State: PUBLISHED Published: 2016-01-03T02:00:00 Last Updated: 2024-08-06T08:20:42.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Template.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2 does not properly construct CSV files, which allows remote attackers to obtain sensitive information by leveraging a web browser that interprets CSV data as JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Dec/131 - https://bugzilla.mozilla.org/show_bug.cgi?id=1232785 - http://www.securityfocus.com/bid/79662 - http://www.securitytracker.com/id
ugzilla.mozilla.org/show_bug.cgi?id=1232785 - http://www.securityfocus.com/bid/79662 - http://www.securitytracker.com/id/1034556 - http://packetstormsecurity.com/files/135048/Bugzilla-Cross-Site-Scripting-Information-Leak.html - https://www.bugzilla.org/security/4.2.15/
CVE ID: CVE-2015-8510 State: PUBLISHED Published: 2016-01-09T02:00:00 Last Updated: 2024-08-06T08:20:42.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the internationalization feature in the default homescreen app in Mozilla Firefox OS before 2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted web site that is mishandled during "Add to home screen" bookmarking. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2015/mfsa2015-153.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1190038
CVE ID: CVE-2015-8511 State: PUBLISHED Published: 2016-01-09T02:00:00 Last Updated: 2024-08-06T08:20:42.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1173284 - http://www.mozilla.org/security/announce/2015/mfsa2015-152.html
CVE ID: CVE-2015-8512 State: PUBLISHED Published: 2016-01-09T02:00:00 Last Updated: 2024-08-06T08:20:42.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which makes it easier for physically proximate attackers to obtain access by entering many passcode guesses. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2015/mfsa2015-151.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1181571
CVE ID: CVE-2015-8513 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8514 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8515 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8516 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8517 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8519 State: PUBLISHED Published: 2016-04-04T14:00:00 Last Updated: 2024-08-06T08:20:42.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to execute arbitrary code via a crafted command, a different vulnerability than CVE-2015-8520, CVE-2015-8521, and CVE-2015-8522. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84161 - http://www-01.ibm.com/support/docview.wss?uid=swg21975536
CVE ID: CVE-2015-8520 State: PUBLISHED Published: 2016-04-04T14:00:00 Last Updated: 2024-08-06T08:20:42.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to execute arbitrary code via a crafted command, a different vulnerability than CVE-2015-8519, CVE-2015-8521, and CVE-2015-8522. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84166 - http://www-01.ibm.com/support/docview.wss?uid=swg21975536
CVE ID: CVE-2015-8521 State: PUBLISHED Published: 2016-04-04T14:00:00 Last Updated: 2024-08-06T08:20:42.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to execute arbitrary code via a crafted command, a different vulnerability than CVE-2015-8519, CVE-2015-8520, and CVE-2015-8522. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84167 - http://www-01.ibm.com/support/docview.wss?uid=swg21975536
CVE ID: CVE-2015-8522 State: PUBLISHED Published: 2016-04-04T14:00:00 Last Updated: 2024-08-06T08:20:42.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to execute arbitrary code via a crafted command, a different vulnerability than CVE-2015-8519, CVE-2015-8520, and CVE-2015-8521. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84163 - http://www-01.ibm.com/support/docview.wss?uid=swg21975536
CVE ID: CVE-2015-8523 State: PUBLISHED Published: 2016-04-04T14:00:00 Last Updated: 2024-08-06T08:20:42.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to cause a denial of service (service crash) via crafted packets to a TCP port. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84164 - http://www-01.ibm.com/support/docview.wss?uid=swg21975536
CVE ID: CVE-2015-8524 State: PUBLISHED Published: 2016-02-29T11:00:00 Last Updated: 2024-08-06T08:20:42.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Process Portal in IBM Business Process Manager 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035126 - http://www-01.ibm.com/support/docview.wss?uid=swg21974472 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR54981
CVE ID: CVE-2015-8525 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8526 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8527 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8528 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8530 State: PUBLISHED Published: 2016-05-14T15:00:00 Last Updated: 2024-08-06T08:20:42.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.0.0.2-IF0008, 21 before 21.0.0.2-IF0010, 22 before 22.0.0.2-IF0011, 23 before 23.0.0.3-IF0001, and 24 before 24.0.0.0-IF0003 allows remote authenticated users to execute arbitrary code via a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21982035 - http://www.securityfocus.com/bid/90524 - http://www.securitytracker.com/id/103586
/support/docview.wss?uid=swg21982035 - http://www.securityfocus.com/bid/90524 - http://www.securitytracker.com/id/1035867
CVE ID: CVE-2015-8531 State: PUBLISHED Published: 2016-02-15T02:00:00 Last Updated: 2024-08-06T08:20:42.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Security Access Manager for Web 8.0 before 8.0.1.3 IF4 and 9.0 before 9.0.0.1 IF1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV80692 - http://www-01.ibm.com/support/docview.wss?uid=swg21974651
CVE ID: CVE-2015-8532 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8533 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8534 State: PUBLISHED Published: 2020-03-27T14:05:01 Last Updated: 2024-08-06T08:20:42.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was discovered (fixed and publicly disclosed in 2015) in Lenovo Solution Center (LSC) prior to version 3.3.002 that could allow a user to execute arbitrary code with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/len_4326
CVE ID: CVE-2015-8535 State: PUBLISHED Published: 2020-03-27T14:05:01 Last Updated: 2024-08-06T08:20:42.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A directory traversal vulnerability was discovered (fixed and publicly disclosed in 2015) in Lenovo Solution Center (LSC) prior to version 3.3.002 that could allow a user to execute arbitrary code with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/len_4326
CVE ID: CVE-2015-8536 State: PUBLISHED Published: 2020-03-27T14:05:01 Last Updated: 2024-08-06T08:20:42.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was discovered (fixed and publicly disclosed in 2015) in Lenovo Solution Center (LSC) prior to version 3.3.002 that could allow cross-site request forgery. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/len_4326
CVE ID: CVE-2015-8537 State: PUBLISHED Published: 2016-04-12T14:00:00 Last Updated: 2024-08-06T08:20:42.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed. Additional Analyst Notes: - CVE Program Container: References: - http://www.redmine.org/news/103 - https://github.com/redmine/redmine/commit/7e423fb4538247d59e01958c48b491f196a1de56 - http://www.debian.org/security/2016/dsa-3529
CVE ID: CVE-2015-8538 State: PUBLISHED Published: 2017-06-07T20:00:00 Last Updated: 2024-08-06T08:20:42.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: dwarf_leb.c in libdwarf allows attackers to cause a denial of service (SIGSEGV). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1291299 - http://www.openwall.com/lists/oss-security/2015/12/10/3
CVE ID: CVE-2015-8539 State: PUBLISHED Published: 2016-02-08T02:00:00 Last Updated: 2024-08-06T08:20:42.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/user_defined.c. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00009.html - https://bugzilla.redhat.com/show_bug.cgi?id=1284450 - https://access.redhat.com/errata/RHSA-
nce/2016-02/msg00009.html - https://bugzilla.redhat.com/show_bug.cgi?id=1284450 - https://access.redhat.com/errata/RHSA-2018:0181 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00034.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=096fe9eaea40a17e125569f9e657e34cdb6d73bd - https://github.com/torvalds/linux/commit/096fe9eaea40a17e125569f9e657e34cdb6d73bd - http://www.openwall.com/lists/oss-security/2015/12/09/1 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00017.html - https://access.redhat.com/errata/RHSA-2018:0152 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html - http://lists.opensuse.org/op
SA-2018:0152 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00011.html - https://access.redhat.com/errata/RHSA-2018:0151 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00020.html - https://usn.ubuntu.com/3798-1/ - http://lists.opensuse.org/opensuse-security-announce/2016-02/ms
2016-02/msg00020.html - https://usn.ubuntu.com/3798-1/ - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00008.html - https://usn.ubuntu.com/3798-2/ - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00018.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
CVE ID: CVE-2015-8540 State: PUBLISHED Published: 2016-04-14T14:00:00 Last Updated: 2024-08-06T08:20:42.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/projects/libpng/files/libpng10/1.0.66/ - https://security.gentoo.org/glsa/201611-08 - http://www.openw
//sourceforge.net/projects/libpng/files/libpng10/1.0.66/ - https://security.gentoo.org/glsa/201611-08 - http://www.openwall.com/lists/oss-security/2015/12/11/2 - http://sourceforge.net/p/libpng/code/ci/d9006f683c641793252d92254a75ae9b815b42ed/ - http://sourceforge.net/projects/libpng/files/libpng15/1.5.26/ - https://access.redhat.com/errata/RHSA-2016:1430 - http://www.openwall.com/lists/oss-security/2015/12/10/6 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://sourceforge.net/projects/libpng/files/libpng14/1.4.19/ - http://www.openwall.com/lists/oss-security/2015/12/11/1 - http://www.openwall.com/lists/oss-security/2015/12/10/7 - http://sourceforge.ne
ll.com/lists/oss-security/2015/12/11/1 - http://www.openwall.com/lists/oss-security/2015/12/10/7 - http://sourceforge.net/projects/libpng/files/libpng12/1.2.56/ - http://www.debian.org/security/2016/dsa-3443 - http://sourceforge.net/p/libpng/bugs/244/ - http://www.securityfocus.com/bid/80592 - http://www.openwall.com/lists/oss-security/2015/12/17/10 - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174435.html - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.o
//lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2015-8542 State: PUBLISHED Published: 2016-12-15T06:31:00 Last Updated: 2024-08-06T08:20:43.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open-Xchange Guard before 2.2.0-rev8. The "getprivkeybyid" API call is used to download a PGP Private Key for a specific user after providing authentication credentials. Clients provide the "id" and "cid" parameter to specify the current user by its user- and context-ID. The "auth" parameter contains a hashed password string which gets created by the client by asking the user to enter his or her OX Guard password. This parameter is used as single point of authentication when accessing PGP Private Key
er his or her OX Guard password. This parameter is used as single point of authentication when accessing PGP Private Keys. In case a user has set the same password as another user, it is possible to download another user's PGP Private Key by iterating the "id" and "cid" parameters. This kind of attack would also be able by brute-forcing login credentials, but since the "id" and "cid" parameters are sequential they are much easier to predict than a user's login name. At the same time, there are some obvious insecure standard passwords that are widely used. A attacker could send the hashed representation of typically weak passwords and randomly fetch Private Key of matching accounts. The attac
end the hashed representation of typically weak passwords and randomly fetch Private Key of matching accounts. The attack can be executed by both internal users and "guests" which use the external mail reader. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/537678/100/0/threaded - http://www.securitytracker.com/id/1035174 - http://packetstormsecurity.com/files/136069/Open-Xchange-Guard-2.2.0-2.0-Private-Key-Disclosure.html
CVE ID: CVE-2015-8543 State: PUBLISHED Published: 2015-12-28T11:00:00 Last Updated: 2024-08-06T08:20:43.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0855.html - http://www.securitytracker.c
: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0855.html - http://www.securitytracker.com/id/1034892 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.ubuntu.com/usn/USN-2886-1 - http://www.ubuntu.com/usn/USN-2890-3 - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html - http://www.securityfocus.com/bid/79698 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.ubuntu.com/usn/USN-2890-2 - https://github.com/torvalds/linux/commit/79462ad02e861803b3840cc
/msg00038.html - http://www.ubuntu.com/usn/USN-2890-2 - https://github.com/torvalds/linux/commit/79462ad02e861803b3840cc782248c7359451cd9 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=79462ad02e861803b3840cc782248c7359451cd9 - http://www.debian.org/security/2015/dsa-3426 - http://www.openwall.com/lists/oss-security/2015/12/09/5 - http://www.ubuntu.com/usn/USN-2890-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1290475 - http://www.debian.org/security/2016/dsa-3434 - http://www.ubuntu.com/usn/USN-2888-1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
CVE ID: CVE-2015-8544 State: PUBLISHED Published: 2017-02-07T17:00:00 Last Updated: 2024-08-06T08:20:43.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp SnapDrive for Windows before 7.0.2P4, 7.0.3, and 7.1 before 7.1.3P1 allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20160111-0001/ - https://kb.netapp.com/support/s/article/cve-2015-8544-sensitive-information-disclosure-in-snapdrive-for-windows
CVE ID: CVE-2015-8546 State: PUBLISHED Published: 2020-04-10T18:43:53 Last Updated: 2024-08-06T08:20:43.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with software through 2015-11-12, affecting the Galaxy S6/S6 Edge, Galaxy S6 Edge+, and Galaxy Note5 with the Shannon333 chipset. There is a stack-based buffer overflow in the baseband process that is exploitable for remote code execution via a fake base station. The Samsung ID is SVE-2015-5123 (December 2015). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2015-8547 State: PUBLISHED Published: 2016-01-08T19:00:00 Last Updated: 2024-08-06T08:20:43.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service (application crash) via the "/op *" command in a query. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-12/msg00099.html - https://github.com/quassel/quassel/pull/153 - https://github.com/quassel/quassel/commit/b8edbda019eeb99da8663193e224efc9d1265dc7 - http://lists.fedoraproject.org/pipermail/package-announce/2016-Janu
el/commit/b8edbda019eeb99da8663193e224efc9d1265dc7 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174976.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174938.html - http://www.openwall.com/lists/oss-security/2015/12/12/1 - http://www.openwall.com/lists/oss-security/2015/12/13/1
CVE ID: CVE-2015-8548 State: PUBLISHED Published: 2015-12-14T11:00:00 Last Updated: 2024-08-06T08:20:43.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.80, allow attackers to cause a denial of service or possibly have other impact via unknown vectors, a different issue than CVE-2015-8478. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_8.html - http://rhn.redhat.com/errata/RHSA-2015-2618.html - http://www.ubuntu.com/usn/USN-2860-1
CVE ID: CVE-2015-8549 State: PUBLISHED Published: 2020-01-15T14:48:19 Last Updated: 2024-08-06T08:20:43.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in PyAMF before 0.8.0 allows remote attackers to cause a denial of service or read arbitrary files via a crafted Action Message Format (AMF) payload. Additional Analyst Notes: - CVE Program Container: References: - http://www.ocert.org/advisories/ocert-2015-011.html - http://www.securityfocus.com/archive/1/archive/1/537151/100/0/threaded - https://github.com/hydralabs/pyamf/pull/58 - https://github.com/hydralabs/pyamf/releases/tag/v0.8.0