Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
se-updates/2016-01/msg00099.html - http://www.debian.org/security/2015/dsa-3380 - http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.461720 - http://www.securityfocus.com/bid/76959 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=1ddf72180a52d247db88ea42a3e35f824a8fbda1 - http://www.php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=70433 - http://www.openwall.com/lists/oss-security/2015/10/05/8 - http://www.ubuntu.com/usn/USN-2786-1 - https://security.gentoo.org/glsa/201606-10
CVE ID: CVE-2015-7805 State: PUBLISHED Published: 2015-11-17T15:00:00 Last Updated: 2024-08-06T07:58:59.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/11/03/7 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00077.html - http://www.securityfocus.com/bid/77427 - http://packetstormsecurity.com/files/133926/libsndfile-1.0.25-Heap-Overflow.html - http://www.ubuntu.com/usn/USN-2832-1 - https://security.gentoo.o
com/files/133926/libsndfile-1.0.25-Heap-Overflow.html - http://www.ubuntu.com/usn/USN-2832-1 - https://security.gentoo.org/glsa/201612-03 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172607.html - http://lists.opensuse.org/opensuse-updates/2015-11/msg00145.html - http://www.openwall.com/lists/oss-security/2015/11/03/3 - http://www.nemux.org/2015/10/13/libsndfile-1-0-25-heap-overflow/ - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172593.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171466.html - https://www.exploit-db.com/exploits/38447/
CVE ID: CVE-2015-7806 State: PUBLISHED Published: 2017-10-17T16:00:00 Last Updated: 2024-08-06T07:58:59.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8220 - http://appcheck-ng.com/remote-command-execution-in-wordpress-form-manager-plugin-cve-2015-7806/ - https://plugins.trac.wordpress.org/changeset/1264145
CVE ID: CVE-2015-7808 State: PUBLISHED Published: 2015-11-24T20:00:00 Last Updated: 2024-08-06T07:58:59.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vB_Api_Hook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object in the arguments parameter to ajax/api/hook/decodeArguments. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/38629/ - http://pastie.org/pastes/10527766/text?key=wq1hgkcj4afb9ipqzllsq - http://packetstormsecurity.com/files/134331/vBulletin-5.1.2-Unserialize-Code-Executi
66/text?key=wq1hgkcj4afb9ipqzllsq - http://packetstormsecurity.com/files/134331/vBulletin-5.1.2-Unserialize-Code-Execution.html - https://blog.sucuri.net/2015/11/vbulletin-exploits-in-the-wild.html - http://blog.checkpoint.com/2015/11/05/check-point-discovers-critical-vbulletin-0-day/ - http://www.rapid7.com/db/modules/exploit/multi/http/vbulletin_unserialize
CVE ID: CVE-2015-7809 State: PUBLISHED Published: 2015-11-06T21:00:00 Last Updated: 2024-08-06T07:58:59.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the _self variable in a template. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/twigphp/Twig/pull/1759 - http://www.debian.org/security/2015/dsa-3343 - http://symfony.com/blog/security-release-twig-1-20-0 - https://github.com/fabpot/Twig/commit/30be07759a3de2558da5224f127d052ecf492e8f - http://openwall.com/lists/oss-security/2015/10/1
ithub.com/fabpot/Twig/commit/30be07759a3de2558da5224f127d052ecf492e8f - http://openwall.com/lists/oss-security/2015/10/11/2 - http://openwall.com/lists/oss-security/2015/08/21/3
CVE ID: CVE-2015-7810 State: PUBLISHED Published: 2019-11-22T14:23:51 Last Updated: 2024-08-06T07:58:59.892Z Vendors: libbluray Products: libbluray Problem Types: UNKNOWN_TYPE Description: libbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR files Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2015-7810 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-7810 - https://access.redhat.com/security/cve/cve-2015-7810 - http://www.securityfocus.com/bid/72769 - http://www.openwall.com/lists/oss-security/2015/10/12/7
CVE ID: CVE-2015-7812 State: PUBLISHED Published: 2015-11-17T15:00:00 Last Updated: 2024-08-06T07:58:59.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hypercall_create_continuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows local guest users to cause a denial of service (host crash) via a preemptible hypercall to the multicall interface. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171249.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171082.html - http://www.securitytracker.com/id/1034031 - http://xenbits.xen.org/xsa/advisory-1
e-announce/2015-November/171082.html - http://www.securitytracker.com/id/1034031 - http://xenbits.xen.org/xsa/advisory-145.html - http://www.debian.org/security/2015/dsa-3414 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171185.html - https://security.gentoo.org/glsa/201604-03
CVE ID: CVE-2015-7813 State: PUBLISHED Published: 2015-10-30T15:00:00 Last Updated: 2024-08-06T07:58:59.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console messages when reporting unimplemented hypercalls, which allows local guests to cause a denial of service via a sequence of (1) HYPERVISOR_physdev_op hypercalls, which are not properly handled in the do_physdev_op function in arch/arm/physdev.c, or (2) HYPERVISOR_hvm_op hypercalls, which are not properly handled in the do_hvm_op function in arch/arm/hvm.c. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-1
n arch/arm/hvm.c. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-146.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171249.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171082.html - http://www.debian.org/security/2015/dsa-3414 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171185.html - https://security.gentoo.org/glsa/201604-03 - http://www.securitytracker.com/id/1034029
CVE ID: CVE-2015-7814 State: PUBLISHED Published: 2015-10-30T15:00:00 Last Updated: 2024-08-06T07:58:59.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the relinquish_memory function in arch/arm/domain.c in Xen 4.6.x and earlier allows local domains with partial management control to cause a denial of service (host crash) via vectors involving the destruction of a domain and using XENMEM_decrease_reservation to reduce the memory of the domain. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034030 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171249.html - http://lists.fedoraproj
/1034030 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171249.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171082.html - http://xenbits.xen.org/xsa/advisory-147.html - http://www.debian.org/security/2015/dsa-3414 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171185.html - https://security.gentoo.org/glsa/201604-03
CVE ID: CVE-2015-7815 State: PUBLISHED Published: 2015-11-16T19:00:00 Last Updated: 2024-08-06T07:59:00.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in core/ViewDataTable/Factory.php in Piwik before 2.15.0 allows remote attackers to include and execute arbitrary local files via the viewDataTable parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134219/Piwik-2.14.3-Local-File-Inclusion.html - https://piwik.org/changelog/piwik-2-15-0/ - http://www.securityfocus.com/archive/1/536838/100/0/threaded - http://karmainsecurity.com/KIS-2015-09 - http://seclists.org/fulldisclosure/2015/N
com/archive/1/536838/100/0/threaded - http://karmainsecurity.com/KIS-2015-09 - http://seclists.org/fulldisclosure/2015/Nov/14
CVE ID: CVE-2015-7816 State: PUBLISHED Published: 2015-11-16T19:00:00 Last Updated: 2024-08-06T07:59:00.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DisplayTopKeywords function in plugins/Referrers/Controller.php in Piwik before 2.15.0 allows remote attackers to conduct PHP object injection attacks, conduct Server-Side Request Forgery (SSRF) attacks, and execute arbitrary PHP code via a crafted HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://karmainsecurity.com/KIS-2015-10 - http://seclists.org/fulldisclosure/2015/Nov/15 - http://packetstormsecurity.com/files/134220/Piwik-2.14.3-PHP-Object-Injection.html - https://piwik.org/changelo
Nov/15 - http://packetstormsecurity.com/files/134220/Piwik-2.14.3-PHP-Object-Injection.html - https://piwik.org/changelog/piwik-2-15-0/ - http://www.securityfocus.com/archive/1/536839/100/0/threaded
CVE ID: CVE-2015-7817 State: PUBLISHED Published: 2015-11-12T02:00:00 Last Updated: 2024-08-06T07:58:59.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain privileged-account access, and consequently provide FileReader.jsp input containing directory traversal sequences to read arbitrary text files, via a request to port 40080 or 40443. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-553/ - https://support.lenovo.com/us/en/prod
Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-553/ - https://support.lenovo.com/us/en/product_security/len_2015_074
CVE ID: CVE-2015-7818 State: PUBLISHED Published: 2015-11-12T02:00:00 Last Updated: 2024-08-06T07:59:00.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows local users to execute arbitrary JSP code with SYSTEM privileges by using the Apache Axis AdminService deployment method to install a .jsp file. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-551/ - https://support.lenovo.com/us/en/product_security/len_2015_074
CVE ID: CVE-2015-7819 State: PUBLISHED Published: 2015-11-12T02:00:00 Last Updated: 2024-08-06T07:58:59.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DB service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain sensitive administrator-account information via a request on port 40999, as demonstrated by an improperly encrypted password. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-552/ - https://support.lenovo.com/us/en/product_security/len_2015_074
CVE ID: CVE-2015-7820 State: PUBLISHED Published: 2015-11-12T02:00:00 Last Updated: 2024-08-06T07:59:00.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain privileged-account access, and consequently provide ZipDownload.jsp input containing directory traversal sequences to read arbitrary files, via a request to port 40080 or 40443. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-554/ - https://support.lenovo.com/us/en/product_
ainer: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-554/ - https://support.lenovo.com/us/en/product_security/len_2015_074
CVE ID: CVE-2015-7822 State: PUBLISHED Published: 2015-10-21T15:00:00 Last Updated: 2024-08-06T07:59:00.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Kentico CMS 8.2 allow remote attackers to inject arbitrary web script or HTML via a (1) parameter name to CMSModules/AdminControls/Pages/UIPage.aspx or the (2) CMSBodyClass cookie variable to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133981/Kentico-CMS-8.2-Cross-Site-Scripting-Open-Redirect.html
CVE ID: CVE-2015-7823 State: PUBLISHED Published: 2015-10-21T15:00:00 Last Updated: 2024-08-06T07:58:59.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in CMSPages/GetDocLink.ashx in Kentico CMS 8.2 through 8.2.41 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the link parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133981/Kentico-CMS-8.2-Cross-Site-Scripting-Open-Redirect.html
CVE ID: CVE-2015-7824 State: PUBLISHED Published: 2017-04-10T15:00:00 Last Updated: 2024-08-06T07:59:00.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: botan 1.11.x before 1.11.22 makes it easier for remote attackers to decrypt TLS ciphertext data via a padding-oracle attack against TLS CBC ciphersuites. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1311613 - https://botan.randombit.net/security.html#id3
CVE ID: CVE-2015-7825 State: PUBLISHED Published: 2017-04-10T15:00:00 Last Updated: 2024-08-06T07:59:00.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: botan before 1.11.22 improperly validates certificate paths, which allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a certificate with a loop in the certificate chain. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1311618 - https://botan.randombit.net/security.html#id3
CVE ID: CVE-2015-7826 State: PUBLISHED Published: 2017-04-10T15:00:00 Last Updated: 2024-08-06T07:59:00.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: botan 1.11.x before 1.11.22 improperly handles wildcard matching against hostnames, which might allow remote attackers to have unspecified impact via a valid X.509 certificate, as demonstrated by accepting *.example.com as a match for bar.foo.example.com. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1311620 - https://botan.randombit.net/security.html#id3
CVE ID: CVE-2015-7827 State: PUBLISHED Published: 2016-05-13T14:00:00 Last Updated: 2024-08-06T07:58:59.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Botan before 1.10.13 and 1.11.x before 1.11.22 make it easier for remote attackers to conduct million-message attacks by measuring time differences, related to decoding of PKCS#1 padding. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183669.html - http://www.debian.org/security/2016/dsa-3565 - http://marc.info/?l=botan-devel&m=146185420505943&w=2 - http://botan.randombit.net/security.html
CVE ID: CVE-2015-7828 State: PUBLISHED Published: 2015-11-10T16:00:00 Last Updated: 2024-08-06T07:59:00.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP HANA Database 1.00 SPS10 and earlier do not require authentication, which allows remote attackers to execute arbitrary code or have unspecified other impact via a TrexNet packet to the (1) fcopydir, (2) fmkdir, (3) frmdir, (4) getenv, (5) dumpenv, (6) fcopy, (7) fput, (8) fdel, (9) fmove, (10) fget, (11) fappend, (12) fdir, (13) getTraces, (14) kill, (15) pexec, (16) stop, or (17) pythonexec method, aka SAP Security Note 2165583. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldiscl
AP Security Note 2165583. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Nov/36 - http://packetstormsecurity.com/files/134281/SAP-HANA-TrexNet-Command-Execution.html - https://www.onapsis.com/blog/analyzing-sap-security-notes-august-2015-edition
CVE ID: CVE-2015-7829 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:59:00.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows mishandle junctions in the Synchronizer directory, which allows attackers to delete arbitrary files via Adobe Collaboration Sync, a related issue to CVE-2015-2428. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-465 - https://helpx.adobe.com/security/prod
Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-465 - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796
CVE ID: CVE-2015-7830 State: PUBLISHED Published: 2015-11-15T02:00:00 Last Updated: 2024-08-06T07:58:59.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pcapng_read_if_descr_block function in wiretap/pcapng.c in the pcapng parser in Wireshark 1.12.x before 1.12.8 uses too many levels of pointer indirection, which allows remote attackers to cause a denial of service (incorrect free and application crash) via a crafted packet that triggers interface-filter copying. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77101 - http://www.securityfocus.com/bid/78723 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commi
/bid/77101 - http://www.securityfocus.com/bid/78723 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=72497918b16b706c3ba75e1f731f58b802ca14d1 - http://www.debian.org/security/2016/dsa-3505 - http://www.securitytracker.com/id/1033953 - http://www.wireshark.org/security/wnpa-sec-2015-30.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11455 - http://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html - http://www.zerodayinitiative.com/advisories/ZDI-15-624 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-7831 State: PUBLISHED Published: 2019-11-26T13:58:47 Last Updated: 2024-08-06T07:58:59.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used. Additional Analyst Notes: - CVE Program Container: References: - https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_gd2_r25_2v
CVE ID: CVE-2015-7833 State: PUBLISHED Published: 2015-10-19T10:00:00 Last Updated: 2024-08-06T07:59:00.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7 in Red Hat Enterprise Linux (RHEL) 7.1 allows physically proximate attackers to cause a denial of service (panic) via a nonzero bInterfaceNumber value in a USB device descriptor. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1201858 - http://www.ubuntu.com/usn/USN-2967-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - http://lists.opensuse
.com/usn/USN-2967-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - http://www.ubuntu.com/usn/USN-2947-3 - http://www.ubuntu.com/usn/USN-2967-2 - http://www.os-s.net/advisories/DOS-KernelCrashesOnInvalidUSBDeviceDescriptors-UsbvisionDriver.pdf - http://www.ubuntu.com/usn/USN-2947-2 - http://www.ubuntu.com/usn/USN-2947-1 - http://www.securityfocus.com/bid/77030 - http://www.ubuntu.com/usn/USN-2929-1 - http://www.ubuntu.com/usn/USN-2932-1 - http://www.securityfocus.com/archive/1/536629 - http://www.debian.org/security/2015/dsa-3426 - http://lists.opensuse.org/opensuse-security-announce/2
archive/1/536629 - http://www.debian.org/security/2015/dsa-3426 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - http://www.ubuntu.com/usn/USN-2948-1 - http://www.debian.org/security/2015/dsa-3396 - http://www.ubuntu.com/usn/USN-2929-2 - http://www.ubuntu.com/usn/USN-2948-2 - http://www.securitytracker.com/id/1034452 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE ID: CVE-2015-7834 State: PUBLISHED Published: 2015-10-15T10:00:00 Last Updated: 2024-08-06T07:59:00.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google V8 before 4.6.85.23, as used in Google Chrome before 46.0.2490.71, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/10/stable-channel-update.html - http://www.ubuntu.com/usn/USN-2770-1 - http://www.ubuntu.com/usn/USN-2770-2
CVE ID: CVE-2015-7835 State: PUBLISHED Published: 2015-10-30T15:00:00 Last Updated: 2024-08-06T07:58:59.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entries, which allows local PV guest administrators to gain privileges via a crafted superpage mapping. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX202404 - http://www.securityfocus.com/bid/77366 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171249.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/1710
ackage-announce/2015-November/171249.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171082.html - http://xenbits.xen.org/xsa/advisory-148.html - http://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html - https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-022-2015.txt - http://www.debian.org/security/2015/dsa-3390 - http://www.securitytracker.com/id/1034032 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171185.html - https://security.gentoo.org/glsa/201604-03