Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-3219 State: PUBLISHED Published: 2015-08-20T20:00:00 Last Updated: 2024-08-06T05:39:31.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a heat template, which is not properly handled in the help_text attribute in the Field class. Additional Analyst Notes: - CVE Program Container: References: - http://lists.openstack.org/pipermail/openstack-announce/2015-June/000361.html - https://bugs.launchpad.net/horizon/+
: - http://lists.openstack.org/pipermail/openstack-announce/2015-June/000361.html - https://bugs.launchpad.net/horizon/+bug/1453074 - http://www.securityfocus.com/bid/75109 - http://www.debian.org/security/2016/dsa-3617 - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://rhn.redhat.com/errata/RHSA-2015-1679.html - http://www.openwall.com/lists/oss-security/2015/06/09/7
CVE ID: CVE-2015-3220 State: PUBLISHED Published: 2017-06-13T16:00:00 Last Updated: 2024-08-06T05:39:32.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception and process crash). Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21topic/tlslite-dev/MoWE7B0A4iU - https://bugzilla.redhat.com/show_bug.cgi?id=1254215 - https://github.com/trevp/tlslite/commit/aca8d4f898b436ff6754e1a9ab96cae976c8a853
CVE ID: CVE-2015-3221 State: PUBLISHED Published: 2015-08-26T19:00:00 Last Updated: 2024-08-06T05:39:32.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service (L2 agent crash) by adding an address pair that is rejected by the ipset tool. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75368 - http://lists.openstack.org/pipermail/openstack-announce/2015-June/000377.html - https://bugs.launchpad.net/neutron/+bug/1461054 - http://rhn.redhat.com/errata/RHSA-2
k-announce/2015-June/000377.html - https://bugs.launchpad.net/neutron/+bug/1461054 - http://rhn.redhat.com/errata/RHSA-2015-1680.html
CVE ID: CVE-2015-3222 State: PUBLISHED Published: 2017-09-07T20:00:00 Last Updated: 2024-08-06T05:39:32.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: syscheck/seechanges.c in OSSEC 2.7 through 2.8.1 on NIX systems allows local users to execute arbitrary code as root. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132281/OSSEC-2.8.1-Local-Root-Escalation.html - http://www.openwall.com/lists/oss-security/2015/06/11/1 - https://github.com/ossec/ossec-hids/releases/tag/2.8.2 - http://www.securityfocus.com/bid/75148
CVE ID: CVE-2015-3223 State: PUBLISHED Published: 2015-12-29T22:00:00 Last Updated: 2024-08-06T05:39:32.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows remote attackers to cause a denial of service (infinite loop) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1290287 - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html - http://lists.opensuse.org/
90287 - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html - http://www.ubuntu.com/usn/USN-2855-2 - https://www.samba.org/samba/security/CVE-2015-3223.html - http://www.ubuntu.com/usn/USN-2856-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html - http://www.securityfocus.com/bid/79731 - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=ec504dbf69636a554add1f3d5703dd6c3ad450b8 - http://lists.opensu
79731 - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=ec504dbf69636a554add1f3d5703dd6c3ad450b8 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.html - http://www.securitytracker.com/id/1034493 - http://www.debian.org/security/2016/dsa-3433 - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=aa6c27148b9d3f8c1e4fdd5dd46bfecbbd0ca465 - https://security.gentoo.org/glsa/201612-47 - http://www.ubuntu.com/usn/USN-2855-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html
CVE ID: CVE-2015-3224 State: PUBLISHED Published: 2015-07-26T22:00:00 Last Updated: 2024-08-06T05:39:32.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headers in determining a client's IP address, which allows remote attackers to bypass the whitelisted_ips protection mechanism via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75237 - https://groups.google.com/forum/message/raw?msg=rubyonrails-security/lzmz9_ijUFw/HBMPi4zp5NAJ - http://openwall.com/lists/oss-security/2015/06
com/forum/message/raw?msg=rubyonrails-security/lzmz9_ijUFw/HBMPi4zp5NAJ - http://openwall.com/lists/oss-security/2015/06/16/18 - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160881.html - https://github.com/rails/web-console/blob/master/CHANGELOG.markdown
CVE ID: CVE-2015-3225 State: PUBLISHED Published: 2015-07-26T22:00:00 Last Updated: 2024-08-06T05:39:32.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (SystemStackError) via a request with a large parameter depth. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-07/msg00043.html - http://lists.opensuse.org/opensuse-updates/2015-07/msg00044.html - http://rhn.redhat.com/errata/RHSA-2015-2290.html - http://lists.fedoraproject.org/pipermail/pac
/2015-07/msg00044.html - http://rhn.redhat.com/errata/RHSA-2015-2290.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165180.html - https://github.com/rack/rack/blob/master/HISTORY.md - https://groups.google.com/forum/message/raw?msg=rubyonrails-security/gcUbICUmKMc/qiCotVZwXrMJ - http://www.debian.org/security/2015/dsa-3322 - http://lists.opensuse.org/opensuse-updates/2015-07/msg00040.html - http://www.securityfocus.com/bid/75232 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164173.html - http://openwall.com/lists/oss-security/2015/06/16/14
CVE ID: CVE-2015-3226 State: PUBLISHED Published: 2015-07-26T22:00:00 Last Updated: 2024-08-06T05:39:32.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in json/encoding.rb in Active Support in Ruby on Rails 3.x and 4.1.x before 4.1.11 and 4.2.x before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted Hash that is mishandled during JSON encoding. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033755 - https://groups.google.com/forum/message/raw?msg=rubyonrails-security/7VlB_pck3hU/3QZrGIaQW6cJ - http://www.securityfocus.com/bid/75231 - http://openwall.
essage/raw?msg=rubyonrails-security/7VlB_pck3hU/3QZrGIaQW6cJ - http://www.securityfocus.com/bid/75231 - http://openwall.com/lists/oss-security/2015/06/16/17 - http://www.debian.org/security/2016/dsa-3464
CVE ID: CVE-2015-3227 State: PUBLISHED Published: 2015-07-26T22:00:00 Last Updated: 2024-08-06T05:39:32.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) jdom.rb and (2) rexml.rb components in Active Support in Ruby on Rails before 4.1.11 and 4.2.x before 4.2.2, when JDOM or REXML is enabled, allow remote attackers to cause a denial of service (SystemStackError) via a large XML document depth. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033755 - http://www.securityfocus.com/bid/75234 - https://groups.google.com/forum/message/raw?msg=rubyonrails-security/bahr2JLnxvk/x4EocXnHPp8J - http://lists.opensuse.org/opensuse-
ups.google.com/forum/message/raw?msg=rubyonrails-security/bahr2JLnxvk/x4EocXnHPp8J - http://lists.opensuse.org/opensuse-updates/2015-07/msg00050.html - http://www.debian.org/security/2016/dsa-3464 - http://openwall.com/lists/oss-security/2015/06/16/16
CVE ID: CVE-2015-3228 State: PUBLISHED Published: 2015-08-11T14:00:00 Last Updated: 2024-08-06T05:39:32.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3326 - http://bugs.ghostscript.com/show_bug.cgi?id=696070 - http://www.securitytracker.com/id/1033149 - https://bugzilla.redhat.com/sh
bugs.ghostscript.com/show_bug.cgi?id=696070 - http://www.securitytracker.com/id/1033149 - https://bugzilla.redhat.com/show_bug.cgi?id=1232805 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=0c0b0859 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://bugs.ghostscript.com/show_bug.cgi?id=696041 - https://security.gentoo.org/glsa/201612-33 - http://www.securityfocus.com/bid/76017 - http://www.ubuntu.com/usn/USN-2697-1 - http://openwall.com/lists/oss-security/2015/07/23/14
CVE ID: CVE-2015-3229 State: PUBLISHED Published: 2017-10-16T18:00:00 Last Updated: 2024-08-06T05:39:32.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/06/12/8 - https://lists.fedoraproject.org/archives/list/spins%40lists.fedoraproject.org/thread/L3GSGM5JS2EAJJAGEHR7U4ATNM4ILFKK/ - https://bugzilla.redhat.com/show_bug.cgi?id=1231800 - http://www.securityfocus.com/bid/75185
CVE ID: CVE-2015-3230 State: PUBLISHED Published: 2015-10-29T20:00:00 Last Updated: 2024-08-06T05:39:32.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: 389 Directory Server (formerly Fedora Directory Server) before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher. Additional Analyst Notes: - CVE Program Container: References: - https://fedorahosted.org/389/ticket/48194 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168985.html - https://bugzilla.redhat.com/show_bug.cgi?id=1230996 - http://directory.fedoraproject.org/docs/3
15-October/168985.html - https://bugzilla.redhat.com/show_bug.cgi?id=1230996 - http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-3-12.html
CVE ID: CVE-2015-3231 State: PUBLISHED Published: 2015-06-22T19:00:00 Last Updated: 2024-08-06T05:39:32.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Render cache system in Drupal 7.x before 7.38, when used to cache content by user role, allows remote authenticated users to obtain private content viewed by user 1 by reading the cache. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161265.html - http://www.debian.org/security/2015/dsa-3291 - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161261.html - https://www.drupal.org/SA-CORE-2015-002 - http://www.securityfocu
org/pipermail/package-announce/2015-July/161261.html - https://www.drupal.org/SA-CORE-2015-002 - http://www.securityfocus.com/bid/75286
CVE ID: CVE-2015-3232 State: PUBLISHED Published: 2015-06-22T19:00:00 Last Updated: 2024-08-06T05:39:32.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destinations parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161265.html - http://www.debian.org/security/2015/dsa-3291 - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161261.html - https://www.drupal.org/SA-CORE-2015-002 - ht
/lists.fedoraproject.org/pipermail/package-announce/2015-July/161261.html - https://www.drupal.org/SA-CORE-2015-002 - http://www.securityfocus.com/bid/75287
CVE ID: CVE-2015-3233 State: PUBLISHED Published: 2015-06-22T19:00:00 Last Updated: 2024-08-06T05:39:32.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161265.html - https://www.drupal.org/node/2507741 - http://www.securityfocus.com/bid/75284 - https://www.drupal.org/node/2507735 - http://www.debian.org/security/2015/dsa-3291 - http://lists.fedoraproject
/75284 - https://www.drupal.org/node/2507735 - http://www.debian.org/security/2015/dsa-3291 - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161261.html - http://www.securityfocus.com/bid/75279 - https://www.drupal.org/SA-CORE-2015-002 - https://www.drupal.org/node/2507535 - http://www.securityfocus.com/bid/75280 - https://www.drupal.org/node/2507561 - https://www.drupal.org/node/2507555 - http://www.openwall.com/lists/oss-security/2015/07/04/4 - https://www.drupal.org/node/2507729
CVE ID: CVE-2015-3234 State: PUBLISHED Published: 2015-06-22T19:00:00 Last Updated: 2024-08-06T05:39:32.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an OpenID identity from certain providers, as demonstrated by the Verisign, LiveJournal, and StackExchange providers. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161265.html - http://www.securityfocus.com/bid/75294 - http://www.debian.org/security/2015/dsa-3291 - http://lists.fedoraproject.org/pipermail/pa
securityfocus.com/bid/75294 - http://www.debian.org/security/2015/dsa-3291 - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161261.html - https://www.drupal.org/SA-CORE-2015-002
CVE ID: CVE-2015-3235 State: PUBLISHED Published: 2015-08-14T18:00:00 Last Updated: 2024-08-06T05:39:32.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit administrator users and change their passwords via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1232366 - https://access.redhat.com/errata/RHSA-2015:1592 - http://projects.theforeman.org/issues/10829 - http://theforeman.org/manuals/1.9/index.html#Releasenotesfor1.9 - https://access.redhat.com/errata/RHSA-2015:1591
CVE ID: CVE-2015-3236 State: PUBLISHED Published: 2015-06-22T19:00:00 Last Updated: 2024-08-06T05:39:32.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: cURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication credentials for a previous connection when reusing a reset (curl_easy_reset) connection handle to send a request to the same host name, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10131 - http://curl.haxx.se/docs/adv_20150617A.html - http://lists.fedoraproject.org/pipermail/package-announce/20
&id=SB10131 - http://curl.haxx.se/docs/adv_20150617A.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160660.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://www.securityfocus.com/bid/75385 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - http://www.securityfocus.com/bid/91787 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://security.gentoo.org/glsa/201509-02
CVE ID: CVE-2015-3237 State: PUBLISHED Published: 2015-06-22T19:00:00 Last Updated: 2024-08-06T05:39:32.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160660.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?
chnetwork/security-advisory/cpujul2016-2881720.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017 - http://curl.haxx.se/docs/adv_20150617B.html - http://www.securitytracker.com/id/1036371 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - http://www.securityfocus.com/bid/91787 - https://security.gentoo.org/glsa/201509-02 - http://www.securityfocus.com/bid/75387
CVE ID: CVE-2015-3238 State: PUBLISHED Published: 2015-08-24T14:00:00 Last Updated: 2024-08-06T05:39:32.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate usernames or cause a denial of service (hang) via a large password. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/161249.html - http://rhn.redhat.com/errata/RHSA-2015-1640.html - http://www.openwall.com/lists/oss-security/2015/06/25/13 - https://bugzilla.redhat.com/show_bug
ta/RHSA-2015-1640.html - http://www.openwall.com/lists/oss-security/2015/06/25/13 - https://bugzilla.redhat.com/show_bug.cgi?id=1228571 - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-011/?fid=6551 - https://security.gentoo.org/glsa/201605-05 - http://www.ubuntu.com/usn/USN-2935-2 - http://www.ubuntu.com/usn/USN-2935-3 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://www.ubuntu.com/usn/USN-2935-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161350.html - http://www.securityfocus.com/bid/75428 - https://www.trustwave.com/Resources/SpiderLabs-Blog/Username-Enumeration-against-OpenSSH-SELinux-with-CVE
om/bid/75428 - https://www.trustwave.com/Resources/SpiderLabs-Blog/Username-Enumeration-against-OpenSSH-SELinux-with-CVE-2015-3238/
CVE ID: CVE-2015-3239 State: PUBLISHED Published: 2015-08-26T19:00:00 Last Updated: 2024-08-06T05:39:32.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1675.html - http://rhn.redhat.com/errata/RHSA-2015-1769.html - https://bugzilla.redhat.com/show_bug.cgi?id=1232265 - http://git.savannah.gnu.org/cgit/libunwind.git/commit/?id=396b6c7ab737e2bff244d640601c436a26260ca1 - http://rhn.redhat.com/errata/RHSA-2015-1768.ht
/cgit/libunwind.git/commit/?id=396b6c7ab737e2bff244d640601c436a26260ca1 - http://rhn.redhat.com/errata/RHSA-2015-1768.html - http://www.securityfocus.com/bid/76707
CVE ID: CVE-2015-3240 State: PUBLISHED Published: 2015-11-09T16:00:00 Last Updated: 2024-08-06T05:39:32.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS, allows remote attackers to cause a denial of service (assertion failure and daemon restart) via a zero DH g^x value in a KE payload in a IKE packet. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1979.html - http://www.securitytracker.com/id/1033418 - http://www.securityfocus.com/bid/77536 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - h
ww.securityfocus.com/bid/77536 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://security.gentoo.org/glsa/201603-13 - https://libreswan.org/security/CVE-2015-3240/CVE-2015-3240.txt - https://lists.openswan.org/pipermail/users/2015-August/023401.html
CVE ID: CVE-2015-3241 State: PUBLISHED Published: 2015-09-08T15:00:00 Last Updated: 2024-08-06T05:39:32.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by resizing and then deleting an instance. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1723.html - http://www.securityfocus.com/bid/75372 - http://rhn.redhat.com/errata/RHSA-2015-1898.html - https://github.com/opensta
- http://www.securityfocus.com/bid/75372 - http://rhn.redhat.com/errata/RHSA-2015-1898.html - https://github.com/openstack/ossa/blob/482576204dec96f580817b119e3166d71c757731/ossa/OSSA-2015-015.yaml - https://security.openstack.org/ossa/OSSA-2015-015.html - https://launchpad.net/bugs/1387543
CVE ID: CVE-2015-3242 State: REJECTED Published: 2015-06-26T10:00:00 Last Updated: 2015-06-26T03:57:00 Description: No description available.
CVE ID: CVE-2015-3243 State: PUBLISHED Published: 2017-07-25T18:00:00 Last Updated: 2024-08-06T05:39:32.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75298 - http://www.securitytracker.com/id/1032885 - http://www.openwall.com/lists/oss-security/2015/06/20/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1232826 - http://www.openwall.com/lists/oss-security/2015/06/18/12