Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-6820 State: PUBLISHED Published: 2015-09-06T01:00:00 Last Updated: 2024-08-06T07:29:25.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_sbr_apply function in libavcodec/aacsbr.c in FFmpeg before 2.7.2 does not check for a matching AAC frame syntax element before proceeding with Spectral Band Replication calculations, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted AAC data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=79a98294da6cd85f8c86b34764c5e0c43b09eea3 - http://www.ubuntu.com/usn/USN
//git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=79a98294da6cd85f8c86b34764c5e0c43b09eea3 - http://www.ubuntu.com/usn/USN-2944-1 - https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html - http://www.securitytracker.com/id/1033483 - http://ffmpeg.org/security.html
CVE ID: CVE-2015-6821 State: PUBLISHED Published: 2015-09-06T01:00:00 Last Updated: 2024-08-06T07:29:24.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_mpv_common_init function in libavcodec/mpegvideo.c in FFmpeg before 2.7.2 does not properly maintain the encoding context, which allows remote attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via crafted MPEG data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=b160fc290cf49b516c5b6ee0730fd9da7fc623b1 - https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html - http://www.securitytrac
16c5b6ee0730fd9da7fc623b1 - https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html - http://www.securitytracker.com/id/1033483 - http://ffmpeg.org/security.html
CVE ID: CVE-2015-6822 State: PUBLISHED Published: 2015-09-06T01:00:00 Last Updated: 2024-08-06T07:29:24.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: The destroy_buffers function in libavcodec/sanm.c in FFmpeg before 2.7.2 does not properly maintain height and width values in the video context, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via crafted LucasArts Smush video data. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html - http://www.securitytracker.com/id/1033483 - http://git.videolan.
.debian.org/debian-lts-announce/2018/12/msg00009.html - http://www.securitytracker.com/id/1033483 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=39bbdebb1ed8eb9c9b0cd6db85afde6ba89d86e4 - https://lists.debian.org/debian-lts-announce/2018/12/msg00010.html - http://ffmpeg.org/security.html
CVE ID: CVE-2015-6823 State: PUBLISHED Published: 2015-09-06T01:00:00 Last Updated: 2024-08-06T07:29:25.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: The allocate_buffers function in libavcodec/alac.c in FFmpeg before 2.7.2 does not initialize certain context data, which allows remote attackers to cause a denial of service (segmentation violation) or possibly have unspecified other impact via crafted Apple Lossless Audio Codec (ALAC) data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=f7068bf277a37479aecde2832208d820682b35e6 - http://www.securitytracker.com/id/1033483 - https://lists.debian.org/debian-l
f7068bf277a37479aecde2832208d820682b35e6 - http://www.securitytracker.com/id/1033483 - https://lists.debian.org/debian-lts-announce/2018/12/msg00010.html - http://ffmpeg.org/security.html
CVE ID: CVE-2015-6824 State: PUBLISHED Published: 2015-09-06T01:00:00 Last Updated: 2024-08-06T07:29:24.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sws_init_context function in libswscale/utils.c in FFmpeg before 2.7.2 does not initialize certain pixbuf data structures, which allows remote attackers to cause a denial of service (segmentation violation) or possibly have unspecified other impact via crafted video data. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2944-1 - http://www.securitytracker.com/id/1033483 - https://lists.debian.org/debian-lts-announce/2018/12/msg00010.html - http://ffmpeg.org/security.html - http
id/1033483 - https://lists.debian.org/debian-lts-announce/2018/12/msg00010.html - http://ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=a5d44d5c220e12ca0cb7a4eceb0f74759cb13111
CVE ID: CVE-2015-6825 State: PUBLISHED Published: 2015-09-06T01:00:00 Last Updated: 2024-08-06T07:29:24.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_frame_thread_init function in libavcodec/pthread_frame.c in FFmpeg before 2.7.2 mishandles certain memory-allocation failures, which allows remote attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via a crafted file, as demonstrated by an AVI file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html - http://www.securitytracker.com/id/1033483 - http://git.videolan.org/?p=ffmpeg.git%3Ba=
-announce/2018/12/msg00009.html - http://www.securitytracker.com/id/1033483 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=f1a38264f20382731cf2cc75fdd98f4c9a84a626 - http://ffmpeg.org/security.html
CVE ID: CVE-2015-6826 State: PUBLISHED Published: 2015-09-06T01:00:00 Last Updated: 2024-08-06T07:29:24.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_rv34_decode_init_thread_copy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain structure members, which allows remote attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via crafted (1) RV30 or (2) RV40 RealVideo data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=3197c0aa87a3b7190e17d49e6fbc7b554e4b3f0a - http://www.ubuntu.com/usn/USN-2944-1 - https://lists.debian.
t%3Ba=commit%3Bh=3197c0aa87a3b7190e17d49e6fbc7b554e4b3f0a - http://www.ubuntu.com/usn/USN-2944-1 - https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html - http://www.securitytracker.com/id/1033483 - http://ffmpeg.org/security.html
CVE ID: CVE-2015-6827 State: PUBLISHED Published: 2015-09-11T15:00:00 Last Updated: 2024-08-06T07:29:24.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Auto-Exchanger 5.1.0 allows remote attackers to hijack the authentication of users for requests that change a password via a request to signup.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133498/Autoexchanger-5.1.0-Cross-Site-Request-Forgery.html - https://www.exploit-db.com/exploits/38119/
CVE ID: CVE-2015-6828 State: PUBLISHED Published: 2015-09-16T14:00:00 Last Updated: 2024-08-06T07:29:24.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tweet_info function in class/__functions.php in the SecureMoz Security Audit plugin 1.0.5 and earlier for WordPress does not use an HTTPS session for downloading serialized data, which allows man-in-the-middle attackers to conduct PHP object injection attacks and execute arbitrary PHP code by modifying the client-server data stream. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/09/06/3 -
ditional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/09/06/3 - http://www.openwall.com/lists/oss-security/2015/09/05/4 - https://wpvulndb.com/vulnerabilities/8179
CVE ID: CVE-2015-6829 State: PUBLISHED Published: 2015-09-16T14:00:00 Last Updated: 2024-08-06T07:36:33.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the getip function in wp-limit-login-attempts.php in the WP Limit Login Attempts plugin before 2.0.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) X-Forwarded-For or (2) Client-IP HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/09/06/3 - https://wordpress.org/support/topic/sql-injection-vulnerability-9 - https://wpvulndb.com/vulnerabilities/8178 - http://www.openwall.com/l
.org/support/topic/sql-injection-vulnerability-9 - https://wpvulndb.com/vulnerabilities/8178 - http://www.openwall.com/lists/oss-security/2015/09/05/4 - https://plugins.trac.wordpress.org/changeset/1239492/wp-limit-login-attempts
CVE ID: CVE-2015-6830 State: PUBLISHED Published: 2015-09-14T01:00:00 Last Updated: 2024-08-06T07:36:33.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers to bypass a multiple-reCaptcha protection mechanism against brute-force credential guessing by providing a correct response to a single reCaptcha. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76674 - http://www.debian.org/security/2015/dsa-3382 - https://www.phpmyadmin.net/security/PMASA-2015-4/ - http://lists.fedoraproject.org/pipermail
rg/security/2015/dsa-3382 - https://www.phpmyadmin.net/security/PMASA-2015-4/ - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166294.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166531.html - https://github.com/phpmyadmin/phpmyadmin/commit/785f4e2711848eb8945894199d5870253a88584e - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166307.html - http://www.securitytracker.com/id/1033546
CVE ID: CVE-2015-6831 State: PUBLISHED Published: 2016-01-19T02:00:00 Last Updated: 2024-08-06T07:36:33.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObject, (2) SplObjectStorage, and (3) SplDoublyLinkedList, which are mishandled during unserialization. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3344 - http://www.securityfocus.com/bid/76737 - https://bugs.php.net/bug.php?id=70169 - https://bugs.php.net/bug.php?id=70168 - h
tp://www.securityfocus.com/bid/76737 - https://bugs.php.net/bug.php?id=70169 - https://bugs.php.net/bug.php?id=70168 - http://www.openwall.com/lists/oss-security/2015/08/19/3 - http://www.php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=70166 - https://bugs.php.net/bug.php?id=70155 - https://security.gentoo.org/glsa/201606-10
CVE ID: CVE-2015-6832 State: PUBLISHED Published: 2016-01-19T02:00:00 Last Updated: 2024-08-06T07:36:33.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the SPL unserialize implementation in ext/spl/spl_array.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to execute arbitrary code via crafted serialized data that triggers misuse of an array field. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3344 - http://www.php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=70068 - https://security.gentoo.org/glsa/201606-10
CVE ID: CVE-2015-6833 State: PUBLISHED Published: 2016-01-19T02:00:00 Last Updated: 2024-08-06T07:36:33.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to write to arbitrary files via a .. (dot dot) in a ZIP archive entry that is mishandled during an extractTo call. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3344 - https://bugs.php.net/bug.php?id=70019 - http://www.openwall.com/lists/oss-security/2015/08/19/3 - http://www.php.net/ChangeLog-5.php - https://security.gentoo
- http://www.openwall.com/lists/oss-security/2015/08/19/3 - http://www.php.net/ChangeLog-5.php - https://security.gentoo.org/glsa/201606-10
CVE ID: CVE-2015-6834 State: PUBLISHED Published: 2016-05-16T10:00:00 Last Updated: 2024-08-06T07:36:33.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to (1) the Serializable interface, (2) the SplObjectStorage class, and (3) the SplDoublyLinkedList class, which are mishandled during unserialization. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=70366 - http://www.securitytracker.com/id/1033548 - http://www.securityfocus.com/bid/76649 - http://php.net/
/bug.php?id=70366 - http://www.securitytracker.com/id/1033548 - http://www.securityfocus.com/bid/76649 - http://php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=70365 - https://bugs.php.net/bug.php?id=70172 - http://www.debian.org/security/2015/dsa-3358 - https://security.gentoo.org/glsa/201606-10
CVE ID: CVE-2015-6835 State: PUBLISHED Published: 2016-05-16T10:00:00 Last Updated: 2024-08-06T07:36:33.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted session content. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76734 - https://bugs.php.net/bug.php?id=70219 - http://www.securitytracker.com/id/1033548 - http://php.net/ChangeLog-5.php - http://www.debian.org/security/2015/dsa-
- http://www.securitytracker.com/id/1033548 - http://php.net/ChangeLog-5.php - http://www.debian.org/security/2015/dsa-3358 - https://security.gentoo.org/glsa/201606-10
CVE ID: CVE-2015-6836 State: PUBLISHED Published: 2016-01-19T02:00:00 Last Updated: 2024-08-06T07:36:33.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage headers, which allows remote attackers to execute arbitrary code via crafted serialized data that triggers a "type confusion" in the serialize_function_call function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033548 - http://www.php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=70388 - http://www.securityfocus.com/bid/76644
8 - http://www.php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=70388 - http://www.securityfocus.com/bid/76644 - http://www.debian.org/security/2015/dsa-3358 - https://security.gentoo.org/glsa/201606-10
CVE ID: CVE-2015-6837 State: PUBLISHED Published: 2016-05-16T10:00:00 Last Updated: 2024-08-06T07:36:33.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not consider the possibility of a NULL valuePop return value before proceeding with a free operation during initial error checking, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted XML document, a different vulnerability than CVE-2015-6838. Additional Analyst Notes: - CVE Program Container
a crafted XML document, a different vulnerability than CVE-2015-6838. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76738 - http://www.securitytracker.com/id/1033548 - https://bugs.php.net/bug.php?id=69782 - http://php.net/ChangeLog-5.php - http://www.debian.org/security/2015/dsa-3358 - https://security.gentoo.org/glsa/201606-10
CVE ID: CVE-2015-6838 State: PUBLISHED Published: 2016-05-16T10:00:00 Last Updated: 2024-08-06T07:36:33.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not consider the possibility of a NULL valuePop return value before proceeding with a free operation after the principal argument loop, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted XML document, a different vulnerability than CVE-2015-6837. Additional Analyst Notes: - CVE Program Conta
via a crafted XML document, a different vulnerability than CVE-2015-6837. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033548 - https://bugs.php.net/bug.php?id=69782 - http://php.net/ChangeLog-5.php - http://www.securityfocus.com/bid/76733 - http://www.debian.org/security/2015/dsa-3358 - https://security.gentoo.org/glsa/201606-10
CVE ID: CVE-2015-6839 State: PUBLISHED Published: 2017-10-23T18:00:00 Last Updated: 2024-08-06T07:36:33.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse function in MSA vot.Ar 3.1 does not check whether a candidate receives more than one vote, which allows physically proximate attackers to cast multiple votes for a candidate via a crafted RFID ballot tag. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/document/d/1aH6kvoLR8O1qWOpEz89FAB2xFcBNB-QqHgZpXxg0vGE/preview?sle=true&pli=1 - https://docs.google.com/document/d/13t1jqu-Upj4SyjYBMj3OMshdy6rGBrnb1R3P-goz-cs/edit?pli=1 - https://www.eleccionesciudad.gob.ar/uploads/resolucion
ument/d/13t1jqu-Upj4SyjYBMj3OMshdy6rGBrnb1R3P-goz-cs/edit?pli=1 - https://www.eleccionesciudad.gob.ar/uploads/resoluciones/Informe_05-BALOTAJE-2015-07-17.pdf - https://www.youtube.com/watch?v=CTOCspLn6Zk
CVE ID: CVE-2015-6843 State: PUBLISHED Published: 2015-10-18T14:00:00 Last Updated: 2024-08-06T07:36:33.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reviewer in EMC SourceOne Email Supervisor before 7.2 does not properly limit attempts to authenticate, which makes it easier for remote attackers to obtain access via a brute-force approach. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Oct/58 - http://packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.html - http://www.securitytracker.com/id/1033787
CVE ID: CVE-2015-6844 State: PUBLISHED Published: 2015-10-18T14:00:00 Last Updated: 2024-08-06T07:36:33.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Reviewer in EMC SourceOne Email Supervisor before 7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Oct/58 - http://packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.html - http://www.securitytracker.com/id/1033787
CVE ID: CVE-2015-6845 State: PUBLISHED Published: 2015-10-18T14:00:00 Last Updated: 2024-08-06T07:36:34.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier for remote attackers to obtain access by guessing an ID. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Oct/58 - http://packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.html - http://www.securitytracker.com/id/1033787
CVE ID: CVE-2015-6846 State: PUBLISHED Published: 2015-10-18T14:00:00 Last Updated: 2024-08-06T07:36:34.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC SourceOne Email Supervisor before 7.2 uses hardcoded encryption keys, which makes it easier for attackers to obtain access by examining how a program's code conducts cryptographic operations. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Oct/58 - http://packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.html - http://www.securitytracker.com/id/1033787
CVE ID: CVE-2015-6847 State: PUBLISHED Published: 2015-11-18T11:00:00 Last Updated: 2024-08-06T07:36:34.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of EMC VPLEX GeoSynchrony 5.4 SP1 before P3 stores cleartext NAVISPHERE GUI passwords in a log file, which allows local users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034169 - http://seclists.org/bugtraq/2015/Nov/92 - http://packetstormsecurity.com/files/134420/EMC-VPLEX-Sensitive-Information-Exposure.html
CVE ID: CVE-2015-6848 State: PUBLISHED Published: 2015-11-27T02:00:00 Last Updated: 2024-08-06T07:36:34.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Isilon OneFS 7.1.x before 7.1.1.5, 7.2.0.x before 7.2.0.3, and 7.2.1.x before 7.2.1.1, when the RFC 2307 feature is configured but SFU is not universally present, allows remote authenticated AD users to obtain root privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Nov/121
CVE ID: CVE-2015-6849 State: PUBLISHED Published: 2015-12-05T02:00:00 Last Updated: 2024-08-06T07:36:34.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC NetWorker before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2, and 9.0 before build 407 allows remote attackers to cause a denial of service (process outage) via malformed RPC authentication messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034287 - http://seclists.org/bugtraq/2015/Dec/18
CVE ID: CVE-2015-6850 State: PUBLISHED Published: 2015-12-28T15:00:00 Last Updated: 2024-08-06T07:36:34.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5.5 before Patch 1 has a default password for the root account, which allows local users to gain privileges by leveraging a login session. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/135041/EMC-VPLEX-Undocumented-Account.html - http://seclists.org/bugtraq/2015/Dec/129 - http://www.securityfocus.com/bid/79664 - http://www.securitytracker.com/id/1034526
CVE ID: CVE-2015-6851 State: PUBLISHED Published: 2015-12-23T02:00:00 Last Updated: 2024-08-06T07:36:33.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy-screen protection mechanism by leveraging an unattended workstation and running DOM Inspector. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2015/Dec/115 - http://www.securitytracker.com/id/1034510 - http://packetstormsecurity.com/files/135013/RSA-SecurID-Web-Agent-Authentication-Bypass.html - http://www.securityfocus.com/bid/79646