Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-8011 State: PUBLISHED Published: 2020-01-28T18:15:08 Last Updated: 2024-08-06T08:06:31.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/10/16/2 - http://www.openwall.com/lists/oss-security/2015/10/30/2 - https://github.com/vincentbernat/lldpd/commit/dd4f16e7e816f2165fba76e3d162cd8d2978dcb
/lists/oss-security/2015/10/30/2 - https://github.com/vincentbernat/lldpd/commit/dd4f16e7e816f2165fba76e3d162cd8d2978dcb2 - https://www.debian.org/security/2021/dsa-4836 - https://lists.debian.org/debian-lts-announce/2021/02/msg00032.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJ4DXFJWMZ325ECZXPZOSK7BOEDJZHPR/ - https://cert-portal.siemens.com/productcert/pdf/ssa-941426.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-194-07
CVE ID: CVE-2015-8012 State: PUBLISHED Published: 2020-01-28T18:15:04 Last Updated: 2024-08-06T08:06:31.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: lldpd before 0.8.0 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vincentbernat/lldpd/commit/793526f8884455f43daecd0a2c46772388417a00 - http://www.openwall.com/lists/oss-security/2015/10/30/2 - http://www.openwall.com/lists/oss-security/2015/10/18/2 - https://github.com/vincentbernat/lldpd/commit/9221b5c249f9e4843f77c7f888d5705348d179c0
CVE ID: CVE-2015-8013 State: PUBLISHED Published: 2017-07-25T18:00:00 Last Updated: 2024-08-06T08:06:31.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: s2k.js in OpenPGP.js will decrypt arbitrary messages regardless of passphrase for crafted PGP keys which allows remote attackers to bypass authentication if message decryption is used as an authentication mechanism via a crafted symmetrically encrypted PGP message. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/10/30/5 - http://www.securityfocus.com/bid/77088 - https://github.com/openpgpjs/openpgpjs/commit/668a9bbe7033f3f475576209305eb57a54306d29
CVE ID: CVE-2015-8019 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-06T08:06:31.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: The skb_copy_and_csum_datagram_iovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a write system call followed by a recvmsg system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/10/27/11 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html - http://lists
s/oss-security/2015/10/27/11 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html - https://bugzilla.redhat.com/show_bug.cgi?id=1276588 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html - http://patchwork.ozlabs.org/patch/530642/ - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html - http://www.securityfocus.com/bid/77326 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html
CVE ID: CVE-2015-8020 State: PUBLISHED Published: 2017-01-11T16:00:00 Last Updated: 2024-08-06T08:06:31.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/cve-2015-8020-default-privileged-account-credentials-vulnerability-in-in-clustered-data-ontap?language=en_US - http://www.securityfocus.com/bid/92329 - https://security.netapp.com/advisory/ntap-20160802-0001/
CVE ID: CVE-2015-8021 State: PUBLISHED Published: 2016-04-12T14:00:00 Last Updated: 2024-08-06T08:06:31.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in the Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, Link Controller, and PSM 11.x before 11.2.1 HF11, 11.3.x, 11.4.0 before HF8, and 11.4.1 before HF6; BIG-IP AAM 11.4.0 before HF8 and 11.4.1 before HF6; BIG-IP AFM and PEM 11.3.x, 11.4.0 before HF8, and 11.4.1 before HF6; and BIG-IP Edge Gateway, WebAccelerator, and WOM 11.x before 11.2.1 HF11 and 11.3.0 allows remote authenticated users to upload files via uploadImage.php. Additional Analyst Notes: - CVE Program Containe
allows remote authenticated users to upload files via uploadImage.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/82340 - https://support.f5.com/kb/en-us/solutions/public/k/49/sol49580002.html - http://www.securitytracker.com/id/1034781
CVE ID: CVE-2015-8022 State: PUBLISHED Published: 2016-08-19T21:00:00 Last Updated: 2024-08-06T08:06:31.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP AAM 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP AFM and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.x before 11.2.1 HF16 and 11.3.0; and BIG-IP PSM 11.x before 11.2.1 HF16, 11.3.x, and 11.4.x before
celerator, and WOM 11.x before 11.2.1 HF16 and 11.3.0; and BIG-IP PSM 11.x before 11.2.1 HF16, 11.3.x, and 11.4.x before 11.4.1 HF10 allows remote authenticated users with certain permissions to gain privileges by leveraging an Access Policy Manager customization configuration section that allows file uploads. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/kb/en-us/solutions/public/k/12/sol12401251.html - http://www.securitytracker.com/id/1036627
CVE ID: CVE-2015-8023 State: PUBLISHED Published: 2015-11-18T16:00:00 Last Updated: 2024-08-06T08:06:31.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00025.html - https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-%28cve-2015-8023%29.html
ce/2015-12/msg00025.html - https://www.strongswan.org/blog/2015/11/16/strongswan-vulnerability-%28cve-2015-8023%29.html - http://lists.opensuse.org/opensuse-updates/2015-11/msg00139.html - http://www.securityfocus.com/bid/84947 - http://www.debian.org/security/2015/dsa-3398 - http://www.ubuntu.com/usn/USN-2811-1
CVE ID: CVE-2015-8024 State: PUBLISHED Published: 2015-12-02T16:00:00 Last Updated: 2024-08-06T08:06:31.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) 9.3.x before 9.3.2MR19, 9.4.x before 9.4.2MR9, and 9.5.x before 9.5.0MR8, when configured to use Active Directory or LDAP authentication sources, allow remote attackers to bypass authentication by logging in with the username "NGCP|NGCP|NGCP;" and any password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034288 - http://www.quantumle
l Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034288 - http://www.quantumleap.it/mcafee-siem-esm-esmrec-and-esmlm-authentication-bypass-vulnerability/ - https://kc.mcafee.com/corporate/index?page=content&id=SB10137
CVE ID: CVE-2015-8025 State: PUBLISHED Published: 2015-11-10T16:00:00 Last Updated: 2024-08-06T08:06:31.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors. Additional Analyst Notes: - CVE Program Container: References: - https://www.jwz.org/blog/2015/10/xscreensaver-5-34/ - http://www.securitytracker.com/id/1034052 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00102.html - http://www.debian.org/security/2016/dsa-3438 - http://www.oracle.com/technetwork/topics/security/bullet
/msg00102.html - http://www.debian.org/security/2016/dsa-3438 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.openwall.com/lists/oss-security/2015/10/24/2 - http://www.openwall.com/lists/oss-security/2015/10/25/1 - http://www.openwall.com/lists/oss-security/2015/10/29/12 - https://twitter.com/Thaolia/status/656823859304398848 - http://www.ubuntu.com/usn/USN-2789-1
CVE ID: CVE-2015-8026 State: PUBLISHED Published: 2017-03-27T15:00:00 Last Updated: 2024-08-06T08:06:31.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the verify_vbr_checksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service (infinite loop) or possibly execute arbitrary code via a crafted filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/relan/exfat/commit/2e86ae5f81da11f11673d0546efb525af02b7786 - https://security.gentoo.org/glsa/201612-31 - https://blog.fuzzing-project.org/25-Heap-overflow-and-endless-loop-in-exfatfsck-exfat-utils.html - https://
/201612-31 - https://blog.fuzzing-project.org/25-Heap-overflow-and-endless-loop-in-exfatfsck-exfat-utils.html - https://github.com/relan/exfat/issues/5 - http://www.securityfocus.com/bid/77307 - http://www.openwall.com/lists/oss-security/2015/10/29/13
CVE ID: CVE-2015-8027 State: PUBLISHED Published: 2016-01-02T21:00:00 Last Updated: 2024-08-06T08:06:31.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote attackers to cause a denial of service (uncaughtException and service outage) via a pipelined HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV79524 - http://www.securityfocus.com/bid/78207 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00045.html - https://nodejs.org/en/blog/vulnerab
s.com/bid/78207 - http://lists.opensuse.org/opensuse-updates/2016-01/msg00045.html - https://nodejs.org/en/blog/vulnerability/cve-2015-8027_cve-2015-6764/ - https://nodejs.org/en/blog/vulnerability/december-2015-security-releases/ - http://www-01.ibm.com/support/docview.wss?uid=swg21972419 - https://security.gentoo.org/glsa/201612-43
CVE ID: CVE-2015-8028 State: PUBLISHED Published: 2015-10-30T16:00:00Z Last Updated: 2024-09-16T18:24:33.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in SAP 3D Visual Enterprise Viewer (VEV) allow remote attackers to execute arbitrary code via a crafted (1) 3DM or (2) Flic Animation file. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-526 - http://www.zerodayinitiative.com/advisories/ZDI-15-531
CVE ID: CVE-2015-8029 State: PUBLISHED Published: 2015-10-30T16:00:00Z Last Updated: 2024-09-17T01:05:45.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP 3D Visual Enterprise Viewer (VEV) allows remote attackers to execute arbitrary code via a crafted Filmbox document, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-532
CVE ID: CVE-2015-8030 State: PUBLISHED Published: 2015-10-30T16:00:00Z Last Updated: 2024-09-16T23:26:40.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP 3D Visual Enterprise Viewer (VEV) allows remote attackers to execute arbitrary code via a crafted (1) U3D, (2) LWO, (3) JPEG2000, or (4) FBX file, aka "Out-Of-Bounds Indexing" vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-527 - http://www.zerodayinitiative.com/advisories/ZDI-15-530 - http://www.zerodayinitiative.com/advisories/ZDI-15-528 - http://www.zerodayinitiative.com/advisories/ZDI-15-529
CVE ID: CVE-2015-8031 State: PUBLISHED Published: 2022-07-18T20:29:05 Last Updated: 2024-08-06T08:06:31.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hudson (aka org.jvnet.hudson.main:hudson-core) before 3.3.2 allows XXE attacks. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.eclipse.org/Hudson-ci/alerts/CVE-2015-8031 - https://security.snyk.io/vuln/SNYK-JAVA-ORGJVNETHUDSONMAIN-31221 - https://github.com/advisories/GHSA-j3h2-8mf8-j5r2
CVE ID: CVE-2015-8032 State: PUBLISHED Published: 2020-08-14T18:55:11 Last Updated: 2024-08-06T08:06:31.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Textpattern 4.5.7, an unprivileged author can change an article's markup setting. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/textpattern/textpattern/commit/950d9e0e4ee46efa41e791eac6cd55d2f558c3c9 - https://github.com/textpattern/textpattern/blob/f94c3fb9916ee0c7fa4a52025fa4e8c3273e355b/HISTORY.txt
CVE ID: CVE-2015-8033 State: PUBLISHED Published: 2020-08-14T18:58:50 Last Updated: 2024-08-06T08:06:31.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/textpattern/textpattern/blob/f94c3fb9916ee0c7fa4a52025fa4e8c3273e355b/HISTORY.txt - https://github.com/textpattern/textpattern/commit/1c09094187b9aeb18f09697bc7d1db12d078ae10
CVE ID: CVE-2015-8034 State: PUBLISHED Published: 2017-01-30T22:00:00 Last Updated: 2024-08-06T08:06:31.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96390 - https://docs.saltstack.com/en/latest/topics/releases/2015.8.3.html
CVE ID: CVE-2015-8035 State: PUBLISHED Published: 2015-11-18T16:00:00 Last Updated: 2024-08-06T08:06:31.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html - https://support.apple.com/HT206167 - https://support.apple.com/HT206168 - http://www.debian.org/security/2015/dsa-3430 - h
tps://support.apple.com/HT206167 - https://support.apple.com/HT206168 - http://www.debian.org/security/2015/dsa-3430 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017 - http://www.openwall.com/lists/oss-security/2015/11/02/2 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://xmlsoft.org/news.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 - http://rhn.redhat.com/errata/RHSA-2016-1089.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - http://www.securitytrac
RHSA-2016-1089.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - http://www.securitytracker.com/id/1034243 - http://www.ubuntu.com/usn/USN-2812-1 - http://www.openwall.com/lists/oss-security/2015/11/02/4 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html - http://www.openwall.com/lists/oss-security/2015/11/03/1 - https://security.gentoo.org/glsa/201701-37 - http://www.securityfocus.com/bid/77390 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html - https://support.apple.com/HT206169 - https://support.apple.com/HT206166 - https://bugzilla
unce/2016/Mar/msg00002.html - https://support.apple.com/HT206169 - https://support.apple.com/HT206166 - https://bugzilla.gnome.org/show_bug.cgi?id=757466
CVE ID: CVE-2015-8036 State: PUBLISHED Published: 2015-11-02T19:00:00 Last Updated: 2024-08-06T08:06:31.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long session ticket name to the session ticket extension, which is not properly handled when creating a ClientHello message to resume a session. NOTE: this identifier was SPLIT from CVE-2015-5291 per ADT3 due to different affected version ranges. Additional Analyst Notes: - CVE Program Container: References: - http
per ADT3 due to different affected version ranges. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3468 - https://guidovranken.files.wordpress.com/2015/10/cve-2015-5291.pdf - https://guidovranken.wordpress.com/2015/10/07/cve-2015-5291/ - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169625.html - https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2015-01 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00009.html
CVE ID: CVE-2015-8037 State: PUBLISHED Published: 2015-11-02T19:00:00Z Last Updated: 2024-09-16T23:16:26.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager before 5.2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) SOMVpnSSLPortalDialog or (2) FGDMngUpdHistory. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/multiple-xss-vulnerabilities-in-fortimanager-gui
CVE ID: CVE-2015-8038 State: PUBLISHED Published: 2015-11-02T19:00:00Z Last Updated: 2024-09-17T02:17:04.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager before 5.2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) sharedjobmanager or (2) SOMServiceObjDialog. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/multiple-xss-vulnerabilities-in-fortimanager-gui
CVE ID: CVE-2015-8039 State: PUBLISHED Published: 2015-11-02T19:00:00 Last Updated: 2024-08-06T08:06:31.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to the (1) DVRSetupSave method in the STWAxConfig control or (2) SendCustomPacket method in the STWAxConfigNVR control, which trigger an untrusted pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77079 - http://www.zerodayinitiative.com/advisories/ZDI-15-463 - http://www.zerodayinitiative.com/advisories/ZDI-15-462
CVE ID: CVE-2015-8040 State: PUBLISHED Published: 2015-11-02T19:00:00 Last Updated: 2024-08-06T08:06:31.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rtsp_getdlsendtime method in the CNC_Ctrl control in Samsung SmartViewer allows remote attackers to execute arbitrary code via an index value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77084 - http://www.zerodayinitiative.com/advisories/ZDI-15-464
CVE ID: CVE-2015-8041 State: PUBLISHED Published: 2015-11-09T16:00:00 Last Updated: 2024-08-06T08:06:31.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - https://w1.fi/cgit/hostap/plain/hostapd/ChangeLog - http://lists.opensuse.org/opensuse-updates/2015-11/msg00037.html - https://w1.fi/cgit/hostap/plain/wpa_sup
d/ChangeLog - http://lists.opensuse.org/opensuse-updates/2015-11/msg00037.html - https://w1.fi/cgit/hostap/plain/wpa_supplicant/ChangeLog - http://www.securityfocus.com/bid/75604 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00041.html - http://www.openwall.com/lists/oss-security/2015/11/02/5 - http://www.debian.org/security/2015/dsa-3397 - http://w1.fi/security/2015-5/incomplete-wps-and-p2p-nfc-ndef-record-payload-length-validation.txt
CVE ID: CVE-2015-8042 State: PUBLISHED Published: 2015-11-11T11:00:00 Last Updated: 2024-08-06T08:06:31.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via a crafted loadSound call, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-
2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034111 - http://rhn.redhat.com/errata/RHSA-2015-2024.html - https://helpx.adobe.com/security/products/flash-player/apsb15-28.html - http://lists.opensuse.org/opensuse-updates/2015-11/msg00071.html - https://security.gentoo.org/glsa/201511-02 - http://www.securityfocus.com/bid/77533 - http://rhn.redhat.com/errata/RHSA-2015-2023.html - http://www.zerodayinitiative.com/advisories/ZDI-15-563
CVE ID: CVE-2015-8043 State: PUBLISHED Published: 2015-11-11T11:00:00 Last Updated: 2024-08-06T08:06:31.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-