Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - https://security.gentoo.org/glsa/201512-10 - http://www.securityfocus.com/bid/75541 - http://www.mozilla.org/security/announce/2015/mfsa2015-63.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1149891 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securitytracker.com/id/1032784 - http://rhn.redhat.com/errata/RHSA-2015-1207.html - http://www.ubuntu.com/usn/USN-2656-1 - http://www.securitytracker.com/id/1032783 - http://www.debian.org/security/2015/dsa-3300 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.c
m/id/1032783 - http://www.debian.org/security/2015/dsa-3300 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2733 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a dedicated worker. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - https://security.gen
015-07/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - https://security.gentoo.org/glsa/201512-10 - https://bugzilla.mozilla.org/show_bug.cgi?id=1169867 - http://www.securityfocus.com/bid/75541 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securitytracker.com/id/1032784 - http://rhn.redhat.com/errata/RHSA-2015-1207.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.mozilla.org/security/announce/2015/mfsa2015-65.html - http://www.ubuntu.com/usn/USN-2656-1 - http://lists.opensuse.org
w.mozilla.org/security/announce/2015/mfsa2015-65.html - http://www.ubuntu.com/usn/USN-2656-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - http://www.securitytracker.com/id/1032783 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2734 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - http://lists.opensuse.org/opensuse-security-
/2015-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - https://security.gentoo.org/glsa/201512-10 - http://www.securityfocus.com/bid/75541 - https://bugzilla.mozilla.org/show_bug.cgi?id=1166082 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.debian.org/security/2015/dsa-3324 - http://www.ubuntu.com/usn/USN-2673-1 - http://www.securitytracker.com/id/1032784 - http://rhn.redhat.com/errata/RHSA-2015-1207.html - http://www.mozilla.org/security/announce/2015/mfsa2015-66.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - ht
ecurity/announce/2015/mfsa2015-66.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.ubuntu.com/usn/USN-2656-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - http://www.securitytracker.com/id/1032783 - http://www.debian.org/security/2015/dsa-3300 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2735 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - https://s
.com/errata/RHSA-2015-1455.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - https://security.gentoo.org/glsa/201512-10 - https://bugzilla.mozilla.org/show_bug.cgi?id=1166900 - http://www.securityfocus.com/bid/75541 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.debian.org/security/2015/dsa-3324 - http://www.ubuntu.com/usn/USN-2673-1 - http://www.securitytracker.com/id/1032784 - http://rhn.redhat.com/errata/RHSA-2015-1207.html - http://www.mozilla.org/security/announce/2015/mfsa2015-66.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - http://lists.opensuse.org/opensuse-security-
ttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.ubuntu.com/usn/USN-2656-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - http://www.securitytracker.com/id/1032783 - http://www.debian.org/security/2015/dsa-3300 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2736 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/m
html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - https://security.gentoo.org/glsa/201512-10 - http://www.securityfocus.com/bid/75541 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.debian.org/security/2015/dsa-3324 - https://bugzilla.mozilla.org/show_bug.cgi?id=1167888 - http://www.ubuntu.com/usn/USN-2673-1 - http://www.securitytracker.com/id/1032784 - http://rhn.redhat.com/errata/RHSA-2015-1207.html - http://www.mozilla.org/security/announce/2015/mfsa2015-66.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - http://lists.opensus
015/mfsa2015-66.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.ubuntu.com/usn/USN-2656-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - http://www.securitytracker.com/id/1032783 - http://www.debian.org/security/2015/dsa-3300 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2737 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - http://lists.opensuse.org/opensuse-security-announce/2015-0
25.html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - https://security.gentoo.org/glsa/201512-10 - http://www.securityfocus.com/bid/75541 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.debian.org/security/2015/dsa-3324 - http://www.ubuntu.com/usn/USN-2673-1 - http://www.securitytracker.com/id/1032784 - http://rhn.redhat.com/errata/RHSA-2015-1207.html - http://www.mozilla.org/security/announce/2015/mfsa2015-66.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.ht
nsuse-security-announce/2015-07/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1167332 - http://www.ubuntu.com/usn/USN-2656-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - http://www.securitytracker.com/id/1032783 - http://www.debian.org/security/2015/dsa-3300 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2738 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - http://lists.opensuse.org/opensuse-securit
ce/2015-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - https://security.gentoo.org/glsa/201512-10 - http://www.securityfocus.com/bid/75541 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.debian.org/security/2015/dsa-3324 - http://www.ubuntu.com/usn/USN-2673-1 - http://www.securitytracker.com/id/1032784 - http://rhn.redhat.com/errata/RHSA-2015-1207.html - http://www.mozilla.org/security/announce/2015/mfsa2015-66.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1167356 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html -
illa.mozilla.org/show_bug.cgi?id=1167356 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.ubuntu.com/usn/USN-2656-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - http://www.securitytracker.com/id/1032783 - http://www.debian.org/security/2015/dsa-3300 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2739 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - https://security.gentoo.
A-2015-1455.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - https://security.gentoo.org/glsa/201512-10 - http://www.securityfocus.com/bid/75541 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.debian.org/security/2015/dsa-3324 - http://www.ubuntu.com/usn/USN-2673-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1168207 - http://www.securitytracker.com/id/1032784 - http://rhn.redhat.com/errata/RHSA-2015-1207.html - http://www.mozilla.org/security/announce/2015/mfsa2015-66.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2015-0
nsuse.org/opensuse-security-announce/2015-07/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.ubuntu.com/usn/USN-2656-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - http://www.securitytracker.com/id/1032783 - http://www.debian.org/security/2015/dsa-3300 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2740 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause a denial of service or have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - http://lists.opensuse.org/opensuse-security-a
2015-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - https://security.gentoo.org/glsa/201512-10 - https://bugzilla.mozilla.org/show_bug.cgi?id=1170809 - http://www.securityfocus.com/bid/75541 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.debian.org/security/2015/dsa-3324 - http://www.ubuntu.com/usn/USN-2673-1 - http://www.securitytracker.com/id/1032784 - http://rhn.redhat.com/errata/RHSA-2015-1207.html - http://www.mozilla.org/security/announce/2015/mfsa2015-66.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - htt
curity/announce/2015/mfsa2015-66.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.ubuntu.com/usn/USN-2656-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - http://www.securitytracker.com/id/1032783 - http://www.debian.org/security/2015/dsa-3300 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2741 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not enforce key pinning upon encountering an X.509 certificate problem that generates a user dialog, which allows user-assisted man-in-the-middle attackers to bypass intended access restrictions by triggering a (1) expired certificate or (2) mismatched hostname for a domain with pinning enabled. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - htt
- CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://rhn.redhat.com/errata/RHSA-2015-1455.html - http://www.mozilla.org/security/announce/2015/mfsa2015-67.html - https://security.gentoo.org/glsa/201512-10 - http://www.securityfocus.com/bid/75541 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1147497 - http://www.securitytracker.com/id/1032784 - http://rhn.redhat.com/errata/RHSA-2015-1207.html - http://www.ubuntu.com/usn/USN-2656-1 - http://www.securitytracker.com/id/1032783 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/techne
2656-1 - http://www.securitytracker.com/id/1032783 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2742 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-reporting data stream. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201512-10 - http://www.securityfocus.com/bid/75541 - http://www.mozilla.org/security/announce/2015/mfsa2015-68.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzi
e/2015/mfsa2015-68.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1138669 - http://www.securitytracker.com/id/1032783 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2743 State: PUBLISHED Published: 2015-07-06T01:00:00 Last Updated: 2024-08-06T05:24:38.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html - https://security.gentoo.org/glsa/201512-10 - http://www.securityfo
rg/opensuse-security-announce/2015-07/msg00033.html - https://security.gentoo.org/glsa/201512-10 - http://www.securityfocus.com/bid/75541 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://rhn.redhat.com/errata/RHSA-2015-1207.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html - http://www.mozilla.org/security/announce/2015/mfsa2015-69.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1163109 - http://www.ubuntu.com/usn/USN-2656-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - http://www.securitytracker.com/id/1032
-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html - http://www.securitytracker.com/id/1032783 - http://www.debian.org/security/2015/dsa-3300 - http://www.ubuntu.com/usn/USN-2656-2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-2744 State: PUBLISHED Published: 2015-08-08T00:00:00 Last Updated: 2024-08-06T05:24:38.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Search app in Gaia in Mozilla Firefox OS before 2.2 allows remote attackers to inject arbitrary HTML via a crafted search link that is mishandled after re-opening the browser or opening the tab view. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2015/mfsa2015-72.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1102204
CVE ID: CVE-2015-2745 State: PUBLISHED Published: 2015-08-08T00:00:00 Last Updated: 2024-08-06T05:24:38.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Search app in Gaia in Mozilla Firefox OS before 2.2 allow remote attackers to inject arbitrary HTML via the (1) name or (2) title field in card content associated with a search link that is mishandled after a HOME button press or a Show Windows action, as demonstrated by embedding an arbitrary application or spoofing the account-creation page. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2015/mfsa2015-73.html
nal Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2015/mfsa2015-73.html - https://github.com/mozilla-b2g/gaia/commit/0f72a8c31df9f3d8f609a7c58ca91139051d44eb - https://bugzilla.mozilla.org/show_bug.cgi?id=1101158
CVE ID: CVE-2015-2746 State: PUBLISHED Published: 2015-03-26T14:00:00 Last Updated: 2024-08-06T05:24:38.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliances before 7.8.4 Hotfix 02 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the "second" parameter of a command, as demonstrated by the Destination parameter in the ping command. Additional Analyst Notes: - CVE Program Container: References: - https://www.securify.nl/advisory/SFY20140906/command_injection_vulnerability_in_network_diagnostic
tainer: References: - https://www.securify.nl/advisory/SFY20140906/command_injection_vulnerability_in_network_diagnostics_tool_of_websense_appliance_manager.html - http://packetstormsecurity.com/files/130899/Websense-Appliance-Manager-Command-Injection.html - http://www.websense.com/support/article/kbarticle/October-2014-Hotfix-Summary-for-Websense-Solutions - http://seclists.org/fulldisclosure/2015/Mar/104 - https://www.exploit-db.com/exploits/36423/ - http://www.securityfocus.com/archive/1/534910/100/0/threaded
CVE ID: CVE-2015-2747 State: PUBLISHED Published: 2015-03-26T14:00:00 Last Updated: 2024-08-06T05:24:38.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the data loss prevention (DLP) incident Forensics Preview in Websense Triton 7.8.3 and V-Series 7.7 appliances allow remote attackers to inject arbitrary web script or HTML via a crafted (1) email or (2) HTTP request, which triggers a DLP Policy. Additional Analyst Notes: - CVE Program Container: References: - https://www.securify.nl/advisory/SFY20140904/websense_data_security_dlp_incident_forensics_preview_is_vulnerable_to_cross_site_scripting.html - http://seclists.org/f
websense_data_security_dlp_incident_forensics_preview_is_vulnerable_to_cross_site_scripting.html - http://seclists.org/fulldisclosure/2015/Mar/102 - http://www.securityfocus.com/archive/1/534908/100/0/threaded - http://packetstormsecurity.com/files/130897/Websense-Data-Security-DLP-Incident-Forensics-Preview-XSS.html