Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-1333 State: PUBLISHED Published: 2015-08-31T10:00:00 Last Updated: 2024-08-06T04:40:18.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the __key_link_end function in security/keys/keyring.c in the Linux kernel before 4.1.4 allows local users to cause a denial of service (memory consumption) via many add_key system calls that refer to existing keys. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.4 - http://www.ubuntu.com/usn/USN-2689-1 - http://www.ubuntu.com/usn/USN-2690-1 - http://rhn.redhat.com/errata/RHSA-2015-1778.html - https://github.com/torvalds/linux/commit/ca4d
tu.com/usn/USN-2690-1 - http://rhn.redhat.com/errata/RHSA-2015-1778.html - https://github.com/torvalds/linux/commit/ca4da5dd1f99fe9c59f1709fb43e818b18ad20e0 - http://www.ubuntu.com/usn/USN-2691-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1245658 - http://www.debian.org/security/2015/dsa-3329 - http://rhn.redhat.com/errata/RHSA-2015-1787.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.securityfocus.com/bid/76050 - http://www.ubuntu.com/usn/USN-2688-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ca4da5dd1f99fe9c59f1709fb43e818b18ad20e0 - http://www.openwall.com/lists/oss-security/2015/07/27/7 - http://ww
ommit/?id=ca4da5dd1f99fe9c59f1709fb43e818b18ad20e0 - http://www.openwall.com/lists/oss-security/2015/07/27/7 - http://www.ubuntu.com/usn/USN-2687-1 - https://support.f5.com/csp/article/K05211147
CVE ID: CVE-2015-1334 State: PUBLISHED Published: 2015-08-12T14:00:00 Last Updated: 2024-08-06T04:40:18.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape AppArmor or SELinux confinement by mounting a proc filesystem with a crafted (1) AppArmor profile or (2) SELinux label. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3317 - http://www.ubuntu.com/usn/USN-2675-1 - http://lists.opensuse.org/opensuse-updates/2015-07/msg00066.html - http://www.securityfocus.com/bid/75998 - https://service.ait.ac.at/securit
.org/opensuse-updates/2015-07/msg00066.html - http://www.securityfocus.com/bid/75998 - https://service.ait.ac.at/security/2015/LxcSecurityAnalysis.html - https://github.com/lxc/lxc/commit/5c3fcae78b63ac9dd56e36075903921bd9461f9e - http://lists.opensuse.org/opensuse-updates/2015-07/msg00067.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html
CVE ID: CVE-2015-1335 State: PUBLISHED Published: 2015-10-01T20:00:00 Last Updated: 2024-08-06T04:40:18.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170045.html - https://lists.linuxcontainers.org/pipermail/lxc-devel/2015-September/012434.html - http://www.debian.org/security/2015/dsa-3400 - https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662 -
12434.html - http://www.debian.org/security/2015/dsa-3400 - https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.securityfocus.com/bid/76894 - https://github.com/lxc/lxc/commit/592fd47a6245508b79fe6ac819fe6d3b2c1289be - http://www.openwall.com/lists/oss-security/2015/09/29/4 - http://www.ubuntu.com/usn/USN-2753-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171358.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171364.html - http://lists.opensuse.org/opensuse-updates/2015-10/msg00023.html - http://lists.opensuse.org/opensuse-secu
171364.html - http://lists.opensuse.org/opensuse-updates/2015-10/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html
CVE ID: CVE-2015-1336 State: PUBLISHED Published: 2017-09-27T15:00:00 Last Updated: 2024-08-06T04:40:18.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/man-db/+bug/1482786 - http://packetstormsecurity.com/files/140759/Man-db-2.6.7.1-Privilege-Escalation.html - http://www.halfdog.net/Security/2015/MandbSymlinkLocalRootPrivilegeEscalation/ - http://people.canonical.com/~ubuntu-
- http://www.halfdog.net/Security/2015/MandbSymlinkLocalRootPrivilegeEscalation/ - http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1336.html - http://www.securityfocus.com/bid/79723 - https://security.gentoo.org/glsa/201707-12 - http://www.openwall.com/lists/oss-security/2015/12/14/11 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840357
CVE ID: CVE-2015-1337 State: PUBLISHED Published: 2015-10-09T14:00:00 Last Updated: 2024-08-06T04:40:18.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof disk images and have unspecified other impact via a 403 (aka Forbidden) response. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2746-1 - http://www.ubuntu.com/usn/USN-2746-2 - https://bugs.launchpad.net/ubuntu/%2Bsource/simplestreams/%2Bbug/1487004
CVE ID: CVE-2015-1338 State: PUBLISHED Published: 2015-10-01T20:00:00 Last Updated: 2024-08-06T04:40:18.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly gain privileges via a (1) symlink or (2) hard link attack on /var/crash/vmcore.log. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2744-1 - https://launchpad.net/apport/trunk/2.19 - https://www.exploit-db.com/exploits/38353/ - https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1492570 - http://www.halfdog.net/Security/2015/ApportKernelCrashdumpFileAccessVulnera
pad.net/ubuntu/+source/apport/+bug/1492570 - http://www.halfdog.net/Security/2015/ApportKernelCrashdumpFileAccessVulnerabilities/ - http://seclists.org/fulldisclosure/2015/Sep/101 - http://packetstormsecurity.com/files/133723/Ubuntu-Apport-kernel_crashdump-Symlink.html
CVE ID: CVE-2015-1339 State: PUBLISHED Published: 2016-04-27T17:00:00 Last Updated: 2024-08-06T04:40:18.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the cuse_channel_release function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service (memory consumption) or possibly have unspecified other impact by opening /dev/cuse many times. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/03/02/13 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2c5816b4beccc8ba709144539f6fdd764f8fa49c - https://bugzilla.redhat.com/show_bug.cgi?id=13143
rvalds/linux.git/commit/?id=2c5816b4beccc8ba709144539f6fdd764f8fa49c - https://bugzilla.redhat.com/show_bug.cgi?id=1314331 - https://github.com/torvalds/linux/commit/2c5816b4beccc8ba709144539f6fdd764f8fa49c - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html - https://bugzilla.novell.com/show_bug.cgi?id=969356 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html - https://security-tracker.debian.org/tracker/CVE-2015-1339
CVE ID: CVE-2015-1340 State: PUBLISHED Published: 2019-04-22T15:35:59.288979Z Last Updated: 2024-09-17T01:10:47.579Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Ubuntu Products: LXD Problem Types: Race condition. Description: LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lxc/lxd/commit/19c6961cc1012c8a529f20807328a9357f5034f4
CVE ID: CVE-2015-1341 State: PUBLISHED Published: 2019-04-22T15:35:59.329904Z Last Updated: 2024-09-16T23:45:46.716Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Ubuntu Products: Apport Problem Types: Parsing a Python module by executing the module. Description: Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/apport/trunk/2.19.2 - https://usn.ubuntu.com/2782-1/
CVE ID: CVE-2015-1342 State: PUBLISHED Published: 2015-12-07T20:00:00 Last Updated: 2024-08-06T04:40:18.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by (1) querying or (2) updating a cgroup. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/lxcfs/+bug/1508481 - https://github.com/lxc/lxcfs/commit/a8b6c3e0537e90fba3c55910fd1b7229d54a60a7 - http://www.ubuntu.com/usn/USN-2813-1
CVE ID: CVE-2015-1343 State: PUBLISHED Published: 2019-04-22T15:35:59.371735Z Last Updated: 2024-09-17T04:09:03.881Z Severity: LOW (CVSS 2 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: Ubuntu Products: unity-scope-gdrive Problem Types: Logging private data. Description: All versions of unity-scope-gdrive logs search terms to syslog. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/unity-scope-gdrive/+bug/1509076
CVE ID: CVE-2015-1344 State: PUBLISHED Published: 2015-12-07T20:00:00 Last Updated: 2024-08-06T04:40:18.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_write_pids function in lxcfs.c in LXCFS before 0.12 does not properly check permissions, which allows local users to gain privileges by writing a pid to the tasks file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/lxcfs/+bug/1512854 - http://www.ubuntu.com/usn/USN-2813-1 - https://github.com/lxc/lxcfs/commit/8ee2a503e102b1a43ec4d83113dc275ab20a869a
CVE ID: CVE-2015-1345 State: PUBLISHED Published: 2015-02-12T16:00:00 Last Updated: 2024-08-06T04:40:18.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via crafted input when using the -F option. Additional Analyst Notes: - CVE Program Container: References: - http://debbugs.gnu.org/cgi/bugreport.cgi?bug=19563 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://rhn.redhat.com/errata/RHSA-2015-1447.html - http://lists.opensuse.org/opensuse-updates/2015-02/msg00037.html - http://www.security
.com/errata/RHSA-2015-1447.html - http://lists.opensuse.org/opensuse-updates/2015-02/msg00037.html - http://www.securityfocus.com/bid/72281 - http://www.openwall.com/lists/oss-security/2015/01/22/10 - http://git.savannah.gnu.org/cgit/grep.git/commit/?id=83a95bd8c8561875b948cadd417c653dbe7ef2e2
CVE ID: CVE-2015-1346 State: PUBLISHED Published: 2015-01-22T22:00:00 Last Updated: 2024-08-06T04:40:18.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome before 40.0.2214.91, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://secunia.com/advisories/62575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100361 - http://www.ubuntu.com/usn/USN-2476-1 - http://security.gentoo.org/glsa/glsa-201502-13.
loud.com/vulnerabilities/100361 - http://www.ubuntu.com/usn/USN-2476-1 - http://security.gentoo.org/glsa/glsa-201502-13.xml - http://www.securitytracker.com/id/1031623 - http://rhn.redhat.com/errata/RHSA-2015-0093.html - http://secunia.com/advisories/62383
CVE ID: CVE-2015-1347 State: PUBLISHED Published: 2015-01-23T15:00:00Z Last Updated: 2024-09-17T02:20:46.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in client.inc.php in osTicket before 1.9.5.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osTicket/osTicket-1.8/releases/tag/v1.9.5.1 - https://github.com/osTicket/osTicket-1.8/commit/b38b3ca7235002137cc9ff74b3c24a4a78c9c2d1
CVE ID: CVE-2015-1348 State: PUBLISHED Published: 2015-02-03T16:00:00 Last Updated: 2024-08-06T04:40:18.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Aruba Instant (IAP) with firmware before 4.0.0.7 and 4.1.x before 4.1.1.2 allows remote attackers to cause a denial of service (crash or reset to factory default) via a malformed frame to the wireless interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/support/alerts/aruba-psa-2015-001.txt
CVE ID: CVE-2015-1349 State: PUBLISHED Published: 2015-02-19T02:00:00 Last Updated: 2024-08-06T04:40:18.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html - https://kb.juniper.net/JSA10783 - http://a
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html - https://kb.juniper.net/JSA10783 - http://advisories.mageia.org/MGASA-2015-0082.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:165 - https://kb.isc.org/article/AA-01235 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00013.html - http://lists.opensuse.org/opensuse-updates/2015-07/msg00038.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:054 - https://kc.mcafee.com/corporate/index?page=content&id=SB10116 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150904.html - https://security.gentoo.org/glsa/201510-01 - http://marc.info/?l=bugtraq&m=
il/package-announce/2015-March/150904.html - https://security.gentoo.org/glsa/201510-01 - http://marc.info/?l=bugtraq&m=143740940810833&w=2 - http://marc.info/?l=bugtraq&m=143740940810833&w=2 - http://www.ubuntu.com/usn/USN-2503-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150905.html - http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html - https://support.apple.com/HT205219 - http://rhn.redhat.com/errata/RHSA-2015-0672.html - https://bugzilla.redhat.com/show_bug.cgi?id=1193820
CVE ID: CVE-2015-1350 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-06T04:40:18.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1185139 - http://www.securityfocus.com
CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1185139 - http://www.securityfocus.com/bid/76075 - http://marc.info/?l=linux-kernel&m=142153722930533&w=2 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770492 - http://www.openwall.com/lists/oss-security/2015/01/24/5
CVE ID: CVE-2015-1351 State: PUBLISHED Published: 2015-03-30T10:00:00 Last Updated: 2024-08-06T04:40:18.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71929 - http://openwall.com/lists/oss-security/2015/01/24/9 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.oracle.com/technetwork/topics/securi
tp://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - https://bugs.php.net/bug.php?id=68677 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:079 - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://support.apple.com/HT205267 - http://rhn.redhat.com/errata/RHSA-2015-1053.html - https://security.gentoo.org/glsa/201606-10 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=777c39f4042327eac4b63c7ee87dc1c7a09a3115 - http://rhn.redhat.com/errata/RHSA-2015-1066.html
CVE ID: CVE-2015-1352 State: PUBLISHED Published: 2015-03-30T10:00:00 Last Updated: 2024-08-06T04:40:18.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate token extraction for table names, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name. Additional Analyst Notes: - CVE Program Container: References: - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=124fb22a13fafa3648e4e15b4f207c7096d8155e - http://openwall.com/lists/oss-security/2015/01/24/9 - http://lists.apple.com/archives/security
8e4e15b4f207c7096d8155e - http://openwall.com/lists/oss-security/2015/01/24/9 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:079 - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - https://support.apple.com/HT205267 - https://bugs.php.net/bug.php?id=68741 - http://www.securityfocus.com/bid/71932 - http://rhn.redhat.com/errata/RHSA-2015-1053.html - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - https://security.gentoo.org/glsa/201606
errata/RHSA-2015-1053.html - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - https://security.gentoo.org/glsa/201606-10
CVE ID: CVE-2015-1353 State: REJECTED Published: 2015-03-30T10:00:00 Last Updated: 2015-05-19T02:57:00 Description: No description available.
CVE ID: CVE-2015-1355 State: PUBLISHED Published: 2015-02-18T02:00:00 Last Updated: 2024-08-06T04:40:18.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cleartext passwords by reading a project file and conducting a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-234789.pdf
CVE ID: CVE-2015-1356 State: PUBLISHED Published: 2015-02-18T02:00:00 Last Updated: 2024-08-06T04:40:18.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote attackers to establish arbitrary authorization data via a modified file. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-234789.pdf
CVE ID: CVE-2015-1357 State: PUBLISHED Published: 2015-02-02T15:00:00 Last Updated: 2024-08-06T04:40:18.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32, and WIN72xx devices with firmware before BS4.4.4621.32 allow context-dependent attackers to discover password hashes by reading (1) files or (2) security logs. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-753139.pdf
CVE ID: CVE-2015-1358 State: PUBLISHED Published: 2015-02-18T02:00:00 Last Updated: 2024-08-06T04:40:18.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote-management module in the (1) Multi Panels, (2) Comfort Panels, and (3) RT Advanced functionality in Siemens SIMATIC WinCC (TIA Portal) before 13 SP1 and in the (4) panels and (5) runtime functionality in SIMATIC WinCC flexible before 2008 SP3 Up7 does not properly encrypt credentials in transit, which makes it easier for remote attackers to determine cleartext credentials by sniffing the network and conducting a decryption attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.co
d conducting a decryption attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-543623.pdf - https://ics-cert.us-cert.gov/advisories/ICSA-16-161-02 - http://www.securityfocus.com/bid/72625 - http://www.securitytracker.com/id/1036090 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-526760.pdf
CVE ID: CVE-2015-1359 State: PUBLISHED Published: 2015-01-27T11:00:00 Last Updated: 2024-08-06T04:40:18.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple off-by-one errors in fpdfapi/fpdf_font/font_int.h in PDFium, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted PDF document, related to an "intra-object-overflow" issue, a different vulnerability than CVE-2015-1205. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.chromium.org/656463006 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http:/
https://codereview.chromium.org/656463006 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://security.gentoo.org/glsa/glsa-201502-13.xml - https://code.google.com/p/chromium/issues/detail?id=421196 - https://code.google.com/p/chromium/issues/detail?id=449894