Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-8461 State: PUBLISHED Published: 2015-12-16T15:00:00 Last Updated: 2024-08-06T08:20:41.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034419 - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174145.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174252.html - https://kb.isc.org/article/AA-
l - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174252.html - https://kb.isc.org/article/AA-01438 - http://www.securityfocus.com/bid/79347 - https://kb.isc.org/article/AA-01380 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.539966 - https://kb.isc.org/article/AA-01319
CVE ID: CVE-2015-8466 State: PUBLISHED Published: 2016-01-13T15:00:00 Last Updated: 2024-08-06T08:20:41.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Swift3 before 1.9 allows remote attackers to conduct replay attacks via an Authorization request that lacks a Date header. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3583 - https://swiftstack.com/docs/admin/release.html - https://bugs.launchpad.net/swift3/+bug/1497424 - https://github.com/openstack/swift3/blob/master/CHANGELOG - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174374.html
CVE ID: CVE-2015-8467 State: PUBLISHED Published: 2015-12-29T22:00:00 Last Updated: 2024-08-06T08:20:42.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: The samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not properly check for administrative privileges during creation of machine accounts, which allows remote authenticated users to bypass intended access restrictions by leveraging the existence of a domain with both a Samba DC and a Windows DC, a similar issue to CVE-2015-2535. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.co
lar issue to CVE-2015-2535. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79735 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html - http://www.ubuntu.com/usn/USN-2855-2 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html - https://www.samba.org/samba/security/CVE-2015-8467.html - https://bugzilla.redhat.com/show_bug.cgi?id=1290294 - http://www.securitytracker.com/id/1034493 - http://www.debian.org/security/2016/dsa-3433 - https://security
id=1290294 - http://www.securitytracker.com/id/1034493 - http://www.debian.org/security/2016/dsa-3433 - https://security.gentoo.org/glsa/201612-47 - http://www.ubuntu.com/usn/USN-2855-1 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=b000da128b5fb519d2d3f2e7fd20e4a25b7dae7d
CVE ID: CVE-2015-8470 State: PUBLISHED Published: 2017-12-11T17:00:00 Last Updated: 2024-08-06T08:20:42.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: The console in Puppet Enterprise 3.7.x, 3.8.x, and 2015.2.x does not set the secure flag for the JSESSIONID cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2015-8470
CVE ID: CVE-2015-8472 State: PUBLISHED Published: 2016-01-21T15:00:00 Last Updated: 2024-08-06T08:20:41.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple
an incomplete fix for CVE-2015-8126. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - https://support.apple.com/HT206167 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html - http://sourceforge.net/projects/libpng/files/libpng10/1.0.65/ - http://sourceforge.net/projects/libpng/files/libpng16/1.6.20/ - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - https://access.redhat.com/errata/RHSA-2016:1430 - http://sourceforge.net/projects/libpng/files/libpng15/1.5.25/ - http://rhn.red
access.redhat.com/errata/RHSA-2016:1430 - http://sourceforge.net/projects/libpng/files/libpng15/1.5.25/ - http://rhn.redhat.com/errata/RHSA-2015-2595.html - http://rhn.redhat.com/errata/RHSA-2015-2596.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10148 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html - http://www.openwall.com/lists/oss-
1.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html - http://www.openwall.com/lists/oss-security/2015/12/03/6 - http://sourceforge.net/projects/libpng/files/libpng12/1.2.55/ - http://www.securityfocus.com/bid/78624 - http://rhn.redhat.com/errata/RHSA-2016-0057.html - http://rhn.redhat.com/errata/RHSA-2016-0055.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174905.html - http://sourceforge.net/projects/libpng/files/libpng14/1.4.18/ - http://www.debian.org/security/2016/dsa-3443 - http://rhn.redhat.com/errata/RHSA-2016-0056.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html - http://lists.fedoraprojec
-2016-0056.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175073.html - http://rhn.redhat.com/errata/RHSA-2015-2594.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174936.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html
CVE ID: CVE-2015-8473 State: PUBLISHED Published: 2016-04-12T14:00:00 Last Updated: 2024-08-06T08:20:41.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Issues API in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote authenticated users to obtain sensitive information in changeset messages by leveraging permission to read issues with related changesets from other projects. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/78621 - https://www.redmine.org/projects/redmine/wiki/Changelog_3_0 - https://www.redmine.org/issues/21136 - https://www.redmine.org/versions/105 - https://www.redmine.org/projec
gelog_3_0 - https://www.redmine.org/issues/21136 - https://www.redmine.org/versions/105 - https://www.redmine.org/projects/redmine/wiki/Changelog_3_1 - http://www.debian.org/security/2016/dsa-3529 - https://github.com/redmine/redmine/commit/8d8f612fa368a72c56b63f7ce6b7e98cab9feb22
CVE ID: CVE-2015-8474 State: PUBLISHED Published: 2016-04-12T14:00:00 Last Updated: 2024-08-06T08:20:41.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the valid_back_url function in app/controllers/application_controller.rb in Redmine before 2.6.7, 3.0.x before 3.0.5, and 3.1.x before 3.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted back_url parameter, as demonstrated by "@attacker.com," a different vulnerability than CVE-2014-1985. Additional Analyst Notes: - CVE Program Container: References: - http://www.redmine.org/news/101 - https://www.redmine.org/issues/19577 - http://www.d
E Program Container: References: - http://www.redmine.org/news/101 - https://www.redmine.org/issues/19577 - http://www.debian.org/security/2016/dsa-3529 - https://github.com/redmine/redmine/commit/032f2c9be6520d9d1a1608aa4f1d5d1f184f2472 - http://www.securityfocus.com/bid/78625
CVE ID: CVE-2015-8476 State: PUBLISHED Published: 2015-12-16T21:00:00 Last Updated: 2024-08-06T08:20:42.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple CRLF injection vulnerabilities in PHPMailer before 5.2.14 allow attackers to inject arbitrary SMTP commands via CRLF sequences in an (1) email address to the validateAddress function in class.phpmailer.php or (2) SMTP command to the sendCommand function in class.smtp.php, a different vulnerability than CVE-2012-0796. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PHPMailer/PHPMailer/commit/6687a96a18b8f12148881e4ddde795ae477284b0 - http://lists.fedoraproject.org/pipermail/package-a
PHPMailer/PHPMailer/commit/6687a96a18b8f12148881e4ddde795ae477284b0 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177139.html - http://www.openwall.com/lists/oss-security/2015/12/05/1 - https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.14 - http://www.debian.org/security/2015/dsa-3416 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177130.html - http://www.securityfocus.com/bid/78619 - http://www.openwall.com/lists/oss-security/2015/12/04/5
CVE ID: CVE-2015-8477 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T08:20:41.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving flash message rendering. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/projects/redmine/repository/entry/tags/2.6.2/doc/CHANGELOG - http://www.openwall.com/lists/oss-security/2015/12/05/8 - http://www.openwall.com/lists/oss-security/2015/12/05/7 - http://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://www.redmine.org/
/oss-security/2015/12/05/7 - http://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://www.redmine.org/issues/19117
CVE ID: CVE-2015-8478 State: PUBLISHED Published: 2015-12-06T01:00:00 Last Updated: 2024-08-06T08:20:41.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.73, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/12/stable-channel-update.html - http://www.ubuntu.com/usn/USN-2825-1
CVE ID: CVE-2015-8479 State: PUBLISHED Published: 2015-12-06T01:00:00 Last Updated: 2024-08-06T08:20:42.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering access to an unauthorized audio output device. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=535605 - http://googlechromereleases.blogspot.com/2015/12/stable-channel-update.htm
ogle.com/p/chromium/issues/detail?id=535605 - http://googlechromereleases.blogspot.com/2015/12/stable-channel-update.html
CVE ID: CVE-2015-8480 State: PUBLISHED Published: 2015-12-06T01:00:00 Last Updated: 2024-08-06T08:20:42.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VideoFramePool::PoolImpl::CreateFrame function in media/base/video_frame_pool.cc in Google Chrome before 47.0.2526.73 does not initialize memory for a video-frame data structure, which might allow remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact by leveraging improper interaction with the vp3_h_loop_filter_c function in libavcodec/vp3dsp.c in FFmpeg. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/
.c in FFmpeg. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/12/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=514759
CVE ID: CVE-2015-8481 State: PUBLISHED Published: 2016-01-08T19:00:00 Last Updated: 2024-08-06T08:20:42.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atlassian JIRA Software 7.0.3, JIRA Core 7.0.3, and the bundled JIRA Service Desk 3.0.3 installer attaches the wrong image to e-mail notifications when a user views an issue with inline wiki markup referencing an image attachment, which might allow remote attackers to obtain sensitive information by updating a different issue that includes wiki markup for an external image reference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79381 - https://jira.atlassian.com/browse/JRA-4
- CVE Program Container: References: - http://www.securityfocus.com/bid/79381 - https://jira.atlassian.com/browse/JRA-47557 - https://confluence.atlassian.com/jira/jira-security-advisory-2015-12-09-792307790.html
CVE ID: CVE-2015-8482 State: PUBLISHED Published: 2015-12-07T20:00:00Z Last Updated: 2024-09-17T02:47:21.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blue Coat Unified Agent before 4.6.2 does not prevent modification of its configuration files when running in local enforcement mode, which allows local administrators to unblock categories or disable the agent via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bto.bluecoat.com/security-advisory/sa102
CVE ID: CVE-2015-8483 State: PUBLISHED Published: 2016-02-17T02:00:00 Last Updated: 2024-08-06T08:20:42.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Cybozu Office 10.2.0 through 10.3.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN71428831/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000025 - https://cs.cybozu.co.jp/2015/006088.html
CVE ID: CVE-2015-8484 State: PUBLISHED Published: 2016-02-17T02:00:00 Last Updated: 2024-08-06T08:20:41.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended calendar-viewing restrictions via unspecified vectors, a different vulnerability than CVE-2015-8485, CVE-2015-8486, and CVE-2016-1152. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2016/006110.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000023 - http://jvn.jp/en/jp/JVN48720230/index.html
CVE ID: CVE-2015-8485 State: PUBLISHED Published: 2016-02-17T02:00:00 Last Updated: 2024-08-06T08:20:42.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary posting titles via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8486, and CVE-2016-1152. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000023 - https://cs.cybozu.co.jp/2015/006077.html - http://jvn.jp/en/jp/JVN48720230/index.html
CVE ID: CVE-2015-8486 State: PUBLISHED Published: 2016-02-17T02:00:00 Last Updated: 2024-08-06T08:20:42.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary report titles via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8485, and CVE-2016-1152. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000023 - http://jvn.jp/en/jp/JVN48720230/index.html - https://cs.cybozu.co.jp/2015/006074.html
CVE ID: CVE-2015-8487 State: PUBLISHED Published: 2016-02-17T02:00:00 Last Updated: 2024-08-06T08:20:42.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Office 9.0.0 through 10.3 allows remote attackers to discover CSRF tokens via unspecified vectors, a different vulnerability than CVE-2015-8488. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN47296923/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000022 - https://cs.cybozu.co.jp/2015/006071.html
CVE ID: CVE-2015-8488 State: PUBLISHED Published: 2016-02-17T02:00:00 Last Updated: 2024-08-06T08:20:42.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Office 10.3.0 allows remote attackers to read image files via a crafted e-mail message, a different vulnerability than CVE-2015-8487. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2015/006075.html - http://jvn.jp/en/jp/JVN28042424/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000021
CVE ID: CVE-2015-8489 State: PUBLISHED Published: 2016-02-17T02:00:00 Last Updated: 2024-08-06T08:20:42.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service (excessive database locking) via a crafted CSV file, a different vulnerability than CVE-2016-1153. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000020 - http://jvn.jp/en/jp/JVN20246313/index.html - https://cs.cybozu.co.jp/2015/006073.html
CVE ID: CVE-2015-8490 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8491 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8492 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8493 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8494 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8495 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8496 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8497 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8498 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8499 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8500 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8501 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8502 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8504 State: PUBLISHED Published: 2017-04-11T19:00:00 Last Updated: 2024-08-06T08:20:42.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1289541 - http://www.openwall.com/lists/oss-security/2015/12/08/7 - http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=4c65fed8bdf96780735dbdb92a8 - http://www.debian.org/security/2016/dsa-3469 - http://www.debian.or
git%3Ba=commitdiff%3Bh=4c65fed8bdf96780735dbdb92a8 - http://www.debian.org/security/2016/dsa-3469 - http://www.debian.org/security/2016/dsa-3470 - http://www.debian.org/security/2016/dsa-3471 - https://security.gentoo.org/glsa/201602-01 - http://www.securityfocus.com/bid/78708
CVE ID: CVE-2015-8505 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T08:20:41.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android before 5.1.1 LMY48Z allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 17769851, a different vulnerability than CVE-2015-6616, CVE-2015-8506, and CVE-2015-8507. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-8506 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T08:20:42.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 24441553, a different vulnerability than CVE-2015-6616, CVE-2015-8505, and CVE-2015-8507. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-8507 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T08:20:42.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 24157524, a different vulnerability than CVE-2015-6616, CVE-2015-8505, and CVE-2015-8506. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html
CVE ID: CVE-2015-8508 State: PUBLISHED Published: 2016-01-03T02:00:00 Last Updated: 2024-08-06T08:20:42.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2, when a local dot configuration is used, allows remote attackers to inject arbitrary web script or HTML via a crafted bug summary. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1221518 - http://seclists.org/bugtraq/2015/Dec/131 - http://www.securityfocus.com/bid/79660 - http://www.securityt
gi?id=1221518 - http://seclists.org/bugtraq/2015/Dec/131 - http://www.securityfocus.com/bid/79660 - http://www.securitytracker.com/id/1034556 - http://packetstormsecurity.com/files/135048/Bugzilla-Cross-Site-Scripting-Information-Leak.html - https://www.bugzilla.org/security/4.2.15/