Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e-Content-Gateway - http://packetstormsecurity.com/files/132968/Websense-Triton-Content-Manager-8.0.0-Build-1165-Buffer-Overflow.html - http://seclists.org/fulldisclosure/2015/Aug/8 - http://www.securityfocus.com/archive/1/536138/100/0/threaded - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150805-0_Websense_Content_Gateway_stack_buffer_overflow_in_handle_debug_network_v10.txt - http://www.securitytracker.com/id/1033263
CVE ID: CVE-2015-5719 State: PUBLISHED Published: 2016-09-03T20:00:00 Last Updated: 2024-08-06T06:59:04.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/Controller/TemplatesController.php in Malware Information Sharing Platform (MISP) before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.circl.lu/advisory/CVE-2015-5719/ - https://github.com/MISP/MISP/commit/27cc167c3355ec76292235d7f5f4e0016bfd7699 - http://www.securityfocus.com/bid/92740
CVE ID: CVE-2015-5720 State: PUBLISHED Published: 2016-09-03T20:00:00 Last Updated: 2024-08-06T06:59:04.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the template-creation feature in Malware Information Sharing Platform (MISP) before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) add.ctp, (2) edit.ctp, and (3) ajaxification.js. Additional Analyst Notes: - CVE Program Container: References: - https://www.circl.lu/advisory/CVE-2015-5720/ - http://www.securityfocus.com/bid/92738 - https://github.com/MISP/MISP/commit/812ac878c3645c02e2a599287117418424cbd4cf
CVE ID: CVE-2015-5721 State: PUBLISHED Published: 2016-09-03T20:00:00 Last Updated: 2024-08-06T06:59:04.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Malware Information Sharing Platform (MISP) before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populate_event_from_template_attributes.ctp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/415d85102d5aa5f96f4f11a17c86b59bb9cc0d56 - http://www.securityfocus.com/bid/92739 - https://www.circl.lu/advisory/CVE-2015-5721/
CVE ID: CVE-2015-5722 State: PUBLISHED Published: 2015-09-05T01:00:00 Last Updated: 2024-08-06T06:59:04.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2728-1 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00002.html - ht
curity/ovmbulletinjul2016-3090546.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00002.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165996.html - http://rhn.redhat.com/errata/RHSA-2015-1706.html - http://lists.apple.com/archives/security-announce/2015/Oct/msg00009.html - https://kb.isc.org/article/AA-01438 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165810.html - https://kb.isc.org/article/AA-01287 - http://marc.info/?l=bugtraq&m=144294073801304&w=2 - http://rhn.redhat.com/errata/RHSA-2016-0079.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918 - http://www.o
2016-0079.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918 - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - https://support.apple.com/HT205376 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04891218 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00006.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10134 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00012.html - https://kb.isc.org/article/AA-01307 - http://rhn.redhat.com/errata/RHSA-2015-1707.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165
rhn.redhat.com/errata/RHSA-2015-1707.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165750.html - http://marc.info/?l=bugtraq&m=144294073801304&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168686.html - http://www.securitytracker.com/id/1033452 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00020.html - https://security.gentoo.org/glsa/201510-01 - http://www.securityfocus.com/bid/76605 - http://www.debian.org/security/2015/dsa-3350 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00005.html - https://h2
Display?docId=emr_na-c04952480 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00005.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923105 - https://kb.isc.org/article/AA-01305 - http://rhn.redhat.com/errata/RHSA-2016-0078.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html - https://kb.isc.org/article/AA-01306 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167465.html - http://rhn.redhat.com/errata/RHSA-2015-1705.html - https://security.netapp.com/advisory/ntap-20190730-0001/
CVE ID: CVE-2015-5723 State: PUBLISHED Published: 2016-06-07T14:00:00 Last Updated: 2024-08-06T06:59:04.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permissions for cache directories, which allows local users to execute arbitrary PHP code with additional privileges by leveraging an application with the umask set to 0 and that executes cache entries as code. Additional Analyst Notes: - CVE Program Container: References: - http://www.de
and that executes cache entries as code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3369 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HPS7A54FQ2CR6PH4NDR6UIYJIRNFXW67/ - http://www.doctrine-project.org/2015/08/31/security_misconfiguration_vulnerability_in_various_doctrine_projects.html - http://framework.zend.com/security/advisory/ZF2015-07 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2IUUC7HPN4XE5NNTG4MR76OC662XRZUO/
CVE ID: CVE-2015-5725 State: PUBLISHED Published: 2018-02-21T16:00:00 Last Updated: 2024-08-06T06:59:04.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the offset method in the Active Record class in CodeIgniter before 2.2.4 allows remote attackers to execute arbitrary SQL commands via vectors involving the offset variable. Additional Analyst Notes: - CVE Program Container: References: - https://forum.codeigniter.com/thread-62743.html - https://github.com/bcit-ci/CodeIgniter/issues/4020 - https://www.codeigniter.com/userguide2/changelog.html - https://github.com/bcit-ci/CodeIgniter/commit/0dde92def6b9f276f05ff77abb07ead318f9ec23
CVE ID: CVE-2015-5726 State: PUBLISHED Published: 2016-05-13T14:00:00 Last Updated: 2024-08-06T06:59:04.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BER decoder in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service (application crash) via an empty BIT STRING in ASN.1 data. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3565 - http://botan.randombit.net/security.html
CVE ID: CVE-2015-5727 State: PUBLISHED Published: 2016-05-13T14:00:00 Last Updated: 2024-08-06T06:59:04.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BER decoder in Botan 1.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, related to a length field. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3565 - http://botan.randombit.net/security.html
CVE ID: CVE-2015-5729 State: PUBLISHED Published: 2017-03-23T20:00:00 Last Updated: 2024-08-06T06:59:04.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134976/Samsung-SoftAP-Weak-Password.html - http://www.securitytracker.com/id/1034503 - http://www.securityfocus.com/bid/79675 - http://seclists.org/fulldisclo
ml - http://www.securitytracker.com/id/1034503 - http://www.securityfocus.com/bid/79675 - http://seclists.org/fulldisclosure/2015/Dec/79 - http://kaoticoneutral.blogspot.com.ar/2015/12/samsung-smarttv-and-printers-weak.html - http://www.securitytracker.com/id/1034504
CVE ID: CVE-2015-5730 State: PUBLISHED Published: 2015-11-09T11:00:00 Last Updated: 2024-08-06T06:59:04.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sanitize_widget_instance function in wp-includes/class-wp-customize-widgets.php in WordPress before 4.2.4 does not use a constant-time comparison for widgets, which allows remote attackers to conduct a timing side-channel attack by measuring the delay before inequality is calculated. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2015/08/wordpress-4-2-4-security-and-maintenance-release/ - https://core.trac.wordpress.org/changeset/33535 - http://www.securityfocus.com/bid/76160 -
y-and-maintenance-release/ - https://core.trac.wordpress.org/changeset/33535 - http://www.securityfocus.com/bid/76160 - http://openwall.com/lists/oss-security/2015/08/04/7 - http://www.securitytracker.com/id/1033178 - http://www.debian.org/security/2015/dsa-3332 - https://wpvulndb.com/vulnerabilities/8130 - https://core.trac.wordpress.org/changeset/33536 - https://codex.wordpress.org/Version_4.2.4
CVE ID: CVE-2015-5731 State: PUBLISHED Published: 2015-11-09T11:00:00 Last Updated: 2024-08-06T06:59:04.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4 allows remote attackers to hijack the authentication of administrators for requests that lock a post, and consequently cause a denial of service (editing blockage), via a get-post-lock action. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2015/08/wordpress-4-2-4-security-and-maintenance-release/ - http://www.securityfocus.com/bid/76160 - http://openwall.com/lists/oss-security/2015/08/04/7
-and-maintenance-release/ - http://www.securityfocus.com/bid/76160 - http://openwall.com/lists/oss-security/2015/08/04/7 - http://www.securitytracker.com/id/1033178 - https://core.trac.wordpress.org/changeset/33543 - http://www.debian.org/security/2015/dsa-3332 - https://codex.wordpress.org/Version_4.2.4 - http://www.debian.org/security/2015/dsa-3383 - https://core.trac.wordpress.org/changeset/33542
CVE ID: CVE-2015-5732 State: PUBLISHED Published: 2015-11-09T11:00:00 Last Updated: 2024-08-06T06:59:04.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in wp-includes/default-widgets.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a widget title. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2015/08/wordpress-4-2-4-security-and-maintenance-release/ - http://www.securityfocus.com/bid/76160 - https://wpvulndb.com/vulnerabilities/8131 - http://openwall.com/lists/oss-security/2015/08/04/7 - htt
us.com/bid/76160 - https://wpvulndb.com/vulnerabilities/8131 - http://openwall.com/lists/oss-security/2015/08/04/7 - http://www.securitytracker.com/id/1033178 - https://core.trac.wordpress.org/changeset/33529 - http://www.debian.org/security/2015/dsa-3332 - https://codex.wordpress.org/Version_4.2.4 - http://www.debian.org/security/2015/dsa-3383
CVE ID: CVE-2015-5733 State: PUBLISHED Published: 2015-11-09T11:00:00 Last Updated: 2024-08-06T06:59:04.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the refreshAdvancedAccessibilityOfItem function in wp-admin/js/nav-menu.js in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via an accessibility-helper title. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2015/08/wordpress-4-2-4-security-and-maintenance-release/ - https://core.trac.wordpress.org/changeset/33541 - http://openwall.com/lists/oss-security/2015/08/04/7 - http://www.securitytracker.com/id
.wordpress.org/changeset/33541 - http://openwall.com/lists/oss-security/2015/08/04/7 - http://www.securitytracker.com/id/1033178 - https://wpvulndb.com/vulnerabilities/8132 - http://www.securityfocus.com/bid/76331 - https://codex.wordpress.org/Version_4.2.4 - https://core.trac.wordpress.org/changeset/33540
CVE ID: CVE-2015-5734 State: PUBLISHED Published: 2015-11-09T11:00:00 Last Updated: 2024-08-06T06:59:04.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2015/08/wordpress-4-2-4-security-and-maintenance-release/ - http://openwall.com/lists/oss-security/2015/08/04/7 - http://www.securitytracker.com/id/1033178 - https://core.trac.wordpress.org/changeset/33549 - http://www.d
015/08/04/7 - http://www.securitytracker.com/id/1033178 - https://core.trac.wordpress.org/changeset/33549 - http://www.debian.org/security/2015/dsa-3332 - http://www.securityfocus.com/bid/76331 - https://wpvulndb.com/vulnerabilities/8133 - https://codex.wordpress.org/Version_4.2.4 - http://www.debian.org/security/2015/dsa-3383 - https://blog.sucuri.net/2015/08/persistent-xss-vulnerability-in-wordpress-explained.html
CVE ID: CVE-2015-5735 State: PUBLISHED Published: 2015-09-03T14:00:00 Last Updated: 2024-08-06T06:59:04.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, and (4) mdare64_52.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to write to arbitrary memory locations via a 0x226108 ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/advisories/forticlient-antivirus-multiple-vulnerabilities - http://packetstormsecurity.com/files/133398/FortiClient-Antivirus-Information-Exposure-Access-Control.html - http://www.securitytracker.com/id/1033439 - http://www
/FortiClient-Antivirus-Information-Exposure-Access-Control.html - http://www.securitytracker.com/id/1033439 - http://www.fortiguard.com/advisory/mulitple-vulnerabilities-in-forticlient - http://www.securityfocus.com/archive/1/536369/100/0/threaded - http://fortiguard.com/advisory/mulitple-vulnerabilities-in-forticlient - http://seclists.org/fulldisclosure/2015/Sep/0
CVE ID: CVE-2015-5736 State: PUBLISHED Published: 2015-09-03T14:00:00 Last Updated: 2024-08-06T06:59:04.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in a (1) 0x220024 or (2) 0x220028 ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/advisories/forticlient-antivirus-multiple-vulnerabilities - https://www.exploit-db.com/exploits/41722/ - http://packetstormsecurity.com/files/133398/FortiClient-Antivirus-Information-Exposure-Access-Control.html - https://www.ex
p://packetstormsecurity.com/files/133398/FortiClient-Antivirus-Information-Exposure-Access-Control.html - https://www.exploit-db.com/exploits/45149/ - http://www.securitytracker.com/id/1033439 - http://www.fortiguard.com/advisory/mulitple-vulnerabilities-in-forticlient - https://www.exploit-db.com/exploits/41721/ - http://www.securityfocus.com/archive/1/536369/100/0/threaded - http://fortiguard.com/advisory/mulitple-vulnerabilities-in-forticlient - http://seclists.org/fulldisclosure/2015/Sep/0
CVE ID: CVE-2015-5737 State: PUBLISHED Published: 2015-09-03T14:00:00 Last Updated: 2024-08-06T06:59:04.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, (4) mdare64_52.sys, and (5) Fortishield.sys drivers in Fortinet FortiClient before 5.2.4 do not properly restrict access to the API for management of processes and the Windows registry, which allows local users to obtain a privileged handle to a PID and possibly have unspecified other impact, as demonstrated by a 0x2220c8 ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/advisories/forticlient-antivirus-multip
nalyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/advisories/forticlient-antivirus-multiple-vulnerabilities - http://packetstormsecurity.com/files/133398/FortiClient-Antivirus-Information-Exposure-Access-Control.html - http://www.securitytracker.com/id/1033439 - http://www.fortiguard.com/advisory/mulitple-vulnerabilities-in-forticlient - http://www.securityfocus.com/archive/1/536369/100/0/threaded - http://fortiguard.com/advisory/mulitple-vulnerabilities-in-forticlient - http://seclists.org/fulldisclosure/2015/Sep/0
CVE ID: CVE-2015-5738 State: PUBLISHED Published: 2016-07-26T17:00:00 Last Updated: 2024-08-06T06:59:04.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack. Additional Analyst Notes: - CVE Program Container: References: - https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf - https://support.f5.com/kb/en-us/solutions/public/k/91/sol91245485.html - http://fortiguard.com/advisory/rsa-crt-key-leak-under-
/support.f5.com/kb/en-us/solutions/public/k/91/sol91245485.html - http://fortiguard.com/advisory/rsa-crt-key-leak-under-certain-conditions
CVE ID: CVE-2015-5739 State: PUBLISHED Published: 2017-10-18T20:00:00 Last Updated: 2024-08-06T06:59:04.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: The net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP header keys, which allows remote attackers to conduct HTTP request smuggling attacks via a space instead of a hyphen, as demonstrated by "Content Length" instead of "Content-Length." Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2015/q3/292 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/167997.html - http://lists.fedoraproject.org/pipermail/package-announce/201
.org/pipermail/package-announce/2015-October/167997.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168029.html - http://rhn.redhat.com/errata/RHSA-2016-1538.html - https://bugzilla.redhat.com/show_bug.cgi?id=1250352 - http://seclists.org/oss-sec/2015/q3/294 - http://seclists.org/oss-sec/2015/q3/237 - http://www.securityfocus.com/bid/76281 - https://github.com/golang/go/commit/117ddcb83d7f42d6aa72241240af99ded81118e9
CVE ID: CVE-2015-5740 State: PUBLISHED Published: 2017-10-18T20:00:00 Last Updated: 2024-08-06T06:59:04.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a request with two Content-length headers. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2015/q3/292 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/167997.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168029.html - http://rhn.redhat.com/errata/RHSA-
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168029.html - http://rhn.redhat.com/errata/RHSA-2016-1538.html - https://bugzilla.redhat.com/show_bug.cgi?id=1250352 - http://seclists.org/oss-sec/2015/q3/294 - http://seclists.org/oss-sec/2015/q3/237 - https://github.com/golang/go/commit/300d9a21583e7cf0149a778a0611e76ff7c6680f
CVE ID: CVE-2015-5741 State: PUBLISHED Published: 2020-02-08T18:02:57 Last Updated: 2024-08-06T06:59:04.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a request that contains Content-Length and Transfer-Encoding header fields. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2015/q3/237 - http://seclists.org/oss-sec/2015/q3/292 - http://seclists.org/oss-sec/2015/q3/294 - https://bugzilla.redhat.com/show_bug.cgi?id=1250352 - https://github.com/golang/go/comm
clists.org/oss-sec/2015/q3/294 - https://bugzilla.redhat.com/show_bug.cgi?id=1250352 - https://github.com/golang/go/commit/300d9a21583e7cf0149a778a0611e76ff7c6680f - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168029.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/167997.html
CVE ID: CVE-2015-5742 State: PUBLISHED Published: 2015-10-16T20:00:00 Last Updated: 2024-08-06T06:59:04.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: VeeamVixProxy in Veeam Backup & Replication (B&R) before 8.0 update 3 stores local administrator credentials in log files with world-readable permissions, which allows local users to obtain sensitive information by reading the files. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133906/Veeam-Backup-And-Replication-6-7-8-Privilege-Escalation.html - https://www.veeam.com/kb2180 - http://seclists.org/fulldisclosure/2015/Oct/44 - http://www.securityfocus.com/archive/1/536647/
//www.veeam.com/kb2180 - http://seclists.org/fulldisclosure/2015/Oct/44 - http://www.securityfocus.com/archive/1/536647/100/0/threaded - http://www.veeam.com/kb2068 - http://www.ush.it/2015/10/08/veeam-backup-replication-6-7-8-local-privilege-escalation-vulnerability/
CVE ID: CVE-2015-5745 State: PUBLISHED Published: 2020-01-23T19:35:16 Last Updated: 2024-08-06T06:59:04.271Z Vendors: QEMU Products: QEMU Problem Types: Buffer Overflow Description: Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/1686