Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ity/psirt/security-bulletins/security-advisories/hw-446601.htm - http://www.securitytracker.com/id/1033414 - http://www.securityfocus.com/bid/76171 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272
CVE ID: CVE-2015-5368 State: PUBLISHED Published: 2015-08-27T15:00:00 Last Updated: 2024-08-06T06:41:09.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows remote attackers to modify data or cause a denial of service, or execute arbitrary code, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272 - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446601.htm
y?docId=emr_na-c04773272 - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446601.htm - http://www.securitytracker.com/id/1033414 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773272 - http://www.securityfocus.com/bid/76176
CVE ID: CVE-2015-5369 State: PUBLISHED Published: 2015-08-11T14:00:00 Last Updated: 2024-08-06T06:41:09.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pulse Connect Secure (aka PCS and formerly Juniper PCS) PSC6000, PCS6500, and MAG PSC360 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 before 7.1r22.2 and PPS 5.1 before 5.1R5 and 5.0 before 5.0R13, when Hardware Acceleration is enabled, does not properly validate the Finished TLS handshake message, which makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted Finished message. Additional Analyst Notes: - CVE Program Container: References: - https://vivaldi.net/en-US/blogs/en
ed Finished message. Additional Analyst Notes: - CVE Program Container: References: - https://vivaldi.net/en-US/blogs/entry/the-poodle-has-friends - http://kb.juniper.net/InfoCenter/index?page=content&id=TSB16756 - http://www.securitytracker.com/id/1033166 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40004
CVE ID: CVE-2015-5370 State: PUBLISHED Published: 2016-04-25T00:00:00 Last Updated: 2024-08-06T06:41:09.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012 - http://lists.opensuse.org/o
.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html - http://rhn.redhat.com/errata/RHSA-2016-0612.html - http://www.ubuntu.com/usn/USN-2950-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html - http://rhn.redhat.com/errata/RHSA-2016-0613.html - http://badlock.org/ - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html - http://www.ubuntu.com/usn/USN-2950-5 - https://www.samba.org/samba/history/samba-4.2.10.html - http://lists.fedoraproject.org/p
www.ubuntu.com/usn/USN-2950-5 - https://www.samba.org/samba/history/samba-4.2.10.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html - http://rhn.redhat.com/errata/RHSA-2016-0624.html - http://rhn.redhat.com/errata/RHSA-2016-0618.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html - https://www.samba.org/samba/latest_news.html#4.4.2 - http://www.securitytracker.com/id/1035533 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html - http://rhn.redhat.com/errata/RHSA-2016-0614.html - https://www.samba.org/samba/security/CVE-2
e/2016-April/182272.html - http://rhn.redhat.com/errata/RHSA-2016-0614.html - https://www.samba.org/samba/security/CVE-2015-5370.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html - http://rhn.redhat.com/errata/RHSA-2016-0620.html - http://rhn.redhat.com/errata/RHSA-2016-0611.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html - https://bto.bluecoat.com/security-advisory/sa122 - http://www.ubuntu.com/usn/USN-2950-3 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html - http://rhn.redhat.com/errata/RHSA-2016-0619.html - http://
ensuse.org/opensuse-security-announce/2016-04/msg00048.html - http://rhn.redhat.com/errata/RHSA-2016-0619.html - http://www.debian.org/security/2016/dsa-3548 - http://www.ubuntu.com/usn/USN-2950-2 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399 - http://www.ubuntu.com/usn/USN-2950-4
CVE ID: CVE-2015-5371 State: PUBLISHED Published: 2015-07-06T14:00:00 Last Updated: 2024-08-06T06:41:09.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-275/ - http://www.securityfocus.com/bid/75515
CVE ID: CVE-2015-5372 State: PUBLISHED Published: 2015-09-28T16:00:00 Last Updated: 2024-08-06T06:41:09.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 before 4.18.3.1, when using SAML POST-Binding, does not match all attributes of the X.509 certificate embedded in the assertion against the certificate from the identity provider (IdP), which allows remote attackers to inject arbitrary SAML assertions via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133628/nevisAuth-Authentication-Bypass.html - http://seclists.org/fulldisclosure/2015/Sep/87
ketstormsecurity.com/files/133628/nevisAuth-Authentication-Bypass.html - http://seclists.org/fulldisclosure/2015/Sep/87 - http://www.csnc.ch/misc/files/advisories/CVE-2015-5372_AdNovum_nevisAuth_Authentication_Bypass.txt - http://www.securityfocus.com/archive/1/536508/100/0/threaded - http://blog.csnc.ch/2015/09/saml-sp-authentication-bypass-vulnerability-in-nevisauth
CVE ID: CVE-2015-5374 State: PUBLISHED Published: 2015-07-18T10:00:00Z Last Updated: 2024-09-17T02:15:53.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the af
U80 : All versions < 1.02.02. Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device. A manual reboot may be required to recover the service of the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-732541.pdf - https://www.exploit-db.com/exploits/44103/ - https://ics-cert.us-cert.gov/advisories/ICSA-15-202-01 - https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03 - http://www.securityfocus.com/bid/75948
CVE ID: CVE-2015-5375 State: PUBLISHED Published: 2015-09-28T16:00:00 Last Updated: 2024-08-06T06:50:00.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in unspecified dialogs for printing content in the Front End in Open-Xchange Server 6 and OX App Suite before 6.22.8-rev8, 6.22.9 before 6.22.9-rev15m, 7.x before 7.6.1-rev25, and 7.6.2 before 7.6.2-rev20 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to object properties. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133674/Open-Xchange-Server-6-OX-AppSuite-Cross-Site-Scripting.html - ht
ferences: - http://packetstormsecurity.com/files/133674/Open-Xchange-Server-6-OX-AppSuite-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/536523/100/0/threaded - http://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_2614_7.6.2_2015-07-22.pdf - http://www.securitytracker.com/id/1034018
CVE ID: CVE-2015-5376 State: PUBLISHED Published: 2017-10-18T20:00:00 Last Updated: 2024-08-06T06:50:00.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the login form in GSI WiNPAT Portal 3.2.0.1001 through 3.6.1.0 allows remote attackers to execute arbitrary SQL commands via the username field. Additional Analyst Notes: - CVE Program Container: References: - https://bogner.sh/2015/09/winpat-portal-3-unauthenticated-sql-injection-exploit/
CVE ID: CVE-2015-5377 State: PUBLISHED Published: 2018-03-06T20:00:00 Last Updated: 2024-08-06T06:50:00.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via unspecified vectors involving the transport protocol. NOTE: ZDI appears to claim that CVE-2015-3253 and CVE-2015-5377 are the same vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://discuss.elastic.co/t/elasticsearch-remote-code-execution-cve-2015-5377/25736 - http://www.securityfocus.com/bid/75938 - https://github.com/elastic/elasticsearch/commit/bf3052d14c874aead7da8855c5fcadf5428a43f2 - http://www.zerodayinit
5938 - https://github.com/elastic/elasticsearch/commit/bf3052d14c874aead7da8855c5fcadf5428a43f2 - http://www.zerodayinitiative.com/advisories/ZDI-15-365/
CVE ID: CVE-2015-5378 State: PUBLISHED Published: 2017-06-27T20:00:00 Last Updated: 2024-08-06T06:50:00.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/536050/100/0/threaded - http://packetstormsecurity.com/files/132800/Logstash-1.5.2-SSL-TLS-FREAK.html - http://www.securityfocus.com/archive/1/536859/100/0/threaded - http://www.securityfocus.com/bid/76015 - https://www.elastic.co/community/security
CVE ID: CVE-2015-5379 State: PUBLISHED Published: 2017-10-23T18:00:00 Last Updated: 2024-08-06T06:50:00.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remote attackers to inject arbitrary web script or HTML via an email attachment. Additional Analyst Notes: - CVE Program Container: References: - https://www.axigen.com/knowledgebase/Ajax-WebMail-8-x-security-patch-CVE-2015-5379-_341.html - http://packetstormsecurity.com/files/132764/Axigen-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/536046/100/0/threaded - https://blogs.securitea
xigen-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/536046/100/0/threaded - https://blogs.securiteam.com/index.php/archives/2534
CVE ID: CVE-2015-5380 State: PUBLISHED Published: 2015-07-09T10:00:00 Last Updated: 2024-08-06T06:50:02.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Utf8DecoderBase::WriteUtf16Slow function in unicode-decoder.cc in Google V8, as used in Node.js before 0.12.6, io.js before 1.8.3 and 2.x before 2.3.3, and other products, does not verify that there is memory available for a UTF-16 surrogate pair, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted byte sequence. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.chromium.org/1226493003 - https://medium.com/%
Analyst Notes: - CVE Program Container: References: - https://codereview.chromium.org/1226493003 - https://medium.com/%40iojs/important-security-upgrades-for-node-js-and-io-js-8ac14ece5852 - https://github.com/joyent/node/issues/25583 - http://blog.nodejs.org/2015/07/03/node-v0-12-6-stable/ - http://www.securityfocus.com/bid/75556
CVE ID: CVE-2015-5381 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T06:50:00.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the _mbox parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/07/07/2 - http://trac.roundcube.net/ticket/1490417 - https://github.com/roundcube/roundcubemail/issues/4837 - https://roundcube.net/news/2015/06/05/updates-1.1.2-and-1.0.6-released - https://github.com
/roundcubemail/issues/4837 - https://roundcube.net/news/2015/06/05/updates-1.1.2-and-1.0.6-released - https://github.com/roundcube/roundcubemail/commit/b782815dacda55eee6793249b5da1789256206fc
CVE ID: CVE-2015-5382 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T06:50:00.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: program/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via the _alt parameter when uploading a vCard. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/07/07/2 - https://github.com/roundcube/roundcubemail/commit/e84fafcec22e7b460db03248dc23ed6b053b15c9 - https://github.com/roundcube/roundcubemail/commit/6ccd4c54bcc4cb77365defabe8bbe7d10b2620d4 - https://github.com/roundc
- https://github.com/roundcube/roundcubemail/commit/6ccd4c54bcc4cb77365defabe8bbe7d10b2620d4 - https://github.com/roundcube/roundcubemail/issues/4817 - https://roundcube.net/news/2015/06/05/updates-1.1.2-and-1.0.6-released - http://www.openwall.com/lists/oss-security/2015/07/07/3
CVE ID: CVE-2015-5383 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T06:50:00.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to obtain sensitive information by reading files in the (1) config, (2) temp, or (3) logs directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/07/07/2 - https://github.com/roundcube/roundcubemail/commit/012555c1cef35601b543cde67bff8726de97eb39 - https://github.com/roundcube/roundcubemail/issues/4816 - https://roundcube.net/news/2015/06/05/updates-1.1.2-and-1.0.6-released
CVE ID: CVE-2015-5384 State: PUBLISHED Published: 2019-04-03T20:35:58 Last Updated: 2024-08-06T06:50:00.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.excellium-services.com/cert-xlm-advisory/cve-2015-5384/
CVE ID: CVE-2015-5386 State: PUBLISHED Published: 2015-07-16T19:00:00 Last Updated: 2024-08-06T06:50:00.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SICAM MIC devices with firmware before 2404 allow remote attackers to bypass authentication and obtain administrative access via unspecified HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-15-195-01 - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-632547.pdf
CVE ID: CVE-2015-5395 State: PUBLISHED Published: 2017-09-20T18:00:00 Last Updated: 2024-08-06T06:50:02.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2015-5395/ - https://lists.debian.org/debian-lts/2016/05/msg00197.html - https://github.com/inverse-inc/sogo/commit/582baf2960969c73f98643e46cfb49432c30b711 - http://www.openwall.com/lists/oss-security/2015/07/10/9 - https://sogo.nu/bugs/view.php?id=3246
CVE ID: CVE-2015-5397 State: PUBLISHED Published: 2015-07-14T16:00:00 Last Updated: 2024-08-06T06:50:02.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security-centre/618-20150602-core-remote-code-execution.html - http://www.securitytracker.com/id/1032796 - http://www.securityfocus.com/bid/76495
CVE ID: CVE-2015-5399 State: PUBLISHED Published: 2016-08-26T20:00:00 Last Updated: 2024-08-06T06:50:02.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHPVibe before 4.21 allows remote authenticated users to inject arbitrary web script or HTML via a comment. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/132715/phpVibe-Stored-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/37659
CVE ID: CVE-2015-5400 State: PUBLISHED Published: 2015-09-28T20:00:00 Last Updated: 2024-08-06T06:50:02.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to bypass intended restrictions and gain access to a backend proxy via a CONNECT request. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/07/06/8 - http://www.securitytracker.com/id/1032873 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183598.html - http://www.squid-cache.org/Versions/v3/3.5/changesets/squ
aproject.org/pipermail/package-announce/2016-May/183598.html - http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-13856.patch - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - http://www.openwall.com/lists/oss-security/2015/07/17/14 - http://www.openwall.com/lists/oss-security/2015/07/09/12 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html - http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10494.patch - http://www.openwall.com/lists/oss-security/2015/07/10/2 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - http://www.squid-cache.org/Advisories/SQUID-2015_2.txt - http://www.debian.org/secur
ty-announce/2016-08/msg00040.html - http://www.squid-cache.org/Advisories/SQUID-2015_2.txt - http://www.debian.org/security/2015/dsa-3327 - http://www.securityfocus.com/bid/75553 - http://www.squid-cache.org/Versions/v3/3.4/changesets/squid-3.4-13225.patch
CVE ID: CVE-2015-5401 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T06:50:02.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teradata Gateway before 15.00.03.02-1 and 15.10.x before 15.10.00.01-1 and TD Express before 15.00.02.08_Sles10 and 15.00.02.08_Sles11 allow remote attackers to cause a denial of service (database crash) via a malformed CONFIG REQUEST message. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/FG-VD-15-038/ - https://blog.fortinet.com/2015/07/23/teradata-vulnerability-announced-big-potential-headaches-for-big-data-solution - http://www.securitytracker.com/id/1033005
CVE ID: CVE-2015-5402 State: PUBLISHED Published: 2015-08-27T01:50:00 Last Updated: 2024-08-06T06:50:01.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows local users to gain privileges, and consequently obtain sensitive information, modify data, or cause a denial of service, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04762744 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04774019
CVE ID: CVE-2015-5403 State: PUBLISHED Published: 2015-08-27T01:50:00 Last Updated: 2024-08-06T06:50:02.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2015-2139. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04762744 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04774019
CVE ID: CVE-2015-5404 State: PUBLISHED Published: 2015-08-27T01:50:00 Last Updated: 2024-08-06T06:50:01.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote attackers to obtain sensitive information or modify data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04762744 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04774019
CVE ID: CVE-2015-5405 State: PUBLISHED Published: 2015-08-27T01:50:00 Last Updated: 2024-08-06T06:50:02.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04762744 - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04774019
CVE ID: CVE-2015-5406 State: PUBLISHED Published: 2015-08-22T23:00:00 Last Updated: 2024-08-06T06:50:02.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4.1, 4.2, and 4.3; CentralView Dealer Performance Audit 2.0 and 2.1; CentralView Credit Risk Control 2.1, 2.2, and 2.3; CentralView Roaming Fraud Control 2.1, 2.2, and 2.3; and CentralView Subscription Fraud Prevention 2.0 and 2.1 allow remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2015-5407 and CVE-2015-5408. Additional Analyst Notes: - CVE Program Container: References: