Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-4673 State: PUBLISHED Published: 2017-04-06T23:00:00 Last Updated: 2024-08-06T06:18:12.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via (1) the collection_description parameter to upload/manage_collections.php in an add_new action or the (2) photo_description, (3) photo_tags, or (4) photo_title parameter to upload/actions/photo_uploader.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.secpod.com/blog/clipbucket-2-7-0-5-multiple-stored-cross-site-scripting-vulnerability/ - http://se
erences: - http://www.secpod.com/blog/clipbucket-2-7-0-5-multiple-stored-cross-site-scripting-vulnerability/ - http://secpod.org/advisories/SecPod_ClipBucket_Multiple_XSS_Vuln.txt - http://secpod.org/advisories_cvrf/SecPod_ClipBucket_Multiple_XSS_Vuln.xml
CVE ID: CVE-2015-4674 State: PUBLISHED Published: 2015-08-07T01:00:00 Last Updated: 2024-08-06T06:18:12.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/535881/100/700/threaded - http://www.securityfocus.com/bid/75572 - http://seclists.org/fulldisclosure/2015/Jun/105
CVE ID: CVE-2015-4675 State: PUBLISHED Published: 2015-06-19T14:00:00 Last Updated: 2024-08-06T06:18:12.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Tiny SRP library (aka TinySRP) allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted size value for the username field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75365 - http://packetstormsecurity.com/files/132196/TinySRP-Buffer-Overflow.html - http://seclists.org/fulldisclosure/2015/Jun/21
CVE ID: CVE-2015-4676 State: PUBLISHED Published: 2015-06-19T14:00:00 Last Updated: 2024-08-06T06:18:12.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ticket.php in TickFa 1.x allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a read action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132186/TickFa-1.x-SQL-Injection.html - http://www.securityfocus.com/bid/75343
CVE ID: CVE-2015-4677 State: PUBLISHED Published: 2015-06-19T14:00:00 Last Updated: 2024-08-06T06:18:12.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in FiverrScript (aka Fiverr Script) 7.2 allows remote attackers to hijack the authentication of administrators for requests that create a new admin via a request to administrator/admins_create.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75312 - https://www.exploit-db.com/exploits/37257/
CVE ID: CVE-2015-4678 State: PUBLISHED Published: 2015-06-19T14:00:00 Last Updated: 2024-08-06T06:18:12.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Persian Car CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75345 - http://packetstormsecurity.com/files/132216/Persian-Car-CMS-1.0-SQL-Injection.html
CVE ID: CVE-2015-4679 State: PUBLISHED Published: 2015-06-19T14:00:00 Last Updated: 2024-08-06T06:18:12.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the (1) ddns_domainame or (2) ddns_account parameter to ddns.stm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75342 - http://packetstormsecurity.com/files/132178/Airties-RT210-Cross-Site-Scripting.html
CVE ID: CVE-2015-4680 State: PUBLISHED Published: 2017-04-05T17:00:00 Last Updated: 2024-08-06T06:18:12.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html - http://www.securityfocus.com/archive/1/535810/100/0/threaded - http://www.securityfocus.com/bid/75327 - https://bugzilla.redhat.com/show_bug.cgi?id=1234975 - http://www.ocert.org/advisories/ocert-2015-008.html - http://www.securitytracker.com/id/1032690 -
w_bug.cgi?id=1234975 - http://www.ocert.org/advisories/ocert-2015-008.html - http://www.securitytracker.com/id/1032690 - http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html
CVE ID: CVE-2015-4681 State: PUBLISHED Published: 2017-09-19T19:00:00 Last Updated: 2024-08-06T06:18:12.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users to have unspecified impact via vectors related to weak passwords. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/132463/Polycom-RealPresence-Resource-Manager-RPRM-Disclosure-Traversal.html - http://www.securityfocus.com/archive/1/535852/100/0/threaded - http://seclists.org/fulldisclosure/2015/Jun/81 - https://www.exploit-db.com/exploits/37449/ - http://www.securityfocus.com/bid/75432 - https://
ldisclosure/2015/Jun/81 - https://www.exploit-db.com/exploits/37449/ - http://www.securityfocus.com/bid/75432 - https://support.polycom.com/global/documents/support/documentation/Security_Center_Post_for_RPRM_CVEs.pdf
CVE ID: CVE-2015-4682 State: PUBLISHED Published: 2017-09-19T19:00:00 Last Updated: 2024-08-06T06:18:12.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows remote authenticated users to obtain the installation path via an HTTP POST request to PlcmRmWeb/JConfigManager. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/535852/100/0/threaded - http://packetstormsecurity.com/files/132463/Polycom-RealPresence-Resource-Manager-RPRM-Disclosure-Traversal.html - http://seclists.org/fulldisclosure/2015/Jun/81 - https://www.exploit-db.com/exploits/37449/ - http://www.secu
sal.html - http://seclists.org/fulldisclosure/2015/Jun/81 - https://www.exploit-db.com/exploits/37449/ - http://www.securityfocus.com/bid/75432 - https://support.polycom.com/global/documents/support/documentation/Security_Center_Post_for_RPRM_CVEs.pdf
CVE ID: CVE-2015-4683 State: PUBLISHED Published: 2017-09-19T19:00:00 Last Updated: 2024-08-06T06:18:12.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/535852/100/0/threaded - http://packetstormsecurity.com/files/132463/Polycom-RealPresence-Resource-Manager-RPRM-Disclosure-Traversal.html - http://seclists.org/fulldisclosure/2015/Jun/81 - https://www.exploit-
-Resource-Manager-RPRM-Disclosure-Traversal.html - http://seclists.org/fulldisclosure/2015/Jun/81 - https://www.exploit-db.com/exploits/37449/ - http://www.securityfocus.com/bid/75432 - https://support.polycom.com/global/documents/support/documentation/Security_Center_Post_for_RPRM_CVEs.pdf
CVE ID: CVE-2015-4684 State: PUBLISHED Published: 2017-09-19T19:00:00 Last Updated: 2024-08-06T06:18:12.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allow (1) remote authenticated users to read arbitrary files via a .. (dot dot) in the Modifier parameter to PlcmRmWeb/FileDownload; or remote authenticated administrators to upload arbitrary files via the (2) Filename or (3) SE_FNAME parameter to PlcmRmWeb/FileUpload or to read and remove arbitrary files via the (4) filePathName parameter in an importSipUriReservations SOAP request to PlcmRmWeb/JUserManager. Additional
es via the (4) filePathName parameter in an importSipUriReservations SOAP request to PlcmRmWeb/JUserManager. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/535852/100/0/threaded - http://packetstormsecurity.com/files/132463/Polycom-RealPresence-Resource-Manager-RPRM-Disclosure-Traversal.html - http://seclists.org/fulldisclosure/2015/Jun/81 - https://www.exploit-db.com/exploits/37449/ - http://www.securityfocus.com/bid/75432 - https://support.polycom.com/global/documents/support/documentation/Security_Center_Post_for_RPRM_CVEs.pdf
CVE ID: CVE-2015-4685 State: PUBLISHED Published: 2017-09-19T19:00:00 Last Updated: 2024-08-06T06:18:12.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/535852/100/0/threaded - http://packetstormsecurity.com/files/132463/Polycom-RealPresence-Resource-Manager-RPRM-Disclosure-Traversal.html - http://seclists.org/fulldisclosure/2015/Jun/81 - https://www.exploit-db.c
ource-Manager-RPRM-Disclosure-Traversal.html - http://seclists.org/fulldisclosure/2015/Jun/81 - https://www.exploit-db.com/exploits/37449/ - http://www.securityfocus.com/bid/75432 - https://support.polycom.com/global/documents/support/documentation/Security_Center_Post_for_RPRM_CVEs.pdf
CVE ID: CVE-2015-4687 State: PUBLISHED Published: 2017-09-11T20:00:00 Last Updated: 2024-08-06T06:18:12.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Ellucian (formerly SunGard) Banner Student 8.5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134622/Banner-Student-XSS-Information-Disclosure-Open-Redirect.html - http://www.securityfocus.com/archive/1/537029/100/0/threaded
CVE ID: CVE-2015-4688 State: PUBLISHED Published: 2017-09-11T20:00:00 Last Updated: 2024-08-06T06:18:12.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allow remote attackers to enumerate user accounts via a series of requests. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134622/Banner-Student-XSS-Information-Disclosure-Open-Redirect.html - http://www.securityfocus.com/archive/1/537029/100/0/threaded
CVE ID: CVE-2015-4689 State: PUBLISHED Published: 2017-09-11T20:00:00 Last Updated: 2024-08-06T06:18:12.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset." Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134622/Banner-Student-XSS-Information-Disclosure-Open-Redirect.html - http://www.securityfocus.com/archive/1/537029/100/0/threaded
CVE ID: CVE-2015-4692 State: PUBLISHED Published: 2015-07-27T10:00:00 Last Updated: 2024-08-06T06:18:12.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kvm_apic_has_events function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/06/21/1 - http://www.ubuntu.com/usn/USN-2680-1 - http://www.ubuntu.com/usn/USN-2682-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1230770 - htt
tu.com/usn/USN-2680-1 - http://www.ubuntu.com/usn/USN-2682-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1230770 - https://github.com/torvalds/linux/commit/ce40cd3fc7fa40a6119e5fe6c0f2bc0eb4541009 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html - http://www.debian.org/security/2015/dsa-3329 - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/161144.html - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html - http://www.ubuntu.com/usn/USN-2684-1 - http://www.ubuntu.com/usn/USN-2681-1 - http://www.ubuntu.com/usn/USN-2683-1 - http://www.securityfocus.com/bid/75142 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux
com/usn/USN-2683-1 - http://www.securityfocus.com/bid/75142 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce40cd3fc7fa40a6119e5fe6c0f2bc0eb4541009 - http://www.securitytracker.com/id/1032798 - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160829.html
CVE ID: CVE-2015-4694 State: PUBLISHED Published: 2016-01-08T20:00:00 Last Updated: 2024-08-06T06:25:20.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in the Zip Attachments plugin before 1.5.1 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the za_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75211 - https://wordpress.org/plugins/zip-attachments/changelog/ - https://wpvulndb.com/vulnerabilities/8047 - http://www.openwall.com/lists/oss-security/2015/06/21/2 - http://www.vapid.dhs.org/advisory.php?v=126 - http://www.openwall
p://www.openwall.com/lists/oss-security/2015/06/21/2 - http://www.vapid.dhs.org/advisory.php?v=126 - http://www.openwall.com/lists/oss-security/2015/06/12/4 - https://wordpress.org/support/topic/zip-attachments-wordpress-plugin-v114-arbitrary-file-download-vulnerability?replies=1
CVE ID: CVE-2015-4695 State: PUBLISHED Published: 2015-07-01T14:00:00 Last Updated: 2024-08-06T06:25:20.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3302 - http://www.securityfocus.com/bid/75329 - https://security.gentoo.org/glsa/201602-03 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.ubuntu.com/usn/USN-2670-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162569.html - http
//www.ubuntu.com/usn/USN-2670-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162569.html - http://www.openwall.com/lists/oss-security/2015/06/21/3 - http://www.securitytracker.com/id/1032771 - http://lists.opensuse.org/opensuse-updates/2015-07/msg00018.html - http://rhn.redhat.com/errata/RHSA-2015-1917.html - http://www.openwall.com/lists/oss-security/2015/06/17/3 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784205
CVE ID: CVE-2015-4696 State: PUBLISHED Published: 2015-07-01T14:00:00 Last Updated: 2024-08-06T06:25:20.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3302 - https://security.gentoo.org/glsa/201602-03 - http://www.securityfocus.com/bid/75331 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.ubuntu.com/usn/USN-2670-1 - https://bugs.debian.org/cgi-bin/bugr
security/linuxbulletinoct2015-2719645.html - http://www.ubuntu.com/usn/USN-2670-1 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784192 - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162569.html - http://www.openwall.com/lists/oss-security/2015/06/21/3 - http://www.securitytracker.com/id/1032771 - http://lists.opensuse.org/opensuse-updates/2015-07/msg00018.html - http://rhn.redhat.com/errata/RHSA-2015-1917.html - http://www.openwall.com/lists/oss-security/2015/06/17/3
CVE ID: CVE-2015-4697 State: PUBLISHED Published: 2017-09-07T20:00:00 Last Updated: 2024-08-06T06:25:20.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/06/21/5 - https://plugins.trac.wordpress.org/changeset/1183563 - http://seclists.org/fulldisclosure/2015/Jun/57 - https://wordpress.org/support/topic/discovered-security-vulnerabilities-1/ - http://www.securityfocus.com/bid/75325
CVE ID: CVE-2015-4699 State: PUBLISHED Published: 2017-08-24T21:00:00 Last Updated: 2024-08-06T06:25:21.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Splash Portal in Cloud4Wi before 5.9.7 allows remote attackers to inject arbitrary web script or HTML via the recoveryMessage parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Dec/48 - https://cloud4wi.zendesk.com/hc/en-us/articles/204956829-Cloud4Wi-5-9-7-Release-Note - http://www.quantumleap.it/cloud4wi-splash-portal-reflected-xss-vulnerability-cve-2015-4699/
CVE ID: CVE-2015-4700 State: PUBLISHED Published: 2015-08-31T10:00:00 Last Updated: 2024-08-06T06:25:21.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bpf_int_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 4.0.6 allows local users to cause a denial of service (system crash) by creating a packet filter and then loading crafted BPF instructions that trigger late convergence by the JIT compiler. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/3f7352bf21f8fd7ba3e2fcef9488756f188e12be - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html - http://lists.opensuse.org
488756f188e12be - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html - http://www.openwall.com/lists/oss-security/2015/06/23/2 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html - http://www.ubuntu.com/usn/USN-2680-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3f7352bf21f8fd7ba3e2fcef9488756f188e12be - http://www.ubuntu.com/usn/USN-2679-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html - http://rhn.redhat.com/errata/RHSA-2015-1778.html - https://bugzilla.redhat.com/show_bug.cgi?id=1233615 - http://www.kerne
ttp://rhn.redhat.com/errata/RHSA-2015-1778.html - https://bugzilla.redhat.com/show_bug.cgi?id=1233615 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.6 - http://www.securitytracker.com/id/1033046 - http://www.debian.org/security/2015/dsa-3329 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html - http://www.ubuntu.com/usn/USN-2684-1 - http://www.ubuntu.com/usn/USN-2681-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html - http://www.ubuntu.com/usn/USN-2683-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00010.html - http://ww
//www.ubuntu.com/usn/USN-2683-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00010.html - http://www.securityfocus.com/bid/75356 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html - https://support.f5.com/csp/article/K05211147
CVE ID: CVE-2015-4703 State: PUBLISHED Published: 2016-01-12T19:00:00 Last Updated: 2024-08-06T06:25:20.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in mysqldump_download.php in the WordPress Rename plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the dumpfname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapid.dhs.org/advisory.php?v=127 - http://www.openwall.com/lists/oss-security/2015/06/23/5 - http://www.securityfocus.com/bid/75394 - http://packetstormsecurity.com/files/132460/WordPress-WP-Instance-Rename-1.0-File-Download.html - https://wpvulnd
5394 - http://packetstormsecurity.com/files/132460/WordPress-WP-Instance-Rename-1.0-File-Download.html - https://wpvulndb.com/vulnerabilities/8055
CVE ID: CVE-2015-4704 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T06:25:20.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Download Zip Attachments plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the File parameter to download.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132459/Download-Zip-Attachments-1.0-File-Download.html - http://www.vapid.dhs.org/advisory.php?v=129
CVE ID: CVE-2015-4706 State: PUBLISHED Published: 2017-09-21T14:00:00 Last Updated: 2024-08-06T06:25:20.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path. Additional Analyst Notes: - CVE Program Container: References: - https://ipython.org/ipython-doc/3/whatsnew/version3.html - https://github.com/ipython/ipython/commit/7222bd53ad089a65fd610fab4626f9d0ab47dfce - http://www.openwall.com/lists/oss-security/2015/06/22/7 - https://github.com/ipython/ipython/commit/c2078a53543ed502efd9686
p://www.openwall.com/lists/oss-security/2015/06/22/7 - https://github.com/ipython/ipython/commit/c2078a53543ed502efd968649fee1125e0eb549c - http://www.securityfocus.com/bid/75328 - https://bugzilla.redhat.com/show_bug.cgi?id=1235688
CVE ID: CVE-2015-4707 State: PUBLISHED Published: 2017-09-20T18:00:00 Last Updated: 2024-08-06T06:25:20.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path. Additional Analyst Notes: - CVE Program Container: References: - https://ipython.org/ipython-doc/3/whatsnew/version3.html - https://github.com/ipython/ipython/commit/7222bd53ad089a65fd610fab4626f9d0ab47dfce - http://www.openwall.com/lists/oss-security/2015/06/22/7 - https://github.com/ipython/ipython/commit/c2078a53543ed502efd968649f
/www.openwall.com/lists/oss-security/2015/06/22/7 - https://github.com/ipython/ipython/commit/c2078a53543ed502efd968649fee1125e0eb549c - http://www.securityfocus.com/bid/75328 - https://bugzilla.redhat.com/show_bug.cgi?id=1235688
CVE ID: CVE-2015-4709 State: REJECTED Published: 2020-01-27T14:22:12 Last Updated: 2020-01-27T14:22:12 Description: No description available.