Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.fedoraproject.org/pipermail/package-announce/2015-September/165840.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165733.html - http://www.debian.org/security/2015/dsa-3346 - https://www.drupal.org/SA-CORE-2015-003 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165690.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165704.html
CVE ID: CVE-2015-6662 State: PUBLISHED Published: 2015-08-24T14:00:00 Last Updated: 2024-08-06T07:29:24.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in SAP NetWeaver Portal 7.4 allows remote attackers to read arbitrary files and possibly have other unspecified impact via crafted XML data, aka SAP Security Note 2168485. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134507/SAP-NetWeaver-7.4-XXE-Injection.html - https://erpscan.io/advisories/erpscan-15-018-sap-netweaver-7-4-xxe/ - http://seclists.org/fulldisclosure/2015/Nov/92 - http://www.securityfocus.com/archive/1/536957/100/0/t
weaver-7-4-xxe/ - http://seclists.org/fulldisclosure/2015/Nov/92 - http://www.securityfocus.com/archive/1/536957/100/0/threaded
CVE ID: CVE-2015-6663 State: PUBLISHED Published: 2015-08-24T14:00:00 Last Updated: 2024-08-06T07:29:24.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Client form in the Device Inspector page in SAP Afaria 7 allows remote attackers to inject arbitrary web script or HTML via crafted client name data, aka SAP Security Note 2152669. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134508/SAP-Afaria-7-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/536956/100/0/threaded - https://erpscan.io/advisories/erpscan-15-019-sap-afaria-stored-xss/ - http://seclists.org/
ive/1/536956/100/0/threaded - https://erpscan.io/advisories/erpscan-15-019-sap-afaria-stored-xss/ - http://seclists.org/fulldisclosure/2015/Nov/95
CVE ID: CVE-2015-6664 State: PUBLISHED Published: 2015-08-24T14:00:00 Last Updated: 2024-08-06T07:29:24.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in the application import functionality in SAP Mobile Platform 2.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via crafted XML data, aka SAP Security Note 2152227. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-15-020-sap-mobile-platform-2-3-xxe-in-application-import/ - http://www.securityfocus.com/archive/1/536954/100/0/threaded - http://seclists.org/fulldisclosure/2015/Nov/96 - http:/
- http://www.securityfocus.com/archive/1/536954/100/0/threaded - http://seclists.org/fulldisclosure/2015/Nov/96 - http://packetstormsecurity.com/files/134509/SAP-Mobile-Platform-2.3-XXE-Injection.html
CVE ID: CVE-2015-6665 State: PUBLISHED Published: 2015-08-24T14:00:00 Last Updated: 2024-08-06T07:29:24.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the Ctools module 6.x-1.x before 6.x-1.14 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors involving a whitelisted HTML element, possibly related to the "a" tag. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165723.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165674.html - htt
/2015-September/165723.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165674.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165061.html - http://www.securitytracker.com/id/1033358 - https://www.drupal.org/node/2554145 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165840.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165733.html - http://www.securityfocus.com/bid/76431 - http://www.debian.org/security/2015/dsa-3346 - https://www.drupal.org/SA-CORE-2015-003 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165690.html - https://www.drupal.org/nod
-003 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165690.html - https://www.drupal.org/node/2554133 - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165724.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165704.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165695.html
CVE ID: CVE-2015-6666 State: REJECTED Published: 2015-09-20T01:00:00 Last Updated: 2015-09-20T01:57:01 Description: No description available.
CVE ID: CVE-2015-6668 State: PUBLISHED Published: 2017-10-19T21:00:00 Last Updated: 2024-08-06T07:29:24.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Job Manager plugin before 0.7.25 allows remote attackers to read arbitrary CV files via a brute force attack to the WordPress upload directory structure, related to an insecure direct object reference. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8167 - https://vagmour.eu/cve-2015-6668-cv-filename-disclosure-on-job-manager-wordpress-plugin/
CVE ID: CVE-2015-6670 State: PUBLISHED Published: 2015-10-26T14:00:00 Last Updated: 2024-08-06T07:29:24.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud Server before 7.0.8, 8.0.x before 8.0.6, and 8.1.x before 8.1.1 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid parameter to apps/calendar/export.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3373 - https://owncloud.org/security/advisory/?id=oc-sa-2015-015
CVE ID: CVE-2015-6671 State: PUBLISHED Published: 2017-03-13T07:12:00 Last Updated: 2024-08-06T07:29:24.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open edX edx-platform before 2015-08-25 requires use of the database for storage of SAML SSO secrets, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging access to a database backup. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/edx/edx-platform/pull/9471 - https://open.edx.org/CVE-2015-6671
CVE ID: CVE-2015-6672 State: PUBLISHED Published: 2015-09-17T16:00:00 Last Updated: 2024-08-06T07:29:24.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build 57.7, and 10.5e before Build 56.1505.e allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033618 - http://support.citrix.com/article/CTX201334
CVE ID: CVE-2015-6673 State: PUBLISHED Published: 2017-09-20T18:00:00 Last Updated: 2024-08-06T07:29:24.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Decoder.cpp in libpgf before 6.15.32. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/08/25/9 - https://bugzilla.redhat.com/show_bug.cgi?id=1251749 - https://sourceforge.net/p/libpgf/code/147/ - https://security-tracker.debian.org/tracker/CVE-2015-6673/ - https://sourceforge.net/p/libpgf/code/148/ - https://sourceforge.net/p/libpgf/code/HEAD/tree/trunk/libpgf/INSTALL - https://lists.debian.org/debian-lts-announce/2019/12/msg00017.h
forge.net/p/libpgf/code/HEAD/tree/trunk/libpgf/INSTALL - https://lists.debian.org/debian-lts-announce/2019/12/msg00017.html - https://usn.ubuntu.com/4554-1/
CVE ID: CVE-2015-6674 State: PUBLISHED Published: 2017-04-13T14:00:00 Last Updated: 2024-08-06T07:29:24.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer underflow vulnerability in the Debian inspircd package before 2.0.5-1+deb7u1 for wheezy and before 2.0.16-1 for jessie and sid. NOTE: This issue exists as an additional issue from an incomplete fix of CVE-2012-1836. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780880 - https://security.gentoo.org/glsa/201512-13 - http://www.debian.org/security/2015/dsa-3226
CVE ID: CVE-2015-6675 State: PUBLISHED Published: 2015-09-11T16:00:00 Last Updated: 2024-08-06T07:29:24.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens RUGGEDCOM ROS 3.8.0 through 4.1.x permanently enables the IP forwarding feature, which allows remote attackers to bypass a VLAN isolation protection mechanism via IP traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-720081.pdf - http://www.securitytracker.com/id/1033478 - https://ics-cert.us-cert.gov/advisories/ICSA-15-244-01
CVE ID: CVE-2015-6676 State: PUBLISHED Published: 2015-09-22T10:00:00 Last Updated: 2024-08-06T07:29:24.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-6678. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1814.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/d
eferences: - http://rhn.redhat.com/errata/RHSA-2015-1814.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00023.html - http://www.securitytracker.com/id/1033629 - http://www.securityfocus.com/bid/76801 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00024.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04939841 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://helpx.adobe.com/security/products/flash-player/apsb15-23.html - http://lists.opensuse.org/opensuse-security-announce
s://helpx.adobe.com/security/products/flash-player/apsb15-23.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00022.html - https://security.gentoo.org/glsa/201509-07 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
CVE ID: CVE-2015-6677 State: PUBLISHED Published: 2015-09-22T10:00:00 Last Updated: 2024-08-06T07:29:24.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, and CVE-2015-5588. Additional Analyst Notes: - CVE Program Container: References: -
-5578, CVE-2015-5580, CVE-2015-5582, and CVE-2015-5588. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1814.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00023.html - http://www.securitytracker.com/id/1033629 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00024.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04939841 - http://www.securityfocus.com/bid/76799 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://helpx.ad
CVE ID: CVE-2015-6678 State: PUBLISHED Published: 2015-09-22T10:00:00 Last Updated: 2024-08-06T07:29:24.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-6676. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1814.html - http://www.zerodayinitiative.com/advisories/ZDI-15-446 -
eferences: - http://rhn.redhat.com/errata/RHSA-2015-1814.html - http://www.zerodayinitiative.com/advisories/ZDI-15-446 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00023.html - http://www.securitytracker.com/id/1033629 - http://www.securityfocus.com/bid/76801 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00024.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04939841 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://helpx.adobe.com/security/products/flash-player/apsb15-23.ht
e/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://helpx.adobe.com/security/products/flash-player/apsb15-23.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00022.html - https://security.gentoo.org/glsa/201509-07 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
CVE ID: CVE-2015-6679 State: PUBLISHED Published: 2015-09-22T10:00:00 Last Updated: 2024-08-06T07:29:24.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1814.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05
dhat.com/errata/RHSA-2015-1814.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - http://www.securityfocus.com/bid/76806 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00023.html - http://www.securitytracker.com/id/1033629 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00024.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04939841 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://helpx.adobe.com/security/products/flash-player/apsb15-23.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00022.html - h
ty/products/flash-player/apsb15-23.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00022.html - https://security.gentoo.org/glsa/201509-07 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
CVE ID: CVE-2015-6680 State: PUBLISHED Published: 2015-09-09T00:00:00 Last Updated: 2024-08-06T07:29:24.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 12.2.0.162 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-6681. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033486 - https://helpx.adobe.com/security/products/shockwave/apsb15-22.html - https://security.gentoo.org/glsa/201509-07
CVE ID: CVE-2015-6681 State: PUBLISHED Published: 2015-09-09T00:00:00 Last Updated: 2024-08-06T07:29:24.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 12.2.0.162 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-6680. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033486 - https://helpx.adobe.com/security/products/shockwave/apsb15-22.html - https://security.gentoo.org/glsa/201509-07
CVE ID: CVE-2015-6682 State: PUBLISHED Published: 2015-09-22T10:00:00 Last Updated: 2024-08-06T07:29:24.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, and CVE-2015-5584. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1814.h
015-5584. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1814.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00023.html - http://www.securitytracker.com/id/1033629 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00024.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04939841 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://helpx.adobe.com/security/products/flash-player/apsb15-23.html - http://www.securityfocus.com/bi
CVE ID: CVE-2015-6683 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:24.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6684, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621. Additional Analyst Notes: - C
-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621. Additional Analyst Notes: - CVE Program Container: References: - https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1206 - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796
CVE ID: CVE-2015-6684 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:24.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6687, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621. Additional Analyst Notes: - C
-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621. Additional Analyst Notes: - CVE Program Container: References: - https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1205 - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796
CVE ID: CVE-2015-6685 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:24.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) by using the Format action for unspecified fields, a different vulnerability than CVE-2015-6686, CVE-2015-6693, CVE-2015-6694, CVE-2015-6695, and CVE-2015-7622. Additional Analyst Notes: - CVE Program Container: References:
15-6693, CVE-2015-6694, CVE-2015-6695, and CVE-2015-7622. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796 - http://www.zerodayinitiative.com/advisories/ZDI-15-467
CVE ID: CVE-2015-6686 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:24.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted set of fields, a different vulnerability than CVE-2015-6685, CVE-2015-6693, CVE-2015-6694, CVE-2015-6695, and CVE-2015-7622. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe
, CVE-2015-6695, and CVE-2015-7622. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb15-24.html - http://www.securitytracker.com/id/1033796 - http://www.zerodayinitiative.com/advisories/ZDI-15-466
CVE ID: CVE-2015-6687 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:24.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6688, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-2015-7617, and CVE-2015-7621. Additional Analyst Notes: - C
CVE ID: CVE-2015-6688 State: PUBLISHED Published: 2015-10-14T23:00:00 Last Updated: 2024-08-06T07:29:24.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via a crafted Optional Content Groups (OCG) object in a WillSave document action, a different vulnerability than CVE-2015-5586, CVE-2015-6683, CVE-2015-6684, CVE-2015-6687, CVE-2015-6689, CVE-2015-6690, CVE-2015-6691, CVE-2015-7615, CVE-20