Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-7504 State: PUBLISHED Published: 2017-10-16T20:00:00 Last Updated: 2024-08-06T07:51:28.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2694.html - http://www.securitytracker.com/id/1034268 - http://www.securityfocus.com/bid/78227 - http://www.openwall.com/lists/oss-security/2015/11/30/2 - https://lists.gnu.org/archive/html/q
rityfocus.com/bid/78227 - http://www.openwall.com/lists/oss-security/2015/11/30/2 - https://lists.gnu.org/archive/html/qemu-devel/2015-11/msg06342.html - http://xenbits.xen.org/xsa/advisory-162.html - http://www.debian.org/security/2016/dsa-3469 - http://www.debian.org/security/2016/dsa-3470 - https://security.gentoo.org/glsa/201604-03 - http://www.debian.org/security/2016/dsa-3471 - https://security.gentoo.org/glsa/201602-01 - http://rhn.redhat.com/errata/RHSA-2015-2696.html - http://rhn.redhat.com/errata/RHSA-2015-2695.html
CVE ID: CVE-2015-7505 State: PUBLISHED Published: 2020-02-18T17:45:36 Last Updated: 2024-08-06T07:51:28.200Z Vendors: n/a Products: Libnsgif Problem Types: Buffer Overflow Description: Stack-based buffer overflow in the gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted LZW stream in a GIF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/archive/1/537128/100/0/threaded - http://seclists.org/fulldisclosure/2015/Dec/70
CVE ID: CVE-2015-7506 State: PUBLISHED Published: 2020-02-18T13:54:03 Last Updated: 2024-08-06T07:51:28.198Z Vendors: Libnsgif Products: Libnsgif Problem Types: Other Description: The gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted LZW stream in a GIF file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Dec/70
CVE ID: CVE-2015-7507 State: PUBLISHED Published: 2020-02-18T18:03:30 Last Updated: 2024-08-06T07:51:28.344Z Vendors: n/a Products: Libnsbmp Problem Types: Other Description: libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a crafted color table to the (1) bmp_decode_rgb or (2) bmp_decode_rle function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/archive/1/537132/100/0/threaded - http://seclists.org/fulldisclosure/2015/Dec/73
CVE ID: CVE-2015-7508 State: PUBLISHED Published: 2020-02-12T02:37:47 Last Updated: 2024-08-06T07:51:28.164Z Vendors: n/a Products: Libnsbmp Problem Types: Buffer Overflow Description: Heap-based buffer overflow in the bmp_decode_rle function in libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the last row of RLE data in a crafted BMP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/archive/1/537132/100/0/threaded - http://seclists.org/fulldisclosure/2015/Dec/73
CVE ID: CVE-2015-7509 State: PUBLISHED Published: 2015-12-28T11:00:00 Last Updated: 2024-08-06T07:51:28.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/ext4/namei.c in the Linux kernel before 3.7 allows physically proximate attackers to cause a denial of service (system crash) via a crafted no-journal filesystem, a related issue to CVE-2013-2015. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0855.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html - https://security-tracker.debian.org/tracker/CVE-2015-7509 - https://bugzilla.redhat.com/show_bug.cgi?id=1259222 - http://lists.opensuse.org
acker.debian.org/tracker/CVE-2015-7509 - https://bugzilla.redhat.com/show_bug.cgi?id=1259222 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html - http://www.securitytracker.com/id/1034559 - https://github.com/torvalds/linux/commit/c9b92530a723ac5ef8e352885a1862b18f31b2f5 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c9b92530a723ac5ef8e352885a1862b18f31b2f5 - https://bugzilla.suse.com/show_bug.cgi?id=956709
CVE ID: CVE-2015-7510 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-06T07:51:28.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the getpwnam and getgrnam functions of the NSS module nss-mymachines in systemd. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/systemd/systemd/issues/2002 - https://github.com/keszybz/systemd/commit/cb31827d62066a04b02111df3052949fda4b6888 - https://bugzilla.redhat.com/show_bug.cgi?id=1284642
CVE ID: CVE-2015-7511 State: PUBLISHED Published: 2016-04-19T21:00:00 Last Updated: 2024-08-06T07:51:28.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3478 - http://www.ubuntu.com/usn/USN-2896-1 - https://security.gentoo.org/glsa/201610-04 - https://lists.gnupg.org/pipermail/gnupg-announce/2016q1/000384.html - http://www.debian.org/security/2016/dsa-347
0-04 - https://lists.gnupg.org/pipermail/gnupg-announce/2016q1/000384.html - http://www.debian.org/security/2016/dsa-3474 - http://www.securityfocus.com/bid/83253 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W2IL4PAEICHGA2XMQYRY3MIWHM4GMPAG/ - http://lists.opensuse.org/opensuse-updates/2016-05/msg00027.html - http://www.cs.tau.ac.IL/~tromer/ecdh/
CVE ID: CVE-2015-7512 State: PUBLISHED Published: 2016-01-08T21:00:00 Last Updated: 2024-08-06T07:51:28.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2694.html - http://www.openwall.com/lists/oss-security/2015/11/30/3 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=8
cle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=8b98a2f07175d46c3f7217639bd5e03f - http://www.debian.org/security/2016/dsa-3469 - http://www.debian.org/security/2016/dsa-3470 - http://www.securityfocus.com/bid/78230 - http://www.securitytracker.com/id/1034527 - http://www.debian.org/security/2016/dsa-3471 - https://security.gentoo.org/glsa/201602-01 - http://rhn.redhat.com/errata/RHSA-2015-2696.html - http://rhn.redhat.com/errata/RHSA-2015-2695.html
CVE ID: CVE-2015-7513 State: PUBLISHED Published: 2016-02-08T02:00:00 Last Updated: 2024-08-06T07:51:28.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via a zero value, related to the kvm_vm_ioctl_set_pit and kvm_vm_ioctl_set_pit2 functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/07/2 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175792.html - http://www.ubuntu.com
016/01/07/2 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175792.html - http://www.ubuntu.com/usn/USN-2887-2 - https://github.com/torvalds/linux/commit/0185604c2d82c560dab2f2933a18f797e74ab5a8 - http://www.ubuntu.com/usn/USN-2886-1 - http://www.ubuntu.com/usn/USN-2887-1 - http://www.ubuntu.com/usn/USN-2890-3 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0185604c2d82c560dab2f2933a18f797e74ab5a8 - http://www.ubuntu.com/usn/USN-2889-1 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176194.html - http://www.ubuntu.com/usn/USN-2889-2 - http://www.securityfocus.com/bid/79901 - http://lists.fedoraproject.org/pipermail
http://www.ubuntu.com/usn/USN-2889-2 - http://www.securityfocus.com/bid/79901 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html - http://www.ubuntu.com/usn/USN-2890-2 - https://bugzilla.redhat.com/show_bug.cgi?id=1284847 - http://www.ubuntu.com/usn/USN-2890-1 - http://www.debian.org/security/2016/dsa-3434 - http://www.securitytracker.com/id/1034602 - http://www.ubuntu.com/usn/USN-2888-1
CVE ID: CVE-2015-7514 State: PUBLISHED Published: 2017-06-07T14:00:00 Last Updated: 2024-08-06T07:51:28.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Ironic 4.2.0 through 4.2.1 does not "clean" the disk after use, which allows remote authenticated users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://review.openstack.org/#/c/253001 - http://www.openwall.com/lists/oss-security/2015/12/03/4 - https://review.openstack.org/#/c/252993 - https://bugzilla.redhat.com/show_bug.cgi?id=1285809
CVE ID: CVE-2015-7515 State: PUBLISHED Published: 2016-04-27T17:00:00 Last Updated: 2024-08-06T07:51:28.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: The aiptek_probe function in drivers/input/tablet/aiptek.c in the Linux kernel before 4.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device that lacks endpoints. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2971-2 - https://security-tracker.debian.org/tracker/CVE-2015-7515 - http://www.ubuntu.com/usn/USN-2967-1 - http://www.securityfocus.com/bid/84288 - http://www.ubuntu.com/usn/USN-2970-1 - h
http://www.ubuntu.com/usn/USN-2967-1 - http://www.securityfocus.com/bid/84288 - http://www.ubuntu.com/usn/USN-2970-1 - http://www.ubuntu.com/usn/USN-2969-1 - http://www.ubuntu.com/usn/USN-2967-2 - http://www.ubuntu.com/usn/USN-2968-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8e20cf2bce122ce9262d6034ee5d5b76fbb92f96 - http://www.ubuntu.com/usn/USN-2971-3 - https://bugzilla.redhat.com/show_bug.cgi?id=1285326 - http://www.debian.org/security/2016/dsa-3607 - https://www.exploit-db.com/exploits/39544/ - http://www.ubuntu.com/usn/USN-2971-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html - http://www.ubuntu.com/usn/USN-2968-2 - http://
p://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html - http://www.ubuntu.com/usn/USN-2968-2 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - https://github.com/torvalds/linux/commit/8e20cf2bce122ce9262d6034ee5d5b76fbb92f96 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
CVE ID: CVE-2015-7516 State: PUBLISHED Published: 2017-08-24T20:00:00 Last Updated: 2024-08-06T07:51:28.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: ONOS before 1.5.0 when using the ifwd app allows remote attackers to cause a denial of service (NULL pointer dereference and switch disconnect) by sending two Ethernet frames with ether_type Jumbo Frame (0x8870). Additional Analyst Notes: - CVE Program Container: References: - https://jira.onosproject.org/browse/ONOS-3349 - http://www.openwall.com/lists/oss-security/2015/11/26/1 - http://www.securityfocus.com/bid/77752 - https://wiki.onosproject.org/display/ONOS/Security+advisories - https://gerrit.onosproject.org/#/c/6137/
CVE ID: CVE-2015-7517 State: PUBLISHED Published: 2017-08-29T15:00:00 Last Updated: 2024-08-06T07:51:28.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Double Opt-In for Download plugin before 2.0.9 for WordPress allow remote attackers to execute arbitrary SQL commands via the ver parameter to (1) class-doifd-download.php or (2) class-doifd-landing-page.php in public/includes/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/78220 - http://permalink.gmane.org/gmane.comp.security.oss.general/18255 - https://wpvulndb.com/vulnerabilities/8345 - http://www.vapidlabs.com/advisory.php?v=
e.comp.security.oss.general/18255 - https://wpvulndb.com/vulnerabilities/8345 - http://www.vapidlabs.com/advisory.php?v=157
CVE ID: CVE-2015-7518 State: PUBLISHED Published: 2015-12-17T19:00:00 Last Updated: 2024-08-06T07:51:28.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in information popups in Foreman before 1.10.0 allow remote attackers to inject arbitrary web script or HTML via (1) global parameters, (2) smart class parameters, or (3) smart variables in the (a) host or (b) hostgroup edit forms. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:0174 - http://www.openwall.com/lists/oss-security/2015/12/09/6 - http://projects.theforeman.org/issues/12611 - http://theforeman.org/securit
enwall.com/lists/oss-security/2015/12/09/6 - http://projects.theforeman.org/issues/12611 - http://theforeman.org/security.html#2015-7518
CVE ID: CVE-2015-7519 State: PUBLISHED Published: 2016-01-08T19:00:00 Last Updated: 2024-08-06T07:51:28.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: agent/Core/Controller/SendRequest.cpp in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone mode without a filtering proxy, allows remote attackers to spoof headers passed to applications by using an _ (underscore) character instead of a - (dash) character in an HTTP header, as demonstrated by an X_User header. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00024.html - https://github.co
Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00024.html - https://github.com/phusion/passenger/commit/ddb8ecc4ebf260e4967f57f271d4f5761abeac3e - https://blog.phusion.nl/2015/12/07/cve-2015-7519/ - https://puppet.com/security/cve/passenger-dec-2015-security-fixes - http://www.openwall.com/lists/oss-security/2015/12/07/2 - https://bugzilla.suse.com/show_bug.cgi?id=956281 - http://www.openwall.com/lists/oss-security/2015/12/07/1 - https://lists.debian.org/debian-lts-announce/2018/06/msg00007.html
CVE ID: CVE-2015-7520 State: PUBLISHED Published: 2016-04-12T17:00:00 Last Updated: 2024-08-06T07:51:28.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the (1) RadioGroup and (2) CheckBoxMultipleChoice classes in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before 7.2.0 allow remote attackers to inject arbitrary web script or HTML via a crafted "value" attribute in a <input> element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035166 - http://wicket.apache.org/news/2016/03/02/cve-2015-7520.html
CVE ID: CVE-2015-7521 State: PUBLISHED Published: 2016-01-29T20:00:00 Last Updated: 2024-08-06T07:51:28.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 and 1.2.1, on clusters protected by Ranger and SqlStdHiveAuthorization, allows attackers to bypass intended parent table access restrictions via unspecified partition-level operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/28/12 - http://www.securityfocus.com/archive/1/537549/100/0/threaded - http://packetstormsecurity.com/files/135836/Apache-Hive-Authorization-Bypass.html -
om/archive/1/537549/100/0/threaded - http://packetstormsecurity.com/files/135836/Apache-Hive-Authorization-Bypass.html - http://mail-archives.apache.org/mod_mbox/hive-user/201601.mbox/%3C20160128205008.2154F185EB%40minotaur.apache.org%3E
CVE ID: CVE-2015-7522 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7523 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7524 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7525 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7526 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7527 State: PUBLISHED Published: 2015-12-17T19:00:00 Last Updated: 2024-08-06T07:51:28.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to execute arbitrary code via shell metacharacters in the "Width of preview image" and possibly other input fields in the "Video Gallery Settings" page. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=158 - http://packetstormsecurity.com/files/134626/WordPress-Cool-Video-Gallery-1.9-Command-Injection.html - http://www.openwall.com/lists/oss-security/2015/12/02/9 - https://wpvulndb.com
ideo-Gallery-1.9-Command-Injection.html - http://www.openwall.com/lists/oss-security/2015/12/02/9 - https://wpvulndb.com/vulnerabilities/8348 - https://wordpress.org/support/topic/command-injection-vulnerability-in-v19 - http://www.securityfocus.com/archive/1/537051/100/0/threaded
CVE ID: CVE-2015-7528 State: PUBLISHED Published: 2016-04-11T21:00:00 Last Updated: 2024-08-06T07:51:28.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kubernetes before 1.2.0-alpha.5 allows remote attackers to read arbitrary pod logs via a container name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openshift/origin/pull/6113 - https://github.com/kubernetes/kubernetes/releases/tag/v1.2.0-alpha.5 - http://rhn.redhat.com/errata/RHSA-2015-2615.html - https://access.redhat.com/errata/RHSA-2015:2544 - https://github.com/kubernetes/kubernetes/pull/17886
CVE ID: CVE-2015-7529 State: PUBLISHED Published: 2017-11-06T17:00:00 Last Updated: 2024-08-06T07:51:28.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2845-1 - https://github.com/sosreport/sos/issues/696 - http://rhn.redhat.com/errata/RHSA-2016-0152.html - http://rhn.redhat.com/errata/RHSA-2016-0188.html - http://www.securit
http://rhn.redhat.com/errata/RHSA-2016-0152.html - http://rhn.redhat.com/errata/RHSA-2016-0188.html - http://www.securityfocus.com/bid/83162 - https://access.redhat.com/errata/RHSA-2016:0188 - https://bugzilla.redhat.com/show_bug.cgi?id=1282542 - https://access.redhat.com/errata/RHSA-2016:0152
CVE ID: CVE-2015-7530 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7531 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7532 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7533 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7534 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7535 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-7536 State: PUBLISHED Published: 2016-02-03T15:00:00 Last Updated: 2024-08-06T07:51:28.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to workspaces and archived artifacts. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-12-09
CVE ID: CVE-2015-7537 State: PUBLISHED Published: 2016-02-03T15:00:00 Last Updated: 2024-08-06T07:51:28.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via vectors related to the HTTP GET method. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-12-09 - http://rhn.redhat.com/errata/RHSA-2016-0489.html - https://access.redhat.com/errata/RHSA-2016:0070
CVE ID: CVE-2015-7538 State: PUBLISHED Published: 2016-02-03T15:00:00 Last Updated: 2024-08-06T07:51:28.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-12-09 - http://rhn.redhat.com/errata/RHSA-2016-0489.html - https://access.redhat.com/errata/RHSA-2016:0070
CVE ID: CVE-2015-7539 State: PUBLISHED Published: 2016-02-03T15:00:00 Last Updated: 2024-08-06T07:51:28.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted plugin. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-12-09 - http://rhn.redhat.com/errata/RHSA-2016-0489.html - https://access.redhat.com/errata/RHSA-2016:0070
CVE ID: CVE-2015-7540 State: PUBLISHED Published: 2015-12-29T22:00:00 Last Updated: 2024-08-06T07:51:28.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which allows remote attackers to cause a denial of service (memory consumption and daemon crash) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=9d989c9dd7a5b92d0c5d65287935471b83b6e884 - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html - http://www.ubuntu.com/us