Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-3006 State: PUBLISHED Published: 2020-02-28T22:26:33.894969Z Last Updated: 2024-09-16T18:19:24.874Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: n/a Problem Types: n/a Description: On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOM_INTERRUPT entropy source when the device boots up is insufficient, possibly leading to weak or duplicate SSH keys or self-signed SSL/TLS certificates. Entropy increases after the system has been up and running for some time, but immediately after boot, the entropy is very low. This issue only affects the QFX3500 and QFX3600 switches. No other Juniper Networks produ
boot, the entropy is very low. This issue only affects the QFX3500 and QFX3600 switches. No other Juniper Networks products or platforms are affected by this weak entropy vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10678
CVE ID: CVE-2015-3007 State: PUBLISHED Published: 2015-07-14T17:00:00 Last Updated: 2024-08-06T05:32:21.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Juniper SRX Series services gateways with Junos OS 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 do not properly implement the "set system ports console insecure" feature, which allows physically proximate attackers to gain administrative privileges by leveraging access to the console port. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10683 - http://www.securitytracker.com/id/1032841
CVE ID: CVE-2015-3008 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T05:32:21.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asterisk Open Source 1.8 before 1.8.32.3, 11.x before 11.17.1, 12.x before 12.8.2, and 13.x before 13.3.2 and Certified Asterisk 1.8.28 before 1.8.28-cert5, 11.6 before 11.6-cert11, and 13.1 before 13.1-cert2, when registering a SIP TLS device, does not properly handle a null byte in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. Additional Analyst Not
f arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/131364/Asterisk-Project-Security-Advisory-AST-2015-003.html - http://www.securityfocus.com/bid/74022 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:206 - http://advisories.mageia.org/MGASA-2015-0153.html - http://www.securitytracker.com/id/1032052 - http://downloads.asterisk.org/pub/security/AST-2015-003.html - http://seclists.org/fulldisclosure/2015/Apr/22 - http://www.securityfocus.com/archive/1/535222/100/0/threaded - http://www.debian.org/security/2016/dsa-3700 - http://lists.
p://www.securityfocus.com/archive/1/535222/100/0/threaded - http://www.debian.org/security/2016/dsa-3700 - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162260.html
CVE ID: CVE-2015-3010 State: PUBLISHED Published: 2015-06-16T16:00:00 Last Updated: 2024-08-06T05:32:21.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: ceph-deploy before 1.5.23 uses weak permissions (644) for ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155576.html - http://www.openwall.com/lists/oss-security/2015/04/09/11 - https://bugzilla.suse.com/show_bug.cgi?id=920926 - http://www.openwall.com/lists/oss-security/2015/04/09/9 - https://github.com/ceph/ceph-deploy/pull/272 - h
i?id=920926 - http://www.openwall.com/lists/oss-security/2015/04/09/9 - https://github.com/ceph/ceph-deploy/pull/272 - http://rhn.redhat.com/errata/RHSA-2015-1092.html - https://github.com/ceph/ceph-deploy/commit/eee56770393bf19ed2dd5389226c6190c08dee3f - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155631.html - http://www.securityfocus.com/bid/74043
CVE ID: CVE-2015-3011 State: PUBLISHED Published: 2015-05-08T14:00:00 Last Updated: 2024-08-06T05:32:21.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the contacts application in ownCloud Server Community Edition before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted contact. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74445 - https://owncloud.org/security/advisory/?id=oc-sa-2015-001 - http://www.debian.org/security/2015/dsa-3244
CVE ID: CVE-2015-3012 State: PUBLISHED Published: 2015-05-08T14:00:00 Last Updated: 2024-08-06T05:32:21.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebODF before 0.5.5, as used in ownCloud, allow remote attackers to inject arbitrary web script or HTML via a (1) style or (2) font name or (3) javascript or (4) data URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74445 - https://github.com/kogmbh/WebODF/blob/master/ChangeLog.md - https://github.com/kogmbh/WebODF/pull/849 - https://github.com/kogmbh/WebODF/pull/850/files - http://www.debian.org/security/2015/dsa-3244
kogmbh/WebODF/pull/849 - https://github.com/kogmbh/WebODF/pull/850/files - http://www.debian.org/security/2015/dsa-3244 - https://owncloud.org/security/advisory/?id=oc-sa-2015-002
CVE ID: CVE-2015-3013 State: PUBLISHED Published: 2015-05-08T14:00:00 Last Updated: 2024-08-06T05:32:21.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upload arbitrary files via a file path with UTF-8 encoding, as demonstrated by uploading a .htaccess file. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.org/security/advisory/?id=oc-sa-2015-003 - http://www.securityfocus.com/bid/74451 - https://owncloud.org/security/advisory/?id=oc-sa-2015-004 - http://www.debian.org/security/2015/dsa-3244
CVE ID: CVE-2015-3026 State: PUBLISHED Published: 2015-04-29T20:00:00 Last Updated: 2024-08-06T05:32:21.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request without login credentials, as demonstrated by a request to "admin/killsource?mount=/test.ogg." Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164061.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163859.html - http://lists.ope
ugust/164061.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163859.html - http://lists.opensuse.org/opensuse-updates/2015-04/msg00030.html - https://security.gentoo.org/glsa/201508-03 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164074.html - http://lists.xiph.org/pipermail/icecast-dev/2015-April/002460.html - https://trac.xiph.org/changeset/27abfbbd688df3e3077b535997330aa06603250f/icecast-server - https://trac.xiph.org/ticket/2191 - http://www.openwall.com/lists/oss-security/2015/04/08/8 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=782120 - http://www.securityfocus.com/bid/73965 - http://www.debian.org/security/2015/dsa-3239 -
-bin/bugreport.cgi?bug=782120 - http://www.securityfocus.com/bid/73965 - http://www.debian.org/security/2015/dsa-3239 - http://www.openwall.com/lists/oss-security/2015/04/08/11
CVE ID: CVE-2015-3027 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T05:32:21.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clang in LLVM, as used in Apple Xcode before 6.3, performs incorrect register allocation in a way that triggers stack storage for stack cookie pointers, which might allow context-dependent attackers to bypass a stack-guard protection mechanism via crafted input to an affected C program. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204663 - http://www.securitytracker.com/id/1032081 - http://www.securityfocus.com/bid/73987 - http://lists.apple.com/archives/security-announce/2015/Ap
cker.com/id/1032081 - http://www.securityfocus.com/bid/73987 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00004.html
CVE ID: CVE-2015-3028 State: PUBLISHED Published: 2015-04-08T18:00:00Z Last Updated: 2024-09-17T03:38:43.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Advanced Threat Defense (MATD) before 3.4.4.63 allows remote authenticated users to bypass intended restrictions and change or update configuration settings via crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10112
CVE ID: CVE-2015-3029 State: PUBLISHED Published: 2015-04-08T18:00:00Z Last Updated: 2024-09-16T19:46:07.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in McAfee Advanced Threat Defense (MATD) before 3.4.4.63 does not properly restrict access, which allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10112
CVE ID: CVE-2015-3030 State: PUBLISHED Published: 2015-04-08T18:00:00Z Last Updated: 2024-09-16T20:01:36.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in McAfee Advanced Threat Defense (MATD) before 3.4.4.63 allows remote authenticated users to obtain sensitive configuration information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10112
CVE ID: CVE-2015-3035 State: PUBLISHED Published: 2015-04-17T18:00:00.000Z Last Updated: 2025-10-21T23:56:02.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_IN
1ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.tp-link.com/en/download/Archer-C9_V1.html#Firmware - http://www.tp-link.com/en/download/Archer-C7_V2.html#Firmware - http://www.tp-link.com/en/download/TL-WR740N_V5.html#Firmware - http://www.tp-link.com/en/download/Archer-C5_V1.20.html#Firmware - http://packetstormsecurity.com/files/131378/TP-LINK-Local-File-Disclosure.html - http://www.tp-link.com/en/download/TL-WR841N_V9.html#Firmware - http://www.tp-link.com/en/download/TL-WR841ND_V9.html#Firmware - http://
nk.com/en/download/TL-WR841N_V9.html#Firmware - http://www.tp-link.com/en/download/TL-WR841ND_V9.html#Firmware - http://seclists.org/fulldisclosure/2015/Apr/26 - http://www.tp-link.com/en/download/TL-WDR3600_V1.html#Firmware - http://www.tp-link.com/en/download/TL-WDR3500_V1.html#Firmware - http://www.securityfocus.com/bid/74050 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150410-0_TP-Link_Unauthenticated_local_file_disclosure_vulnerability_v10.txt - http://www.tp-link.com/en/download/TL-WR741ND_V5.html#Firmware - http://www.tp-link.com/en/download/Archer-C8_V1.html#Firmware - http://www.tp-link.com/en/download/TL-WDR4300_V1.html#Firmware - http://www.securityfo
load/Archer-C8_V1.html#Firmware - http://www.tp-link.com/en/download/TL-WDR4300_V1.html#Firmware - http://www.securityfocus.com/archive/1/535240/100/0/threaded
CVE ID: CVE-2015-3036 State: PUBLISHED Published: 2015-05-21T01:00:00 Last Updated: 2024-08-06T05:32:21.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in certain NETGEAR products, TP-LINK products, and other products, allows remote attackers to execute arbitrary code by providing a long computer name in a session on TCP port 20005. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/177092 - http://blog.sec-consult.com/2015/05/kcodes-netusb-how-small-taiwanese.html - https://www.exploit-db.com/exploits/38454/ - https:
log.sec-consult.com/2015/05/kcodes-netusb-how-small-taiwanese.html - https://www.exploit-db.com/exploits/38454/ - https://www.exploit-db.com/exploits/38566/ - http://packetstormsecurity.com/files/133919/NetUSB-Stack-Buffer-Overflow.html - http://seclists.org/fulldisclosure/2015/Oct/50 - http://packetstormsecurity.com/files/131987/KCodes-NetUSB-Buffer-Overflow.html - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150519-0_KCodes_NetUSB_Kernel_Stack_Buffer_Overflow_v10.txt - http://www.securityfocus.com/bid/74724 - http://www.securitytracker.com/id/1032377 - http://seclists.org/fulldisclosure/2015/May/74
CVE ID: CVE-2015-3038 State: PUBLISHED Published: 2015-04-14T22:00:00 Last Updated: 2024-08-06T05:32:21.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-
CVE ID: CVE-2015-3039 State: PUBLISHED Published: 2015-04-14T22:00:00 Last Updated: 2024-08-06T05:32:21.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-0358. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html - htt
CVE ID: CVE-2015-3040 State: PUBLISHED Published: 2015-04-14T22:00:00 Last Updated: 2024-08-06T05:32:21.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg0001
CVE ID: CVE-2015-3041 State: PUBLISHED Published: 2015-04-14T22:00:00 Last Updated: 2024-08-06T05:32:21.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-
CVE ID: CVE-2015-3042 State: PUBLISHED Published: 2015-04-14T22:00:00 Last Updated: 2024-08-06T05:32:21.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits
and CVE-2015-3043. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37839/ - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html - http://www.securityfocus.com/bid/74062 - https://security.gentoo.org/glsa/201504-07 - http://www.securitytracker.com/id/1032105 - http://rhn.redhat.com/errata/RHSA-2015-0813.html - https://helpx.adobe.com/security/products/flash-player/apsb15-06.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE ID: CVE-2015-3043 State: PUBLISHED Published: 2015-04-14T22:00:00.000Z Last Updated: 2025-11-17T20:02:02.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042. Additional Analyst Notes: - CVE Program Container: - CI
CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html - http://www.securityfocus.com/bid/74062 - https://security.gentoo.org/glsa/201504-07 - http://www.securitytracker.com/id/1032105 - http://rhn.redhat.com/errata/RHSA-2015-0813.html - https://www.exploit-db.com/exploits/37536/ - https://helpx.adobe.com/security/products/flash-player/apsb15-06.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html - http://lists.ope
sh-player/apsb15-06.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE ID: CVE-2015-3044 State: PUBLISHED Published: 2015-04-14T22:00:00 Last Updated: 2024-08-06T05:32:21.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00010.html - http://www.securityfocus.com/bid/74065 - http://lists.opensuse.org/op
opensuse-security-announce/2015-05/msg00010.html - http://www.securityfocus.com/bid/74065 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html - https://security.gentoo.org/glsa/201505-02 - https://security.gentoo.org/glsa/201504-07 - http://www.securitytracker.com/id/1032105 - http://rhn.redhat.com/errata/RHSA-2015-0813.html - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00016.html - https://helpx.adobe.com/security/products/flash-player/apsb15-06.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html - http://lists.opensuse.org/opensuse-security
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE ID: CVE-2015-3045 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-3046 State: PUBLISHED Published: 2015-05-13T10:00:00 Last Updated: 2024-08-06T05:32:21.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-9161, CVE-2015-3049, CVE-2015-3050, CVE-2015-3051, CVE-2015-3052, CVE-2015-3056, CVE-2015-3057, CVE-2015-3070, and CVE-2015-3076. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/reader/apsb15-10.html - http://www.securityfocus.c
am Container: References: - https://helpx.adobe.com/security/products/reader/apsb15-10.html - http://www.securityfocus.com/bid/74600 - http://www.securitytracker.com/id/1032284
CVE ID: CVE-2015-3047 State: PUBLISHED Published: 2015-05-13T10:00:00 Last Updated: 2024-08-06T05:32:21.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to cause a denial of service (NULL pointer dereference) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/reader/apsb15-10.html - http://www.securitytracker.com/id/1032284 - http://www.securityfocus.com/bid/74601
CVE ID: CVE-2015-3048 State: PUBLISHED Published: 2015-05-13T10:00:00 Last Updated: 2024-08-06T05:32:21.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/reader/apsb15-10.html - http://www.securityfocus.com/bid/74603 - http://www.securitytracker.com/id/1032284
CVE ID: CVE-2015-3049 State: PUBLISHED Published: 2015-05-13T10:00:00 Last Updated: 2024-08-06T05:32:21.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-9161, CVE-2015-3046, CVE-2015-3050, CVE-2015-3051, CVE-2015-3052, CVE-2015-3056, CVE-2015-3057, CVE-2015-3070, and CVE-2015-3076. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/reader/apsb15-10.html - http://www.securityfocus.c