Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-2748 State: PUBLISHED Published: 2015-03-26T14:00:00 Last Updated: 2024-08-06T05:24:38.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Websense TRITON AP-WEB before 8.0.0 does not properly restrict access to files in explorer_wse/, which allows remote attackers to obtain sensitive information via a direct request to a (1) Web Security incident report or the (2) Explorer configuration (websense.ini) file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130901/Websense-Explorer-Missing-Access-Control.html - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 -
ss-Control.html - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://www.securityfocus.com/archive/1/534913/100/0/threaded - https://www.securify.nl/advisory/SFY20140909/missing_access_control_on_websense_explorer_web_folder.html - http://seclists.org/fulldisclosure/2015/Mar/107
CVE ID: CVE-2015-2749 State: PUBLISHED Published: 2017-09-13T16:00:00 Last Updated: 2024-08-06T05:24:38.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter. Additional Analyst Notes: - CVE Program Container: References: - http://cgit.drupalcode.org/drupal/commit/?id=d2304f840c43c190c6e136ee9901ed9797b4c3ca - http://www.debian.org/security/2015/dsa-3200 - http://www.openwall.com/lists/oss-security/2015/03/26/4 - https://bugzilla.redhat.com/show_bug.cgi?id=1204753 - http://www.s
://www.openwall.com/lists/oss-security/2015/03/26/4 - https://bugzilla.redhat.com/show_bug.cgi?id=1204753 - http://www.securityfocus.com/bid/73219 - https://www.drupal.org/SA-CORE-2015-001
CVE ID: CVE-2015-2750 State: PUBLISHED Published: 2017-09-13T16:00:00 Last Updated: 2024-08-06T05:24:38.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the "//" initial sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3200 - http://www.openwall.com/lists/oss-security/2015/03/26/4 - http://cgit.drupalcode.org/drupal/commit/includes/menu.inc?h=6.x&id=8ffc5db3c0ab926f3d4b2cf8bc51714c8c0f3c93 - http:
4 - http://cgit.drupalcode.org/drupal/commit/includes/menu.inc?h=6.x&id=8ffc5db3c0ab926f3d4b2cf8bc51714c8c0f3c93 - http://www.securityfocus.com/bid/73219 - http://cgit.drupalcode.org/drupal/commit/includes/common.inc?h=7.x&id=b44056d2f8e8c71d35c85ec5c2fb8f7c8a02d8a8 - https://www.drupal.org/SA-CORE-2015-001
CVE ID: CVE-2015-2751 State: PUBLISHED Published: 2015-04-01T14:00:00 Last Updated: 2024-08-06T05:24:38.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.3.x, 4.4.x, and 4.5.x, when using toolstack disaggregation, allows remote domains with partial management control to cause a denial of service (host lock) via unspecified domctl operations. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201504-04 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155198.html - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html - http://www.securitytracker.com/id/1031997 - http://lists.fedorapro
rg/opensuse-security-announce/2015-05/msg00018.html - http://www.securitytracker.com/id/1031997 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154574.html - http://www.securityfocus.com/bid/73443 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154579.html - http://xenbits.xen.org/xsa/advisory-127.html
CVE ID: CVE-2015-2752 State: PUBLISHED Published: 2015-04-01T14:00:00 Last Updated: 2024-08-06T05:24:38.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XEN_DOMCTL_memory_mapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough device, is not preemptible, which allows local x86 HVM domain users to cause a denial of service (host CPU consumption) via a crafted request to the device model (qemu-dm). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031994 - https://security.gentoo.org/glsa/201504-04 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155198.html - http://lists.opensuse.org
201504-04 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155198.html - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html - http://www.securityfocus.com/bid/73448 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154574.html - http://xenbits.xen.org/xsa/advisory-125.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154579.html
CVE ID: CVE-2015-2753 State: PUBLISHED Published: 2015-03-31T14:00:00 Last Updated: 2024-08-06T05:24:38.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) or possibly execute arbitrary code via a crafted sector in a workbook. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201606-15 - http://www.debian.org/security/2015/dsa-3208 - https://www.gaia-gis.it/fossil/freexl/fdiff?v1=2e167b337481dda3&v2=61618ce51a9b0c15&sbs=1 - http://www.openwall.com/lists/oss-security/2015/03/25/1 - http://www.securityfocus.com/bid/73330 - http://www.openwall.
http://www.openwall.com/lists/oss-security/2015/03/25/1 - http://www.securityfocus.com/bid/73330 - http://www.openwall.com/lists/oss-security/2015/03/27/1
CVE ID: CVE-2015-2754 State: PUBLISHED Published: 2015-03-31T14:00:00 Last Updated: 2024-08-06T05:24:38.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) and possibly execute arbitrary code via a crafted workbook, related to a "premature EOF." Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201606-15 - http://www.debian.org/security/2015/dsa-3208 - https://www.gaia-gis.it/fossil/freexl/fdiff?v1=2e167b337481dda3&v2=61618ce51a9b0c15&sbs=1 - http://www.openwall.com/lists/oss-security/2015/03/25/1 - http://www.securityfocus.com/bid/73330 - h
ce51a9b0c15&sbs=1 - http://www.openwall.com/lists/oss-security/2015/03/25/1 - http://www.securityfocus.com/bid/73330 - http://www.openwall.com/lists/oss-security/2015/03/27/1
CVE ID: CVE-2015-2755 State: PUBLISHED Published: 2015-04-01T14:00:00 Last Updated: 2024-08-06T05:24:38.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the AB Google Map Travel (AB-MAP) plugin before 4.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) lat (Latitude), (2) long (Longitude), (3) map_width, (4) map_height, or (5) zoom (Map Zoom) parameter in the ab_map_options page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/53495
admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534954/100/0/threaded - http://www.securityfocus.com/archive/1/535026/100/0/threaded - http://packetstormsecurity.com/files/131155/WordPress-Google-Map-Travel-3.4-XSS-CSRF.html - http://www.securityfocus.com/bid/71417 - http://packetstormsecurity.com/files/130960/WordPress-AB-Google-Map-Travel-CSRF-XSS.html - https://wordpress.org/plugins/ab-google-map-travel/changelog/
CVE ID: CVE-2015-2756 State: PUBLISHED Published: 2015-04-01T14:00:00 Last Updated: 2024-08-06T05:24:38.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU, as used in Xen 3.3.x through 4.5.x, does not properly restrict access to PCI command registers, which might allow local HVM guest users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72577 - https://security.gentoo.org/glsa/201504-04 - https://suppo
ainer: References: - http://www.securityfocus.com/bid/72577 - https://security.gentoo.org/glsa/201504-04 - https://support.citrix.com/article/CTX206006 - http://www.debian.org/security/2015/dsa-3259 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155198.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154574.html - http://support.citrix.com/article/CTX201145 - http://lists.nongnu.org/archive/html/qemu-devel/2015-03/msg06179.html - http://xenbits.xen.org/xsa/advisory-126.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html - http://www.ubuntu.com/usn/USN-2608-1 - http://www.securitytracker.com/id/1031998 - http://l
unce/2015-04/msg00014.html - http://www.ubuntu.com/usn/USN-2608-1 - http://www.securitytracker.com/id/1031998 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154579.html
CVE ID: CVE-2015-2757 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T05:24:38.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to cause a denial of service (database lock or license corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73399 - https://kc.mcafee.com/corporate/index?page=content&id=SB10111
CVE ID: CVE-2015-2758 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T05:24:38.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to obtain sensitive information, modify the database, or possibly have other unspecified impact via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10111 - http://www.securityfocus.com/bid/73397
CVE ID: CVE-2015-2759 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T05:24:38.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allow remote attackers to hijack the authentication of users for requests that (1) obtain sensitive information or (2) modify the database via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10111 - http://www.securityfocus.com/bid/73403
CVE ID: CVE-2015-2760 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T05:24:38.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10111 - http://www.securityfocus.com/bid/73193
CVE ID: CVE-2015-2761 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T05:24:38.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Exceptions and Scanning Exceptions Pages in Websense TRITON AP-WEB before 8.0.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://www.securityfocus.com/bid/73414
CVE ID: CVE-2015-2762 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T05:24:38.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Websense TRITON AP-WEB before 8.0.0 allows remote attackers to enumerate Windows domain user accounts via vectors related to HTTP authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://www.securityfocus.com/bid/73412
CVE ID: CVE-2015-2763 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T05:24:38.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to port 17703. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://www.securityfocus.com/bid/73415
CVE ID: CVE-2015-2764 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T05:24:38.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Websense TRITON AP-DATA before 8.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the DSS (1) Mobile or (2) DLP report catalog. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://www.securityfocus.com/bid/73424
CVE ID: CVE-2015-2765 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T05:24:38.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://www.securityfocus.com/bid/73427
CVE ID: CVE-2015-2766 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T05:24:38.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Personal Email Manager (PEM) in Websense TRITON AP-EMAIL before 8.0.0 allows attackers to have unspecified impact via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://www.securityfocus.com/bid/73426
CVE ID: CVE-2015-2767 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T05:24:38.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to "Autocomplete Enabled." Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://www.securityfocus.com/bid/73418
CVE ID: CVE-2015-2768 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T05:24:38.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://www.securityfocus.com/bid/73429
CVE ID: CVE-2015-2769 State: PUBLISHED Published: 2015-03-27T14:00:00Z Last Updated: 2024-09-16T20:26:28.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Personal Email Manager (PEM) in Websense TRITON AP-EMAIL before 8.0.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0
CVE ID: CVE-2015-2770 State: PUBLISHED Published: 2015-03-27T14:00:00Z Last Updated: 2024-09-17T04:13:59.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the command line page in Websense TRITON V-Series appliances before 8.0.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0
CVE ID: CVE-2015-2771 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T05:24:38.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://www.securityfocus.com/bid/73428
CVE ID: CVE-2015-2772 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T05:24:38.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to upload arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://www.securityfocus.com/bid/73439
CVE ID: CVE-2015-2773 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T05:24:38.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 - http://www.securityfocus.com/bid/73406
CVE ID: CVE-2015-2774 State: PUBLISHED Published: 2016-04-07T21:00:00 Last Updated: 2024-08-06T05:24:39.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE). Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3571-1/ - https://web.archive.org/web/20150905124006/http://www.erlang.org/news/85 - https://www.imperialviolet.org/2014/12/08/poodleagain.html - http://www.securityfocus.com/bid/73398 - http://li
ews/85 - https://www.imperialviolet.org/2014/12/08/poodleagain.html - http://www.securityfocus.com/bid/73398 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00124.html - http://openwall.com/lists/oss-security/2015/03/27/9 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://openwall.com/lists/oss-security/2015/03/27/6
CVE ID: CVE-2015-2775 State: PUBLISHED Published: 2015-04-13T14:00:00 Last Updated: 2024-08-06T05:24:38.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. (dot dot) in a list name. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/mailman/+bug/1437145 - http://www.debian.org/security/2015/dsa-3214 - http://rhn.redhat.com/errata/RHSA-2015-1153.html - http://rhn.redhat.com/errata/RHSA-2015-1417.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154911.html - http
com/errata/RHSA-2015-1417.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154911.html - http://www.ubuntu.com/usn/USN-2558-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156742.html - https://mail.python.org/pipermail/mailman-developers/2015-March/024871.html - https://mail.python.org/pipermail/mailman-announce/2015-March/000209.html - https://mail.python.org/pipermail/mailman-developers/2015-March/024875.html - http://www.securitytracker.com/id/1032033 - http://www.securityfocus.com/bid/73922
CVE ID: CVE-2015-2776 State: PUBLISHED Published: 2015-03-31T14:00:00 Last Updated: 2024-08-06T05:24:38.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse_SST function in FreeXL before 1.0.0i allows remote attackers to cause a denial of service (memory consumption) via a crafted shared strings table in a workbook. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201606-15 - http://www.debian.org/security/2015/dsa-3208 - http://www.openwall.com/lists/oss-security/2015/03/27/5 - https://www.gaia-gis.it/fossil/freexl/fdiff?v1=2e167b337481dda3&v2=61618ce51a9b0c15&sbs=1 - http://www.openwall.com/lists/oss-security/2015/03/27/
ssil/freexl/fdiff?v1=2e167b337481dda3&v2=61618ce51a9b0c15&sbs=1 - http://www.openwall.com/lists/oss-security/2015/03/27/13 - http://www.openwall.com/lists/oss-security/2015/03/25/1 - http://www.securityfocus.com/bid/73330
CVE ID: CVE-2015-2778 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T05:24:38.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attackers to cause a denial of service (crash) via a long CTCP query containing only multibyte characters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/quassel/quassel/commit/b5e38970ffd55e2dd9f706ce75af9a8d7730b1b8 - http://www.openwall.com/lists/oss-security/2015/03/20/12 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00018.html - http://www.openwall.com/lists/oss-security/201
0/12 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00018.html - http://www.openwall.com/lists/oss-security/2015/03/27/11 - http://www.openwall.com/lists/oss-security/2015/03/28/3 - http://www.securityfocus.com/bid/73305
CVE ID: CVE-2015-2779 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T05:24:38.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service (uncontrolled recursion) via a crafted massage. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/quassel/quassel/commit/b5e38970ffd55e2dd9f706ce75af9a8d7730b1b8 - http://www.openwall.com/lists/oss-security/2015/03/20/12 - http://www.securityfocus.com/bid/74048 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00018.html - http://www.openw
://www.securityfocus.com/bid/74048 - http://lists.opensuse.org/opensuse-updates/2015-04/msg00018.html - http://www.openwall.com/lists/oss-security/2015/03/27/11 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163054.html - http://www.openwall.com/lists/oss-security/2015/03/28/3 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158666.html