Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-0855 State: PUBLISHED Published: 2017-03-23T20:00:00 Last Updated: 2024-08-06T04:26:11.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _mediaLibraryPlayCb function in mainwindow.py in pitivi before 0.95 allows attackers to execute arbitrary code via shell metacharacters in a file path. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97283 - https://git.gnome.org/browse/pitivi/commit/?id=45a4c84edb3b4343f199bba1c65502e3f49f5bb2 - http://www.openwall.com/lists/oss-security/2015/12/23/8 - https://bugs.launchpad.net/ubuntu/+source/pitivi/+bug/1495272
CVE ID: CVE-2015-0856 State: PUBLISHED Published: 2015-11-24T20:00:00 Last Updated: 2024-08-06T04:26:11.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77099 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171443.html - https://github.com/sddm/sddm/wiki/0.13.0-Release-Announcement - http://www.openwall.com/lists/oss-secur
er/171443.html - https://github.com/sddm/sddm/wiki/0.13.0-Release-Announcement - http://www.openwall.com/lists/oss-security/2015/10/14/2 - https://github.com/sddm/sddm/commit/4cfed6b0a625593fb43876f04badc4dd99799d86
CVE ID: CVE-2015-0857 State: PUBLISHED Published: 2016-05-06T17:00:00 Last Updated: 2024-08-06T04:26:10.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a (1) tar file or (2) file within a tar file. Additional Analyst Notes: - CVE Program Container: References: - https://anonscm.debian.org/cgit/collab-maint/tardiff.git/commit/?id=a18e8df51511df276e61dbccdbe1714fc53af965 - http://www.debian.org/security/2016/dsa-3562 - https://anonscm.debian.org/cgit/collab-maint/tardiff.git/commit/?id=9bd6a07bc204472ac27242cea16f89943b43003a
CVE ID: CVE-2015-0858 State: PUBLISHED Published: 2016-05-06T17:00:00 Last Updated: 2024-08-06T04:26:11.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3562 - https://anonscm.debian.org/cgit/collab-maint/tardiff.git/commit/?id=9bd6a07bc204472ac27242cea16f89943b43003a
CVE ID: CVE-2015-0859 State: PUBLISHED Published: 2015-12-03T20:00:00 Last Updated: 2024-08-06T04:26:11.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokeping_cgi, which allows remote attackers to execute arbitrary code via crafted CGI arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3405
CVE ID: CVE-2015-0860 State: PUBLISHED Published: 2015-12-03T20:00:00 Last Updated: 2024-08-06T04:26:11.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x before 1.16.17 and 1.17.x before 1.17.26 allows remote attackers to execute arbitrary code via the archive magic version number in an "old-style" Debian binary package, which triggers a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=798324 - https://anonscm.debian.org/cgit/dpkg/dpkg.git/commit/dpkg-deb/extract.c?id=e65
an.org/cgi-bin/bugreport.cgi?bug=798324 - https://anonscm.debian.org/cgit/dpkg/dpkg.git/commit/dpkg-deb/extract.c?id=e65aa3db04eb908c9507d5d356a95cedb890814d - https://security.gentoo.org/glsa/201612-07 - http://www.debian.org/security/2015/dsa-3407 - https://blog.fuzzing-project.org/30-Stack-overflows-and-out-of-bounds-read-in-dpkg-Debian.html - http://www.ubuntu.com/usn/USN-2820-1
CVE ID: CVE-2015-0861 State: PUBLISHED Published: 2016-04-13T15:00:00 Last Updated: 2024-08-06T04:26:10.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write to arbitrary fields via a sequence of records. Additional Analyst Notes: - CVE Program Container: References: - http://www.tryton.org/posts/security-release-for-issue5167.html - http://www.debian.org/security/2015/dsa-3425 - https://bugs.tryton.org/issue5167
CVE ID: CVE-2015-0862 State: PUBLISHED Published: 2015-01-18T18:00:00 Last Updated: 2024-08-06T04:26:10.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) message details when a message is unqueued, such as headers or arguments; (2) policy names, which are not properly handled when viewing policies; (3) details for AMQP network clients, such as the version; allow remote authenticated administrators to inject arbitrary web script or HTML via (4) user names, (5) the cluster name;
ow remote authenticated administrators to inject arbitrary web script or HTML via (4) user names, (5) the cluster name; or allow RabbitMQ cluster administrators to (6) modify unspecified content. Additional Analyst Notes: - CVE Program Container: References: - http://www.rabbitmq.com/news.html#2015-01-08T10:14:05+0100
CVE ID: CVE-2015-0863 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-06T04:26:11.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: GALAXY Apps (aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps) before 14120405.03.012 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.nowsecure.com/blog/2015/01/26/samsung-account-and-galaxy-apps-technical-breakdown-cve-2015-0863-and-cve-2015-0864/
CVE ID: CVE-2015-0864 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-06T04:26:11.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Account (AKA com.osp.app.signin) before 1.6.0069 and 2.x before 2.1.0069 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97207 - https://www.nowsecure.com/blog/2015/01/26/samsung-account-and-galaxy-apps-technical-breakdown-cve-2015-0863-and-cve-2015-0864/
CVE ID: CVE-2015-0866 State: PUBLISHED Published: 2015-02-02T15:00:00 Last Updated: 2024-08-06T04:26:11.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Zoho ManageEngine SupportCenter Plus 7.9 before hotfix 7941 allow remote attackers to inject arbitrary web script or HTML via the (1) fromCustomer, (2) username, or (3) password parameter to HomePage.do. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23247 - https://forums.manageengine.com/topic/security-update-for-supportcenter-plus - http://www.securityfocus.com/bid/72349 - http://www.securityfocus.com/archive/1/5345
ity-update-for-supportcenter-plus - http://www.securityfocus.com/bid/72349 - http://www.securityfocus.com/archive/1/534564/100/0/threaded
CVE ID: CVE-2015-0867 State: PUBLISHED Published: 2015-01-21T11:00:00 Last Updated: 2024-08-06T04:26:11.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SYNCK GRAPHICA Download Log CGI 3.0 and earlier allows remote attackers to read arbitrary files via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.synck.com/blogs/news/weblog_1420694040.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000006 - http://jvn.jp/en/jp/JVN88559134/index.html
CVE ID: CVE-2015-0868 State: PUBLISHED Published: 2015-02-01T15:00:00 Last Updated: 2024-08-06T04:26:11.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Mrs. Shiromuku Perl CGI shiromuku(bu2)BBS before 2.91 allows remote attackers to execute arbitrary code by uploading an executable file. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000008 - http://jvn.jp/en/jp/JVN94502417/index.html - http://www.t-okada.com/cgi-bin/sb2_data/sb2_data_news.cgi?action=data_list&cat=16#495
CVE ID: CVE-2015-0869 State: PUBLISHED Published: 2015-02-01T15:00:00 Last Updated: 2024-08-06T04:26:11.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: I-O DATA DEVICE NP-BBRM routers allow remote attackers to cause a denial of service (SSDP reflection) via UPnP requests. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN27142693/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000009 - http://www.iodata.jp/support/information/2015/np-bbrm/
CVE ID: CVE-2015-0870 State: PUBLISHED Published: 2015-02-01T02:00:00 Last Updated: 2024-08-06T04:26:11.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in hb.cgi in Nishishi Factory Fumy News Clipper 2.x before 2.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.nishishi.com/cgi/newsclip/20150130.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000010 - http://jvn.jp/en/jp/JVN33735535/index.html - http://jvn.jp/en/jp/JVN33735535/995592/index.html
CVE ID: CVE-2015-0871 State: PUBLISHED Published: 2015-02-07T15:00:00 Last Updated: 2024-08-06T04:26:11.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mrs. Shiromuku Perl CGI shiromuku(u1)GUESTBOOK 1.62 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN17480391/995116/index.html - http://jvn.jp/en/jp/JVN17480391/index.html
CVE ID: CVE-2015-0872 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-0873 State: PUBLISHED Published: 2015-02-13T02:00:00 Last Updated: 2024-08-06T04:26:11.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Homepage Decorator PerlTreeBBS 2.30 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN96155055/index.html
CVE ID: CVE-2015-0874 State: PUBLISHED Published: 2017-09-26T14:00:00 Last Updated: 2024-08-06T04:26:10.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smartphone Passbook 1.0.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information from encrypted communications via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72597 - http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000015.html - http://jvn.jp/en/jp/JVN14522790/index.html
CVE ID: CVE-2015-0875 State: PUBLISHED Published: 2015-02-15T02:00:00 Last Updated: 2024-08-06T04:26:11.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ogaki Kyoritsu Bank Smartphone Passbook application 1.0.0 for Android creates a log file containing input data from the user, which allows attackers to obtain sensitive information by reading a file. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000016 - http://jvn.jp/en/jp/JVN48659722/index.html - http://www.okb.co.jp/okdirect/sp_passbook/information01.html
CVE ID: CVE-2015-0876 State: PUBLISHED Published: 2015-04-07T01:00:00 Last Updated: 2024-08-06T04:26:11.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the print_language_selectbox function in classes/adminpage.inc.php in Saurus CMS Community Edition before 4.7 2015-02-04 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000017 - http://jvn.jp/en/jp/JVN18387086/index.html - https://github.com/sauruscms/Saurus-CMS-Community-Edition/commit/1bc272874a86eaab99dccd00b29177423fd83877
CVE ID: CVE-2015-0877 State: PUBLISHED Published: 2015-04-06T01:00:00 Last Updated: 2024-08-06T04:26:11.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in app/lib/mlf.pl in C-BOARD Moyuku before 1.03b3 allows remote attackers to execute arbitrary code by uploading a file with a \0 character in its name. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000018 - http://sourceforge.jp/projects/cb-moyuku/news/ - http://jvn.jp/en/jp/JVN73261710/index.html
CVE ID: CVE-2015-0878 State: PUBLISHED Published: 2015-02-20T11:00:00 Last Updated: 2024-08-06T04:26:11.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files via a crafted filename of an attachment. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN77294617/index.html - http://www.almail.com/vulnerability.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000020
CVE ID: CVE-2015-0879 State: PUBLISHED Published: 2015-02-20T11:00:00 Last Updated: 2024-08-06T04:26:11.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service (application crash) via a (1) CON, (2) AUX, or (3) NUL device name in the filename of an attachment. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN55365709/index.html - http://www.almail.com/vulnerability.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000021
CVE ID: CVE-2015-0880 State: PUBLISHED Published: 2015-02-20T11:00:00 Last Updated: 2024-08-06T04:26:11.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CREAR AL-Mail32 before 1.13d allows remote attackers to execute arbitrary code via a long filename of an attachment. Additional Analyst Notes: - CVE Program Container: References: - http://www.almail.com/vulnerability.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000022 - http://jvn.jp/en/jp/JVN93318392/index.html
CVE ID: CVE-2015-0881 State: PUBLISHED Published: 2015-02-20T11:00:00 Last Updated: 2024-08-06T04:26:11.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted header in a response. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000019 - http://jvn.jp/en/jp/JVN64455813/index.html
CVE ID: CVE-2015-0882 State: PUBLISHED Published: 2015-02-27T02:00:00 Last Updated: 2024-08-06T04:26:11.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in zencart-ja (aka Zen Cart Japanese edition) 1.3 jp through 1.3.0.2 jp8 and 1.5 ja through 1.5.1 ja allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to admin/includes/init_includes/init_sanitize.php and includes/init_includes/init_sanitize.php. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN44544694/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000027 - http://jvn.jp/en/jp/JVN44544694/
p://jvn.jp/en/jp/JVN44544694/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000027 - http://jvn.jp/en/jp/JVN44544694/281242/index.html - https://github.com/zencart-ja/zc-v1-series/commit/022949bd09444d7e58703cc537dbbd5744c381b8
CVE ID: CVE-2015-0883 State: PUBLISHED Published: 2015-02-27T02:00:00 Last Updated: 2024-08-06T04:26:11.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5, when the mailauth module is enabled, does not properly send e-mail messages, which allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN30135729/index.html - http://www.synck.com/blogs/news/weblog_1424791052.html - http://jvn.jp/en/jp/JVN30135729/995637/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000026
CVE ID: CVE-2015-0884 State: PUBLISHED Published: 2015-02-28T02:00:00 Last Updated: 2024-08-06T04:26:11.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character. Additional Analyst Notes: - CVE Program Container: References: - http://www.support.toshiba.com/sscontent?contentId=4007187 - http://www.securitytracker.com/id/1031825 - http://www.support.toshiba.com/sscontent?contentId=4007185 - http://www
87 - http://www.securitytracker.com/id/1031825 - http://www.support.toshiba.com/sscontent?contentId=4007185 - http://www.kb.cert.org/vuls/id/632140 - http://jvn.jp/vu/JVNVU99205169/index.html
CVE ID: CVE-2015-0885 State: PUBLISHED Published: 2015-02-28T02:00:00 Last Updated: 2024-08-06T04:26:11.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a username. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN34790526/index.html - http://jvn.jp/en/jp/JVN34790526/995575/index.html - http://www.debian.org/security/2015/dsa-3192 - http://checkpw.sourceforge.net/checkpw/changes.txt - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000032
CVE ID: CVE-2015-0886 State: PUBLISHED Published: 2015-02-28T02:00:00 Last Updated: 2024-08-06T04:26:11.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151786.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151496.html - http://jvn.jp/en/jp/JVN77718330/index
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151496.html - http://jvn.jp/en/jp/JVN77718330/index.html - http://www.mindrot.org/projects/jBCrypt/news/rel04.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151797.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000033 - https://bugzilla.mindrot.org/show_bug.cgi?id=2097 - https://lists.apache.org/thread.html/rd5c2256b8dc9935e4bb5e9be90adce58408054bb42523730a40c5548%40%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/re330cfe9e5d84e3f7da8ace23ec32f38cb3fbd328bf177badd7ad942%40%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/rbd23e3ac8113b4da0a025c0e451
bf177badd7ad942%40%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/rbd23e3ac8113b4da0a025c0e45170b6ec317383a1cf06090c2c717aa%40%3Ccommits.cassandra.apache.org%3E
CVE ID: CVE-2015-0887 State: PUBLISHED Published: 2015-02-28T02:00:00 Last Updated: 2024-08-06T04:26:11.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: npppd in the PPP Access Concentrator (PPPAC) on SEIL SEIL/x86 Fuji routers 1.00 through 3.30, SEIL/X1 routers 3.50 through 4.70, SEIL/X2 routers 3.50 through 4.70, and SEIL/B1 routers 3.50 through 4.70 allows remote attackers to cause a denial of service (infinite loop and device hang) via a crafted SSTP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.seil.jp/support/security/a01541.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000031 - http://jvn.jp/en/jp/JVN63949115/index.html
CVE ID: CVE-2015-0888 State: PUBLISHED Published: 2015-02-28T02:00:00 Last Updated: 2024-08-06T04:26:11.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: KENT-WEB Clip Board before 4.1 allows remote attackers to delete arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000028 - http://jvn.jp/en/jp/JVN62298871/index.html - http://www.kent-web.com/bbs/clipbbs.html
CVE ID: CVE-2015-0889 State: PUBLISHED Published: 2015-02-28T02:00:00 Last Updated: 2024-08-06T04:26:11.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: KENT-WEB Joyful Note before 5.3 allows remote attackers to delete files or write to files, and consequently execute arbitrary code, via vectors involving an article. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000024 - http://www.kent-web.com/bbs/joyful.html - http://jvn.jp/en/jp/JVN88862608/index.html
CVE ID: CVE-2015-0890 State: PUBLISHED Published: 2015-03-03T11:00:00 Last Updated: 2024-08-06T04:26:11.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BestWebSoft Google Captcha (aka reCAPTCHA) plugin before 1.13 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000030 - https://wordpress.org/plugins/google-captcha/changelog/ - http://jvn.jp/en/jp/JVN55063777/index.html
CVE ID: CVE-2015-0891 State: PUBLISHED Published: 2015-03-05T01:00:00 Last Updated: 2024-08-06T04:26:11.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Simple Board allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000034 - http://jvn.jp/en/jp/JVN63687798/index.html - http://jvn.jp/en/jp/JVN63687798/995638/index.html
CVE ID: CVE-2015-0892 State: PUBLISHED Published: 2015-03-05T01:00:00 Last Updated: 2024-08-06T04:26:11.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Image Album allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN09871547/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000035 - http://jvn.jp/en/jp/JVN09871547/995638/index.html
CVE ID: CVE-2015-0893 State: PUBLISHED Published: 2015-03-05T01:00:00 Last Updated: 2024-08-06T04:26:11.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Relay Novel allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN91016415/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2015-000036 - http://jvn.jp/en/jp/JVN91016415/995638/index.html