Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-1459 State: PUBLISHED Published: 2015-02-03T16:00:00 Last Updated: 2024-08-06T04:40:18.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator 3.0.0 allows remote attackers to inject arbitrary web script or HTML via the operation parameter to cert/scep/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100561 - http://secunia.com/advisories/62836 - http://packetstormsecurity.com/files/130156/Fortinet-FortiAuthenticator-XSS-Disclosure-Bypass.html - http://www.securityfocus.com/bid/72378 - http://www.fortiguard.com/advisory/FG-IR-
nticator-XSS-Disclosure-Bypass.html - http://www.securityfocus.com/bid/72378 - http://www.fortiguard.com/advisory/FG-IR-15-003/ - http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiAuthenticator_Multiple_Vulnerabilities.pdf
CVE ID: CVE-2015-1460 State: PUBLISHED Published: 2015-02-03T16:00:00Z Last Updated: 2024-09-17T03:17:29.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei Quidway switches with firmware before V200R005C00SPC300 allows remote attackers to gain privileges via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-411975.htm
CVE ID: CVE-2015-1461 State: PUBLISHED Published: 2015-02-03T16:00:00 Last Updated: 2024-08-06T04:40:18.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted (1) Yoda's crypter or (2) mew packer file, related to a "heap out of bounds condition." Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201512-08 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00014.html - http://securitytracker.com/id/1031672 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148950.html - http://blog.clamav.net/2015/01/clamav-0986-has
s.fedoraproject.org/pipermail/package-announce/2015-January/148950.html - http://blog.clamav.net/2015/01/clamav-0986-has-been-released.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00020.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148958.html - http://secunia.com/advisories/62536
CVE ID: CVE-2015-1462 State: PUBLISHED Published: 2015-02-03T16:00:00 Last Updated: 2024-08-06T04:47:16.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upx packer file, related to a "heap out of bounds condition." Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201512-08 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00014.html - http://securitytracker.com/id/1031672 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148950.html - http://blog.clamav.net/2015/01/clamav-0986-has-been-released.html - http
ail/package-announce/2015-January/148950.html - http://blog.clamav.net/2015/01/clamav-0986-has-been-released.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00020.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148958.html - http://secunia.com/advisories/62536
CVE ID: CVE-2015-1463 State: PUBLISHED Published: 2015-02-03T16:00:00 Last Updated: 2024-08-06T04:47:16.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClamAV before 0.98.6 allows remote attackers to cause a denial of service (crash) via a crafted petite packer file, related to an "incorrect compiler optimization." Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201512-08 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00014.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148950.html - http://blog.clamav.net/2015/01/clamav-0986-has-been-released.html - http://lists.opensuse.org/o
15-January/148950.html - http://blog.clamav.net/2015/01/clamav-0986-has-been-released.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00020.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148958.html
CVE ID: CVE-2015-1464 State: PUBLISHED Published: 2015-03-09T14:00:00 Last Updated: 2024-08-06T04:47:16.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL. Additional Analyst Notes: - CVE Program Container: References: - http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html - http://www.debian.org/security/2015/dsa-3176 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154047.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154213.html
CVE ID: CVE-2015-1465 State: PUBLISHED Published: 2015-04-05T21:00:00 Last Updated: 2024-08-06T04:47:15.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence of caching, which allows remote attackers to cause a denial of service (memory consumption or system crash) via a flood of packets. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html - http://www.ubuntu.com/usn/USN-2562-1 - http://lists.opensuse.org/opensuse-securi
curity-announce/2015-09/msg00009.html - http://www.ubuntu.com/usn/USN-2562-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html - http://www.ubuntu.com/usn/USN-2546-1 - http://www.ubuntu.com/usn/USN-2563-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html - http://www.securitytracker.com/id/1036763 - http://www.openwall.com/lists/oss-security/2015/02/03/13 - https://bugzilla.redhat.com/show_bug.cgi?id=1183744 - http://www.ubuntu.com/usn/USN-2545-1 - https://github.com/torvalds/linux/commit/df4d92549f23e1c037e83323aff58a21b3de7fe0 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=df4d92549f23e1c037e83323aff58
b3de7fe0 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=df4d92549f23e1c037e83323aff58a21b3de7fe0 - http://www.securityfocus.com/bid/72435 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.8
CVE ID: CVE-2015-1467 State: PUBLISHED Published: 2015-02-06T15:00:00 Last Updated: 2024-08-06T04:47:16.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Translations in Fork CMS before 3.8.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) language[] or (2) type[] parameter to private/en/locale/index. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/534616/100/0/threaded - http://www.fork-cms.com/blog/detail/fork-3.8.6-released - https://exchange.xforce.ibmcloud.com/vulnerabilities/100668 - http://packetstormsecurity.com/files/130242/Fork-CMS-3.8.5-SQL
s://exchange.xforce.ibmcloud.com/vulnerabilities/100668 - http://packetstormsecurity.com/files/130242/Fork-CMS-3.8.5-SQL-Injection.html
CVE ID: CVE-2015-1469 State: PUBLISHED Published: 2015-02-03T22:00:00Z Last Updated: 2024-09-17T04:08:53.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: time.htm in the web interface on SerVision HVG Video Gateway devices with firmware through 2.2.26a100 allows remote authenticated users to gain privileges by leveraging a cookie received in an HTTP response, a different vulnerability than CVE-2015-0929 and CVE-2015-0930. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/522460
CVE ID: CVE-2015-1471 State: PUBLISHED Published: 2015-02-12T16:00:00 Last Updated: 2024-08-06T04:47:16.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://sroesemann.blogspot.de/2015/02/advisory-for-sroeadv-2015-11.html - http://seclists.org/fulldisclosure/2015/Feb/18 - https://github.com/delta/pragyan/issues/206 - http://sroesemann.blogspot.de/2015/01/sroeadv-2015-11.html - http://seclists.org/oss-sec/2015/q1/402 - https://github.com/delta
sroesemann.blogspot.de/2015/01/sroeadv-2015-11.html - http://seclists.org/oss-sec/2015/q1/402 - https://github.com/delta/pragyan/commit/c93bc100ec93fc78940fbdca9b6b009101858309 - http://pastebin.com/ip2gGYuS
CVE ID: CVE-2015-1472 State: PUBLISHED Published: 2015-04-08T10:00:00 Last Updated: 2024-08-06T04:47:15.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during memory allocation, which allows context-dependent attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long line containing wide characters that are improperly handled in a wscanf call. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - https:/
E Program Container: References: - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - https://security.gentoo.org/glsa/201602-02 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.ubuntu.com/usn/USN-2519-1 - http://www.securityfocus.com/bid/72428 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commit%3Bh=5bd80bfe9ca0d955bfbbc002781bc7b01b6bcb06 - https://sourceware.org/ml/libc-alpha/2015-02/msg00119.html - http://openwall.com/lists/oss-security/2015/02/04/1 - http://seclists.org/fulldisclosure/2019/Jun/18 - https://seclists.org/bugtraq/2019/Jun/14 - http://packetstormsecurity.com/files/153278/WAGO-852-Industri
e/2019/Jun/18 - https://seclists.org/bugtraq/2019/Jun/14 - http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html - http://seclists.org/fulldisclosure/2019/Sep/7 - https://seclists.org/bugtraq/2019/Sep/7 - http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html
CVE ID: CVE-2015-1473 State: PUBLISHED Published: 2015-04-08T10:00:00 Last Updated: 2024-08-06T04:47:16.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during a risk-management decision for use of the alloca function, which might allow context-dependent attackers to cause a denial of service (segmentation violation) or overwrite memory locations beyond the stack boundary via a long line containing wide characters that are improperly handled in a wscanf call. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.c
mproperly handled in a wscanf call. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.ubuntu.com/usn/USN-2519-1 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commit%3Bh=5bd80bfe9ca0d955bfbbc002781bc7b01b6bcb06 - http://www.securityfocus.com/bid/72499 - http://openwall.com/lists/oss-security/2015/02/04/1
CVE ID: CVE-2015-1474 State: PUBLISHED Published: 2015-02-16T00:00:00 Last Updated: 2024-08-06T04:47:16.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp in Android through 5.0 allow attackers to gain privileges or cause a denial of service (memory corruption) via vectors that trigger a large number of (1) file descriptors or (2) integer values. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72788 - http://seclists.org/fulldisclosure/2015/Mar/63 - https://android.googlesource.com/platform/frameworks/native
bid/72788 - http://seclists.org/fulldisclosure/2015/Mar/63 - https://android.googlesource.com/platform/frameworks/native/+/38803268570f90e97452cd9a30ac831661829091 - http://www.securitytracker.com/id/1031875 - http://packetstormsecurity.com/files/130778/Google-Android-Integer-Oveflow-Heap-Corruption.html - https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf
CVE ID: CVE-2015-1475 State: PUBLISHED Published: 2015-02-04T16:00:00 Last Updated: 2024-08-06T04:47:15.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) category parameter to forum.php or the (3) page or (4) order parameter to (a) board_entry.php or (b) forum_entry.php. Additional Analyst Notes: - CVE Program Container: References: - http://tetraph.com/security/xss-vulnerability/my-little-forum-multiple-xss-security-vulnerabilities/ - http://packetstormsecurity.com/files/130220/My-Little-Forum-2.3.3-2.2
tle-forum-multiple-xss-security-vulnerabilities/ - http://packetstormsecurity.com/files/130220/My-Little-Forum-2.3.3-2.2-1.7-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2015/Feb/15 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100616
CVE ID: CVE-2015-1476 State: PUBLISHED Published: 2015-02-04T16:00:00Z Last Updated: 2024-09-16T18:33:39.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to execute arbitrary SQL commands via the (1) productbycat parameter to product.php, or (2) username or (3) password parameter to __admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/35878 - http://packetstormsecurity.com/files/130073/ecommerceMajor-SQL-Injection.html - http://osvdb.org/show/osvdb/117569 - http://osvdb.org/show/osvdb/117570
CVE ID: CVE-2015-1477 State: PUBLISHED Published: 2015-02-04T16:00:00Z Last Updated: 2024-09-16T19:04:45.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewad task to classifieds/offerring-ads. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130093/JClassifiedsManager-Cross-Site-Scripting-SQL-Injection.html - http://osvdb.org/show/osvdb/117567 - http://www.exploit-db.com/exploits/35911
CVE ID: CVE-2015-1478 State: PUBLISHED Published: 2015-02-04T16:00:00Z Last Updated: 2024-09-17T00:26:21.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the view parameter to /classifieds. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130093/JClassifiedsManager-Cross-Site-Scripting-SQL-Injection.html - http://www.exploit-db.com/exploits/35911 - http://osvdb.org/show/osvdb/117568
CVE ID: CVE-2015-1479 State: PUBLISHED Published: 2015-02-04T16:00:00Z Last Updated: 2024-09-16T18:13:11.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to execute arbitrary SQL commands via the site parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130079/ManageEngine-ServiceDesk-9.0-SQL-Injection.html - http://www.exploit-db.com/exploits/35890 - http://www.rewterz.com/vulnerabilities/manageengine-servicedesk-sql-injection-vulnerability - http://www.secur
s/35890 - http://www.rewterz.com/vulnerabilities/manageengine-servicedesk-sql-injection-vulnerability - http://www.securityfocus.com/bid/72299 - http://www.manageengine.com/products/service-desk/readme-9.0.html
CVE ID: CVE-2015-1480 State: PUBLISHED Published: 2015-02-04T16:00:00 Last Updated: 2024-08-06T04:47:16.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to obtain sensitive ticket information via a (1) getTicketData action to servlet/AJaxServlet or a direct request to (2) swf/flashreport.swf, (3) reports/flash/details.jsp, or (4) reports/CreateReportTable.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/117499 - http://www.exploit-db.com/exploits/35904 - http://www.securityfocus.com/bid/72302 - http://www.securityfocus.com/archive/1/
p://www.exploit-db.com/exploits/35904 - http://www.securityfocus.com/bid/72302 - http://www.securityfocus.com/archive/1/534538/100/0/threaded - http://www.rewterz.com/vulnerabilities/manageengine-servicedesk-plus-user-privileges-management-vulnerability - http://packetstormsecurity.com/files/130081/ManageEngine-ServiceDesk-Plus-9.0-Privilege-Escalation.html - http://www.manageengine.com/products/service-desk/readme-9.0.html
CVE ID: CVE-2015-1481 State: PUBLISHED Published: 2015-02-04T18:00:00 Last Updated: 2024-08-06T04:47:16.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ansible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to gain privileges by creating a superuser account. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129944/Ansible-Tower-2.0.2-XSS-Privilege-Escalation-Authentication-Missing.html - http://www.securityfocus.com/archive/1/534464/100/0/threaded - http://seclists.org/fulldisclosure/2015/Jan/52 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150113-1_Ansible-Tower_mu
closure/2015/Jan/52 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150113-1_Ansible-Tower_multiple-vulnerabilities_v10.txt - http://www.exploit-db.com/exploits/35786
CVE ID: CVE-2015-1482 State: PUBLISHED Published: 2015-02-04T18:00:00 Last Updated: 2024-08-06T04:47:16.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ansible Tower (aka Ansible UI) before 2.0.5 allows remote attackers to bypass authentication and obtain sensitive information via a websocket connection to socket.io/1/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/129944/Ansible-Tower-2.0.2-XSS-Privilege-Escalation-Authentication-Missing.html - http://www.securityfocus.com/archive/1/534464/100/0/threaded - http://seclists.org/fulldisclosure/2015/Jan/52 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories
ed - http://seclists.org/fulldisclosure/2015/Jan/52 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150113-1_Ansible-Tower_multiple-vulnerabilities_v10.txt - http://www.exploit-db.com/exploits/35786
CVE ID: CVE-2015-1483 State: PUBLISHED Published: 2015-03-06T02:00:00 Last Updated: 2024-08-06T04:47:16.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec NetBackup OpsCenter 7.6.0.2 through 7.6.1 on Linux and UNIX allows remote attackers to execute arbitrary JavaScript code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150302_00 - http://www.securitytracker.com/id/1031831 - http://www.securityfocus.com/bid/72737
CVE ID: CVE-2015-1484 State: PUBLISHED Published: 2015-04-22T10:00:00 Last Updated: 2024-08-06T04:47:17.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming (SWS) 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032133 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvi
ytracker.com/id/1032133 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150410_00 - http://www.securityfocus.com/bid/73925
CVE ID: CVE-2015-1485 State: PUBLISHED Published: 2015-06-28T19:00:00 Last Updated: 2024-08-06T04:47:17.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allows remote attackers to hijack the authentication of administrators. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032710 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150622_00 - http://www.securityfocus.com/bid/75289
CVE ID: CVE-2015-1486 State: PUBLISHED Published: 2015-08-01T01:00:00 Last Updated: 2024-08-06T04:47:16.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authentication via a crafted password-reset action that triggers a new administrative session. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37812/ - http://www.securityfocus.com/bid/76074 - http://www.securitytracker.com/id/1033165 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory
3165 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
CVE ID: CVE-2015-1487 State: PUBLISHED Published: 2015-08-01T01:00:00 Last Updated: 2024-08-06T04:47:17.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to arbitrary files, and consequently obtain administrator privileges, via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37812/ - http://www.securityfocus.com/bid/76094 - http://www.securitytracker.com/id/1033165 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_
m/id/1033165 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
CVE ID: CVE-2015-1488 State: PUBLISHED Published: 2015-08-01T01:00:00 Last Updated: 2024-08-06T04:47:16.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified action handler in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76077 - http://www.securitytracker.com/id/1033165 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00