Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
nce/2015-12/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html - http://www.debian.org/security/2016/dsa-3432 - http://www.securityfocus.com/bid/79279 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html - https://security.gentoo.org/glsa/201512-10 - https://bugzilla.mozilla.org/show_bug.cgi?id=1206211 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.o
-12/msg00049.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html - http://www.ubuntu.com/usn/USN-2859-1 - http://www.mozilla.org/security/announce/2015/mfsa2015-146.html - http://www.ubuntu.com/usn/USN-2833-1 - http://rhn.redhat.com/errata/RHSA-2015-2657.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html - http://www.secur
2/msg00007.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html - http://www.securitytracker.com/id/1034426 - http://www.debian.org/security/2015/dsa-3422
CVE ID: CVE-2015-7214 State: PUBLISHED Published: 2015-12-16T11:00:00 Last Updated: 2024-08-06T07:43:46.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy via data: and view-source: URIs. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2015/mfsa2015-149.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html - http://www.debian.org/security/2016/dsa-3432 - https://bugzilla.mozilla.org/show_bug.cgi?id=12289
015-12/msg00038.html - http://www.debian.org/security/2016/dsa-3432 - https://bugzilla.mozilla.org/show_bug.cgi?id=1228950 - http://www.securityfocus.com/bid/79279 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html - https://security.gentoo.org/glsa/201512-10 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html - http://lists.fedoraproject.or
noct2015-2719645.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html - http://www.ubuntu.com/usn/USN-2859-1 - http://www.ubuntu.com/usn/USN-2833-1 - http://rhn.redhat.com/errata/RHSA-2015-2657.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html - http://www.securitytracker.com/id/1034426 - http://www.debian.org/security/2015/dsa-3422
CVE ID: CVE-2015-7215 State: PUBLISHED Published: 2015-12-16T11:00:00 Last Updated: 2024-08-06T07:43:45.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: The importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0 allows remote attackers to bypass the Same Origin Policy by triggering use of the no-cors mode in the fetch API to attempt resource access that throws an exception, leading to information disclosure after a rethrow. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1160890 - https://security.gentoo.org/glsa/201512-10 - http://lists.opensuse.org/opensuse-updates/2015-12/msg0
ug.cgi?id=1160890 - https://security.gentoo.org/glsa/201512-10 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html - https://www.w3.org/Bugs/Public/show_bug.cgi?id=28961 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html - https://github.com/whatwg/html/issues/164 - http://www.mozilla.org/security/announce/2015/mfsa2015-140.html - http://www.ubuntu.com/usn/USN-2833-1 - http://www.securityfocus.com/bid/79280 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html - https://github.com/whatwg/html/pull/166 - http://lists.fedoraproject.org/pipermail/package-announce/201
/msg00007.html - https://github.com/whatwg/html/pull/166 - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html - http://www.securitytracker.com/id/1034426
CVE ID: CVE-2015-7216 State: PUBLISHED Published: 2015-12-16T11:00:00 Last Updated: 2024-08-06T07:43:45.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the JasPer decoder, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG 2000 image. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201512-10 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html - http://lists.fedoraproject.org/
15-12/msg00104.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html - http://www.ubuntu.com/usn/USN-2833-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1197059 - http://www.mozilla.org/security/announce/2015/mfsa2015-143.html - http://www.securityfocus.com/bid/79278 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html - http://www.securitytracker.com/id/1034426
CVE ID: CVE-2015-7217 State: PUBLISHED Published: 2015-12-16T11:00:00 Last Updated: 2024-08-06T07:43:45.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted Truevision TGA image. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201512-10 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html - http://lists.fedoraproject.org/pipermail/p
104.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html - http://www.ubuntu.com/usn/USN-2833-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1203078 - http://www.mozilla.org/security/announce/2015/mfsa2015-143.html - http://www.securityfocus.com/bid/79278 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html - http://www.securitytracker.com/id/1034426
CVE ID: CVE-2015-7218 State: PUBLISHED Published: 2015-12-16T11:00:00 Last Updated: 2024-08-06T07:43:45.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer underflow, assertion failure, and application exit) via a single-byte header frame that triggers incorrect memory allocation. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201512-10 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1194818 - http://lists.opensuse.org/opensuse-updates/2016-02/msg0
04.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1194818 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html - http://www.mozilla.org/security/announce/2015/mfsa2015-142.html - http://www.ubuntu.com/usn/USN-2833-1 - http://www.securityfocus.com/bid/79280 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html - http://www.securitytracker.com/id/1034426
CVE ID: CVE-2015-7219 State: PUBLISHED Published: 2015-12-16T11:00:00 Last Updated: 2024-08-06T07:43:45.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a denial of service (integer underflow, assertion failure, and application exit) via a malformed PushPromise frame that triggers decompressed-buffer length miscalculation and incorrect memory allocation. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201512-10 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.h
ists.opensuse.org/opensuse-updates/2015-12/msg00104.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html - http://www.mozilla.org/security/announce/2015/mfsa2015-142.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1194820 - http://www.ubuntu.com/usn/USN-2833-1 - http://www.securityfocus.com/bid/79280 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html - http://www.securitytracker.com/id/1034426
CVE ID: CVE-2015-7220 State: PUBLISHED Published: 2015-12-16T11:00:00 Last Updated: 2024-08-06T07:43:45.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the XDRBuffer::grow function in js/src/vm/Xdr.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1178033 - http://www.mozilla.org/security/announce/2015/mfsa2015-144.html - https://security.gentoo.org/glsa/201512-10 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html - http:
- https://security.gentoo.org/glsa/201512-10 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html - http://www.ubuntu.com/usn/USN-2833-1 - https://hg.mozilla.org/mozilla-central/rev/e4b9e72f934f - http://www.securityfocus.com/bid/79280 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html - http://www.securitytracker.com/id/1034426
CVE ID: CVE-2015-7221 State: PUBLISHED Published: 2015-12-16T11:00:00 Last Updated: 2024-08-06T07:43:45.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the nsDeque::GrowCapacity function in xpcom/glue/nsDeque.cpp in Mozilla Firefox before 43.0 might allow remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a deque size change. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2015/mfsa2015-144.html - https://security.gentoo.org/glsa/201512-10 - https://bugzilla.mozilla.org/show_bug.cgi?id=1199400 - http://lists.opensuse.org/opensuse-updates/2015-12/msg0
1512-10 - https://bugzilla.mozilla.org/show_bug.cgi?id=1199400 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html - http://www.ubuntu.com/usn/USN-2833-1 - http://www.securityfocus.com/bid/79280 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html - https://hg.mozilla.org/mozilla-central/rev/7fd961937687 - http://www.securitytracker.com/id/1034426
CVE ID: CVE-2015-7222 State: PUBLISHED Published: 2015-12-16T11:00:00 Last Updated: 2024-08-06T07:43:45.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect memory allocation and application crash) via an MP4 video file with crafted covr metadata that triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html - http://lists.opensuse.org/o
: References: - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00038.html - http://www.securityfocus.com/bid/79279 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00022.html - https://security.gentoo.org/glsa/201512-10 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1216748 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00049.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html - http://lists.fe
y/linuxbulletinoct2015-2719645.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html - http://www.ubuntu.com/usn/USN-2833-1 - http://rhn.redhat.com/errata/RHSA-2015-2657.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00023.html - http://www.mozilla.org/security/announce/2015/mfsa2015-147.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html - http://www.securitytracker.com/id/1034426 - http://www.debian.org/security/2015/dsa-3422
CVE ID: CVE-2015-7223 State: PUBLISHED Published: 2015-12-16T11:00:00 Last Updated: 2024-08-06T07:43:45.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebExtension APIs in Mozilla Firefox before 43.0 allow remote attackers to gain privileges, and possibly obtain sensitive information or conduct cross-site scripting (XSS) attacks, via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201512-10 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.
opensuse-updates/2016-02/msg00008.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html - http://www.ubuntu.com/usn/USN-2833-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1226423 - http://www.securityfocus.com/bid/79280 - http://www.mozilla.org/security/announce/2015/mfsa2015-148.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html - http://www.securitytracker.com/id/1034426
CVE ID: CVE-2015-7224 State: PUBLISHED Published: 2017-12-21T15:00:00 Last Updated: 2024-08-06T07:43:45.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'mysql_user' user parameter contains a host with a netmask. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2015-7224
CVE ID: CVE-2015-7225 State: PUBLISHED Published: 2017-09-06T21:00:00 Last Updated: 2024-08-06T07:43:45.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tinfoil Devise-two-factor before 2.0.0 does not strictly follow section 5.2 of RFC 6238 and does not "burn" a successfully validated one-time password (aka OTP), which allows remote or physically proximate attackers with a target user's login credentials to log in as said user by obtaining the OTP through performing a man-in-the-middle attack between the provider and verifier, or shoulder surfing, and replaying the OTP in the current time-step. Additional Analyst Notes: - CVE Program Container: References: - https://github.com
ng the OTP in the current time-step. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tinfoil/devise-two-factor/blob/master/UPGRADING.md - http://www.openwall.com/lists/oss-security/2015/09/17/2 - http://www.openwall.com/lists/oss-security/2015/06/20/4 - http://www.securityfocus.com/bid/76789 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=798466 - https://github.com/tinfoil/devise-two-factor/issues/45#issuecomment-139335608
CVE ID: CVE-2015-7226 State: PUBLISHED Published: 2015-09-17T16:00:00 Last Updated: 2024-08-06T07:43:45.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead of the display property, which allows remote attackers to obtain sensitive information via vectors related to the access handler. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2529366 - http://www.securityfocus.com/bid/75697 - https://www.drupal.org/node/2529378 - http://cgit.drupalcode.org/admin_views/commit/?id=44098bb
CVE ID: CVE-2015-7227 State: PUBLISHED Published: 2015-09-17T16:00:00Z Last Updated: 2024-09-17T04:24:18.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes by leveraging permissions to edit panels. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2561971 - https://www.drupal.org/node/2561981
CVE ID: CVE-2015-7228 State: PUBLISHED Published: 2015-09-17T16:00:00Z Last Updated: 2024-09-16T18:43:20.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RESTful module 7.x-1.x before 7.x-1.3 for Drupal does not properly cache pages of authenticated users when using non-cookie authentication providers, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2565875 - https://www.drupal.org/node/2565421
CVE ID: CVE-2015-7229 State: PUBLISHED Published: 2015-09-17T16:00:00Z Last Updated: 2024-09-16T20:43:27.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Twitter module 6.x-5.x before 6.x-5.2, 7.x-5.x before 7.x-5.9, and 7.x-6.x before 7.x-6.0 for Drupal does not properly check access permissions, which allows remote authenticated users to post tweets to arbitrary accounts by leveraging the (1) "post to twitter" permission or change the options for arbitrary attached accounts by leveraging the (2) "add twitter accounts" or (3) "add authenticated twitter accounts" permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/256582
ccounts" permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2565827 - https://www.drupal.org/node/2559981 - https://www.drupal.org/node/2559989 - https://www.drupal.org/node/2559985
CVE ID: CVE-2015-7230 State: PUBLISHED Published: 2015-09-17T16:00:00Z Last Updated: 2024-09-16T22:51:51.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Workbench Email module 7.x-3.x before 7.x-3.4 for Drupal allows remote authenticated users with certain permissions to bypass node and field validation by saving a node. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2553971 - https://www.drupal.org/node/2484229
CVE ID: CVE-2015-7231 State: PUBLISHED Published: 2015-09-17T16:00:00Z Last Updated: 2024-09-16T17:14:44.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Commerce Commonwealth (CBA) module 7.x-1.x before 7.x-1.5 for Drupal does not properly validate payments, which allows remote attackers to make a failed payment appear valid via a crafted URL, related to a "response from commweb." Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2541832 - https://www.drupal.org/node/2542380
CVE ID: CVE-2015-7232 State: PUBLISHED Published: 2015-09-17T16:00:00Z Last Updated: 2024-09-16T20:12:29.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in unspecified administration pages in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology module is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2537120 - https://www.drupal.org/node/2537860
CVE ID: CVE-2015-7233 State: PUBLISHED Published: 2015-09-17T16:00:00Z Last Updated: 2024-09-17T00:25:45.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Import module is enabled, allows remote attackers to hijack the authentication of administrators for requests that create new OSF datasets via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/node/2537120 - https://www.drupal.org/node/2537860
CVE ID: CVE-2015-7234 State: PUBLISHED Published: 2015-09-17T16:00:00Z Last Updated: 2024-09-17T01:26:30.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology and OSF Import modules are enabled, allows user-assisted remote attackers to delete arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cgit.drupalcode.org/osf/commit/?id=35c6e61 - https://www.drupal.org/node/2537120 - https://www.drupal.org/node/2537860
CVE ID: CVE-2015-7235 State: PUBLISHED Published: 2015-09-17T16:00:00 Last Updated: 2024-08-06T07:43:45.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in dex_reservations.php in the CP Reservation Calendar plugin before 1.1.7 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in a dex_reservations_calendar_load2 action or (2) dex_item parameter in a dex_reservations_check_posted_data action in a request to the default URI. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/cp-reservation-calendar/changelog/ - https://www.exploit-db.com/exploits/3818
eferences: - https://wordpress.org/plugins/cp-reservation-calendar/changelog/ - https://www.exploit-db.com/exploits/38187/ - https://plugins.trac.wordpress.org/changeset/1104099/cp-reservation-calendar - https://wpvulndb.com/vulnerabilities/8193