deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-4155
Published: 2015-06-02
Description: GNU Parallel before 20150422, when using (1) --pipe, (2) --tmux, (3) --cat, (4) --fifo, or (5) --compress, allows local users to write to arbitrary files via a symlink attack on a temporary file.
CVSS Score: 3.6 (LOW)
CWE: CWE-59
References: http://lists.gnu.org/archive/html/parallel/2015-04/msg00045.html; http://lists.gnu.org/archive/html/parallel/2015-05/msg00024.html; http://www.securityfocus.com/bid/74962
CVE: CVE-2015-4156
Published: 2015-06-02
Description: GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file.
CVSS Score: 3.6 (LOW)
CWE: CWE-59
References: http://lists.gnu.org/archive/html/parallel/2015-04/msg00045.html; http://lists.gnu.org/archive/html/parallel/2015-05/msg00024.html; http://lists.opensuse.org/opensuse-updates/2015-05/msg00090.html
CVE: CVE-2015-4157
Published: 2015-06-02
Description: SAP Content Server allows remote attackers to cause a denial of service (service termination) via unspecified vectors, aka SAP Security Note 2127995.
CVSS Score: 5.0 (MEDIUM)
References: http://seclists.org/fulldisclosure/2015/May/96; http://www.securityfocus.com/bid/74805; http://seclists.org/fulldisclosure/2015/May/96
CVE: CVE-2015-4158
Published: 2015-06-02
Description: SAP ABAP & Java Server allows remote attackers to cause a denial of service (service termination) via unspecified vectors, aka SAP Security Note 2121661.
CVSS Score: 5.0 (MEDIUM)
References: http://seclists.org/fulldisclosure/2015/May/96; http://www.securityfocus.com/bid/74799; http://seclists.org/fulldisclosure/2015/May/96
CVE: CVE-2015-4159
Published: 2015-06-02
Description: SQL injection vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes 2153892.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2015/May/96; http://www.securityfocus.com/bid/74802; http://seclists.org/fulldisclosure/2015/May/96
CVE: CVE-2015-4160
Published: 2015-06-02
Description: SQL injection vulnerability in SAP ASE Database Platform allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes: 2152278.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2015/May/96; http://www.securityfocus.com/bid/74798; http://seclists.org/fulldisclosure/2015/May/96
CVE: CVE-2015-4161
Published: 2015-06-02
Description: SAP Afaria does not properly restrict access to unspecified functionality, which allows remote attackers to obtain sensitive information, gain privileges, or have other unspecified impact via unknown vectors, SAP Security Note 2155690.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://seclists.org/fulldisclosure/2015/May/96; http://www.securityfocus.com/bid/74800; http://seclists.org/fulldisclosure/2015/May/96
CVE: CVE-2015-4162
Published: 2015-06-02
Description: XML external entity (XXE) vulnerability in the management interface in PAN-OS before 5.0.16, 6.x before 6.0.8, and 6.1.x before 6.1.4 allows remote authenticated administrators to obtain sensitive information via crafted XML data.
CVSS Score: 4.0 (MEDIUM)
References: http://www.securityfocus.com/bid/74941; https://security.paloaltonetworks.com/CVE-2015-4162; http://www.securityfocus.com/bid/74941
CVE: CVE-2014-9721
Published: 2015-06-03
Description: libzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade attacks and bypass ZMTP v3 protocol security mechanisms via a ZMTP v2 or earlier header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159176.html; http://lists.opensuse.org/opensuse-updates/2015-06/msg00018.html; http://www.debian.org/security/2015/dsa-3255
CVE: CVE-2015-0263
Published: 2015-06-03
Description: XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.
CVSS Score: 5.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2015-1041.html; http://rhn.redhat.com/errata/RHSA-2015-1538.html; http://rhn.redhat.com/errata/RHSA-2015-1539.html
CVE: CVE-2015-0264
Published: 2015-06-03
Description: Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML (1) String or (2) GenericFile object in an XPath query.
CVSS Score: 5.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2015-1041.html; http://rhn.redhat.com/errata/RHSA-2015-1538.html; http://rhn.redhat.com/errata/RHSA-2015-1539.html
CVE: CVE-2015-4038
Published: 2015-06-03
Description: The WP Membership plugin 1.2.3 for WordPress allows remote authenticated users to gain administrator privileges via an iv_membership_update_user_settings action to wp-admin/admin-ajax.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://packetstormsecurity.com/files/132012/WordPress-WP-Membership-1.2.3-Privilege-Escalation.html; http://www.securityfocus.com/archive/1/535587/100/0/threaded; http://www.securityfocus.com/archive/1/535652/100/0/threaded
CVE: CVE-2015-4103
Published: 2015-06-03
Description: Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local x86 HVM guest administrators to cause a denial of service (host interrupt handling confusion) via vectors related to qemu and accessing spanning multiple fields.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160154.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160171.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html
CVE: CVE-2015-4104
Published: 2015-06-03
Description: Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users to cause a denial of service (unexpected interrupt and host crash) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160154.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160171.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html
CVE: CVE-2015-4105
Published: 2015-06-03
Description: Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows local x86 HVM guests to cause a denial of service (host disk consumption) via certain invalid operations.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160154.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160171.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html
CVE: CVE-2015-4106
Published: 2015-06-03
Description: QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-863
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160154.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160171.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html
CVE: CVE-2015-0760
Published: 2015-06-04
Description: The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1 packets, aka Bug ID CSCus47259.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20, CWE-264
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39157; http://www.securitytracker.com/id/1032473; http://tools.cisco.com/security/center/viewAlert.x?alertId=39157
CVE: CVE-2015-0761
Published: 2015-06-04
Description: Cisco AnyConnect Secure Mobility Client before 3.1(8009) and 4.x before 4.0(2052) on Linux does not properly implement unspecified internal functions, which allows local users to obtain root privileges via crafted vpnagent options, aka Bug ID CSCus86790.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39158; http://www.securityfocus.com/bid/74954; http://www.securitytracker.com/id/1032472
CVE: CVE-2015-0762
Published: 2015-06-04
Description: Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) for Microsoft Outlook allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCuu51400.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39161; http://www.securitytracker.com/id/1032470; http://tools.cisco.com/security/center/viewAlert.x?alertId=39161
CVE: CVE-2015-0763
Published: 2015-06-04
Description: Cisco Unified MeetingPlace 8.6(1.2) does not properly validate session IDs in http URLs, which allows remote attackers to obtain sensitive session information via a crafted URL, aka Bug ID CSCuu60338.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39162; http://www.securitytracker.com/id/1032471; http://tools.cisco.com/security/center/viewAlert.x?alertId=39162
CVE: CVE-2015-0764
Published: 2015-06-04
Description: Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via a crafted resource request, aka Bug ID CSCus95603.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39163; http://www.securitytracker.com/id/1032481; http://tools.cisco.com/security/center/viewAlert.x?alertId=39163
CVE: CVE-2015-0765
Published: 2015-06-04
Description: Cisco ONS 15454 System Software 10.30 and 10.301 allows remote attackers to cause a denial of service (tNetTask CPU consumption or card reset) via a flood of (1) IP or (2) Ethernet traffic, aka Bug ID CSCus57263.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39172; http://www.securitytracker.com/id/1032483; http://tools.cisco.com/security/center/viewAlert.x?alertId=39172
CVE: CVE-2015-0766
Published: 2015-06-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in the Management Center component in Cisco FireSIGHT System Software 6.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug IDs CSCus93566, CSCut31557, and CSCut47196.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39171; http://www.securitytracker.com/id/1032482; http://tools.cisco.com/security/center/viewAlert.x?alertId=39171
CVE: CVE-2014-9201
Published: 2015-06-05
Description: Beckwith Electric M-6200 Digital Voltage Regulator Control with firmware before D-0198V04.07.00, M-6200A Digital Voltage Regulator Control with firmware before D-0228V02.01.07, M-2001D Digital Tapchanger Control with firmware before D-0214V01.10.04, M-6283A Three Phase Digital Capacitor Bank Control with firmware before D-0346V03.00.02, M-6280A Digital Capacitor Bank Control with firmware before D-0254V03.05.05, and M-6280 Digital Capacitor Bank Control do not properly generate TCP initial sequence number (ISN) values, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-153-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-153-01
CVE: CVE-2015-0541
Published: 2015-06-05
Description: Cross-site request forgery (CSRF) vulnerability in EMC RSA Web Threat Detection before 5.1 allows remote attackers to hijack the authentication of arbitrary users.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://seclists.org/bugtraq/2015/Jun/18; http://www.securitytracker.com/id/1032477; http://seclists.org/bugtraq/2015/Jun/18
CVE: CVE-2015-1000
Published: 2015-06-05
Description: Stack-based buffer overflow in the OpenForIPCamTest method in the RTSPVIDEO.rtspvideoCtrl.1 (aka SStreamVideo) ActiveX control in Moxa SoftCMS before 1.3 allows remote attackers to execute arbitrary code via the StrRtspPath parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/74966; http://zerodayinitiative.com/advisories/ZDI-15-120/; https://ics-cert.us-cert.gov/advisories/ICSA-15-153-02
CVE: CVE-2015-2124
Published: 2015-06-05
Description: Unspecified vulnerability in Easy Setup Wizard in HP ThinPro Linux 4.1 through 5.1 and Smart Zero Core 4.3 and 4.4 allows local users to bypass intended access restrictions and gain privileges via unknown vectors.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/bid/74897; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04692275; http://www.securityfocus.com/bid/74897
CVE: CVE-2015-2950
Published: 2015-06-05
Description: Directory traversal vulnerability in the Brandon Bowles Open Explorer application before 0.254 Beta for Android allows remote attackers to write to arbitrary files via a crafted filename.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://jvn.jp/en/jp/JVN95246510/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000072; http://www.securityfocus.com/bid/75022
CVE: CVE-2015-2951
Published: 2015-06-05
Description: JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via crafted tokens.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN06120222/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000073; http://www.securityfocus.com/bid/75021
CVE: CVE-2015-3950
Published: 2015-06-05
Description: Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/bid/75032; https://ics-cert.us-cert.gov/advisories/ICSA-15-155-01; http://www.securityfocus.com/bid/75032
CVE: CVE-2014-6175
Published: 2015-06-07
Description: Cross-site scripting (XSS) vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715; http://www-01.ibm.com/support/docview.wss?uid=swg1PO03923; http://www-01.ibm.com/support/docview.wss?uid=swg1PO04455
CVE: CVE-2014-6222
Published: 2015-06-07
Description: Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715; http://www-01.ibm.com/support/docview.wss?uid=swg1PO03923; http://www-01.ibm.com/support/docview.wss?uid=swg1PO04455
CVE: CVE-2014-8887
Published: 2015-06-07
Description: IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to upload arbitrary GIFAR files, and consequently modify data, via unspecified vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715; http://www-01.ibm.com/support/docview.wss?uid=swg1PO03923; http://www-01.ibm.com/support/docview.wss?uid=swg1PO04455
CVE: CVE-2015-0112
Published: 2015-06-07
Description: Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1, 4.x before 4.0.7 IF5, and 5.x before 5.0.2 IF4; Rational Quality Manager (RQM) 2.0 through 2.0.1, 3.0 through 3.0.1.6, 4.0 through 4.0.7, and 5.0 through 5.0.2; Rational Team Concert (RTC) 2.0 through 2.0.0.2, 3.x before 3.0.1.6 IF6, 4.x before 4.0.7 IF5, and 5.x before 5.0.2 IF4; Rational Requirements Composer (RRC) 2.0 through 2.0.0.4, 3.x before 3.0.1.6 IF6, and 4.0 through 4.0.7; Rational DOORS Next Generation (RDNG) 4.x before 4.0.7 IF5 and 5.x before 5.0.2 IF4; Rational Engineering Lifecycle Manager (RELM) 1.0 through 1.0.0.1, 4.0.3 through 4.0.7, and 5.0 through 5.0.2; Rational Rhapsody Design Manager (DM) 3.0 through 3.0.1, 4.0 through 4.0.7, and 5.0 through 5.0.2; and Rational Software Architect Design Manager (RSA DM) 3.0 through 3.0.1, 4.0 through 4.0.7, and 5.0 through 5.0.2 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 4.0 (MEDIUM)
References: http://www-01.ibm.com/support/docview.wss?uid=swg21957763; http://www-01.ibm.com/support/docview.wss?uid=swg21957763
CVE: CVE-2015-0767
Published: 2015-06-07
Description: Cisco Edge 300 software 1.0 and 1.1 on Edge 340 devices allows local users to obtain root privileges via unspecified commands, aka Bug ID CSCur18132.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39187; http://tools.cisco.com/security/center/viewAlert.x?alertId=39187
CVE: CVE-2015-0770
Published: 2015-06-07
Description: CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20, CWE-93
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39210; http://www.securitytracker.com/id/1032511; http://tools.cisco.com/security/center/viewAlert.x?alertId=39210
CVE: CVE-2015-2125
Published: 2015-06-07
Description: Unspecified vulnerability in HP WebInspect 7.x through 10.4 before 10.4 update 1 allows remote authenticated users to bypass intended access restrictions via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-611
References: http://www.securityfocus.com/bid/75036; http://www.securitytracker.com/id/1032478; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04695307
CVE: CVE-2010-5323
Published: 2015-06-07
Description: Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a crafted WAR pathname in the filename parameter in conjunction with WAR content in the POST data, a different vulnerability than CVE-2010-5324.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/16784/; http://www.zerodayinitiative.com/advisories/ZDI-10-078/; https://bugzilla.novell.com/show_bug.cgi?id=578911
CVE: CVE-2010-5324
Published: 2015-06-07
Description: Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a zenworks-fileupload request with a crafted directory name in the type parameter, in conjunction with a WAR filename in the filename parameter and WAR content in the POST data, a different vulnerability than CVE-2010-5323.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://tucanalamigo.blogspot.com/2010/04/pdc-de-zdi-10-078.html; http://www.securityfocus.com/bid/39114; http://www.zerodayinitiative.com/advisories/ZDI-10-078/
CVE: CVE-2014-0230
Published: 2015-06-07
Description: Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://mail-archives.apache.org/mod_mbox/tomcat-announce/201505.mbox/%3C554949D1.8030904%40apache.org%3E; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1440&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5029&w=2
CVE: CVE-2014-7810
Published: 2015-06-07
Description: The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5029&w=2; http://rhn.redhat.com/errata/RHSA-2015-1621.html; http://rhn.redhat.com/errata/RHSA-2015-1622.html
CVE: CVE-2015-0779
Published: 2015-06-07
Description: Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid parameter, in conjunction with a WAR filename in the filename parameter and WAR content in the POST data, a different vulnerability than CVE-2010-5323 and CVE-2010-5324.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2015/Apr/21; https://github.com/rapid7/metasploit-framework/pull/5096; https://raw.githubusercontent.com/pedrib/PoC/master/generic/zenworks_zcm_rce.txt
CVE: CVE-2015-4001
Published: 2015-06-07
Description: Integer signedness error in the oz_hcd_get_desc_cnf function in drivers/staging/ozwpan/ozhcd.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted packet.
CVSS Score: 9.0 (HIGH)
CWE: CWE-189
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b1bb5b49373b61bf9d2c73a4d30058ba6f069e4c; http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html; http://openwall.com/lists/oss-security/2015/06/05/7
CVE: CVE-2015-4002
Published: 2015-06-07
Description: drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does not ensure that certain length values are sufficiently large, which allows remote attackers to cause a denial of service (system crash or large loop) or possibly execute arbitrary code via a crafted packet, related to the (1) oz_usb_rx and (2) oz_usb_handle_ep_data functions.
CVSS Score: 9.0 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9a59029bc218b48eff8b5d4dde5662fd79d3e1a8; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d114b9fe78c8d6fc6e70808c2092aa307c36dc8e; http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html
CVE: CVE-2015-4003
Published: 2015-06-07
Description: The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and system crash) via a crafted packet.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04bf464a5dfd9ade0dda918e44366c2c61fce80b; http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html; http://openwall.com/lists/oss-security/2015/06/05/7