deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-1331
Published: 2015-08-12
Description: lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-59
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html; http://lists.opensuse.org/opensuse-updates/2015-07/msg00066.html; http://www.debian.org/security/2015/dsa-3317
CVE: CVE-2015-1334
Published: 2015-08-12
Description: attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape AppArmor or SELinux confinement by mounting a proc filesystem with a crafted (1) AppArmor profile or (2) SELinux label.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-17
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html; http://lists.opensuse.org/opensuse-updates/2015-07/msg00066.html; http://lists.opensuse.org/opensuse-updates/2015-07/msg00067.html
CVE: CVE-2015-1867
Published: 2015-08-12
Description: Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170610.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169671.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169995.html
CVE: CVE-2015-2058
Published: 2015-08-12
Description: c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2015/02/09/13; http://www.openwall.com/lists/oss-security/2015/02/23/25; http://www.securityfocus.com/bid/72731
CVE: CVE-2015-2059
Published: 2015-08-12
Description: The stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=2e97c279; http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162537.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162549.html
CVE: CVE-2015-3184
Published: 2015-08-12
Description: mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00003.html; http://lists.opensuse.org/opensuse-updates/2015-08/msg00022.html; http://rhn.redhat.com/errata/RHSA-2015-1742.html
CVE: CVE-2015-3187
Published: 2015-08-12
Description: The svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00003.html; http://lists.opensuse.org/opensuse-updates/2015-08/msg00022.html; http://rhn.redhat.com/errata/RHSA-2015-1633.html
CVE: CVE-2015-3213
Published: 2015-08-12
Description: The gesture handling code in Clutter before 1.16.2 allows physically proximate attackers to bypass the lock screen via certain (1) mouse or (2) touch gestures.
CVSS Score: 7.2 (HIGH)
CWE: CWE-284
References: http://rhn.redhat.com/errata/RHSA-2015-1510.html; https://bugzilla.gnome.org/show_bug.cgi?id=710227; https://bugzilla.gnome.org/show_bug.cgi?id=749847
CVE: CVE-2015-3282
Published: 2015-08-12
Description: vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.debian.org/security/2015/dsa-3320; http://www.openafs.org/pages/security/OPENAFS-SA-2015-001.txt; http://www.securitytracker.com/id/1033262
CVE: CVE-2015-3283
Published: 2015-08-12
Description: OpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.debian.org/security/2015/dsa-3320; http://www.openafs.org/pages/security/OPENAFS-SA-2015-002.txt; http://www.securitytracker.com/id/1033262
CVE: CVE-2015-3284
Published: 2015-08-12
Description: pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted commands.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www.debian.org/security/2015/dsa-3320; http://www.openafs.org/pages/security/OPENAFS-SA-2015-003.txt; http://www.securitytracker.com/id/1033262
CVE: CVE-2015-3285
Published: 2015-08-12
Description: The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service (memory corruption and kernel panic) via a crafted OSD FS command.
CVSS Score: 2.1 (LOW)
CWE: CWE-119
References: http://www.debian.org/security/2015/dsa-3320; http://www.openafs.org/pages/security/OPENAFS-SA-2015-004.txt; http://www.securitytracker.com/id/1033262
CVE: CVE-2015-3286
Published: 2015-08-12
Description: Buffer overflow in the Solaris kernel extension in OpenAFS before 1.6.13 allows local users to cause a denial of service (panic or deadlock) or possibly have other unspecified impact via a large group list when joining a PAG.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-119
References: http://www.openafs.org/pages/security/OPENAFS-SA-2015-005.txt; http://www.securitytracker.com/id/1033262; https://lists.openafs.org/pipermail/openafs-announce/2015/000486.html
CVE: CVE-2015-3287
Published: 2015-08-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2015-6587.  Reason: This candidate is a duplicate of CVE-2015-6587.  Notes: All CVE users should reference CVE-2015-6587 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2015-3908
Published: 2015-08-12
Description: Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-345
References: http://lists.opensuse.org/opensuse-updates/2015-07/msg00051.html; http://lists.opensuse.org/opensuse-updates/2015-08/msg00029.html; http://www.ansible.com/security
CVE: CVE-2015-5154
Published: 2015-08-12
Description: Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163472.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163658.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163681.html
CVE: CVE-2015-5165
Published: 2015-08-12
Description: The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-908
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165373.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167792.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167820.html
CVE: CVE-2015-5166
Published: 2015-08-12
Description: Use-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated block devices, which allows local HVM guest users to gain privileges by unplugging a block device twice.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165373.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167792.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167820.html
CVE: CVE-2015-5718
Published: 2015-08-12
Description: Stack-based buffer overflow in the handle_debug_network function in the manager in Websense Content Gateway before 8.0.0 HF02 allows remote administrators to cause a denial of service (crash) via a crafted diagnostic command line request to submit_net_debug.cgi.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-119
References: http://packetstormsecurity.com/files/132968/Websense-Triton-Content-Manager-8.0.0-Build-1165-Buffer-Overflow.html; http://seclists.org/fulldisclosure/2015/Aug/8; http://www.securityfocus.com/archive/1/536138/100/0/threaded
CVE: CVE-2015-2321
Published: 2015-08-13
Description: Cross-site scripting (XSS) vulnerability in the Job Manager plugin 0.7.22 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the email field.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/132931/WordPress-Job-Manager-0.7.22-Cross-Site-Scripting.html; https://wpvulndb.com/vulnerabilities/8129; https://www.exploit-db.com/exploits/37738/
CVE: CVE-2015-3253
Published: 2015-08-13
Description: The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: http://groovy-lang.org/security.html; http://packetstormsecurity.com/files/132714/Apache-Groovy-2.4.3-Code-Execution.html; http://rhn.redhat.com/errata/RHSA-2016-0066.html
CVE: CVE-2015-4665
Published: 2015-08-13
Description: Cross-site scripting (XSS) vulnerability in ajax_cmd.php in Xceedium Xsuite 2.4.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the fileName parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/132809/Xceedium-Xsuite-Command-Injection-XSS-Traversal-Escalation.html; http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt; https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html
CVE: CVE-2015-4666
Published: 2015-08-13
Description: Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attackers to read arbitrary files via a ....// (quadruple dot double slash) in the logFile parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/132809/Xceedium-Xsuite-Command-Injection-XSS-Traversal-Escalation.html; http://www.modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt; https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html
CVE: CVE-2015-5474
Published: 2015-08-13
Description: BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (1) bittorrent or (2) magnet protocol.
CVSS Score: 9.3 (HIGH)
CWE: CWE-77
References: http://www.zerodayinitiative.com/advisories/ZDI-15-358/; http://www.zerodayinitiative.com/advisories/ZDI-15-358/
CVE: CVE-2015-5535
Published: 2015-08-13
Description: Cross-site scripting (XSS) vulnerability in the qTranslate plugin 2.5.39 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the qtranslate page to wp-admin/options-general.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/132916/WordPress-qTranslate-2.5.39-Cross-Site-Scripting.html; http://www.securityfocus.com/archive/1/536102/100/0/threaded; https://wpvulndb.com/vulnerabilities/8120
CVE: CVE-2015-5536
Published: 2015-08-13
Description: Belkin N300 Dual-Band Wi-Fi Range Extender with firmware before 1.04.10 allows remote authenticated users to execute arbitrary commands via the (1) sub_dir parameter in a formUSBStorage request; pinCode parameter in a (2) formWpsStart or (3) formiNICWpsStart request; (4) wps_enrolee_pin parameter in a formWlanSetupWPS request; or unspecified parameters in a (5) formWlanMP, (6) formBSSetSitesurvey, (7) formHwSet, or (8) formConnectionSetting request.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://www.belkin.com/us/support-article?articleNum=4975; http://www.securityfocus.com/bid/75978; http://www.securitytracker.com/id/1033295
CVE: CVE-2015-5685
Published: 2015-08-13
Description: The lazy_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht ) allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.zerodayinitiative.com/advisories/ZDI-15-366/; http://www.zerodayinitiative.com/advisories/ZDI-15-367/; https://github.com/bittorrent/bootstrap-dht/commit/e809ea80e3527e32c40756eddd8b2ae44bc3af1a
CVE: CVE-2015-5125
Published: 2015-08-14
Description: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://www.securityfocus.com/bid/76291; http://www.securitytracker.com/id/1033235
CVE: CVE-2015-5127
Published: 2015-08-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76288
CVE: CVE-2015-5129
Published: 2015-08-14
Description: Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5541.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76282
CVE: CVE-2015-5130
Published: 2015-08-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76288
CVE: CVE-2015-5131
Published: 2015-08-14
Description: Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5132 and CVE-2015-5133.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76284
CVE: CVE-2015-5132
Published: 2015-08-14
Description: Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5133.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76284
CVE: CVE-2015-5133
Published: 2015-08-14
Description: Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5132.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76284
CVE: CVE-2015-5134
Published: 2015-08-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76288
CVE: CVE-2015-5539
Published: 2015-08-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76288
CVE: CVE-2015-5540
Published: 2015-08-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76288
CVE: CVE-2015-5541
Published: 2015-08-14
Description: Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5129.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76282
CVE: CVE-2015-5544
Published: 2015-08-14
Description: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76283
CVE: CVE-2015-5545
Published: 2015-08-14
Description: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76283
CVE: CVE-2015-5546
Published: 2015-08-14
Description: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76283
CVE: CVE-2015-5547
Published: 2015-08-14
Description: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76283