deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-4272
Published: 2015-07-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in the ccmivr page in Cisco Unified Communications Manager (formerly CallManager) 10.5(2.10000.5) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCut19580.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39905; http://www.securitytracker.com/id/1032888; http://tools.cisco.com/security/center/viewAlert.x?alertId=39905
CVE: CVE-2015-1560
Published: 2015-07-14
Description: SQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon web 2.7.0) allows remote attackers to execute arbitrary SQL commands via the sid parameter to include/common/XmlTree/GetXmlTree.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/132607/Merethis-Centreon-2.5.4-SQL-Injection-Remote-Command-Execution.html; http://www.securityfocus.com/archive/1/535961/100/0/threaded; https://forge.centreon.com/projects/centreon/repository/revisions/d14f213b9c60de1bad0b464fd6403c828cf12582
CVE: CVE-2015-1561
Published: 2015-07-14
Description: The escape_command function in include/Administration/corePerformance/getStats.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon 19.10.0) uses an incorrect regular expression, which allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ns_id parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: http://packetstormsecurity.com/files/132607/Merethis-Centreon-2.5.4-SQL-Injection-Remote-Command-Execution.html; http://www.securityfocus.com/archive/1/535961/100/0/threaded; https://forge.centreon.com/projects/centreon/repository/revisions/387dffdd051dbc7a234e1138a9d06f3089bb55bb
CVE: CVE-2015-3258
Published: 2015-07-14
Description: Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a small line size in a print job.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7363; http://lists.opensuse.org/opensuse-updates/2015-07/msg00033.html; http://rhn.redhat.com/errata/RHSA-2015-2360.html
CVE: CVE-2015-3279
Published: 2015-07-14
Description: Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7365; http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7366#NEWS; http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7369
CVE: CVE-2015-5147
Published: 2015-07-14
Description: Stack-based buffer overflow in the header_anchor function in the HTML renderer in Redcarpet before 3.3.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2015/06/29/3; http://www.openwall.com/lists/oss-security/2015/06/30/10; http://www.securityfocus.com/bid/75508
CVE: CVE-2015-5397
Published: 2015-07-14
Description: Cross-site request forgery (CSRF) vulnerability in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload code via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://developer.joomla.org/security-centre/[PII_REDACTED]2-core-remote-code-execution.html; http://www.securityfocus.com/bid/76495; http://www.securitytracker.com/id/1032796
CVE: CVE-2015-5519
Published: 2015-07-14
Description: Cross-site scripting (XSS) vulnerability in the applyConvolution demo in WideImage 11.02.19 allows remote attackers to inject arbitrary web script or HTML via the matrix parameter to demo/index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/132584/WideImage-11.02.19-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2015/Jul/30; http://sourceforge.net/p/wideimage/bugs/42/
CVE: CVE-2015-5520
Published: 2015-07-14
Description: Cross-site scripting (XSS) vulnerability in the Users module in Orchard 1.7.3 through 1.8.2 and 1.9.x before 1.9.1 allows remote attackers to inject arbitrary web script or HTML via the username when creating a new user account, which is not properly handled when deleting an account.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://docs.orchardproject.net/Documentation/Patch-20150630; http://packetstormsecurity.com/files/132583/Orchard-CMS-1.9.0-1.8.2-1.7.3-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2015/Jul/32
CVE: CVE-2015-5521
Published: 2015-07-14
Description: Cross-site scripting (XSS) vulnerability in BlackCat CMS 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the name in a new group to backend/groups/index.php.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/132589/Black-Cat-CMS-1.1.2-Cross-Site-Scripting.html; https://github.com/BlackCatDevelopment/BlackCatCMS/issues/408; http://packetstormsecurity.com/files/132589/Black-Cat-CMS-1.1.2-Cross-Site-Scripting.html
CVE: CVE-2015-1927
Published: 2015-07-14
Description: The default configuration of IBM WebSphere Application Server (WAS) 7.0.0 before 7.0.0.39, 8.0.0 before 8.0.0.11, and 8.5 before 8.5.5.6 has a false value for the com.ibm.ws.webcontainer.disallowServeServletsByClassname WebContainer property, which allows remote attackers to obtain privileged access via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI31622; http://www-01.ibm.com/support/docview.wss?uid=swg21959083; http://www-01.ibm.com/support/docview.wss?uid=swg21963275
CVE: CVE-2015-1936
Published: 2015-07-14
Description: The administrative console in IBM WebSphere Application Server (WAS) 8.0.0 before 8.0.0.11 and 8.5 before 8.5.5.6, when the Security feature is disabled, allows remote authenticated users to hijack sessions via the JSESSIONID parameter.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-284
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI37230; http://www-01.ibm.com/support/docview.wss?uid=swg21959083; http://www.securityfocus.com/bid/75480
CVE: CVE-2015-1946
Published: 2015-07-14
Description: IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.6, and WebSphere Virtual Enterprise 7.0 before 7.0.0.6 for WebSphere Application Server (WAS) 7.0 and 8.0, does not properly implement user roles, which allows local users to gain privileges via unspecified vectors.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI35180; http://www-01.ibm.com/support/docview.wss?uid=swg21959083; http://www.securityfocus.com/bid/75496
CVE: CVE-2015-3007
Published: 2015-07-14
Description: The Juniper SRX Series services gateways with Junos OS 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 do not properly implement the "set system ports console insecure" feature, which allows physically proximate attackers to gain administrative privileges by leveraging access to the console port.
CVSS Score: 7.2 (HIGH)
CWE: CWE-284
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10683; http://www.securitytracker.com/id/1032841; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10683
CVE: CVE-2015-4268
Published: 2015-07-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Infra Admin UI in Cisco Identity Services Engine (ISE) 1.2(1.198) and 1.3(0.876) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug ID CSCus16052.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39873; http://www.securitytracker.com/id/1032889; http://tools.cisco.com/security/center/viewAlert.x?alertId=39873
CVE: CVE-2015-4270
Published: 2015-07-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSIGHT System Software 5.3.1.5 and 6.0.0 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuv22557, CSCuv22583, CSCuv22632, CSCuv22641, CSCuv22650, CSCuv22662, CSCuv22697, and CSCuv22702.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=39879; http://www.securitytracker.com/id/1032887; http://tools.cisco.com/security/center/viewAlert.x?alertId=39879
CVE: CVE-2015-5143
Published: 2015-07-14
Description: The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172084.html; http://lists.opensuse.org/opensuse-updates/2015-10/msg00043.html; http://lists.opensuse.org/opensuse-updates/2015-10/msg00046.html
CVE: CVE-2015-5144
Published: 2015-07-14
Description: Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172084.html; http://lists.opensuse.org/opensuse-updates/2015-10/msg00043.html; http://lists.opensuse.org/opensuse-updates/2015-10/msg00046.html
CVE: CVE-2015-5145
Published: 2015-07-14
Description: validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/75691; http://www.securitytracker.com/id/1032820; https://security.gentoo.org/glsa/201510-06
CVE: CVE-2015-5358
Published: 2015-07-14
Description: Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D35, 13.2X52 before 13.2X52-D25, 13.3 before 13.3R6, 14.1R3 before 14.1R3-S2, 14.1 before 14.1R4, 14.1X53 before 14.1X53-D12, 14.1X53 before 14.1X53-D16, 14.1X55 before 14.1X55-D25, 14.2 before 14.2R2, and 15.1 before 15.1R1 allows remote attackers to cause a denial of service (mbuf and connection consumption and restart) via a large number of requests that trigger a TCP connection to move to the LAST_ACK state when there is more data to send.
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-009.txt.asc; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10686; http://www.securitytracker.com/id/1032842
CVE: CVE-2015-5359
Published: 2015-07-14
Description: Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D10, 13.2 before 13.2R7, 13.3 before 13.3R5, 14.1R3 before 14.1R3-S2, 14.1 before 14.1R4, 14.2 before 14.2R2, and 15.1 before 15.1R1 allows remote attackers to cause a denial of service (NULL pointer dereference and RDP crash) via a large number of BGP-VPLS advertisements with updated BGP local preference values.
CVSS Score: 7.1 (HIGH)
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10687; http://www.securitytracker.com/id/1032843; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10687
CVE: CVE-2015-5362
Published: 2015-07-14
Description: The BFD daemon in Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R8, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.1X50 before 14.1X50-D85, 14.1X55 before 14.1X55-D20, 14.2 before 14.2R3, 15.1 before 15.1R1, and 15.1X49 before 15.1X49-D10 allows remote attackers to cause a denial of service (bfdd crash and restart) or execute arbitrary code via a crafted BFD packet.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10690; http://www.securitytracker.com/id/1032844; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10690
CVE: CVE-2015-1729
Published: 2015-07-14
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-1733
Published: 2015-07-14
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2389 and CVE-2015-2411.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-1738
Published: 2015-07-14
Description: Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2388.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-1767
Published: 2015-07-14
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2401 and CVE-2015-2408.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; http://www.zerodayinitiative.com/advisories/ZDI-15-568; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065
CVE: CVE-2015-2361
Published: 2015-07-14
Description: Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 does not properly initialize guest OS system data structures, which allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (buffer overflow) by leveraging guest OS privileges, aka "Hyper-V Buffer Overflow Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032897; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-068; http://www.securitytracker.com/id/1032897
CVE: CVE-2015-2362
Published: 2015-07-14
Description: Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly initialize guest OS system data structures, which allows guest OS users to execute arbitrary code on the host OS by leveraging guest OS privileges, aka "Hyper-V System Data Structure Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-254
References: http://www.securitytracker.com/id/1032897; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-068; http://www.securitytracker.com/id/1032897
CVE: CVE-2015-2368
Published: 2015-07-14
Description: Untrusted search path vulnerability in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Windows DLL Remote Code Execution Vulnerability."
CVSS Score: 6.9 (MEDIUM)
References: http://www.securitytracker.com/id/1032898; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-069; http://www.securitytracker.com/id/1032898
CVE: CVE-2015-2369
Published: 2015-07-14
Description: Untrusted search path vulnerability in Windows Media Device Manager in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rtf file, aka "DLL Planting Remote Code Execution Vulnerability."
CVSS Score: 6.9 (MEDIUM)
References: http://www.securitytracker.com/id/1032898; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-069; http://www.securitytracker.com/id/1032898
CVE: CVE-2015-2372
Published: 2015-07-14
Description: vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "VBScript Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; http://www.securitytracker.com/id/1032895; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065
CVE: CVE-2015-2373
Published: 2015-07-14
Description: The Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a series of crafted packets, aka "Remote Desktop Protocol (RDP) Remote Code Execution Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-19
References: http://www.securitytracker.com/id/1032896; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-067; http://www.securitytracker.com/id/1032896
CVE: CVE-2015-2374
Published: 2015-07-14
Description: The Netlogon service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2 does not properly implement domain-controller communication, which allows remote attackers to discover credentials by leveraging certain PDC access and spoofing the BDC role in a PDC communication channel, aka "Elevation of Privilege Vulnerability in Netlogon."
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/75633; http://www.securitytracker.com/id/1032900; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-071
CVE: CVE-2015-2375
Published: 2015-07-14
Description: Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to bypass the ASLR protection mechanism via a crafted spreadsheet, aka "Microsoft Excel ASLR Bypass Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1032899; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070; http://www.securitytracker.com/id/1032899
CVE: CVE-2015-2376
Published: 2015-07-14
Description: Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032899; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070; http://www.securitytracker.com/id/1032899
CVE: CVE-2015-2377
Published: 2015-07-14
Description: Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032899; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070; http://www.securitytracker.com/id/1032899
CVE: CVE-2015-2378
Published: 2015-07-14
Description: Untrusted search path vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel Viewer 2007 SP3, and Office Compatibility Pack SP3 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Microsoft Excel DLL Remote Code Execution Vulnerability."
CVSS Score: 6.9 (MEDIUM)
References: http://www.securitytracker.com/id/1032899; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070; http://www.securitytracker.com/id/1032899
CVE: CVE-2015-2379
Published: 2015-07-14
Description: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032899; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070; http://www.securitytracker.com/id/1032899
CVE: CVE-2015-2380
Published: 2015-07-14
Description: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, and Word 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032899; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070; http://www.securitytracker.com/id/1032899
CVE: CVE-2015-2383
Published: 2015-07-14
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2384 and CVE-2015-2425.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2384
Published: 2015-07-14
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2383 and CVE-2015-2425.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894