deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-2766
Published: 2015-03-27
Description: The Personal Email Manager (PEM) in Websense TRITON AP-EMAIL before 8.0.0 allows attackers to have unspecified impact via a brute force attack.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://www.securityfocus.com/bid/73426; http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0; http://www.securityfocus.com/bid/73426
CVE: CVE-2015-2767
Published: 2015-03-27
Description: Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to "Autocomplete Enabled."
CVSS Score: 10.0 (HIGH)
References: http://www.securityfocus.com/bid/73418; http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0; http://www.securityfocus.com/bid/73418
CVE: CVE-2015-2768
Published: 2015-03-27
Description: Cross-site scripting (XSS) vulnerability in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/73429; http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0; http://www.securityfocus.com/bid/73429
CVE: CVE-2015-2769
Published: 2015-03-27
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Personal Email Manager (PEM) in Websense TRITON AP-EMAIL before 8.0.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0; http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0
CVE: CVE-2015-2770
Published: 2015-03-27
Description: Cross-site request forgery (CSRF) vulnerability in the command line page in Websense TRITON V-Series appliances before 8.0.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0; http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0
CVE: CVE-2015-2771
Published: 2015-03-27
Description: The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/73428; http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0; http://www.securityfocus.com/bid/73428
CVE: CVE-2015-2772
Published: 2015-03-27
Description: SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to upload arbitrary files via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/73439; http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0; http://www.securityfocus.com/bid/73439
CVE: CVE-2015-2773
Published: 2015-03-27
Description: SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to read arbitrary files via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/73406; http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0; http://www.securityfocus.com/bid/73406
CVE: CVE-2015-0658
Published: 2015-03-28
Description: The DHCP implementation in the PowerOn Auto Provisioning (POAP) feature in Cisco NX-OS does not properly restrict the initialization process, which allows remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network, aka Bug ID CSCur14589.
CVSS Score: 7.9 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=38062; http://www.securitytracker.com/id/1031992; http://tools.cisco.com/security/center/viewAlert.x?alertId=38062
CVE: CVE-2015-0679
Published: 2015-03-28
Description: The web-authentication functionality on Cisco Wireless LAN Controller (WLC) devices 7.3(103.8) and 7.4(110.0) allows remote attackers to cause a denial of service (device reload) via a malformed password, aka Bug ID CSCui57980.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=38076; http://www.securitytracker.com/id/1031990; http://tools.cisco.com/security/center/viewAlert.x?alertId=38076
CVE: CVE-2015-0680
Published: 2015-03-28
Description: Cisco Unified Call Manager (CM) 9.1(2.1000.28) does not properly restrict resource requests, which allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuq44439.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=38079; http://www.securitytracker.com/id/1031991; http://tools.cisco.com/security/center/viewAlert.x?alertId=38079
CVE: CVE-2014-5427
Published: 2015-03-29
Description: Johnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server (ADS), Extended Application and Data Server (aka ADX), LonWorks Control Server 85 LCS8520, Network Automation Engine (NAE) 55xx-x, Network Integration Engine (NIE) 5xxx-x, and NxE8500, allows remote attackers to read password hashes via a POST request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: https://ics-cert.us-cert.gov/advisories/ICSA-14-350-02; https://ics-cert.us-cert.gov/advisories/ICSA-14-350-02
CVE: CVE-2014-5428
Published: 2015-03-29
Description: Unrestricted file upload vulnerability in unspecified web services in Johnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server (ADS), Extended Application and Data Server (aka ADX), LonWorks Control Server 85 LCS8520, Network Automation Engine (NAE) 55xx-x, Network Integration Engine (NIE) 5xxx-x, and NxE8500, allows remote attackers to execute arbitrary code by uploading a shell script.
CVSS Score: 10.0 (HIGH)
References: https://ics-cert.us-cert.gov/advisories/ICSA-14-350-02; https://ics-cert.us-cert.gov/advisories/ICSA-14-350-02
CVE: CVE-2014-9205
Published: 2015-03-29
Description: Stack-based buffer overflow in the PmBase64Decode function in an unspecified demonstration application in MICROSYS PROMOTIC stable before 8.2.19 and PROMOTIC development before 8.3.2 allows remote attackers to execute arbitrary code by providing a large amount of data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.promotic.eu/en/pmdoc/News.htm; http://www.zerodayinitiative.com/advisories/ZDI-15-091/; https://ics-cert.us-cert.gov/advisories/ICSA-15-062-01
CVE: CVE-2015-0528
Published: 2015-03-29
Description: The RPC daemon in EMC Isilon OneFS 6.5.x and 7.0.x before 7.0.2.13, 7.1.0 before 7.1.0.6, 7.1.1 before 7.1.1.2, and 7.2.0 before 7.2.0.1 allows local users to gain privileges by leveraging an ability to modify system files.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/131035/EMC-Isilon-OneFS-Privilege-Escalation.html; http://seclists.org/bugtraq/2015/Mar/162; http://packetstormsecurity.com/files/131035/EMC-Isilon-OneFS-Privilege-Escalation.html
CVE: CVE-2015-0996
Published: 2015-03-29
Description: Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 rely on a hardcoded cleartext password to control read access to Project files and Project Configuration files, which makes it easier for local users to obtain sensitive information by discovering this password.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-054-01; http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-054-02; https://ics-cert.us-cert.gov/advisories/ICSA-15-085-01
CVE: CVE-2015-0997
Published: 2015-03-29
Description: Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 provide an HMI user interface that lists all valid usernames, which makes it easier for remote attackers to obtain access via a brute-force password-guessing attack.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-054-01; http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-054-02; https://ics-cert.us-cert.gov/advisories/ICSA-15-085-01
CVE: CVE-2015-0998
Published: 2015-03-29
Description: Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 transmit cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-054-01; http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-054-02; https://ics-cert.us-cert.gov/advisories/ICSA-15-085-01
CVE: CVE-2015-0999
Published: 2015-03-29
Description: Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 store cleartext OPC User credentials in a configuration file, which allows local users to obtain sensitive information by reading this file.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-054-01; http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-054-02; https://ics-cert.us-cert.gov/advisories/ICSA-15-085-01
CVE: CVE-2013-7437
Published: 2015-03-29
Description: Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-updates/2015-11/msg00034.html; http://www.openwall.com/lists/oss-security/2015/02/06/12; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778646
CVE: CVE-2013-7438
Published: 2015-03-29
Description: Multiple buffer overflows in pbm212030 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PBM image, related to (1) stream line data, which triggers a heap-based buffer overflow, or (2) vectors related to an "internal intermediate heap-based buffer."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2015/02/06/8; https://bugzilla.redhat.com/show_bug.cgi?id=908430; https://bugzilla.redhat.com/show_bug.cgi?id=908432
CVE: CVE-2015-2785
Published: 2015-03-29
Description: The GIF encoder in Byzanz allows remote attackers to cause a denial of service (out-of-bounds heap write and crash) or possibly execute arbitrary code via a crafted Byzanz debug data recording (ByzanzRecording file) to the byzanz-playback command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2015/02/06/11; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778261; https://bugzilla.redhat.com/show_bug.cgi?id=852481
CVE: CVE-2015-2786
Published: 2015-03-29
Description: Unspecified vulnerability in MyBB (aka MyBulletinBoard) before 1.8.4 has unknown attack vectors related to "Group join request notifications sent to wrong group leaders."
CVSS Score: 10.0 (HIGH)
References: http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/; http://www.securityfocus.com/bid/73394; http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/
CVE: CVE-2013-6501
Published: 2015-03-30
Description: The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-74
References: http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html; http://www.oracle.com/technetwork/topics/security/bulletinjul2[PII_REDACTED].html; http://www.securityfocus.com/bid/72530
CVE: CVE-2014-9652
Published: 2015-03-30
Description: The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which might allow remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://bugs.gw.com/view.php?id=398; http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html
CVE: CVE-2014-9653
Published: 2015-03-30
Description: readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://bugs.gw.com/view.php?id=409; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8601&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1375&w=2
CVE: CVE-2014-9705
Published: 2015-03-30
Description: Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html; http://lists.opensuse.org/opensuse-updates/2015-04/msg00002.html
CVE: CVE-2014-9709
Published: 2015-03-30
Description: The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://advisories.mageia.org/MGASA-2015-0040.html; http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html
CVE: CVE-2015-0273
Published: 2015-03-30
Description: Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function.
CVSS Score: 7.5 (HIGH)
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=71335e6ebabc1b12c057d8017fd811892ecdfd24; http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
CVE: CVE-2015-1351
Published: 2015-03-30
Description: Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=777c39f4042327eac4b63c7ee87dc1c7a09a3115; http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html; http://openwall.com/lists/oss-security/2015/01/24/9
CVE: CVE-2015-1352
Published: 2015-03-30
Description: The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate token extraction for table names, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name.
CVSS Score: 5.0 (MEDIUM)
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=124fb22a13fafa3648e4e15b4f207c7096d8155e; http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1434&w=2
CVE: CVE-2015-1353
Published: 2015-03-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it cannot be considered a security issue in the originally named product because of that product's specification.  Notes: none
CVE: CVE-2015-2301
Published: 2015-03-30
Description: Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of an existing file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=b2cf3f064b8f5efef89bb084521b61318c71781b; http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html
CVE: CVE-2015-2305
Published: 2015-03-30
Description: Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: http://blog.clamav.net/2015/04/clamav-0987-has-been-released.html; http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html
CVE: CVE-2015-2331
Published: 2015-03-30
Description: Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ZIP archive that contains many entries, leading to a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=ef8fc4b53d92fbfcd8ef1abbd6f2f5fe2c4a11e5; http://hg.nih.at/libzip/rev/9f11d54f692e; http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
CVE: CVE-2015-2348
Published: 2015-03-30
Description: The move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 truncates a pathname upon encountering a \x00 character, which allows remote attackers to bypass intended extension restrictions and create files with unexpected names via a crafted second argument.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=1291d6bbee93b6109eb07e8f7916ff1b7fcc13e1; http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html
CVE: CVE-2015-2787
Published: 2015-03-30
Description: Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages use of the unset function within an __wakeup function, a related issue to CVE-2015-0231.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html
CVE: CVE-2015-0283
Published: 2015-03-30
Description: The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154314.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154103.html; http://rhn.redhat.com/errata/RHSA-2015-0728.html
CVE: CVE-2015-1609
Published: 2015-03-30
Description: MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service via a crafted UTF-8 string in a BSON request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152493.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153690.html; http://www.securitytracker.com/id/1034466
CVE: CVE-2015-1815
Published: 2015-03-30
Description: The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name.
CVSS Score: 10.0 (HIGH)
CWE: CWE-77
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154427.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154444.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154147.html
CVE: CVE-2015-1827
Published: 2015-03-30
Description: The get_user_grouplist function in the extdom plug-in in FreeIPA before 4.1.4 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (crash) via a group list request for a user that belongs to a large number of groups.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-19
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154314.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154103.html; http://rhn.redhat.com/errata/RHSA-2015-0728.html
CVE: CVE-2015-2171
Published: 2015-03-30
Description: Middleware/SessionCookie.php in Slim before 2.6.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted session data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://seclists.org/fulldisclosure/2015/Mar/16; http://www.securityfocus.com/bid/70087; http://www.slimframework.com/2015/03/01/version-260.html
CVE: CVE-2015-2172
Published: 2015-03-30
Description: DokuWiki before 2014-05-05d and before 2014-09-29c does not properly check permissions for the ACL plugins, which allows remote authenticated users to gain privileges and add or delete ACL rules via a request to the XMLRPC API.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://advisories.mageia.org/MGASA-2015-0093.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152994.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153062.html
CVE: CVE-2015-2789
Published: 2015-03-30
Description: Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.
CVSS Score: 4.4 (MEDIUM)
References: http://packetstormsecurity.com/files/130840/Foxit-Reader-7.0.6.1126-Privilege-Escalation.html; http://www.exploit-db.com/exploits/36390; http://www.foxitsoftware.com/support/security_bulletins.php#FRD-25