deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-2976
Published: 2015-07-25
Description: Multiple cross-site scripting (XSS) vulnerabilities in Research Artisan Lite before 1.18 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted HTML document or (2) a crafted URL that is mishandled during access-log analysis.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN58020495/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000104; http://lite.research-artisan.net/main/download
CVE: CVE-2015-2975
Published: 2015-07-26
Description: Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers to perform unspecified actions via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://jvn.jp/en/jp/JVN10559378/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000105; http://lite.research-artisan.net/main/download
CVE: CVE-2015-4945
Published: 2015-07-26
Description: Unspecified vulnerability in the IBM Maximo Anywhere application 7.5.1 through 7.5.1.2 for Android allows attackers to bypass a passcode protection mechanism and obtain sensitive information via a crafted application.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21962601; http://www-01.ibm.com/support/docview.wss?uid=swg21962601
CVE: CVE-2015-2847
Published: 2015-07-26
Description: Honeywell Tuxedo Touch before 5.2.19.0_VA relies on client-side authentication involving JavaScript, which allows remote attackers to bypass intended access restrictions by removing USERACCT requests from the client-server data stream.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: http://www.kb.cert.org/vuls/id/857948; http://www.kb.cert.org/vuls/id/857948
CVE: CVE-2015-2848
Published: 2015-07-26
Description: Cross-site request forgery (CSRF) vulnerability in Honeywell Tuxedo Touch before 5.2.19.0_VA allows remote attackers to hijack the authentication of arbitrary users for requests associated with home-automation commands, as demonstrated by a door-unlock command.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.kb.cert.org/vuls/id/857948; http://www.kb.cert.org/vuls/id/857948
CVE: CVE-2015-1840
Published: 2015-07-26
Description: jquery_ujs.js in jquery-rails before 3.1.3 and 4.x before 4.0.4 and rails.js in jquery-ujs before 1.0.4, as used with Ruby on Rails 3.x and 4.x, allow remote attackers to bypass the Same Origin Policy, and trigger transmission of a CSRF token to a different-domain web server, via a leading space character in a URL within an attribute value.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160906.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-June/161043.html; http://lists.opensuse.org/opensuse-updates/2015-07/msg00041.html
CVE: CVE-2015-1872
Published: 2015-07-26
Description: The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Motion JPEG data.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=fabbfaa095660982cc0bc63242c459561fa37037; http://www.securityfocus.com/bid/72644; http://www.securitytracker.com/id/1033078
CVE: CVE-2015-3224
Published: 2015-07-26
Description: request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headers in determining a client's IP address, which allows remote attackers to bypass the whitelisted_ips protection mechanism via a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160881.html; http://openwall.com/lists/oss-security/2015/06/16/18; http://www.securityfocus.com/bid/75237
CVE: CVE-2015-3225
Published: 2015-07-26
Description: lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (SystemStackError) via a request with a large parameter depth.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-19
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164173.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165180.html; http://lists.opensuse.org/opensuse-updates/2015-07/msg00040.html
CVE: CVE-2015-3226
Published: 2015-07-26
Description: Cross-site scripting (XSS) vulnerability in json/encoding.rb in Active Support in Ruby on Rails 3.x and 4.1.x before 4.1.11 and 4.2.x before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted Hash that is mishandled during JSON encoding.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2015/06/16/17; http://www.debian.org/security/2016/dsa-3464; http://www.securityfocus.com/bid/75231
CVE: CVE-2015-3227
Published: 2015-07-26
Description: The (1) jdom.rb and (2) rexml.rb components in Active Support in Ruby on Rails before 4.1.11 and 4.2.x before 4.2.2, when JDOM or REXML is enabled, allow remote attackers to cause a denial of service (SystemStackError) via a large XML document depth.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2015-07/msg00050.html; http://openwall.com/lists/oss-security/2015/06/16/16; http://www.debian.org/security/2016/dsa-3464
CVE: CVE-2015-4692
Published: 2015-07-27
Description: The kvm_apic_has_events function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call.
CVSS Score: 4.9 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce40cd3fc7fa40a6119e5fe6c0f2bc0eb4541009; http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160829.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-June/161144.html
CVE: CVE-2015-0732
Published: 2015-07-29
Description: Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5.6-113, 9.1.0-032, 9.1.1-000, and 9.6.0-000; and Content Security Management Appliance (SMA) 9.1.0-033 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuu37430, CSCuu37420, CSCut71981, and CSCuv50167.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=40172; http://www.securitytracker.com/id/1033086; http://www.securitytracker.com/id/1033087
CVE: CVE-2015-2974
Published: 2015-07-29
Description: LEMON-S PHP Gazou BBS plus before 2.36 allows remote attackers to upload arbitrary HTML documents via vectors involving a crafted image file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN86680970/995636/index.html; http://jvn.jp/en/jp/JVN86680970/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000106
CVE: CVE-2015-4287
Published: 2015-07-29
Description: Cisco Firepower Extensible Operating System 1.1(1.86) on Firepower 9000 devices allows remote attackers to bypass intended access restrictions and obtain sensitive device information by visiting an unspecified web page, aka Bug ID CSCuu82230.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=40136; http://tools.cisco.com/security/center/viewAlert.x?alertId=40136
CVE: CVE-2015-4288
Published: 2015-07-29
Description: The LDAP implementation on the Cisco Web Security Appliance (WSA) 8.5.0-000, Email Security Appliance (ESA) 8.5.7-042, and Content Security Management Appliance (SMA) 8.3.6-048 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, aka Bug IDs CSCuo29561, CSCuv40466, and CSCuv40470.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=40137; http://tools.cisco.com/security/center/viewAlert.x?alertId=40137
CVE: CVE-2015-2977
Published: 2015-07-29
Description: Webservice-DIC yoyaku_v41 allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN46674982/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000107; http://jvn.jp/en/jp/JVN46674982/index.html
CVE: CVE-2015-2978
Published: 2015-07-29
Description: Webservice-DIC yoyaku_v41 allows remote attackers to bypass authentication and complete a conference-room reservation via unspecified vectors, as demonstrated by an "unintentional reservation."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://jvn.jp/en/jp/JVN52248864/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000108; http://jvn.jp/en/jp/JVN52248864/index.html
CVE: CVE-2015-2979
Published: 2015-07-29
Description: Webservice-DIC yoyaku_v41 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-78
References: http://jvn.jp/en/jp/JVN17522792/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000109; http://jvn.jp/en/jp/JVN17522792/index.html
CVE: CVE-2015-4286
Published: 2015-07-29
Description: The web framework in Cisco UCS Central Software 1.3(0.99) allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuu41377.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=40151; http://www.securitytracker.com/id/1033112; http://tools.cisco.com/security/center/viewAlert.x?alertId=40151
CVE: CVE-2015-4290
Published: 2015-07-29
Description: The kernel extension in Cisco AnyConnect Secure Mobility Client 4.0(2049) on OS X allows local users to cause a denial of service (panic) via vectors involving contiguous memory locations, aka Bug ID CSCut12255.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-119
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=40176; http://www.securitytracker.com/id/1033113; http://tools.cisco.com/security/center/viewAlert.x?alertId=40176
CVE: CVE-2015-5477
Published: 2015-07-29
Description: named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
CVSS Score: 7.8 (HIGH)
CWE: CWE-19
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718; http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html
CVE: CVE-2014-7912
Published: 2015-07-30
Description: The get_option function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before 5.1 and other products, does not validate the relationship between length fields and the amount of data, which allows remote DHCP servers to execute arbitrary code or cause a denial of service (memory corruption) via a large length value of an option in a DHCPACK message.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.securitytracker.com/id/1033124; http://www.zerodayinitiative.com/advisories/ZDI-15-093/; https://android.googlesource.com/platform/external/dhcpcd/+/73c09dd[PII_REDACTED]511d955d8f792b41c7213f0
CVE: CVE-2014-7913
Published: 2015-07-30
Description: The print_option function in dhcp-common.c in dhcpcd through 6.9.1, as used in dhcp.c in dhcpcd 5.x in Android before 5.1 and other products, misinterprets the return value of the snprintf function, which allows remote DHCP servers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted message.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.securitytracker.com/id/1033124; https://android.googlesource.com/platform/external/dhcpcd/+/73c09dd[PII_REDACTED]511d955d8f792b41c7213f0; http://www.securitytracker.com/id/1033124
CVE: CVE-2015-4293
Published: 2015-07-30
Description: The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (CPU consumption or packet loss) via fragmented (1) IPv4 or (2) IPv6 packets that trigger ATTN-3-SYNC_TIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=40215; http://www.securitytracker.com/id/1033122; http://tools.cisco.com/security/center/viewAlert.x?alertId=40215
CVE: CVE-2015-1009
Published: 2015-08-01
Description: Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file.
CVSS Score: 1.7 (LOW)
CWE: CWE-200
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-100-01; https://gcsresource.invensys.com/support/docs/_securitybulletins/Security_bulletin_LFSEC00000110.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-15-211-01
CVE: CVE-2015-1486
Published: 2015-08-01
Description: The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authentication via a crafted password-reset action that triggers a new administrative session.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/76074; http://www.securitytracker.com/id/1033165; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
CVE: CVE-2015-1487
Published: 2015-08-01
Description: The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to arbitrary files, and consequently obtain administrator privileges, via a crafted filename.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/76094; http://www.securitytracker.com/id/1033165; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
CVE: CVE-2015-1488
Published: 2015-08-01
Description: An unspecified action handler in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to read arbitrary files via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/76077; http://www.securitytracker.com/id/1033165; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
CVE: CVE-2015-1489
Published: 2015-08-01
Description: The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges via unspecified vectors.
CVSS Score: 8.5 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/76078; http://www.securitytracker.com/id/1033165; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
CVE: CVE-2015-1490
Published: 2015-08-01
Description: Directory traversal vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to read arbitrary files via a relative pathname in a client installation package.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/76081; http://www.securitytracker.com/id/1033165; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
CVE: CVE-2015-1491
Published: 2015-08-01
Description: SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-89
References: http://www.securityfocus.com/bid/76079; http://www.securitytracker.com/id/1033165; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
CVE: CVE-2015-1492
Published: 2015-08-01
Description: Untrusted search path vulnerability in the client in Symantec Endpoint Protection 12.1 before 12.1-RU6-MP1 allows local users to gain privileges via a Trojan horse DLL in a client install package.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/76083; http://www.securitytracker.com/id/1033165; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
CVE: CVE-2015-1904
Published: 2015-08-01
Description: IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0, when external Enterprise Content Management (ECM) integration is enabled with a certain technical system account configuration, allows remote authenticated users to bypass intended document-access restrictions via a (1) upload or (2) download action.
CVSS Score: 3.5 (LOW)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1JR53209; http://www-01.ibm.com/support/docview.wss?uid=swg21960293; http://www.securitytracker.com/id/1033159
CVE: CVE-2015-2870
Published: 2015-08-01
Description: Cross-site scripting (XSS) vulnerability on Chiyu BF-630, BF-630W, and BF-660C fingerprint access-control devices allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.kb.cert.org/vuls/id/360431; http://www.kb.cert.org/vuls/id/360431
CVE: CVE-2015-2871
Published: 2015-08-01
Description: Chiyu BF-660C fingerprint access-control devices allow remote attackers to bypass authentication and (1) read or (2) modify communication configuration settings via a request to net.htm, a different vulnerability than CVE-2015-5618.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/360431; http://www.kb.cert.org/vuls/id/360431
CVE: CVE-2015-2890
Published: 2015-08-01
Description: The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions (CS) devices with model-dependent firmware before A21 does not enforce a BIOS_CNTL locking protection mechanism upon being woken from sleep, which allows local users to conduct EFI flash attacks by leveraging console access, a similar issue to CVE-2015-3692.
CVSS Score: 6.0 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/577140; http://www.kb.cert.org/vuls/id/BLUU-9XXQ9L; http://www.kb.cert.org/vuls/id/577140
CVE: CVE-2015-4289
Published: 2015-08-01
Description: Directory traversal vulnerability in Cisco AnyConnect Secure Mobility Client 4.0(2049) allows remote head-end systems to write to arbitrary files via a crafted configuration attribute, aka Bug ID CSCut93920.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=40175; http://www.securitytracker.com/id/1033173; http://tools.cisco.com/security/center/viewAlert.x?alertId=40175
CVE: CVE-2015-4291
Published: 2015-08-01
Description: Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted series of fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCtd72617.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150730-asr1k; http://www.securitytracker.com/id/1033131; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150730-asr1k
CVE: CVE-2015-4292
Published: 2015-08-01
Description: Cross-site scripting (XSS) vulnerability in the management interface in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(2) allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuv45818.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=40214; http://www.securitytracker.com/id/1033172; http://tools.cisco.com/security/center/viewAlert.x?alertId=40214
CVE: CVE-2015-4294
Published: 2015-08-01
Description: Cross-site scripting (XSS) vulnerability in Cisco IM and Presence Service before 10.5 MR1 allows remote attackers to inject arbitrary web script or HTML by constructing a crafted URL that leverages incomplete filtering of HTML elements, aka Bug ID CSCut41766.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=40217; http://www.securitytracker.com/id/1033171; http://tools.cisco.com/security/center/viewAlert.x?alertId=40217
CVE: CVE-2015-4295
Published: 2015-08-01
Description: The Prime Collaboration Deployment component in Cisco Unified Communications Manager 10.5(3.10000.9) allows remote authenticated users to discover root credentials via a direct request to an unspecified URL, aka Bug ID CSCuv21819.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=40223; http://www.securitytracker.com/id/1033174; http://tools.cisco.com/security/center/viewAlert.x?alertId=40223
CVE: CVE-2015-5618
Published: 2015-08-01
Description: Chiyu BF-630 and BF-630W fingerprint access-control devices allow remote attackers to bypass authentication and (1) read or (2) modify (a) Voice Time Set configuration settings via a request to voice.htm or (b) UniFinger configuration settings via a request to bf.htm, a different vulnerability than CVE-2015-2871.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/360431; http://www.kb.cert.org/vuls/id/360431
CVE: CVE-2015-5084
Published: 2015-08-03
Description: The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords, which allows physically proximate attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/75981; http://www.securitytracker.com/id/1033021; http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-267489.pdf
CVE: CVE-2015-5352
Published: 2015-08-03
Description: The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html; http://openwall.com/lists/oss-security/2015/07/01/10; http://rhn.redhat.com/errata/RHSA-2016-0741.html
CVE: CVE-2015-5537
Published: 2015-08-03
Description: The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a different vulnerability than CVE-2014-3566.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-312
References: http://www.securitytracker.com/id/1033022; http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-396873.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-15-202-03A