deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-1025
Published: 2016-04-09
Description: Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html; http://rhn.redhat.com/errata/RHSA-2016-0610.html
CVE: CVE-2016-1026
Published: 2016-04-09
Description: Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html; http://rhn.redhat.com/errata/RHSA-2016-0610.html
CVE: CVE-2016-1027
Published: 2016-04-09
Description: Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html; http://rhn.redhat.com/errata/RHSA-2016-0610.html
CVE: CVE-2016-1028
Published: 2016-04-09
Description: Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html; http://rhn.redhat.com/errata/RHSA-2016-0610.html
CVE: CVE-2016-1029
Published: 2016-04-09
Description: Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1032, and CVE-2016-1033.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html; http://rhn.redhat.com/errata/RHSA-2016-0610.html
CVE: CVE-2016-1030
Published: 2016-04-09
Description: Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass intended access restrictions via unspecified vectors.
CVSS Score: 8.1 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html; http://rhn.redhat.com/errata/RHSA-2016-0610.html
CVE: CVE-2016-1031
Published: 2016-04-09
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, and CVE-2016-1017.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html; http://rhn.redhat.com/errata/RHSA-2016-0610.html
CVE: CVE-2016-1032
Published: 2016-04-09
Description: Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, and CVE-2016-1033.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html; http://rhn.redhat.com/errata/RHSA-2016-0610.html
CVE: CVE-2016-1033
Published: 2016-04-09
Description: Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, and CVE-2016-1032.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html; http://rhn.redhat.com/errata/RHSA-2016-0610.html
CVE: CVE-2015-8240
Published: 2016-04-11
Description: The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.0 HF6 and BIG-IP PSM before 11.4.1 HF10 does not properly handle TCP options, which allows remote attackers to cause a denial of service via unspecified vectors, related to the tm.minpathmtu database variable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: http://www.securitytracker.com/id/1035367; https://support.f5.com/kb/en-us/solutions/public/k/06/sol06223540.html; http://www.securitytracker.com/id/1035367
CVE: CVE-2016-0709
Published: 2016-04-11
Description: Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3.1 allows remote authenticated administrators to write to arbitrary files, and consequently execute arbitrary code, via a .. (dot dot) in a ZIP archive entry, as demonstrated by "../../webapps/x.jsp."
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: http://haxx.ml/post/[PII_REDACTED]1/remote-code-execution-in-apache-jetspeed-230-and; http://packetstormsecurity.com/files/136489/Apache-Jetspeed-Arbitrary-File-Upload.html; http://www.rapid7.com/db/modules/exploit/multi/http/apache_jetspeed_file_upload
CVE: CVE-2016-0710
Published: 2016-04-11
Description: Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitrary SQL commands via the (1) role or (2) user parameter to services/usermanager/users/.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://haxx.ml/post/[PII_REDACTED]1/remote-code-execution-in-apache-jetspeed-230-and; http://packetstormsecurity.com/files/136489/Apache-Jetspeed-Arbitrary-File-Upload.html; http://www.rapid7.com/db/modules/exploit/multi/http/apache_jetspeed_file_upload
CVE: CVE-2016-0711
Published: 2016-04-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in Apache Jetspeed before 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the title parameter when adding a (1) link, (2) page, or (3) folder resource.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3C73AC0763-D44B-4BDF-867C-05AD4674A62F%40bluesunrise.com%3E; https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0711; https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3C73AC0763-D44B-4BDF-867C-05AD4674A62F%40bluesunrise.com%3E
CVE: CVE-2016-0712
Published: 2016-04-11
Description: Cross-site scripting (XSS) vulnerability in Apache Jetspeed before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to portal.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3CF868DBFC-A05C-4ABB-8B91-17CA54C174B9%40bluesunrise.com%3E; https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0712; https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3CF868DBFC-A05C-4ABB-8B91-17CA54C174B9%40bluesunrise.com%3E
CVE: CVE-2016-0783
Published: 2016-04-11
Description: The sendHashByUser function in Apache OpenMeetings before 3.1.1 generates predictable password reset tokens, which makes it easier for remote attackers to reset arbitrary user passwords by leveraging knowledge of a user name and the current system time.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://haxx.ml/post/[PII_REDACTED]1/all-your-meetings-are-belong-to-us-remote-code; http://openmeetings.apache.org/security.html; http://packetstormsecurity.com/files/136432/Apache-OpenMeetings-3.1.0-MD5-Hashing.html
CVE: CVE-2016-0784
Published: 2016-04-11
Description: Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated administrators to write to arbitrary files via a .. (dot dot) in a ZIP archive entry.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://haxx.ml/post/[PII_REDACTED]1/all-your-meetings-are-belong-to-us-remote-code; http://openmeetings.apache.org/security.html; http://packetstormsecurity.com/files/136484/Apache-OpenMeetings-3.1.0-Path-Traversal.html
CVE: CVE-2016-2163
Published: 2016-04-11
Description: Cross-site scripting (XSS) vulnerability in Apache OpenMeetings before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the event description when creating an event.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://openmeetings.apache.org/security.html; http://packetstormsecurity.com/files/136433/Apache-OpenMeetings-3.0.7-Cross-Site-Scripting.html; http://www.securityfocus.com/archive/1/537888/100/0/threaded
CVE: CVE-2016-2164
Published: 2016-04-11
Description: The (1) FileService.importFileByInternalUserId and (2) FileService.importFile SOAP API methods in Apache OpenMeetings before 3.1.1 improperly use the Java URL class without checking the specified protocol handler, which allows remote attackers to read arbitrary files by attempting to upload a file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://openmeetings.apache.org/security.html; http://packetstormsecurity.com/files/136434/Apache-OpenMeetings-3.0.7-Arbitary-File-Read.html; http://www.securityfocus.com/archive/1/537887/100/0/threaded
CVE: CVE-2016-2171
Published: 2016-04-11
Description: The User Manager service in Apache Jetspeed before 2.3.1 does not properly restrict access using Jetspeed Security, which allows remote attackers to (1) add, (2) edit, or (3) delete users via the REST API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://haxx.ml/post/[PII_REDACTED]1/remote-code-execution-in-apache-jetspeed-230-and; http://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3CB9165E38-F3D8-496D-8642-8A53FCAC736A%40gmail.com%3E; https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-2171
CVE: CVE-2016-2393
Published: 2016-04-11
Description: Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified (1) services and (2) files, which allows local users to gain privileges by invalidating local checks.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: https://support.lenovo.com/us/en/product_security/len_4282; https://support.lenovo.com/us/en/product_security/len_4282
CVE: CVE-2012-6698
Published: 2016-04-11
Description: The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a crafted response.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2016/dsa-3534; http://www.openwall.com/lists/oss-security/2015/12/02/1; http://www.openwall.com/lists/oss-security/2015/12/03/1
CVE: CVE-2012-6699
Published: 2016-04-11
Description: The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds read) via a crafted response.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2016/dsa-3534; http://www.openwall.com/lists/oss-security/2015/12/02/1; http://www.openwall.com/lists/oss-security/2015/12/03/1
CVE: CVE-2012-6700
Published: 2016-04-11
Description: The decode_search function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a denial of service via a crafted response.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2016/dsa-3534; http://www.openwall.com/lists/oss-security/2015/12/02/1; http://www.openwall.com/lists/oss-security/2015/12/03/1
CVE: CVE-2016-1235
Published: 2016-04-11
Description: The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://oar.imag.fr/oar_2.5.7; http://www.debian.org/security/2016/dsa-3543; https://raw.githubusercontent.com/oar-team/oar/ce77ffed620fdce94881c9b[PII_REDACTED]7c24a1c/debian/patches/004-fix-oarsh-security-issue
CVE: CVE-2016-2193
Published: 2016-04-11
Description: PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging a session that performs queries as more than one role.
CVSS Score: 7.5 (HIGH)
CWE: CWE-254
References: http://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commitdiff%3Bh=db69e58a0642ef7fa46d62f6c4cf2460c3a1b41b; http://www.postgresql.org/about/news/1656/; http://www.postgresql.org/docs/current/static/release-9-5-2.html
CVE: CVE-2016-2385
Published: 2016-04-11
Description: Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5 allows remote attackers to cause a denial of service (memory corruption and process crash) or possibly execute arbitrary code via a large SIP packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/136477/Kamailio-4.3.4-Heap-Overflow.html; http://www.debian.org/security/2016/dsa-3535; http://www.debian.org/security/2016/dsa-3537
CVE: CVE-2016-3065
Published: 2016-04-11
Description: The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequently obtain sensitive server memory information or cause a denial of service (server crash) via a crafted bytea value in a BRIN index page.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-264
References: http://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commitdiff%3Bh=bf78a6f107949fdfb513d1b45e30cefe04e09e4f; http://www.postgresql.org/about/news/1656/; http://www.postgresql.org/docs/current/static/release-9-5-2.html
CVE: CVE-2016-3659
Published: 2016-04-11
Description: SQL injection vulnerability in graph_view.php in Cacti 0.8.8.g allows remote authenticated users to execute arbitrary SQL commands via the host_group_data parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://bugs.cacti.net/view.php?id=2673; http://lists.opensuse.org/opensuse-updates/2016-05/msg00074.html; http://packetstormsecurity.com/files/136547/Cacti-0.8.8g-SQL-Injection.html
CVE: CVE-2016-3675
Published: 2016-04-11
Description: SQL injection vulnerability in Huawei Policy Center with software before V100R003C10SPC020 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to system databases.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160325-01-policycenter-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160325-01-policycenter-en
CVE: CVE-2016-3676
Published: 2016-04-11
Description: Huawei E3276s USB modems with software before E3276s-150TCPU-V200R002B436D09SP00C00 allow man-in-the-middle attackers to intercept, spoof, or modify network traffic via unspecified vectors related to a fake network.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-254
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-dongle-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-dongle-en
CVE: CVE-2016-3678
Published: 2016-04-11
Description: Huawei Quidway S9700, S5700, S5300, S9300, and S7700 switches with software before V200R003SPH012 allow remote attackers to cause a denial of service (switch restart) via crafted traffic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-switch-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-switch-en
CVE: CVE-2015-0265
Published: 2016-04-11
Description: Cross-site scripting (XSS) vulnerability in the Policy Admin Tool in Apache Ranger before 0.5.0 allows remote attackers to inject arbitrary web script or HTML via the HTTP User-Agent header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/76208; http://www.slideshare.net/wojdwo/big-problems-with-big-data-hadoop-interfaces-security; https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
CVE: CVE-2015-0266
Published: 2016-04-11
Description: The Policy Admin Tool in Apache Ranger before 0.5.0 allows remote authenticated users to bypass intended access restrictions via direct access to module URLs.
CVSS Score: 7.1 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/76221; http://www.slideshare.net/wojdwo/big-problems-with-big-data-hadoop-interfaces-security; https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
CVE: CVE-2016-0735
Published: 2016-04-11
Description: Apache Ranger 0.5.x before 0.5.2 allows remote authenticated users to bypass intended parent resource-level access restrictions by leveraging mishandling of a resource-level exclude policy.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://mail-archives.apache.org/mod_mbox/ranger-dev/201603.mbox/%3CD31EE434.14B879%25vel%40apache.org%3E; http://mail-archives.apache.org/mod_mbox/ranger-dev/201603.mbox/%3CD31EE434.14B879%25vel%40apache.org%3E
CVE: CVE-2014-9759
Published: 2016-04-11
Description: Incomplete blacklist vulnerability in the config_is_private function in config_api.php in MantisBT 1.3.x before 1.3.0 allows remote attackers to obtain sensitive master salt configuration information via a SOAP API request.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://sourceforge.net/p/mantisbt/mailman/message/32948048/; http://www.openwall.com/lists/oss-security/2016/01/02/1; http://www.openwall.com/lists/oss-security/2016/01/03/2
CVE: CVE-2015-5233
Published: 2016-04-11
Description: Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which allows (1) remote authenticated users with the view_reports permission to read reports from arbitrary hosts or (2) remote authenticated users with the destroy_reports permission to delete reports from arbitrary hosts via direct access to the (a) individual report show/delete pages or (b) APIs.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-264
References: http://projects.theforeman.org/issues/11579; http://theforeman.org/security.html#CVE-2015-5233:reportsshow/destroynotrestrictedbyhostauthorization; https://access.redhat.com/errata/RHSA-2015:2622
CVE: CVE-2015-5303
Published: 2016-04-11
Description: The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-254
References: https://access.redhat.com/errata/RHSA-2015:2650; https://bugs.launchpad.net/tripleo/+bug/1516027; https://access.redhat.com/errata/RHSA-2015:2650
CVE: CVE-2015-5313
Published: 2016-04-11
Description: Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows local users with storage_vol:create ACL but not domain:write permission to write to arbitrary files via a .. (dot dot) in a volume name.
CVSS Score: 2.5 (LOW)
CWE: CWE-22
References: http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=034e47c338b13a95cf02106a3af912c1c5f818d7; http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174404.html; http://rhn.redhat.com/errata/RHSA-2016-2577.html
CVE: CVE-2015-5329
Published: 2016-04-11
Description: The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes it easier for remote attackers to obtain access to services in deployed overclouds by leveraging knowledge of the default credentials.
CVSS Score: 7.3 (HIGH)
CWE: CWE-264
References: https://access.redhat.com/errata/RHSA-2015:2650; https://access.redhat.com/errata/RHSA-2015:2650
CVE: CVE-2015-5349
Published: 2016-04-11
Description: The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: http://www.securityfocus.com/archive/1/537225/100/0/threaded; https://directory.apache.org/studio/news.html; https://lists.apache.org/thread.html/reb5443aaf781b364896ee9d7cf6e97fdc4f5a5174132c319252963b6%40%3Ccommits.directory.apache.org%3E
CVE: CVE-2015-7330
Published: 2016-04-11
Description: Puppet Enterprise 2015.3 before 2015.3.1 allows remote attackers to bypass a host whitelist protection mechanism by leveraging the Puppet communications protocol.
CVSS Score: 8.8 (HIGH)
CWE: CWE-254
References: http://www.securitytracker.com/id/1034550; https://puppetlabs.com/security/cve/cve-2015-7330; http://www.securitytracker.com/id/1034550
CVE: CVE-2015-7502
Published: 2016-04-11
Description: Red Hat CloudForms 3.2 Management Engine (CFME) 5.4.4 and CloudForms 4.0 Management Engine (CFME) 5.5.0 do not properly encrypt data in the backend PostgreSQL database, which might allow local users to obtain sensitive data and consequently gain privileges by leveraging access to (1) database exports or (2) log files.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2015-2620.html; https://access.redhat.com/errata/RHSA-2015:2551; https://bugzilla.redhat.com/show_bug.cgi?id=1283019