deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-9218
Published: 2017-06-27
Description: The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2017/Jun/32; http://seclists.org/fulldisclosure/2017/Jun/32
CVE: CVE-2017-9219
Published: 2017-06-27
Description: The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted mp4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2017/Jun/32; http://seclists.org/fulldisclosure/2017/Jun/32
CVE: CVE-2017-9220
Published: 2017-06-27
Description: The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (memory allocation error) via a crafted mp4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2017/Jun/32; http://seclists.org/fulldisclosure/2017/Jun/32
CVE: CVE-2017-9221
Published: 2017-06-27
Description: The mp4ff_read_mdhd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2017/Jun/32; http://seclists.org/fulldisclosure/2017/Jun/32
CVE: CVE-2017-9222
Published: 2017-06-27
Description: The mp4ff_parse_tag function in common/mp4ff/mp4meta.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted mp4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://seclists.org/fulldisclosure/2017/Jun/32; http://seclists.org/fulldisclosure/2017/Jun/32
CVE: CVE-2017-9223
Published: 2017-06-27
Description: The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2017/Jun/32; http://seclists.org/fulldisclosure/2017/Jun/32
CVE: CVE-2017-9253
Published: 2017-06-27
Description: The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-834
References: http://seclists.org/fulldisclosure/2017/Jun/32; http://seclists.org/fulldisclosure/2017/Jun/32
CVE: CVE-2017-9254
Published: 2017-06-27
Description: The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-834
References: http://seclists.org/fulldisclosure/2017/Jun/32; http://seclists.org/fulldisclosure/2017/Jun/32
CVE: CVE-2017-9255
Published: 2017-06-27
Description: The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-834
References: http://seclists.org/fulldisclosure/2017/Jun/32; http://seclists.org/fulldisclosure/2017/Jun/32
CVE: CVE-2017-9256
Published: 2017-06-27
Description: The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-834
References: http://seclists.org/fulldisclosure/2017/Jun/32; http://seclists.org/fulldisclosure/2017/Jun/32
CVE: CVE-2017-9257
Published: 2017-06-27
Description: The mp4ff_read_ctts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-834
References: http://seclists.org/fulldisclosure/2017/Jun/32; http://seclists.org/fulldisclosure/2017/Jun/32
CVE: CVE-2017-7508
Published: 2017-06-27
Description: OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: http://www.debian.org/security/2017/dsa-3900; http://www.securityfocus.com/bid/99230; http://www.securitytracker.com/id/1038768
CVE: CVE-2017-7520
Published: 2017-06-27
Description: OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attacker.
CVSS Score: 7.4 (HIGH)
CWE: CWE-200, CWE-125
References: http://www.debian.org/security/2017/dsa-3900; http://www.securityfocus.com/bid/99230; http://www.securitytracker.com/id/1038768
CVE: CVE-2017-7521
Published: 2017-06-27
Description: OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extract_x509_extension().
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400, CWE-415, CWE-772
References: http://www.debian.org/security/2017/dsa-3900; http://www.securityfocus.com/bid/99230; http://www.securitytracker.com/id/1038768
CVE: CVE-2017-7522
Published: 2017-06-27
Description: OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-476
References: http://www.securityfocus.com/bid/99230; http://www.securitytracker.com/id/1038768; https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243
CVE: CVE-2017-7524
Published: 2017-06-27
Description: tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522, CWE-522
References: https://github.com/01org/tpm2.0-tools/commit/c5d72beaab1cbbbe68271f4bc4b6670d69985157; https://github.com/01org/tpm2.0-tools/commit/c5d72beaab1cbbbe68271f4bc4b6670d69985157
CVE: CVE-2017-2841
Published: 2017-06-27
Description: An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/99184; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0343; http://www.securityfocus.com/bid/99184
CVE: CVE-2017-2842
Published: 2017-06-27
Description: In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/99184; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0344; http://www.securityfocus.com/bid/99184
CVE: CVE-2017-2843
Published: 2017-06-27
Description: In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/99184; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0345; http://www.securityfocus.com/bid/99184
CVE: CVE-2016-6083
Published: 2017-06-27
Description: IBM Tivoli Monitoring V6 could allow an unauthenticated user to access SOAP queries that could contain sensitive information. IBM X-Force ID: 117696.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22000909; http://www.securityfocus.com/bid/99259; https://exchange.xforce.ibmcloud.com/vulnerabilities/117696
CVE: CVE-2016-9738
Published: 2017-06-27
Description: IBM QRadar 7.2 and 7.3 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 119783.
CVSS Score: 7.5 (HIGH)
CWE: CWE-254
References: http://www.ibm.com/support/docview.wss?uid=swg22004926; http://www.securityfocus.com/bid/99266; https://exchange.xforce.ibmcloud.com/vulnerabilities/119783
CVE: CVE-2016-9972
Published: 2017-06-27
Description: IBM QRadar 7.2 and 7.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 120208.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-264
References: http://www.ibm.com/support/docview.wss?uid=swg22004925; http://www.securityfocus.com/bid/99268; https://exchange.xforce.ibmcloud.com/vulnerabilities/120208
CVE: CVE-2017-1105
Published: 2017-06-27
Description: IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could allow a local user to overwrite DB2 files or cause a denial of service. IBM X-Force ID: 120668.
CVSS Score: 7.1 (HIGH)
CWE: CWE-119
References: http://www.ibm.com/support/docview.wss?uid=swg22003877; http://www.securityfocus.com/bid/99264; http://www.securitytracker.com/id/1038773
CVE: CVE-2017-1234
Published: 2017-06-27
Description: IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123913.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22004948; http://www.securityfocus.com/bid/99265; https://exchange.xforce.ibmcloud.com/vulnerabilities/123913
CVE: CVE-2017-1297
Published: 2017-06-27
Description: IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code. IBM X-Force ID: 125159.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119
References: http://www.ibm.com/support/docview.wss?uid=swg22004878; http://www.securityfocus.com/bid/99271; http://www.securitytracker.com/id/1038772
CVE: CVE-2017-1322
Published: 2017-06-27
Description: IBM API Connect 5.0.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125918.
CVSS Score: 8.2 (HIGH)
CWE: CWE-611
References: http://www.ibm.com/support/docview.wss?uid=swg22003621; http://www.securityfocus.com/bid/99258; https://exchange.xforce.ibmcloud.com/vulnerabilities/125918
CVE: CVE-2017-1328
Published: 2017-06-27
Description: IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security restrictions of the api, caused by improper handling of security policy. By crafting a suitable request, an attacker could exploit this vulnerability to bypass security and use the vulnerable API. IBM X-Force ID: 126230.
CVSS Score: 5.3 (MEDIUM)
References: http://www.ibm.com/support/docview.wss?uid=swg22003867; http://www.securityfocus.com/bid/99267; https://exchange.xforce.ibmcloud.com/vulnerabilities/126230
CVE: CVE-2017-9982
Published: 2017-06-27
Description: TeamSpeak Client 3.0.19 allows remote attackers to cause a denial of service (application crash) via the &#5610; Unicode character followed by the &#3903; Unicode character.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99308; https://pastebin.com/4Ngstncy; https://www.youtube.com/watch?v=8BrQCUOgQL0
CVE: CVE-2017-9841
Published: 2017-06-27
Description: Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: http://web.archive.org/web/[PII_REDACTED]2357/http://phpunit.vulnbusters.com/; http://www.securityfocus.com/bid/101798; http://www.securitytracker.com/id/1039812
CVE: CVE-2017-9830
Published: 2017-06-27
Description: Remote Code Execution is possible in Code42 CrashPlan 5.4.x via the org.apache.commons.ssl.rmi.DateRMI Java class, because (upon instantiation) it creates an RMI server that listens on a TCP port and deserializes objects sent by TCP clients.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://blog.radicallyopensecurity.com/CVE-2017-9830.html; https://blog.radicallyopensecurity.com/CVE-2017-9830.html
CVE: CVE-2004-2778
Published: 2017-06-27
Description: Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read or write to restricted directories or execute restricted commands via navigating to the affected directories, or executing the affected commands.
CVSS Score: 7.1 (HIGH)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2017/01/28/7; https://bugs.gentoo.org/show_bug.cgi?id=141619; https://bugs.gentoo.org/show_bug.cgi?id=396153
CVE: CVE-2012-5010
Published: 2017-06-27
Description: ASA 5515-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.4.x before 9.4.1 Interim, 9.2.x before 9.2.4 Interim, ASA 5510 Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 8.4.x before 8.4.7 Interim, 8.2.x before 8.2.5 Interim, 9.1.x before 9.1.6 Interim, ASA 5555-X Adaptive Security Appliance ASA for Application Centric Infrastructure (ACI) Device Package 1.2.4.x before 1.2.4.8, ASA 5512-X Adaptive Security Appliance ASA for Application Centric Infrastructure (ACI) Device Package 1.2.4.x before 1.2.4.8, ASA 5520 Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 8.2.x before 8.2.5 Interim, 8.4.x before 8.4.7 Interim, 9.1.x before 9.1.6 Interim, ASA 5505 Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.2.x before 9.2.4 Interim, 8.4.x before 8.4.7 Interim, 9.1.x before 9.1.6 Interim, ASA 5525-X Adaptive Security Appliance ASA for Application Centric Infrastructure (ACI) Device Package 1.2.4.x before 1.2.4.8, ASA 5512-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.4.x before 9.4.1 Interim, 9.2.x before 9.2.4 Interim or 9.2.4.SMP, 9.1.x before 9.1.6 Interim, ASA 5545-X Adaptive Security Appliance ASA for Application Centric Infrastructure (ACI) Device Package 1.2.4.x before 1.2.4.8, ASA 5585-X Adaptive Security Appliance ASA for Application Centric Infrastructure (ACI) Device Package 1.2.4.x before 1.2.4.8, ASA 5540 Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 8.2.x before 8.2.5 Interim, 8.4.x before 8.4.7 Interim, 9.1.x before 9.1.6 Interim, ASA 5515-X Adaptive Security Appliance ASA for Application Centric Infrastructure (ACI) Device Package 1.2.4.x before 1.2.4.8, ASA 5555-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.2.x before 9.2.4 Interim or 9.2.4.SMP, 9.4.x before 9.4.1 Interim, 9.1.x before 9.1.6 Interim, ASA 5580 Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.1.x before 9.1.6 Interim, ASA 5585-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.2.x before 9.2.4 Interim, 9.4.x before 9.4.1 Interim, ASA 5525-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.4.x before 9.4.1 Interim, 9.2.x before 9.2.4 Interim or 9.2.4.SMP, 9.1.x before 9.1.6 Interim, ASA 5545-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.4.x before 9.4.1 Interim, 9.2.x before 9.2.4 Interim or 9.2.4.SMP. 9.1.x before 9.1.6 ASA does not check the source of the ARP request or GARP packets for addresses it performs NAT translation for under unspecified conditions.
CVSS Score: 8.1 (HIGH)
CWE: CWE-254
References: http://www.securityfocus.com/bid/99332; https://icisystem.blogspot.com/2016/01/cisco-notification-alert-asa-5500.html; http://www.securityfocus.com/bid/99332
CVE: CVE-2014-6354
Published: 2017-06-27
Description: Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11 allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.zerodayinitiative.com/advisories/ZDI-15-032; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051; http://www.zerodayinitiative.com/advisories/ZDI-15-032
CVE: CVE-2014-8149
Published: 2017-06-27
Description: OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2015/01/22/1; http://www.securityfocus.com/bid/72280; https://git.opendaylight.org/gerrit/#/c/13972/
CVE: CVE-2015-0955
Published: 2017-06-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-0955.  Reason: This candidate is a duplicate of CVE-2016-0955.  Notes: All CVE users should reference CVE-2016-0955 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2015-1591
Published: 2017-06-27
Description: The kamailio build in kamailio before 4.2.0-2 process allows local users to gain privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://cve.killedkenny.io/cve/CVE-2015-1591; http://www.openwall.com/lists/oss-security/2015/02/12/7; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775681
CVE: CVE-2015-1778
Published: 2017-06-27
Description: The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and password combination.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.openwall.com/lists/oss-security/2015/03/20/3; http://www.securityfocus.com/bid/73255; https://cloudrouter.org/security/
CVE: CVE-2015-1795
Published: 2017-06-27
Description: Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2017-0484.html; http://rhn.redhat.com/errata/RHSA-2017-0486.html; http://www.securityfocus.com/bid/99311
CVE: CVE-2015-2245
Published: 2017-06-27
Description: Huawei Ascend P7 allows remote attackers to cause a denial of service (phone process crash).
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/72571; http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-414153.htm; http://www.securityfocus.com/bid/72571
CVE: CVE-2015-3840
Published: 2017-06-27
Description: The MessageStatusReceiver service in the AndroidManifest.XML in Android 5.1.1 and earlier allows local users to alter sent/received statuses of SMS and MMS messages without the associated "WRITE_SMS" permission.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://blog.trendmicro.com/trendlabs-security-intelligence/os-x-zero-days-on-the-rise-a-2015-midyear-review-on-advanced-attack-surfaces/; http://blog.trendmicro.com/trendlabs-security-intelligence/two-new-android-bugs-mess-up-messaging-may-lead-to-multiple-send-charges/; https://huntcve.github.io/2017/02/13/cveupdate/
CVE: CVE-2015-5180
Published: 2017-06-27
Description: res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash).
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/99324; http://www.ubuntu.com/usn/USN-3239-1; http://www.ubuntu.com/usn/USN-3239-2
CVE: CVE-2015-5378
Published: 2017-06-27
Description: Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://packetstormsecurity.com/files/132800/Logstash-1.5.2-SSL-TLS-FREAK.html; http://www.securityfocus.com/archive/1/536050/100/0/threaded; http://www.securityfocus.com/archive/1/536859/100/0/threaded
CVE: CVE-2015-7582
Published: 2017-06-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-2100.  Reason: This candidate is a reservation duplicate of CVE-2016-2100.  Notes: All CVE users should reference CVE-2016-2100 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2015-7780
Published: 2017-06-27
Description: Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://jvn.jp/en/jp/JVN21968837/index.html; http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000185.html; http://jvn.jp/en/jp/JVN21968837/index.html
CVE: CVE-2015-7781
Published: 2017-06-27
Description: ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-275
References: http://jvn.jp/en/jp/JVN12991684/index.html; http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000186.html; http://jvn.jp/en/jp/JVN12991684/index.html
CVE: CVE-2015-7895
Published: 2017-06-27
Description: Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://packetstormsecurity.com/files/134950/Samsung-Galaxy-S6-Samsung-Gallery-Bitmap-Decoding-Crash.html; http://www.securityfocus.com/bid/77429; https://bugs.chromium.org/p/project-zero/issues/detail?id=497&redir=1
CVE: CVE-2015-7898
Published: 2017-06-27
Description: Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://packetstormsecurity.com/files/134951/Samsung-Galaxy-S6-Samsung-Gallery-GIF-Parsing-Crash.html; http://www.securityfocus.com/bid/77430; https://bugs.chromium.org/p/project-zero/issues/detail?id=500&redir=1
CVE: CVE-2015-8697
Published: 2017-06-27
Description: stalin 0.11-5 allows local users to write to arbitrary files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://cve.killedkenny.io/cve/CVE-2015-8697; http://www.openwall.com/lists/oss-security/2015/12/27/2; http://www.securityfocus.com/bid/79713/references