deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-5548
Published: 2015-08-14
Description: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76283
CVE: CVE-2015-5549
Published: 2015-08-14
Description: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5552, and CVE-2015-5553.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76283
CVE: CVE-2015-5550
Published: 2015-08-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76288
CVE: CVE-2015-5551
Published: 2015-08-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76288
CVE: CVE-2015-5552
Published: 2015-08-14
Description: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, and CVE-2015-5553.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76283
CVE: CVE-2015-5553
Published: 2015-08-14
Description: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, and CVE-2015-5552.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76283
CVE: CVE-2015-5554
Published: 2015-08-14
Description: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-5555, CVE-2015-5558, and CVE-2015-5562.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76287
CVE: CVE-2015-5555
Published: 2015-08-14
Description: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-5554, CVE-2015-5558, and CVE-2015-5562.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76287
CVE: CVE-2015-5556
Published: 2015-08-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76288
CVE: CVE-2015-5557
Published: 2015-08-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76288
CVE: CVE-2015-5558
Published: 2015-08-14
Description: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-5554, CVE-2015-5555, and CVE-2015-5562.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76287
CVE: CVE-2015-5559
Published: 2015-08-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76288
CVE: CVE-2015-5560
Published: 2015-08-14
Description: Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76289
CVE: CVE-2015-5561
Published: 2015-08-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76288
CVE: CVE-2015-5562
Published: 2015-08-14
Description: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-5554, CVE-2015-5555, and CVE-2015-5558.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76287
CVE: CVE-2015-5563
Published: 2015-08-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5564, and CVE-2015-5565.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76288
CVE: CVE-2015-5564
Published: 2015-08-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, and CVE-2015-5565.
CVSS Score: 10.0 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76288; http://www.securitytracker.com/id/1033235
CVE: CVE-2015-5565
Published: 2015-08-14
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, and CVE-2015-5564.
CVSS Score: 10.0 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2015-1603.html; http://www.securityfocus.com/bid/76288; http://www.securitytracker.com/id/1033235
CVE: CVE-2015-2441
Published: 2015-08-14
Description: Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2452.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1033237; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-091
CVE: CVE-2015-2442
Published: 2015-08-14
Description: Microsoft Internet Explorer 8 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2444.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1033237; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-091
CVE: CVE-2015-2443
Published: 2015-08-14
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/76195; http://www.securitytracker.com/id/1033237; http://www.zerodayinitiative.com/advisories/ZDI-15-382
CVE: CVE-2015-2444
Published: 2015-08-14
Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2442.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/76194; http://www.securitytracker.com/id/1033237; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079
CVE: CVE-2015-2445
Published: 2015-08-14
Description: Microsoft Internet Explorer 10 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Bypass."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1033237; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079; http://www.securitytracker.com/id/1033237
CVE: CVE-2015-2446
Published: 2015-08-14
Description: Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2447.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1033237; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-091
CVE: CVE-2015-2447
Published: 2015-08-14
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2446.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1033237; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079; http://www.securitytracker.com/id/1033237
CVE: CVE-2015-2448
Published: 2015-08-14
Description: Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/76191; http://www.securitytracker.com/id/1033237; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079
CVE: CVE-2015-2449
Published: 2015-08-14
Description: Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Bypass."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1033237; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-091
CVE: CVE-2015-2450
Published: 2015-08-14
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2451.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/76190; http://www.securitytracker.com/id/1033237; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079
CVE: CVE-2015-2451
Published: 2015-08-14
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2450.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/76189; http://www.securitytracker.com/id/1033237; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079
CVE: CVE-2015-2452
Published: 2015-08-14
Description: Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2441.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/76188; http://www.securitytracker.com/id/1033237; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-079
CVE: CVE-2014-3576
Published: 2015-08-14
Description: The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service (shutdown) via a shutdown command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://activemq.2283324.n4.nabble.com/About-CVE-2014-3576-tp4699628.html; http://packetstormsecurity.com/files/134274/Apache-ActiveMQ-5.10.1-Denial-Of-Service.html; http://www.debian.org/security/2015/dsa-3330
CVE: CVE-2014-8155
Published: 2015-08-14
Description: GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spoof servers via a certificate issued by a CA certificate that is (1) not yet valid or (2) no longer valid.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-17
References: http://rhn.redhat.com/errata/RHSA-2015-1457.html; http://www.securityfocus.com/bid/73317; https://gitlab.com/gnutls/gnutls/commit/897cbce62c0263a498088ac3e465aa5f05f8719c
CVE: CVE-2015-1816
Published: 2015-08-14
Description: Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in-the-middle attackers to spoof LDAP servers via a crafted certificate.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://projects.theforeman.org/issues/9858; https://access.redhat.com/errata/RHSA-2015:1591; https://access.redhat.com/errata/RHSA-2015:1592
CVE: CVE-2015-1819
Published: 2015-08-14
Description: The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
CVE: CVE-2015-1844
Published: 2015-08-14
Description: Foreman before 1.7.5 allows remote authenticated users to bypass organization and location restrictions by connecting through the REST API.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://projects.theforeman.org/issues/9947; https://access.redhat.com/errata/RHSA-2015:1591; https://access.redhat.com/errata/RHSA-2015:1592
CVE: CVE-2015-3155
Published: 2015-08-14
Description: Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: http://projects.theforeman.org/issues/10275; https://access.redhat.com/errata/RHSA-2015:1591; https://access.redhat.com/errata/RHSA-2015:1592
CVE: CVE-2015-3235
Published: 2015-08-14
Description: Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit administrator users and change their passwords via unspecified vectors.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-264
References: http://projects.theforeman.org/issues/10829; http://theforeman.org/manuals/1.9/index.html#Releasenotesfor1.9; https://access.redhat.com/errata/RHSA-2015:1591
CVE: CVE-2015-3289
Published: 2015-08-14
Description: OpenStack Glance before 2015.1.1 (kilo) allows remote authenticated users to cause a denial of service (disk consumption) by repeatedly using the import task flow API to create images and then deleting them.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://lists.openstack.org/pipermail/openstack-announce/2015-July/000481.html; http://www.securityfocus.com/bid/76068; https://bugs.launchpad.net/glance/+bug/1454087
CVE: CVE-2015-5475
Published: 2015-08-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in Request Tracker (RT) 4.x before 4.2.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) user and (2) group rights management pages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://blog.bestpractical.com/2015/08/security-vulnerabilities-in-rt.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-August/164607.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165124.html
CVE: CVE-2015-5696
Published: 2015-08-14
Description: Dell Netvault Backup before 10.0.5 allows remote attackers to cause a denial of service (crash) via a crafted request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://packetstormsecurity.com/files/132928/Dell-Netvault-Backup-10.0.1.24-Denial-Of-Service.html; http://www.securityfocus.com/archive/1/536111/100/0/threaded; http://www.securitytracker.com/id/1033145
CVE: CVE-2015-1642
Published: 2015-08-15
Description: Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://www.securitytracker.com/id/1033239; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081; https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1203