deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-0613
Published: 2015-04-03
Description: The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (core dump and restart) via crafted SIP INVITE messages, aka Bug ID CSCul20444.
CVSS Score: 7.1 (HIGH)
CWE: CWE-19
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc; http://www.securitytracker.com/id/1032010; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc
CVE: CVE-2015-0614
Published: 2015-04-03
Description: The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (core dump and restart) via crafted SIP INVITE messages, aka Bug ID CSCul26267.
CVSS Score: 7.1 (HIGH)
CWE: CWE-19
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc; http://www.securitytracker.com/id/1032010; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc
CVE: CVE-2015-0615
Published: 2015-04-03
Description: The call-handling implementation in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (port consumption) by improperly terminating SIP sessions, aka Bug ID CSCul28089.
CVSS Score: 7.1 (HIGH)
CWE: CWE-19
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc; http://www.securitytracker.com/id/1032010; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc
CVE: CVE-2015-0616
Published: 2015-04-03
Description: The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2)SU2, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (core dump and restart) by improperly terminating SIP TCP connections, aka Bug ID CSCul69819.
CVSS Score: 7.1 (HIGH)
CWE: CWE-19
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc; http://www.securitytracker.com/id/1032010; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc
CVE: CVE-2015-0688
Published: 2015-04-04
Description: Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when NAT is enabled, allows remote attackers to cause a denial of service (module crash) via malformed H.323 packets, aka Bug ID CSCup21070.
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=38210; http://www.securitytracker.com/id/1032023; http://tools.cisco.com/security/center/viewAlert.x?alertId=38210
CVE: CVE-2015-2111
Published: 2015-04-04
Description: Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown vectors.
CVSS Score: 2.1 (LOW)
References: http://www.securityfocus.com/bid/73481; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04626732; http://www.securityfocus.com/bid/73481
CVE: CVE-2015-0529
Published: 2015-04-05
Description: EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://packetstormsecurity.com/files/131250/EMC-PowerPath-Virtual-Appliance-Undocumented-User-Accounts.html; http://seclists.org/bugtraq/2015/Apr/1; http://packetstormsecurity.com/files/131250/EMC-PowerPath-Virtual-Appliance-Undocumented-User-Accounts.html
CVE: CVE-2015-0932
Published: 2015-04-05
Description: The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G devices does not require authentication for rsync sessions, which allows remote attackers to read or write to arbitrary files via TCP traffic on port 873.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://blog.cylance.com/spear-team-cve-2015-0932; http://www.antlabs.com/index.php?option=com_content&view=article&id=195:rsync-remote-file-system-access-vulnerability-cve-2015-0932&catid=54:advisories&Itemid=133; http://www.kb.cert.org/vuls/id/930956
CVE: CVE-2015-0950
Published: 2015-04-05
Description: Cross-site scripting (XSS) vulnerability in admin.php in X-Cart 5.1.6 through 5.1.10 allows remote attackers to inject arbitrary web script or HTML via the substring parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.kb.cert.org/vuls/id/924124; https://blog.x-cart.com/5-1-11-released.html; http://www.kb.cert.org/vuls/id/924124
CVE: CVE-2015-0951
Published: 2015-04-05
Description: X-Cart before 5.1.11 allows remote authenticated users to read or delete address data of arbitrary accounts via a modified (1) update or (2) remove request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://www.kb.cert.org/vuls/id/924124; https://blog.x-cart.com/5-1-11-released.html; http://www.kb.cert.org/vuls/id/924124
CVE: CVE-2015-0777
Published: 2015-04-05
Description: drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html
CVE: CVE-2015-1465
Published: 2015-04-05
Description: The IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence of caching, which allows remote attackers to cause a denial of service (memory consumption or system crash) via a flood of packets.
CVSS Score: 7.8 (HIGH)
CWE: CWE-17
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=df4d92549f23e1c037e83323aff58a21b3de7fe0; http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html
CVE: CVE-2014-6221
Published: 2015-04-06
Description: The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 does not properly generate random numbers, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.
CVSS Score: 9.4 (HIGH)
CWE: CWE-310
References: http://www-01.ibm.com/support/docview.wss?uid=swg21698893; http://www.securityfocus.com/bid/73915; http://www.securitytracker.com/id/1032026
CVE: CVE-2015-0117
Published: 2015-04-06
Description: The LDAP Server in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, aka SPR KLYH9SLRGM.
CVSS Score: 10.0 (HIGH)
References: http://www-01.ibm.com/support/docview.wss?uid=swg21700029; http://www.securitytracker.com/id/1032027; http://www-01.ibm.com/support/docview.wss?uid=swg21700029
CVE: CVE-2015-0119
Published: 2015-04-06
Description: FastBack Mount in IBM Tivoli Storage Manager FastBack 6.1.x before 6.1.11.1 allows remote attackers to execute arbitrary code by connecting to the Mount port.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://www-01.ibm.com/support/docview.wss?uid=swg21699645; http://www-01.ibm.com/support/docview.wss?uid=swg21699645
CVE: CVE-2015-0134
Published: 2015-04-06
Description: Buffer overflow in the SSLv2 implementation in IBM Domino 8.5.x before 8.5.1 FP5 IF3, 8.5.2 before FP4 IF3, 8.5.3 before FP6 IF6, 9.0 before IF7, and 9.0.1 before FP2 IF3 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www-01.ibm.com/support/docview.wss?uid=swg21700029; http://www.securitytracker.com/id/1032027; http://www-01.ibm.com/support/docview.wss?uid=swg21700029
CVE: CVE-2015-0179
Published: 2015-04-06
Description: Notes System Diagnostic (NSD) in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows local users to obtain the System privilege via unspecified vectors, aka SPR TCHL9SST8V.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg21700029; http://www.securitytracker.com/id/1032027; https://www.exploit-db.com/exploits/42605/
CVE: CVE-2015-1890
Published: 2015-04-06
Description: /usr/lpp/mmfs/bin/gpfs.snap in IBM General Parallel File System (GPFS) 4.1 before 4.1.0.7 produces an archive potentially containing cleartext keys, and lacks a warning about reviewing this archive to detect included keys, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.
CVSS Score: 3.5 (LOW)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=isg3T1022077; http://www.securityfocus.com/bid/73918; http://www.ibm.com/support/docview.wss?uid=isg3T1022077
CVE: CVE-2015-1893
Published: 2015-04-06
Description: The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IT07841; http://www-01.ibm.com/support/docview.wss?uid=swg21701337; http://www.securityfocus.com/bid/73916
CVE: CVE-2015-0877
Published: 2015-04-06
Description: Unrestricted file upload vulnerability in app/lib/mlf.pl in C-BOARD Moyuku before 1.03b3 allows remote attackers to execute arbitrary code by uploading a file with a \0 character in its name.
CVSS Score: 7.5 (HIGH)
References: http://jvn.jp/en/jp/JVN73261710/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000018; http://sourceforge.jp/projects/cb-moyuku/news/
CVE: CVE-2015-1601
Published: 2015-04-06
Description: Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 allows man-in-the-middle attackers to obtain sensitive information or modify transmitted data via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-254
References: http://www.securityfocus.com/bid/72691; http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-315836.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-487246.pdf
CVE: CVE-2015-1602
Published: 2015-04-06
Description: Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext (1) protection-level passwords or (2) web-server passwords by leveraging the ability to read these files.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-315836.pdf; http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-315836.pdf
CVE: CVE-2015-1843
Published: 2015-04-06
Description: The Red Hat docker package before 1.5.0-28, when using the --add-registry option, falls back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to block HTTPS traffic.  NOTE: this vulnerability exists because of a CVE-2014-5277 regression.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2015-0776.html; http://www.securityfocus.com/bid/73936; https://bugzilla.redhat.com/show_bug.cgi?id=1206443
CVE: CVE-2015-2166
Published: 2015-04-06
Description: Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the default URI.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/131233/Ericsson-Drutt-MSDP-Instance-Monitor-Directory-Traversal-File-Access.html; http://www.securityfocus.com/bid/73901; https://www.exploit-db.com/exploits/36619/
CVE: CVE-2015-2167
Published: 2015-04-06
Description: Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to jsp/start-3pi-manager.jsp.
CVSS Score: 5.8 (MEDIUM)
References: http://packetstormsecurity.com/files/131230/Ericsson-Drutt-MSDP-3PI-Manager-Open-Redirect.html; http://www.securityfocus.com/bid/73934; http://packetstormsecurity.com/files/131230/Ericsson-Drutt-MSDP-3PI-Manager-Open-Redirect.html
CVE: CVE-2015-2824
Published: 2015-04-06
Description: Multiple SQL injection vulnerabilities in the Simple Ads Manager plugin before 2.7.97 for WordPress allow remote attackers to execute arbitrary SQL commands via a (1) hits[][] parameter in a sam_hits action to sam-ajax.php; the (2) cstr parameter in a load_posts action to sam-ajax-admin.php; the (3) searchTerm parameter in a load_combo_data action to sam-ajax-admin.php; or the (4) subscriber, (5) contributor, (6) author, (7) editor, (8) admin, or (9) sadmin parameter in a load_users action to sam-ajax-admin.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/131280/WordPress-Simple-Ads-Manager-2.5.94-2.5.96-SQL-Injection.html; http://seclists.org/fulldisclosure/2015/Apr/6; http://seclists.org/fulldisclosure/2015/Apr/7
CVE: CVE-2015-0690
Published: 2015-04-07
Description: Cross-site scripting (XSS) vulnerability in the HTML help system on Cisco Wireless LAN Controller (WLC) devices before 8.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCun95178.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=38222; http://www.securitytracker.com/id/1032024; http://tools.cisco.com/security/center/viewAlert.x?alertId=38222
CVE: CVE-2015-0876
Published: 2015-04-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in the print_language_selectbox function in classes/adminpage.inc.php in Saurus CMS Community Edition before 4.7 2015-02-04 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN18387086/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000017; https://github.com/sauruscms/Saurus-CMS-Community-Edition/commit/1bc272874a86eaab99dccd00b29177423fd83877
CVE: CVE-2015-0905
Published: 2015-04-08
Description: Cross-site request forgery (CSRF) vulnerability in bBlog allows remote attackers to hijack the authentication of arbitrary users.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN71903938/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000047; http://sourceforge.net/projects/bblog/
CVE: CVE-2015-1773
Published: 2015-04-08
Description: Cross-site scripting (XSS) vulnerability in asdoc/templates/index.html in Apache Flex before 4.14.1 allows remote attackers to inject arbitrary web script or HTML by providing a crafted URI to JavaScript code generated by the asdoc component.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/bugtraq/2015/Apr/42; http://www.securityfocus.com/bid/73954; http://www.securitytracker.com/id/1032107
CVE: CVE-2015-2827
Published: 2015-04-08
Description: Cross-site scripting (XSS) vulnerability in CA Spectrum 9.2.x and 9.3.x before 9.3 H02 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://packetstormsecurity.com/files/131330/Security-Notice-For-CA-Spectrum.html; http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150407-01-security-notice-for-ca-spectrum.aspx; http://www.securityfocus.com/archive/1/535205/100/0/threaded
CVE: CVE-2015-2828
Published: 2015-04-08
Description: CA Spectrum 9.2.x and 9.3.x before 9.3 H02 does not properly validate serialized Java objects, which allows remote authenticated users to obtain administrative privileges via crafted object data.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/131330/Security-Notice-For-CA-Spectrum.html; http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150407-01-security-notice-for-ca-spectrum.aspx; http://www.securityfocus.com/archive/1/535205/100/0/threaded
CVE: CVE-2015-0798
Published: 2015-04-08
Description: The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre-release, does not properly handle privileged URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://www.mozilla.org/security/announce/2015/mfsa2015-43.html; http://www.oracle.com/technetwork/topics/security/bulletinapr2[PII_REDACTED].html; http://www.securitytracker.com/id/1032029
CVE: CVE-2015-0799
Published: 2015-04-08
Description: The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html; http://www.mozilla.org/security/announce/2015/mfsa2015-44.html; http://www.oracle.com/technetwork/topics/security/bulletinapr2[PII_REDACTED].html
CVE: CVE-2015-1472
Published: 2015-04-08
Description: The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during memory allocation, which allows context-dependent attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long line containing wide characters that are improperly handled in a wscanf call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://openwall.com/lists/oss-security/2015/02/04/1; http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html; http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html
CVE: CVE-2015-1473
Published: 2015-04-08
Description: The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during a risk-management decision for use of the alloca function, which might allow context-dependent attackers to cause a denial of service (segmentation violation) or overwrite memory locations beyond the stack boundary via a long line containing wide characters that are improperly handled in a wscanf call.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-119
References: http://openwall.com/lists/oss-security/2015/02/04/1; http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/72499
CVE: CVE-2015-1798
Published: 2015-04-08
Description: The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.
CVSS Score: 1.8 (LOW)
CWE: CWE-17
References: http://bugs.ntp.org/show_bug.cgi?id=2779; http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html
CVE: CVE-2015-1799
Published: 2015-04-08
Description: The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs state-variable updates upon receiving certain invalid packets, which makes it easier for man-in-the-middle attackers to cause a denial of service (synchronization loss) by spoofing the source IP address of a peer.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-17
References: http://bugs.ntp.org/show_bug.cgi?id=2781; http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/04/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
CVE: CVE-2015-2822
Published: 2015-04-08
Description: Siemens SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2 and SIMATIC WinCC Runtime Advanced before WinCC (TIA Portal) 13 SP1 Upd2 allow man-in-the-middle attackers to cause a denial of service via crafted packets on TCP port 102.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/74028; http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-487246.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-487246.pdf
CVE: CVE-2015-2823
Published: 2015-04-08
Description: Siemens SIMATIC HMI Basic Panels 2nd Generation before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC WinCC Runtime Advanced before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC WinCC Runtime Professional before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Basic Panels 1st Generation (WinCC TIA Portal), SIMATIC HMI Mobile Panel 277 (WinCC TIA Portal), SIMATIC HMI Multi Panels (WinCC TIA Portal), and SIMATIC WinCC 7.x before 7.3 Upd4 allow remote attackers to complete authentication by leveraging knowledge of a password hash without knowledge of the associated password.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://www.securityfocus.com/bid/74040; http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-487246.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-487246.pdf
CVE: CVE-2015-0202
Published: 2015-04-08
Description: The mod_dav_svn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service (memory consumption) via a large number of REPORT requests, which trigger the traversal of FSFS repository nodes.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-updates/2015-04/msg00008.html; http://subversion.apache.org/security/CVE-2015-0202-advisory.txt; http://www.mandriva.com/security/advisories?name=MDVSA-2015:192
CVE: CVE-2015-0248
Published: 2015-04-08
Description: The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combinations related to dynamically evaluated revision numbers.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html; http://lists.opensuse.org/opensuse-updates/2015-04/msg00008.html; http://rhn.redhat.com/errata/RHSA-2015-1633.html