deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-4763
Published: 2015-07-16
Description: Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Security.
CVSS Score: 3.6 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securitytracker.com/id/1032915; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4764
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4775, CVE-2015-4776, CVE-2015-4777, CVE-2015-4778, CVE-2015-4780, CVE-2015-4781, CVE-2015-4782, CVE-2015-4783, CVE-2015-4784, CVE-2015-4785, CVE-2015-4786, CVE-2015-4787, CVE-2015-4789, and CVE-2015-4790.
CVSS Score: 6.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4765
Published: 2015-07-16
Description: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via vectors related to OAM Dashboard.
CVSS Score: 3.5 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securitytracker.com/id/1032926; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4767
Published: 2015-07-16
Description: Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Firewall, a different vulnerability than CVE-2015-4769.
CVSS Score: 1.7 (LOW)
References: http://lists.opensuse.org/opensuse-updates/2015-09/msg00042.html; http://rhn.redhat.com/errata/RHSA-2015-1630.html; http://rhn.redhat.com/errata/RHSA-2015-1646.html
CVE: CVE-2015-4768
Published: 2015-07-16
Description: Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, and 6.3.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Diagnostics.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securitytracker.com/id/1032915; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4769
Published: 2015-07-16
Description: Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Firewall, a different vulnerability than CVE-2015-4767.
CVSS Score: 3.5 (LOW)
References: http://lists.opensuse.org/opensuse-updates/2015-09/msg00042.html; http://rhn.redhat.com/errata/RHSA-2015-1630.html; http://rhn.redhat.com/errata/RHSA-2015-1646.html
CVE: CVE-2015-4770
Published: 2015-07-16
Description: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to UNIX filesystem.
CVSS Score: 4.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/75880; http://www.securitytracker.com/id/1032914
CVE: CVE-2015-4771
Published: 2015-07-16
Description: Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to RBR.
CVSS Score: 3.5 (LOW)
References: http://lists.opensuse.org/opensuse-updates/2015-09/msg00042.html; http://rhn.redhat.com/errata/RHSA-2015-1630.html; http://rhn.redhat.com/errata/RHSA-2015-1646.html
CVE: CVE-2015-4772
Published: 2015-07-16
Description: Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2015-09/msg00042.html; http://rhn.redhat.com/errata/RHSA-2015-1630.html; http://rhn.redhat.com/errata/RHSA-2015-1646.html
CVE: CVE-2015-4773
Published: 2015-07-16
Description: Unspecified vulnerability in the Hyperion Common Security component in Oracle Hyperion 11.1.2.2, 11.1.2.3, and 11.1.2.4 allows remote authenticated users to affect availability via unknown vectors related to User Account Update.
CVSS Score: 4.0 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.securitytracker.com/id/1032924; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4774
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect integrity and availability via unknown vectors, a different vulnerability than CVE-2015-4779 and CVE-2015-4788.
CVSS Score: 3.3 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4775
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4776, CVE-2015-4777, CVE-2015-4778, CVE-2015-4780, CVE-2015-4781, CVE-2015-4782, CVE-2015-4783, CVE-2015-4784, CVE-2015-4785, CVE-2015-4786, CVE-2015-4787, CVE-2015-4789, and CVE-2015-4790.
CVSS Score: 6.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4776
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4775, CVE-2015-4777, CVE-2015-4778, CVE-2015-4780, CVE-2015-4781, CVE-2015-4782, CVE-2015-4783, CVE-2015-4784, CVE-2015-4785, CVE-2015-4786, CVE-2015-4787, CVE-2015-4789, and CVE-2015-4790.
CVSS Score: 6.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4777
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4775, CVE-2015-4776, CVE-2015-4778, CVE-2015-4780, CVE-2015-4781, CVE-2015-4782, CVE-2015-4783, CVE-2015-4784, CVE-2015-4785, CVE-2015-4786, CVE-2015-4787, CVE-2015-4789, and CVE-2015-4790.
CVSS Score: 6.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4778
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4775, CVE-2015-4776, CVE-2015-4777, CVE-2015-4780, CVE-2015-4781, CVE-2015-4782, CVE-2015-4783, CVE-2015-4784, CVE-2015-4785, CVE-2015-4786, CVE-2015-4787, CVE-2015-4789, and CVE-2015-4790.
CVSS Score: 6.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4779
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect integrity and availability via unknown vectors, a different vulnerability than CVE-2015-4774 and CVE-2015-4788.
CVSS Score: 3.3 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4780
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4775, CVE-2015-4776, CVE-2015-4777, CVE-2015-4778, CVE-2015-4781, CVE-2015-4782, CVE-2015-4783, CVE-2015-4784, CVE-2015-4785, CVE-2015-4786, CVE-2015-4787, CVE-2015-4789, and CVE-2015-4790.
CVSS Score: 6.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4781
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4775, CVE-2015-4776, CVE-2015-4777, CVE-2015-4778, CVE-2015-4780, CVE-2015-4782, CVE-2015-4783, CVE-2015-4784, CVE-2015-4785, CVE-2015-4786, CVE-2015-4787, CVE-2015-4789, and CVE-2015-4790.
CVSS Score: 6.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4782
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4775, CVE-2015-4776, CVE-2015-4777, CVE-2015-4778, CVE-2015-4780, CVE-2015-4781, CVE-2015-4783, CVE-2015-4784, CVE-2015-4785, CVE-2015-4786, CVE-2015-4787, CVE-2015-4789, and CVE-2015-4790.
CVSS Score: 6.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4783
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4775, CVE-2015-4776, CVE-2015-4777, CVE-2015-4778, CVE-2015-4780, CVE-2015-4781, CVE-2015-4782, CVE-2015-4784, CVE-2015-4785, CVE-2015-4786, CVE-2015-4787, CVE-2015-4789, and CVE-2015-4790.
CVSS Score: 6.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4784
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4775, CVE-2015-4776, CVE-2015-4777, CVE-2015-4778, CVE-2015-4780, CVE-2015-4781, CVE-2015-4782, CVE-2015-4783, CVE-2015-4785, CVE-2015-4786, CVE-2015-4787, CVE-2015-4789, and CVE-2015-4790.
CVSS Score: 6.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4785
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4775, CVE-2015-4776, CVE-2015-4777, CVE-2015-4778, CVE-2015-4780, CVE-2015-4781, CVE-2015-4782, CVE-2015-4783, CVE-2015-4784, CVE-2015-4786, CVE-2015-4787, CVE-2015-4789, and CVE-2015-4790.
CVSS Score: 6.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4786
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4775, CVE-2015-4776, CVE-2015-4777, CVE-2015-4778, CVE-2015-4780, CVE-2015-4781, CVE-2015-4782, CVE-2015-4783, CVE-2015-4784, CVE-2015-4785, CVE-2015-4787, CVE-2015-4789, and CVE-2015-4790.
CVSS Score: 6.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4787
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4775, CVE-2015-4776, CVE-2015-4777, CVE-2015-4778, CVE-2015-4780, CVE-2015-4781, CVE-2015-4782, CVE-2015-4783, CVE-2015-4784, CVE-2015-4785, CVE-2015-4786, CVE-2015-4789, and CVE-2015-4790.
CVSS Score: 6.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4788
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect integrity and availability via unknown vectors, a different vulnerability than CVE-2015-4774 and CVE-2015-4779.
CVSS Score: 3.3 (LOW)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4789
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4775, CVE-2015-4776, CVE-2015-4777, CVE-2015-4778, CVE-2015-4780, CVE-2015-4781, CVE-2015-4782, CVE-2015-4783, CVE-2015-4784, CVE-2015-4785, CVE-2015-4786, CVE-2015-4787, and CVE-2015-4790.
CVSS Score: 6.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-4790
Published: 2015-07-16
Description: Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624, CVE-2015-2626, CVE-2015-2640, CVE-2015-2654, CVE-2015-2656, CVE-2015-4754, CVE-2015-4764, CVE-2015-4775, CVE-2015-4776, CVE-2015-4777, CVE-2015-4778, CVE-2015-4780, CVE-2015-4781, CVE-2015-4782, CVE-2015-4783, CVE-2015-4784, CVE-2015-4785, CVE-2015-4786, CVE-2015-4787, and CVE-2015-4789.
CVSS Score: 6.9 (MEDIUM)
References: http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/topics/security/cpujul2[PII_REDACTED].html
CVE: CVE-2015-1831
Published: 2015-07-16
Description: The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/75940; http://www.securitytracker.com/id/1032985; https://struts.apache.org/docs/s2-024.html
CVE: CVE-2015-3259
Published: 2015-07-16
Description: Stack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows local guest administrators to gain privileges via a long configuration argument.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00041.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00042.html; http://www.debian.org/security/2015/dsa-3414
CVE: CVE-2015-3449
Published: 2015-07-16
Description: The Windows client in SAP Afaria 7.0.6398.0 uses weak permissions (Everyone: read and Everyone: write) for the install folder, which allows local users to gain privileges via a Trojan horse XeService.exe file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-254
References: http://packetstormsecurity.com/files/132681/SAP-Afaria-XeService.exe-7.0.6398.0-Weak-File-Permissions.html; http://seclists.org/fulldisclosure/2015/Jul/60; http://www.securityfocus.com/bid/75725
CVE: CVE-2015-3621
Published: 2015-07-16
Description: Untrusted search path vulnerability in SAP Enterprise Central Component (ECC) allows local users to gain privileges via a Trojan horse program.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/132680/SAP-ECC-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2015/Jul/59; https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-3621/
CVE: CVE-2015-4637
Published: 2015-07-16
Description: The REST API in F5 BIG-IQ Cloud, Device, and Security 4.4.0 and 4.5.0 before HF2 and ADC 4.5.0 before HF2, when configured for LDAP remote authentication and the LDAP server allows anonymous BIND operations, allows remote attackers to obtain an authentication token for arbitrary users by guessing an LDAP user account name.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-17, CWE-310
References: https://support.f5.com/kb/en-us/solutions/public/16000/800/sol16861.html; https://support.f5.com/kb/en-us/solutions/public/16000/800/sol16861.html
CVE: CVE-2015-5080
Published: 2015-07-16
Description: The Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before 10.1.132.8, 10.5 before Build 56.15, and 10.5.e before Build 56.1505.e allows remote authenticated users to execute arbitrary shell commands via shell metacharacters in the filter parameter to rapi/ipsec_logs.
CVSS Score: 9.0 (HIGH)
CWE: CWE-77
References: http://security-assessment.com/files/documents/advisory/Citrix-Netscaler-Final.pdf; http://support.citrix.com/article/CTX201149; http://www.securityfocus.com/bid/75505
CVE: CVE-2015-5357
Published: 2015-07-16
Description: The Juniper EX4600, QFX3500, QFX3600, and QFX5100 switches with Junos 13.2X51-D15 through 13.2X51-D25, 13.2X51 before 13.2X51-D30, and 14.1X53 before 14.1X53-D10 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10684; http://www.securitytracker.com/id/1032847; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10684
CVE: CVE-2015-5360
Published: 2015-07-16
Description: IPv6 sendd in Juniper Junos 12.1X44 before 12.1X44-D51, 12.1X46 before 12.1X46-D36, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.2 before 14.2R3, 15.1 before 15.1R1, and 15.1X49 before 15.1X49-D20, when the "set protocols neighbor-discovery secure security-level default" option is configured, allows remote attackers to cause a denial of service (CPU consumption) via a crafted Secure Neighbor Discovery (SEND) Protocol packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10688; http://www.securitytracker.com/id/1032849; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10688
CVE: CVE-2015-5363
Published: 2015-07-16
Description: The SRX Network Security Daemon (nsd) in Juniper SRX Series services gateways with Junos 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 allows remote DNS servers to cause a denial of service (crash) via a crafted DNS response.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-19
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10692; http://www.securitytracker.com/id/1032848; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10692
CVE: CVE-2015-5528
Published: 2015-07-16
Description: Cross-site scripting (XSS) vulnerability in the save_order function in class-floating-social-bar.php in the Floating Social Bar plugin before 1.1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the items[] parameter in an fsb_save_order action to wp-admin/admin-ajax.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/132670/WordPress-Floating-Social-Bar-1.1.5-Cross-Site-Scripting.html; http://security.szurek.pl/floating-social-bar-115-xss.html; http://www.securityfocus.com/bid/75944
CVE: CVE-2015-5529
Published: 2015-07-16
Description: Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to dashboard/settings/categories/, (2) title or (3) rel parameter to dashboard/settings/links/, or (4) url parameter to dashboard/tools/pingservers/.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/132683/ArticleFR-3.0.6-Cross-Site-Scripting.html; http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5247.php; https://www.exploit-db.com/exploits/37596/