rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-5611 
Unspecified vulnerability in Uconnect before 15.26.1, as used in certain Fiat Chrysler Automobiles (FCA) from 2013 to 2015 models, allows remote attackers in the same cellular network to control vehicle movement, cause human harm or physical damage, or modify dashboard settings via vectors related to modification of entertainment-system firmware and access of the CAN bus due to insufficient "Radio security protection," as demonstrated on a 2014 Jeep Cherokee Limited FWD.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-21T18:00:00.000Z
CVE-2015-5612 
Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-04T15:00:00.000Z
CVE-2015-5613 
Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving a file title, a different vulnerability than CVE-2015-5612.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-27T17:00:00.000Z
CVE-2015-5617 
SQL injection vulnerability in pub/m_pending_news/delete_pending_news.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-12T14:30:26.000Z
CVE-2015-5618 
Chiyu BF-630 and BF-630W fingerprint access-control devices allow remote attackers to bypass authentication and (1) read or (2) modify (a) Voice Time Set configuration settings via a request to voice.htm or (b) UniFinger configuration settings via a request to bf.htm, a different vulnerability than CVE-2015-2871.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-01T01:00:00.000Z
CVE-2015-5619 
Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might allow attackers to obtain sensitive information via a man-in-the-middle attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-09T16:00:00.000Z
CVE-2015-5621 
The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-19T15:00:00.000Z
CVE-2015-5622 
Cross-site scripting (XSS) vulnerability in WordPress before 4.2.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the Author or Contributor role to place a crafted shortcode inside an HTML element, related to wp-includes/kses.php and wp-includes/shortcodes.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-03T14:00:00.000Z
CVE-2015-5623 
WordPress before 4.2.3 does not properly verify the edit_posts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role, as demonstrated by a post-quickdraft-save action to wp-admin/post.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-03T14:00:00.000Z
CVE-2015-5624 
Buffer overflow in the ExecCall method in c2lv6.ocx in the FreeBit ELPhoneBtnV6 ActiveX control allows remote attackers to execute arbitrary code via a crafted HTML document, related to the discontinued "Click to Live" service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-07T14:00:00.000Z
CVE-2015-5625 
Cross-site scripting (XSS) vulnerability in OpenDocMan before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the redirection parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-07T14:00:00.000Z
CVE-2015-5626 
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquantum R2.85.00 and earlier, Exaquantum/Batch R2.50.30 and earlier, Exapilot R3.96.10 and earlier, Exaplog R3.40.00 and earlier, Exasmoc R4.03.20 and earlier, Exarqe R4.03.20 and earlier, Field Wireless Device OPC Server R2.01.02 and earlier, PRM R3.12.00 and earlier, STARDOM VDS R7.30.01 and earlier, STARDOM OPC Server for Windows R3.40 and earlier, FAST/TOOLS R10.01 and earlier, B/M9000CS R5.05.01 and earlier, B/M9000 VP R7.03.04 and earlier, and FieldMate R1.01 or R1.02 allows remote attackers to cause a denial of service (network-communications outage) via a crafted packet.
Problem types: description: Buffer Overflow
Affected products: vendor: Yokogawa
product: CENTUM CS 1000
vendor: Yokogawa
product: CENTUM CS 3000
vendor: Yokogawa
product: CENTUM CS 3000 Entry
vendor: Yokogawa
product: CENTUM VP
vendor: Yokogawa
product: CENTUM VP Entry
vendor: Yokogawa
product: ProSafe-RS
vendor: Yokogawa
product: Exaopc
vendor: Yokogawa
product: Exaquantum
vendor: Yokogawa
product: Exaquantum/Batch
vendor: Yokogawa
product: Exapilot
vendor: Yokogawa
product: Exaplog
vendor: Yokogawa
product: Exasmoc
vendor: Yokogawa
product: Exarqe
vendor: Yokogawa
product: Field Wireless Device OPC Server
vendor: Yokogawa
product: PRM
vendor: Yokogawa
product: STARDOM VDS
vendor: Yokogawa
product: STARDOM OPC Server for Windows
vendor: Yokogawa
product: FAST/TOOLS
vendor: Yokogawa
product: B/M9000CS
vendor: Yokogawa
product: B/M9000 VP
vendor: Yokogawa
product: FieldMate
Published: 2020-02-05T18:46:05.000Z
CVE-2015-5627 
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquantum R2.85.00 and earlier, Exaquantum/Batch R2.50.30 and earlier, Exapilot R3.96.10 and earlier, Exaplog R3.40.00 and earlier, Exasmoc R4.03.20 and earlier, Exarqe R4.03.20 and earlier, Field Wireless Device OPC Server R2.01.02 and earlier, PRM R3.12.00 and earlier, STARDOM VDS R7.30.01 and earlier, STARDOM OPC Server for Windows R3.40 and earlier, FAST/TOOLS R10.01 and earlier, B/M9000CS R5.05.01 and earlier, B/M9000 VP R7.03.04 and earlier, and FieldMate R1.01 or R1.02 allows remote attackers to cause a denial of service (process outage) via a crafted packet.
Problem types: description: Buffer Overflow
Affected products: vendor: Yokogawa
product: CENTUM CS 1000
vendor: Yokogawa
product: CENTUM CS 3000
vendor: Yokogawa
product: CENTUM CS 3000 Entry
vendor: Yokogawa
product: CENTUM VP
vendor: Yokogawa
product: CENTUM VP Entry
vendor: Yokogawa
product: ProSafe-RS
vendor: Yokogawa
product: Exaopc
vendor: Yokogawa
product: Exaquantum
vendor: Yokogawa
product: Exaquantum/Batch
vendor: Yokogawa
product: Exapilot
vendor: Yokogawa
product: Exaplog
vendor: Yokogawa
product: Exasmoc
vendor: Yokogawa
product: Exarqe
vendor: Yokogawa
product: Field Wireless Device OPC Server
vendor: Yokogawa
product: PRM
vendor: Yokogawa
product: STARDOM VDS
vendor: Yokogawa
product: STARDOM OPC Server for Windows
vendor: Yokogawa
product: FAST/TOOLS
vendor: Yokogawa
product: B/M9000CS
vendor: Yokogawa
product: B/M9000 VP
vendor: Yokogawa
product: FieldMate
Published: 2020-02-05T18:45:58.000Z
CVE-2015-5628 
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquantum R2.85.00 and earlier, Exaquantum/Batch R2.50.30 and earlier, Exapilot R3.96.10 and earlier, Exaplog R3.40.00 and earlier, Exasmoc R4.03.20 and earlier, Exarqe R4.03.20 and earlier, Field Wireless Device OPC Server R2.01.02 and earlier, PRM R3.12.00 and earlier, STARDOM VDS R7.30.01 and earlier, STARDOM OPC Server for Windows R3.40 and earlier, FAST/TOOLS R10.01 and earlier, B/M9000CS R5.05.01 and earlier, B/M9000 VP R7.03.04 and earlier, and FieldMate R1.01 or R1.02 allows remote attackers to execute arbitrary code via a crafted packet.
Problem types: description: Buffer Overflow
Affected products: vendor: Yokogawa
product: CENTUM CS 1000
vendor: Yokogawa
product: CENTUM CS 3000
vendor: Yokogawa
product: CENTUM CS 3000 Entry
vendor: Yokogawa
product: CENTUM VP
vendor: Yokogawa
product: CENTUM VP Entry
vendor: Yokogawa
product: ProSafe-RS
vendor: Yokogawa
product: Exaopc
vendor: Yokogawa
product: Exaquantum
vendor: Yokogawa
product: Exaquantum/Batch
vendor: Yokogawa
product: Exapilot
vendor: Yokogawa
product: Exaplog
vendor: Yokogawa
product: Exasmoc
vendor: Yokogawa
product: Exarqe
vendor: Yokogawa
product: Field Wireless Device OPC Server
vendor: Yokogawa
product: PRM
vendor: Yokogawa
product: STARDOM VDS
vendor: Yokogawa
product: STARDOM OPC Server for Windows
vendor: Yokogawa
product: FAST/TOOLS
vendor: Yokogawa
product: B/M9000CS
vendor: Yokogawa
product: B/M9000 VP
vendor: Yokogawa
product: FieldMate
Published: 2020-02-05T18:46:01.000Z
CVE-2015-5629 
The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android and 1.0.2 and earlier for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-11T21:00:00.000Z
CVE-2015-5630 
Cross-site scripting (XSS) vulnerability in the NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android and 1.0.2 and earlier for iOS allows remote attackers to inject arbitrary web script or HTML via a crafted SSID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-11T21:00:00.000Z
CVE-2015-5631 
Cross-site request forgery (CSRF) vulnerability in the Remote UI on Canon PIXMA MG7500 printers allows remote attackers to hijack the authentication of administrators.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-11T16:00:00.000Z
CVE-2015-5632 
The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attackers to bypass a whitelist.xml URL whitelist protection mechanism and obtain API access via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-20T17:00:00.000Z
CVE-2015-5633 
The Newphoria Auction Camera application for iOS and before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-20T17:00:00.000Z
CVE-2015-5634 
The Newphoria MEGAPHONE MUSIC application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-20T17:00:00.000Z
CVE-2015-5635 
The Newphoria Koritore application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-20T17:00:00.000Z
CVE-2015-5636 
The Newphoria Reversi application before 1.0.3 for Android and before 1.2 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-20T17:00:00.000Z
CVE-2015-5637 
The Newphoria Photon application before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-20T17:00:00.000Z
CVE-2015-5638 
Directory traversal vulnerability in H2O before 1.4.5 and 1.5.x before 1.5.0-beta2, when the file.dir directive is enabled, allows remote attackers to read arbitrary files via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-20T14:00:00.000Z
CVE-2015-5639 
niconico App for iOS before 6.38 does not verify SSL certificates which could allow remote attackers to execute man-in-the-middle attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-10T16:00:00.000Z
CVE-2015-5640 
baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-03T10:00:00.000Z
CVE-2015-5641 
SQL injection vulnerability in baserCMS before 3.0.8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-03T10:00:00.000Z
CVE-2015-5642 
Multiple SQL injection vulnerabilities in ICZ MATCHA INVOICE before 2.5.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-03T10:00:00.000Z
CVE-2015-5643 
The installer in ICZ MATCHA INVOICE before 2.5.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-03T10:00:00.000Z
CVE-2015-5644 
The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-03T10:00:00.000Z
CVE-2015-5645 
ICZ MATCHA SNS before 1.3.7 allows remote authenticated users to obtain administrative privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-03T10:00:00.000Z
CVE-2015-5646 
Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecified vectors, aka CyVDB-863 and CyVDB-867.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-12T10:00:00.000Z
CVE-2015-5647 
The RSS Reader component in Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecified vectors, aka CyVDB-866.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-12T10:00:00.000Z
CVE-2015-5648 
SQL injection vulnerability in list.php in phpRechnung before 1.6.5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-11T01:00:00.000Z
CVE-2015-5649 
Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended login restrictions or obtain sensitive information, by leveraging certain group-administration privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-08T20:00:00.000Z
CVE-2015-5650 
Directory traversal vulnerability in AjaXplorer 2.0 allows remote attackers to read arbitrary files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-03T10:00:00.000Z
CVE-2015-5651 
Cross-site scripting (XSS) vulnerability in Dotclear before 2.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-03T22:00:00.000Z
CVE-2015-5652 
Untrusted search path vulnerability in python.exe in Python through 3.5.0 on Windows allows local users to gain privileges via a Trojan horse readline.pyd file in the current working directory.  NOTE: the vendor says "It was determined that this is a longtime behavior of Python that cannot really be altered at this point."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-05T10:00:00.000Z
CVE-2015-5653 
Buffer overflow in Canary Labs Trend Web Server before 9.5.2 allows remote attackers to execute arbitrary code via a crafted TCP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-02T15:00:00.000Z
CVE-2015-5654 
Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-11T01:00:00.000Z
CVE-2015-5655 
The Adways Party Track SDK before 1.6.6 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-10T02:00:00.000Z
CVE-2015-5659 
SQL injection vulnerability in Network Applied Communication Laboratory Pref Shimane CMS 2.x before 2.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-11T01:00:00.000Z
CVE-2015-5660 
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-16T01:00:00.000Z
CVE-2015-5661 
The SAND STUDIO AirDroid application 1.1.0 and earlier for Android mishandles implicit intents, which allows attackers to obtain sensitive information via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-18T19:00:00.000Z
CVE-2015-5662 
Directory traversal vulnerability in Avast before 150918-0 allows remote attackers to delete or write to arbitrary files via a crafted entry in a ZIP archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-18T10:00:00.000Z
CVE-2015-5663 
The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-30T02:00:00.000Z
CVE-2015-5664 
Cross-site scripting (XSS) vulnerability in File Station in QNAP QTS before 4.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-03T14:00:00.000Z
CVE-2015-5665 
Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.3 allows remote attackers to hijack the authentication of arbitrary users for requests that write to PHP scripts, related to the doValidToken function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-27T01:00:00.000Z
CVE-2015-5666 
ANA App for Android 3.1.1 and earlier, and ANA App for iOS 3.3.6 and earlier does not verify SSL certificates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-25T21:00:00.000Z
CVE-2015-5667 
Cross-site scripting (XSS) vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-31T01:00:00.000Z
CVE-2015-5668 
SQL injection vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-29T10:00:00.000Z
CVE-2015-5669 
Techno Project Japan Enisys Gw before 1.4.1 allows remote authenticated users to write to arbitrary files and consequently execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-29T10:00:00.000Z
CVE-2015-5670 
Cross-site scripting (XSS) vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-29T10:00:00.000Z
CVE-2015-5671 
Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to bypass intended access restrictions and read arbitrary uploaded files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-29T10:00:00.000Z
CVE-2015-5672 
TYPE-MOON Fate/stay night, Fate/hollow ataraxia, Witch on the Holy Night, and Fate/stay night + hollow ataraxia set allow remote attackers to execute arbitrary OS commands via crafted saved data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-06T11:00:00.000Z
CVE-2015-5673 
eventapp/lib/gcloud.rb in the ISUCON5 qualifier portal (aka eventapp) web application before 2015-10-30 makes improper popen calls, which allows remote attackers to execute arbitrary commands via an HTTP request that includes shell metacharacters in an argument to a "gcloud compute" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-04T02:00:00.000Z
CVE-2015-5674 
The routed daemon in FreeBSD 9.3 before 9.3-RELEASE-p22, 10.2-RC2 before 10.2-RC2-p1, 10.2-RC1 before 10.2-RC1-p2, 10.2 before 10.2-BETA2-p3, and 10.1 before 10.1-RELEASE-p17 allows remote authenticated users to cause a denial of service (assertion failure and daemon exit) via a query from a network that is not directly connected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-05T16:00:00.000Z
CVE-2015-5675 
The sys_amd64 IRET Handler in the kernel in FreeBSD 9.3 and 10.1 allows local users to gain privileges or cause a denial of service (kernel panic).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-10T16:00:00.000Z
CVE-2015-5677 
bsnmpd, as used in FreeBSD 9.3, 10.1, and 10.2, uses world-readable permissions on the snmpd.config file, which allows local users to obtain the secret key for USM authentication by reading the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-07T15:00:00.000Z
CVE-2015-5681 
Unrestricted file upload vulnerability in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in *_uploadfolder/big/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-18T15:00:00.000Z