rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-4275 
The Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 18.0.0.59167 and 18.0.0.59211 allows remote attackers to cause a denial of service via a malformed header in a GTPv2 packet, aka Bug ID CSCut11534.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-16T19:00:00.000Z
CVE-2015-4276 
Cisco WebEx Meetings Server 2.5MR1 allows remote authenticated users to execute arbitrary code via a crafted command parameter, aka Bug ID CSCus56138.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-16T19:00:00.000Z
CVE-2015-4277 
The global-configuration implementation on Cisco ASR 9000 devices with software 5.1.3 and 5.3.0 improperly closes vty sessions after a commit/end operation, which allows local users to cause a denial of service (tmp/*config file creation, memory consumption, and device hang) via unspecified vectors, aka Bug ID CSCut93842.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-19T18:00:00.000Z
CVE-2015-4278 
Cisco Email Security Appliance (ESA) devices with software 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a denial of service (per-domain e-mail reception outage) by placing malformed DMARC policy data in DNS TXT records for a domain, aka Bug ID CSCuv14806.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-16T19:00:00.000Z
CVE-2015-4279 
The Manager component in Cisco Unified Computing System (UCS) 2.2(3b) on B Blade Server devices allows local users to gain privileges for executing arbitrary CLI commands by leveraging access to the subordinate fabric interconnect, aka Bug ID CSCut32778.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-20T23:00:00.000Z
CVE-2015-4280 
Cisco Prime Collaboration Assurance 10.0 allows remote attackers to cause a denial of service (HTTP service outage) via a crafted HTTP request, aka Bug ID CSCum38844.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-18T10:00:00.000Z
CVE-2015-4281 
Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 2.5 MR1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCus56150 and CSCus56146.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-22T14:00:00.000Z
CVE-2015-4282 
Cisco Mobility Services Engine (MSE) through 8.0.120.7 uses weak permissions for unspecified binary files, which allows local users to obtain root privileges by writing to a file, aka Bug ID CSCuv40504.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-06T11:00:00.000Z
CVE-2015-4283 
Cisco Videoscape Policy Resource Manager (PRM) 3.5.4 allows remote attackers to cause a denial of service (CPU and memory consumption, and TCP service outage) via (1) a SYN flood or (2) another type of TCP traffic flood, aka Bug IDs CSCuu35104 and CSCuu35128.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-21T14:00:00.000Z
CVE-2015-4284 
The Concurrent Data Management Replication process in Cisco IOS XR 5.3.0 on ASR 9000 devices allows remote attackers to cause a denial of service (BGP process reload) via malformed BGPv4 packets, aka Bug ID CSCur70670.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-22T14:00:00.000Z
CVE-2015-4285 
The Local Packet Transport Services (LPTS) implementation in Cisco IOS XR 5.1.2, 5.1.3, 5.2.1, and 5.2.2 on ASR9k devices makes incorrect decisions about the opening of TCP and UDP ports during the processing of flow base entries, which allows remote attackers to cause a denial of service (resource consumption) by sending traffic to these ports continuously, aka Bug ID CSCur88273.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-23T14:00:00.000Z
CVE-2015-4286 
The web framework in Cisco UCS Central Software 1.3(0.99) allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuu41377.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-29T14:00:00.000Z
CVE-2015-4287 
Cisco Firepower Extensible Operating System 1.1(1.86) on Firepower 9000 devices allows remote attackers to bypass intended access restrictions and obtain sensitive device information by visiting an unspecified web page, aka Bug ID CSCuu82230.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-29T01:00:00.000Z
CVE-2015-4288 
The LDAP implementation on the Cisco Web Security Appliance (WSA) 8.5.0-000, Email Security Appliance (ESA) 8.5.7-042, and Content Security Management Appliance (SMA) 8.3.6-048 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, aka Bug IDs CSCuo29561, CSCuv40466, and CSCuv40470.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-29T01:00:00.000Z
CVE-2015-4289 
Directory traversal vulnerability in Cisco AnyConnect Secure Mobility Client 4.0(2049) allows remote head-end systems to write to arbitrary files via a crafted configuration attribute, aka Bug ID CSCut93920.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-01T01:00:00.000Z
CVE-2015-4290 
The kernel extension in Cisco AnyConnect Secure Mobility Client 4.0(2049) on OS X allows local users to cause a denial of service (panic) via vectors involving contiguous memory locations, aka Bug ID CSCut12255.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-29T14:00:00.000Z
CVE-2015-4291 
Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted series of fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCtd72617.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-01T01:00:00.000Z
CVE-2015-4292 
Cross-site scripting (XSS) vulnerability in the management interface in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(2) allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuv45818.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-01T01:00:00.000Z
CVE-2015-4293 
The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (CPU consumption or packet loss) via fragmented (1) IPv4 or (2) IPv6 packets that trigger ATTN-3-SYNC_TIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-30T14:00:00.000Z
CVE-2015-4294 
Cross-site scripting (XSS) vulnerability in Cisco IM and Presence Service before 10.5 MR1 allows remote attackers to inject arbitrary web script or HTML by constructing a crafted URL that leverages incomplete filtering of HTML elements, aka Bug ID CSCut41766.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-01T01:00:00.000Z
CVE-2015-4295 
The Prime Collaboration Deployment component in Cisco Unified Communications Manager 10.5(3.10000.9) allows remote authenticated users to discover root credentials via a direct request to an unspecified URL, aka Bug ID CSCuv21819.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-01T01:00:00.000Z
CVE-2015-4296 
Nexus Data Broker (NDB) on Cisco Nexus 3000 devices with software 6.0(2)A6(1) allows remote attackers to cause a denial of service (Java process restart) via crafted connections to the Java application, aka Bug ID CSCut87006.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-19T23:00:00.000Z
CVE-2015-4297 
Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server (MCS) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted HTTP request parameters, aka Bug ID CSCuv32136.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-19T14:00:00.000Z
CVE-2015-4298 
Cisco Unified Web and E-Mail Interaction Manager 9.0(2) and 11.0(1) improperly performs authorization, which allows remote authenticated users to read or write to stored data via unspecified vectors, aka Bug ID CSCuo89056.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-19T15:00:00.000Z
CVE-2015-4299 
Cisco Unified Web and E-Mail Interaction Manager 9.0(2) improperly performs authorization, which allows remote authenticated users to remove default messaging-queue system folders via unspecified vectors, aka Bug ID CSCuo89046.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-19T15:00:00.000Z
CVE-2015-4301 
Cisco NX-OS on Nexus 9000 devices 11.1(1c) allows remote authenticated users to cause a denial of service (device hang) via large files that are copied to a device's filesystem, aka Bug ID CSCuu77225.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-19T15:00:00.000Z
CVE-2015-4302 
The web interface in Cisco FireSIGHT Management Center 5.3.1.4 allows remote attackers to delete arbitrary system policies via modified parameters in a POST request, aka Bug ID CSCuu25390.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-19T14:00:00.000Z
CVE-2015-4303 
Cisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to execute arbitrary commands in the context of the nobody user account via an unspecified web-page parameter, aka Bug ID CSCuv12333.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-20T10:00:00.000Z
CVE-2015-4304 
The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, and create administrative accounts or read data from arbitrary tenant domains, via a crafted URL, aka Bug IDs CSCus62671 and CSCus62652.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-20T01:00:00.000Z
CVE-2015-4305 
The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for arbitrary tenant domains, via a crafted URL, aka Bug ID CSCus62656.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-20T01:00:00.000Z
CVE-2015-4306 
The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of arbitrary tenant domains, by discovering a session identifier and constructing a crafted URL, aka Bug IDs CSCus88343 and CSCus88334.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-20T01:00:00.000Z
CVE-2015-4307 
The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-20T01:00:00.000Z
CVE-2015-4308 
The webGUI configuration-export feature in Cisco Edge Bluebird Operating System 1.2 on Edge 340 devices allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuu43968.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-19T15:00:00.000Z
CVE-2015-4310 
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse 10.5(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug IDs CSCuq82322, CSCut95853, and CSCuq73975.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-19T23:00:00.000Z
CVE-2015-4314 
The System Snapshot feature in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 allows remote authenticated users to obtain sensitive password-hash information by reading the snapshot file, aka Bug ID CSCuv40422.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-20T00:00:00.000Z
CVE-2015-4315 
The Call Policy Configuration page in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.3 improperly validates external DTDs, which allows remote authenticated users to read arbitrary files or cause a denial of service via a crafted XML document, aka Bug ID CSCuv31853.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-20T00:00:00.000Z
CVE-2015-4316 
The Mobile and Remote Access (MRA) endpoint-validation feature in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 improperly validates the phone line used for registration, which allows remote authenticated users to conduct impersonation attacks via a crafted registration, aka Bug ID CSCuv40396.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-20T10:00:00.000Z
CVE-2015-4317 
Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in an authentication packet, aka Bug ID CSCuv40469.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-20T00:00:00.000Z
CVE-2015-4318 
Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in a GET request, aka Bug ID CSCuv40528.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-20T15:00:00.000Z
CVE-2015-4319 
The password-change feature in the administrative web interface in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 improperly performs authorization, which allows remote authenticated users to reset arbitrary active-user passwords via unspecified vectors, aka Bug ID CSCuv12338.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-20T10:00:00.000Z
CVE-2015-4320 
The Configuration Log File component in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote authenticated users to obtain sensitive information by reading a log file, aka Bug ID CSCuv12340.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-20T00:00:00.000Z
CVE-2015-4321 
The Unicast Reverse Path Forwarding (uRPF) implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(1.50), 9.3(2.100), 9.3(3), and 9.4(1) mishandles cases where an IP address belongs to an internal interface but is also in the ASA routing table, which allows remote attackers to bypass uRPF validation via spoofed packets, aka Bug ID CSCuv60724.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-20T10:00:00.000Z
CVE-2015-4322 
Cisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after LDAP authentication, which allows remote authenticated users to read or write to an arbitrary user's Spam Quarantine folder by visiting a spam-notification URL, aka Bug ID CSCuv65894.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-19T15:00:00.000Z
CVE-2015-4323 
Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.9); Nexus 3000 devices 6.0(2)U5(1.41), 7.0(3)I2(0.373), and 7.3(0)ZN(0.83); Nexus 4000 devices 4.1(2)E1(1b); Nexus 7000 devices 6.2(14)S1; Nexus 9000 devices 7.3(0)ZN(0.9); and MDS 9000 devices 6.2 (13) and 7.1(0)ZN(91.99) and MDS SAN-OS 7.1(0)ZN(91.99) allows remote attackers to cause a denial of service (device outage) via a crafted ARP packet, related to incorrect MTU validation, aka Bug IDs CSCuv71933, CSCuv61341, CSCuv61321, CSCuu78074, CSCut37060, CSCuv61266, CSCuv61351, CSCuv61358, and CSCuv61366.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-19T23:00:00.000Z
CVE-2015-4324 
Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.81), Nexus 3000 devices 7.3(0)ZN(0.81), Nexus 4000 devices 4.1(2)E1(1c), Nexus 7000 devices 7.2(0)N1(0.1), and Nexus 9000 devices 7.3(0)ZN(0.81) allows remote attackers to cause a denial of service (IGMP process restart) via a malformed IGMPv3 packet that is mishandled during memory allocation, aka Bug IDs CSCuv69713, CSCuv69717, CSCuv69723, CSCuv69732, and CSCuv48908.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-19T15:00:00.000Z
CVE-2015-4325 
The process-management implementation in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to gain privileges by terminating a firestarter.py supervised process and then triggering the restart of a process by the root account, aka Bug ID CSCuv12272.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-12T10:00:00.000Z
CVE-2015-4327 
The CLI in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to obtain root privileges by writing script arguments to an unspecified file, aka Bug ID CSCuv12542.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-20T00:00:00.000Z
CVE-2015-4328 
Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 improperly checks for a user account's read-only attribute, which allows remote authenticated users to execute arbitrary OS commands via crafted HTTP requests, as demonstrated by read or write operations on the Unified Communications lookup page, aka Bug ID CSCuv12552.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-20T00:00:00.000Z
CVE-2015-4329 
The administrator web interface in Cisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to execute arbitrary OS commands via crafted HTTP requests, aka Bug ID CSCuv11796.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-20T10:00:00.000Z
CVE-2015-4330 
A local file script in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to gain privileges for OS command execution via invalid parameters, aka Bug ID CSCuv10556.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-02T16:00:00.000Z
CVE-2015-4331 
Cisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows remote authenticated users to bypass intended access restrictions via a username with a modified composition of lowercase and uppercase characters, aka Bug ID CSum59958.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-22T17:00:00.000Z
CVE-2015-4334 
The default configuration of SGOS in Blue Coat ProxySG before 6.2.16.5, 6.5 before 6.5.7.1, and 6.6 before 6.6.2.1 forwards authentication challenges from upstream origin content servers (OCS) when used in an explicit proxy deployment, which makes it easier for remote attackers to obtain sensitive information via a 407 (aka Proxy Authentication Required) HTTP status code, as demonstrated when using NTLM authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-07T20:00:00.000Z
CVE-2015-4335 
Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-09T14:00:00.000Z
CVE-2015-4336 
cloner.functions.php in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to execute arbitrary commands via a file containing filenames with shell metacharacters, as demonstrated by using the backup comments feature to create the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-17T18:00:00.000Z
CVE-2015-4337 
Cross-site scripting (XSS) vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the excl_manual parameter in the xcloner_show page to wpadmin/plugins.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-17T18:00:00.000Z
CVE-2015-4338 
Static code injection vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary PHP code into the language files via a Translation LM_FRONT_* field for a language, as demonstrated by language/italian.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-17T18:00:00.000Z
CVE-2015-4342 
SQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving a cdef id.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-17T18:00:00.000Z
CVE-2015-4344 
The Services Basic Authentication module 7.x-1.x through 7.x-1.3 for Drupal allows remote attackers to bypass intended resource restrictions via vectors related to page caching.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-15T14:00:00.000Z
CVE-2015-4345 
The RESTWS Basic Auth submodule in the RESTful Web Services module 7.x-1.x before 7.x-1.5 and 7.x-2.x before 7.x-2.3 for Drupal caches pages for authenticated requests, which allows remote attackers to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-15T14:00:00.000Z
CVE-2015-4346 
Cross-site scripting (XSS) vulnerability in the SMS Framework module 6.x-1.x before 6.x-1.1 for Drupal, when the "Send to phone" submodule is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to message previews.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-15T14:00:00.000Z
CVE-2015-4347 
Cross-site scripting (XSS) vulnerability in the inLinks Integration module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified path arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-15T14:00:00.000Z
CVE-2015-4348 
SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-15T14:00:00.000Z
CVE-2015-4349 
Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-15T14:00:00.000Z
CVE-2015-4350 
Multiple cross-site request forgery (CSRF) vulnerabilities in the Spider Catalog module for Drupal allow remote attackers to hijack the authentication of administrators for requests that delete (1) products, (2) ratings, or (3) categories via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-15T14:00:00.000Z