rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-8875 
Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-01T22:00:00.000Z
CVE-2015-8876 
Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not validate certain Exception objects, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger unintended method execution via crafted serialized data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-22T01:00:00.000Z
CVE-2015-8877 
The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-22T01:00:00.000Z
CVE-2015-8878 
main/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to cause a denial of service (race condition and heap memory corruption) by leveraging an application that performs many temporary-file accesses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-22T01:00:00.000Z
CVE-2015-8879 
The odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior for SQL_WVARCHAR columns, which allows remote attackers to cause a denial of service (application crash) in opportunistic circumstances by leveraging use of the odbc_fetch_array function to access a certain type of Microsoft SQL Server table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-22T01:00:00.000Z
CVE-2015-8880 
Double free vulnerability in the format printer in PHP 7.x before 7.0.1 allows remote attackers to have an unspecified impact by triggering an error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-22T01:00:00.000Z
CVE-2015-8888 
Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to bypass intended access restrictions via a crafted block count and block size of a sparse header, aka Android internal bug 28822465 and Qualcomm internal bug CR813933.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2015-8889 
The aboot implementation in the Qualcomm components in Android before 2016-07-05 on Nexus 6P devices omits the recovery PIN feature, which has unspecified impact and attack vectors, aka Android internal bug 28822677 and Qualcomm internal bug CR804067.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2015-8890 
platform/msm_shared/partition_parser.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate certain GUID Partition Table (GPT) data, which allows attackers to bypass intended access restrictions via a crafted MultiMediaCard (MMC), aka Android internal bug 28822878 and Qualcomm internal bug CR823461.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2015-8891 
Multiple integer overflows in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to bypass intended access restrictions via a crafted image, aka Android internal bug 28842418 and Qualcomm internal bug CR813930.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2015-8892 
platform/msm_shared/boot_verifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to bypass intended access restrictions via a digest with trailing data, aka Android internal bug 28822807 and Qualcomm internal bug CR902998.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2015-8893 
app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to cause a denial of service (OS outage or buffer over-read) via a crafted application, aka Android internal bug 28822690 and Qualcomm internal bug CR822275.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2015-8894 
Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service (application crash) via a crafted tga file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T19:00:00.000Z
CVE-2015-8895 
Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service (application crash) via a crafted length value, which triggers a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T19:00:00.000Z
CVE-2015-8896 
Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T19:00:00.000Z
CVE-2015-8897 
The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (application crash) via a crafted png file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T19:00:00.000Z
CVE-2015-8898 
The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-15T19:00:00.000Z
CVE-2015-8899 
Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-30T17:00:00.000Z
CVE-2015-8900 
The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service (infinite loop) via a crafted HDR file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-27T22:00:00.000Z
CVE-2015-8901 
ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted MIFF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-27T22:00:00.000Z
CVE-2015-8902 
The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted PDB file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-27T22:00:00.000Z
CVE-2015-8903 
The ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted VICAR file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-27T22:00:00.000Z
CVE-2015-8914 
The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-17T15:00:00.000Z
CVE-2015-8915 
bsdcpio in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read and crash) via crafted cpio file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8916 
bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted rar file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8917 
bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid character in the name of a cab file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8918 
The archive_string_append function in archive_string.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted cab files, related to "overlapping memcpy."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8919 
The lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds heap) via a crafted (1) lzh or (2) lha file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8920 
The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a crafted ar file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8921 
The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8922 
The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted 7z file, related to the _7z_folder struct.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8923 
The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via a crafted zip file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8924 
The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tar file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8925 
The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read) via a crafted mtree file, related to newline parsing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8926 
The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8927 
The trad_enc_decrypt_update function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted zip file, related to reading the password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8928 
The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8929 
Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service via a tar file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8930 
bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of itself.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8931 
Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8932 
The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which triggers an invalid left shift.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8933 
Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8934 
The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted rar file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-20T14:00:00.000Z
CVE-2015-8935 
The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T10:00:00.000Z
CVE-2015-8936 
Cross-site scripting (XSS) vulnerability in squidGuard.cgi in squidGuard before 1.5 allows remote attackers to inject arbitrary web script or HTML via a blocked site link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-09T15:00:00.000Z
CVE-2015-8937 
drivers/char/diag/diagchar_core.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 6, and 7 (2013) devices mishandles a socket process, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28803962 and Qualcomm internal bug CR770548.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-06T10:00:00.000Z
CVE-2015-8938 
The MSM camera driver in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate input parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28804030 and Qualcomm internal bug CR766022.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-06T10:00:00.000Z
CVE-2015-8939 
drivers/video/msm/mdp4_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not validate r stages, g stages, or b stages data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28398884 and Qualcomm internal bug CR779021.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-06T10:00:00.000Z
CVE-2015-8940 
Integer overflow in sound/soc/msm/qdsp6v2/q6lsm.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28813987 and Qualcomm internal bug CR792367.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-06T10:00:00.000Z
CVE-2015-8941 
drivers/media/platform/msm/camera_v2/isp/msm_isp_axi_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices does not properly validate array indexes, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28814502 and Qualcomm internal bug CR792473.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-06T10:00:00.000Z
CVE-2015-8942 
drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate the stream state, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28814652 and Qualcomm internal bug CR803246.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-06T10:00:00.000Z
CVE-2015-8943 
drivers/video/msm/mdss/mdss_mdp_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not verify that a mapping exists before proceeding with an unmap operation, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28815158 and Qualcomm internal bugs CR794217 and CR836226.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-06T10:00:00.000Z
CVE-2015-8944 
The ioresources_init function in kernel/resource.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices, uses weak permissions for /proc/iomem, which allows local users to obtain sensitive information by reading this file, aka Android internal bug 28814213 and Qualcomm internal bug CR786116. NOTE: the permissions may be intentional in most non-Android contexts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-06T10:00:00.000Z
CVE-2015-8945 
openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-05T15:00:00.000Z
CVE-2015-8946 
ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-22T14:00:00.000Z
CVE-2015-8947 
hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data, a different vulnerability than CVE-2016-2052.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-19T10:00:00.000Z
CVE-2015-8948 
idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-07T20:00:00.000Z
CVE-2015-8949 
Use-after-free vulnerability in the my_login function in DBD::mysql before 4.033_01 allows attackers to have unspecified impact by leveraging a call to mysql_errno after a failure of my_login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-19T21:00:00.000Z
CVE-2015-8950 
arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dma_mmap call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-10T10:00:00.000Z
CVE-2015-8951 
Multiple use-after-free vulnerabilities in sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 30142668 and Qualcomm internal bug CR 948902.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-10T10:00:00.000Z
CVE-2015-8952 
The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause a denial of service (soft lockup) via filesystem operations in environments that use many attributes, as demonstrated by Ceph and Samba.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-16T21:00:00.000Z
CVE-2015-8953 
fs/overlayfs/copy_up.c in the Linux kernel before 4.2.6 uses an incorrect cleanup code path, which allows local users to cause a denial of service (dentry reference leak) via filesystem operations on a large file in a lower overlayfs layer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-16T21:00:00.000Z
CVE-2015-8954 
The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusion-prevention functionality via a crafted HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-20T16:00:00.000Z
CVE-2015-8955 
arch/arm64/kernel/perf_event.c in the Linux kernel before 4.1 on arm64 platforms allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via vectors involving events that are mishandled during a span of multiple HW PMUs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-10T10:00:00.000Z
CVE-2015-8956 
The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-10T10:00:00.000Z
CVE-2015-8957 
Buffer overflow in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (application crash) via a crafted SUN file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T18:00:00.000Z