rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-4641 
Directory traversal vulnerability in the SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices allows remote web servers to write to arbitrary files, and consequently execute arbitrary code in a privileged context, by leveraging control of the skslm.swiftkey.net domain name and providing a .. (dot dot) in an entry in a ZIP archive, as demonstrated by a traversal to the /data/dalvik-cache directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-19T14:00:00.000Z
CVE-2015-4642 
The escapeshellarg function in ext/standard/exec.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 on Windows allows remote attackers to execute arbitrary OS commands via a crafted string to an application that accepts command-line arguments for a call to the PHP system function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-16T10:00:00.000Z
CVE-2015-4643 
Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4022.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-16T10:00:00.000Z
CVE-2015-4644 
The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not validate token extraction for table names, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1352.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-16T10:00:00.000Z
CVE-2015-4645 
Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial of service (application crash) via a crafted input, which triggers a stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-17T14:00:00.000Z
CVE-2015-4646 
(1) unsquash-1.c, (2) unsquash-2.c, (3) unsquash-3.c, and (4) unsquash-4.c in Squashfs and sasquatch allow remote attackers to cause a denial of service (application crash) via a crafted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-13T17:00:00.000Z
CVE-2015-4647 
Multiple stack-based buffer overflows in Ipropsapi in Panasonic Security API (PS-API) ActiveX SDK before 8.10.18 allow remote attackers to execute arbitrary code via a long string in the (1) FilePassword property or to the (2) GetStringInfo method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-06T14:00:00.000Z
CVE-2015-4648 
Stack-based buffer overflow in the Ipropsapi.ipropsapiCtrl.1 ActiveX control in ipropsapivideo in Panasonic Security API (PS-API) ActiveX SDK before 8.10.18 allows remote attackers to execute arbitrary code via a long string to the MulticastAddr method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-06T14:00:00.000Z
CVE-2015-4649 
Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to gain root privileges via unspecified vectors, a different vulnerability than CVE-2015-3654.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T15:00:00.000Z
CVE-2015-4650 
Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell access and execute arbitrary code with root privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-16T18:00:00.000Z
CVE-2015-4651 
The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.6 does not properly determine whether enough memory is available for storing IP address strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-22T01:00:00.000Z
CVE-2015-4652 
epan/dissectors/packet-gsm_a_dtap.c in the GSM DTAP dissector in Wireshark 1.12.x before 1.12.6 does not properly validate digit characters, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the de_emerg_num_list and de_bcd_num functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-22T01:00:00.000Z
CVE-2015-4654 
SQL injection vulnerability in the EQ Event Calendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to eqfullevent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-18T18:00:00.000Z
CVE-2015-4655 
Cross-site scripting (XSS) vulnerability in Synology DiskStation Manager (DSM) before 5.2-5565 Update 1 allows remote attackers to inject arbitrary web script or HTML via the "compound" parameter to entry.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-18T18:00:00.000Z
CVE-2015-4656 
Multiple cross-site scripting (XSS) vulnerabilities in Synology Photo Station before 6.3-2945 allow remote attackers to inject arbitrary web script or HTML via the (1) success parameter to login.php or (2) crafted URL parameters to index.php, as demonstrated by the t parameter to photo/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-18T18:00:00.000Z
CVE-2015-4657 
Cross-site scripting (XSS) vulnerability in Mailbird 2.0.16.0 and earlier allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-18T18:00:00.000Z
CVE-2015-4658 
Multiple SQL injection vulnerabilities in admin/login.php in Milw0rm Clone Script 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) usr or (2) pwd parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-18T18:00:00.000Z
CVE-2015-4659 
Cross-site request forgery (CSRF) vulnerability in ClickHeat 1.14 and earlier allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a config action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-18T18:00:00.000Z
CVE-2015-4660 
Cross-site scripting (XSS) vulnerability in Enhanced SQL Portal 5.0.7961 allows remote attackers to inject arbitrary web script or HTML via the id parameter to iframe.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-18T18:00:00.000Z
CVE-2015-4661 
Cross-site scripting (XSS) vulnerability in Symphony CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the sort parameter to system/authors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-18T18:00:00.000Z
CVE-2015-4664 
An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands.
Problem types: description: Improper Input Validation
Affected products: vendor: CA Technologies
product: CA Privileged Access Manager
Published: 2018-06-18T18:00:00.000Z
CVE-2015-4665 
Cross-site scripting (XSS) vulnerability in ajax_cmd.php in Xceedium Xsuite 2.4.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the fileName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-13T14:00:00.000Z
CVE-2015-4666 
Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attackers to read arbitrary files via a ....// (quadruple dot double slash) in the logFile parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-13T14:00:00.000Z
CVE-2015-4667 
Multiple hardcoded credentials in Xsuite 2.x.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-25T17:00:00.000Z
CVE-2015-4668 
Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirurl parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-25T17:00:00.000Z
CVE-2015-4669 
The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local users to access databases on the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-25T17:00:00.000Z
CVE-2015-4670 
Directory traversal vulnerability in the AjaxFileUpload control in DevExpress AJAX Control Toolkit (aka AjaxControlToolkit) before 15.1 allows remote attackers to write to arbitrary files via a .. (dot dot) in the fileId parameter to AjaxFileUploadHandler.axd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-18T17:00:00.000Z
CVE-2015-4671 
Cross-site scripting (XSS) vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the zone_id parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-12T19:00:00.000Z
CVE-2015-4673 
Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via (1) the collection_description parameter to upload/manage_collections.php in an add_new action or the (2) photo_description, (3) photo_tags, or (4) photo_title parameter to upload/actions/photo_uploader.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-06T23:00:00.000Z
CVE-2015-4674 
The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-07T01:00:00.000Z
CVE-2015-4675 
Buffer overflow in the Tiny SRP library (aka TinySRP) allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted size value for the username field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-19T14:00:00.000Z
CVE-2015-4676 
SQL injection vulnerability in ticket.php in TickFa 1.x allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a read action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-19T14:00:00.000Z
CVE-2015-4677 
Cross-site request forgery (CSRF) vulnerability in FiverrScript (aka Fiverr Script) 7.2 allows remote attackers to hijack the authentication of administrators for requests that create a new admin via a request to administrator/admins_create.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-19T14:00:00.000Z
CVE-2015-4678 
SQL injection vulnerability in Persian Car CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter to the default URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-19T14:00:00.000Z
CVE-2015-4679 
Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the (1) ddns_domainame or (2) ddns_account parameter to ddns.stm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-19T14:00:00.000Z
CVE-2015-4680 
FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-05T17:00:00.000Z
CVE-2015-4681 
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users to have unspecified impact via vectors related to weak passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T19:00:00.000Z
CVE-2015-4682 
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows remote authenticated users to obtain the installation path via an HTTP POST request to PlcmRmWeb/JConfigManager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T19:00:00.000Z
CVE-2015-4683 
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T19:00:00.000Z
CVE-2015-4684 
Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allow (1) remote authenticated users to read arbitrary files via a .. (dot dot) in the Modifier parameter to PlcmRmWeb/FileDownload; or remote authenticated administrators to upload arbitrary files via the (2) Filename or (3) SE_FNAME parameter to PlcmRmWeb/FileUpload or to read and remove arbitrary files via the (4) filePathName parameter in an importSipUriReservations SOAP request to PlcmRmWeb/JUserManager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T19:00:00.000Z
CVE-2015-4685 
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T19:00:00.000Z
CVE-2015-4687 
Cross-site scripting (XSS) vulnerability in Ellucian (formerly SunGard) Banner Student 8.5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T20:00:00.000Z
CVE-2015-4688 
Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allow remote attackers to enumerate user accounts via a series of requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T20:00:00.000Z
CVE-2015-4689 
Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T20:00:00.000Z
CVE-2015-4692 
The kvm_apic_has_events function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-27T10:00:00.000Z
CVE-2015-4694 
Directory traversal vulnerability in download.php in the Zip Attachments plugin before 1.5.1 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the za_file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-08T20:00:00.000Z
CVE-2015-4695 
meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-01T14:00:00.000Z
CVE-2015-4696 
Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-01T14:00:00.000Z
CVE-2015-4697 
Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T20:00:00.000Z
CVE-2015-4699 
Cross-site scripting (XSS) vulnerability in the Splash Portal in Cloud4Wi before 5.9.7 allows remote attackers to inject arbitrary web script or HTML via the recoveryMessage parameter to the default URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-24T21:00:00.000Z
CVE-2015-4700 
The bpf_int_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 4.0.6 allows local users to cause a denial of service (system crash) by creating a packet filter and then loading crafted BPF instructions that trigger late convergence by the JIT compiler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-31T10:00:00.000Z
CVE-2015-4703 
Absolute path traversal vulnerability in mysqldump_download.php in the WordPress Rename plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the dumpfname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-12T19:00:00.000Z
CVE-2015-4704 
Directory traversal vulnerability in the Download Zip Attachments plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the File parameter to download.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-23T03:56:00.000Z
CVE-2015-4706 
Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T14:00:00.000Z
CVE-2015-4707 
Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T18:00:00.000Z
CVE-2015-4713 
SQL injection vulnerability in ApPHP Hotel Site 3.x.x allows remote editors to execute arbitrary SQL commands via the pid parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-22T18:00:00.000Z
CVE-2015-4714 
Cross-site scripting (XSS) vulnerability in the DreamBox DM500-S allows remote attackers to inject arbitrary web script or HTML via the mode parameter to /body.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-22T18:00:00.000Z
CVE-2015-4715 
The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox storage has been mounted, allows remote administrators of Dropbox.com to read arbitrary files via an @ (at sign) character in unspecified POST values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T18:09:59.000Z
CVE-2015-4716 
Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows, allows remote attackers to reinstall the application or execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T18:00:00.000Z
CVE-2015-4717 
The filename sanitization component in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 does not properly handle $_GET parameters cast by PHP to an array, which allows remote attackers to cause a denial of service (infinite loop and log file consumption) via crafted endpoint file names.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T18:00:00.000Z
CVE-2015-4718 
The external SMB storage driver in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 allows remote authenticated users to execute arbitrary SMB commands via a ; (semicolon) character in a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T18:00:00.000Z
CVE-2015-4719 
The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-24T01:13:09.000Z
CVE-2015-4721 
Multiple cross-site scripting (XSS) vulnerabilities in Concrete5 5.7.3.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T20:00:00.000Z
CVE-2015-4724 
SQL injection vulnerability in Concrete5 5.7.3.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T20:00:00.000Z
CVE-2015-4725 
Cross-site scripting (XSS) vulnerability in forgot.php in AudioShare 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the email parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-23T14:00:00.000Z
CVE-2015-4726 
PHP remote file inclusion vulnerability in ajax/myajaxphp.php in AudioShare 2.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the config['basedir'] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-23T14:00:00.000Z
CVE-2015-4727 
Unspecified vulnerability in Oracle Virtualization Sun Ray Software before 5.4.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-16T10:00:00.000Z
CVE-2015-4728 
Unspecified vulnerability in the Oracle Sourcing component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Bid/Quote creation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-16T10:00:00.000Z
CVE-2015-4729 
Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-16T10:00:00.000Z
CVE-2015-4730 
Unspecified vulnerability in Oracle MySQL 5.6.20 and earlier allows remote authenticated users to affect availability via unknown vectors related to Types.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-21T21:00:00.000Z
CVE-2015-4731 
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-16T10:00:00.000Z