[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1554?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1186590'}, {'name': '[oss-security] 20150207 Re: kgb-bot can be crashed by some network traffic', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/08/1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1554?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1555 mean in the context of cybersecurity?

[Assistant] CVE-2015-1555


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1555.

[Assistant] Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create valid sessions without using session validators.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1555?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://framework.zend.com/security/advisory/ZF2015-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1555?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1558 mean in the context of cybersecurity?

[Assistant] CVE-2015-1558


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1558.

[Assistant] Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service (file descriptor consumption) via an SDP offer containing only incompatible codecs.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1558?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.asterisk.org/pub/security/AST-2015-001.html'}, {'name': '1031661', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031661'}, {'name': '20150128 AST-2015-001: File descriptor leak when incompatible codecs are offered', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/116'}, {'name': '20150128 AST-2015-001: File descriptor leak when incompatible codecs are offered', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534573/100/0/threaded'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1558?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1559 mean in the context of cybersecurity?

[Assistant] CVE-2015-1559


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1559.

[Assistant] Multiple cross-site request forgery (CSRF) vulnerabilities in administrator.php in Epignosis eFront Open Source Edition before 3.6.15.3 build 18022 allow remote attackers to hijack the authentication of administrators for requests that (1) delete modules via the delete_module parameter, (2) deactivate modules via the deactivate_module parameter, (3) activate modules via the activate_module parameter, (4) delete users via the delete_user parameter, (5) deactivate users via the deactivate_user parameter, (6) activate users via the activate_user parameter, (7) activate themes via the set_theme parameter, (8) deactivate themes via the set_theme parameter, (9) delete themes via the delete parameter, (10) deactivate events (user registration or email activation) via the deactivate_notification parameter, (11) activate events via the activate_notification parameter, (12) delete events via the delete_notification parameter, (13) deactivate language settings via the deactivate_language parameter, (14) activate language settings via the activate_language parameter, (15) delete language settings via the delete_language parameter, or (16) activate or deactivate the autologin feature for a user via a crafted maintenance request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1559?

[Assistant] {'name': '[oss-security] 20150208 CVE-Request -- eFront v. 3.6.15.2 build 18021 (Community Edition) -- Multiple CSRF vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2015/q1/468'}, {'name': '[oss-security] 20150208 [Re: CVE-Request -- eFront v. 3.6.15.2 build 18021 (Community Edition) -- Multiple CSRF vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2015/q1/475'}, {'name': '20150208 Multiple CSRF vulnerabilities in eFront v. 3.6.15.2 (CE)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Feb/30'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2015/01/sroeadv-2015-09.html'}, {'name': '72533', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72533'}, {'name': 'efront-cve20151559-csrf(100735)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100735'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.efrontlearning.net/download'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1559?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1560 mean in the context of cybersecurity?

[Assistant] CVE-2015-1560


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1560.

[Assistant] SQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon web 2.7.0) allows remote attackers to execute arbitrary SQL commands via the sid parameter to include/common/XmlTree/GetXmlTree.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1560?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/132607/Merethis-Centreon-2.5.4-SQL-Injection-Remote-Command-Execution.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://forge.centreon.com/projects/centreon/repository/revisions/d14f213b9c60de1bad0b464fd6403c828cf12582'}, {'name': '20150708 Merethis Centreon - Unauthenticated blind SQLi and Authenticated Remote Command Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/535961/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/centreon/centreon/commit/668a928f34dc0f67723d3db138c042eb7f979f28#diff-f69d4a3d3d177d024c22419357c1f4f4'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1560?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1561 mean in the context of cybersecurity?

[Assistant] CVE-2015-1561


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1561.

[Assistant] The escape_command function in include/Administration/corePerformance/getStats.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon 19.10.0) uses an incorrect regular expression, which allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ns_id parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1561?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/132607/Merethis-Centreon-2.5.4-SQL-Injection-Remote-Command-Execution.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://forge.centreon.com/projects/centreon/repository/revisions/387dffdd051dbc7a234e1138a9d06f3089bb55bb'}, {'name': '20150708 Merethis Centreon - Unauthenticated blind SQLi and Authenticated Remote Command Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/535961/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/centreon/centreon/commit/a78c60aad6fd5af9b51a6d5de5d65560ea37a98a#diff-27550b563fa8d660b64bca871a219cb1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1561?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1562 mean in the context of cybersecurity?

[Assistant] CVE-2015-1562


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1562.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to admin/user_management.php, (2) data_search parameter to /admin/profile_data.php, or (3) filter parameter to error_log.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1562?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-05.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2015/01/sroeadv-2015-05.html'}, {'name': '20150127 Reflecting XSS vulnerabilities in CMS Saurus v. 4.7 (CE)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/112'}, {'name': '[oss-security] 20150128 CVE-Request -- Saurus CMS v.4.7 (Community Edition, released: 12.08.2014) -- Multiple reflecting XSS vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/28/8'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/sauruscms/Saurus-CMS-Community-Edition/commit/8dec044d0fdabcb9b04e58037623385a97b0d288'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1562?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1563 mean in the context of cybersecurity?

[Assistant] CVE-2015-1563


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1563.

[Assistant] The ARM GIC distributor virtualization in Xen 4.4.x and 4.5.x allows local guests to cause a denial of service by causing a large number messages to be logged.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1563?

[Assistant] {'name': 'FEDORA-2015-3944', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.html'}, {'name': '1031663', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031663'}, {'name': '[oss-security] 20150129 Xen Security Advisory 118 - arm: vgic: incorrect rate limiting of  guest triggered logging', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/29/9'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xenbits.xen.org/xsa/advisory-118.html'}, {'name': '72766', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72766'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1563?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1564 mean in the context of cybersecurity?

[Assistant] CVE-2015-1564


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1564.

[Assistant] Cross-site scripting (XSS) vulnerability in style-underground/search in Plain Black WebGUI 7.10.29 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search field.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1564?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://secupent.com/exploit/WebGUI-7.10.29-XSS.txt'}, {'name': '20150120 WebGUI 7.10.29 stable version Cross site scripting vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/79'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1564?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1565 mean in the context of cybersecurity?

[Assistant] CVE-2015-1565


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1565.

[Assistant] Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and 8.x before 8.1.2-00, as used in Hitachi Command Suite, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1565?

[Assistant] {'name': '62579', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62579'}, {'name': '62584', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62584'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS15-001/index.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1565?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1566 mean in the context of cybersecurity?

[Assistant] CVE-2015-1566


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1566.

[Assistant] Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1566?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.dnnsoftware.com/platform/manage/security-center'}, {'name': '62832', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62832'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1566?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1567 mean in the context of cybersecurity?

[Assistant] CVE-2015-1567


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1567.

[Assistant] Cross-site scripting (XSS) vulnerability in the admin page in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote authenticated users with the "edit gd infinite scroll settings" permission to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1567?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.drupal.org/node/2415219'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.drupal.org/node/2415885'}, {'name': 'drupal-gdinfinitescroll-xss(100629)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100629'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1567?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1568 mean in the context of cybersecurity?

[Assistant] CVE-2015-1568


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1568.

[Assistant] Cross-site request forgery (CSRF) vulnerability in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote attackers to hijack the authentication of users with the "edit gd infinite scroll settings" permission for requests that delete settings via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1568?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.drupal.org/node/2415219'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.drupal.org/node/2415885'}, {'name': 'drupal-gdinfinitescroll-csrf(100628)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100628'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1568?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1569 mean in the context of cybersecurity?

[Assistant] CVE-2015-1569


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1569.

[Assistant] Fortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof SSL VPN servers via a crafted certificate.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1569?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiClient_Multiple_Vulnerabilities.pdf'}, {'name': '20150129 Fortinet FortiClient Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/124'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1569?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1570 mean in the context of cybersecurity?

[Assistant] CVE-2015-1570


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1570.

[Assistant] The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1570?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiClient_Multiple_Vulnerabilities.pdf'}, {'name': '20150129 Fortinet FortiClient Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/124'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1570?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1571 mean in the context of cybersecurity?

[Assistant] CVE-2015-1571


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1571.

[Assistant] The CAPWAP DTLS protocol implementation in Fortinet FortiOS 5.0 Patch 7 build 4457 uses the same certificate and private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the Fortinet_Factory certificate and private key.  NOTE: FG-IR-15-002 says "The Fortinet_Factory certificate is unique to each device ... An attacker cannot therefore stage a MitM attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1571?

[Assistant] {'name': '20150129 Fortinet FortiOS Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/125'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiOS_Multiple_Vulnerabilities.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.fortiguard.com/advisory/FG-IR-15-002/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1571?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1572 mean in the context of cybersecurity?

[Assistant] CVE-2015-1572


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1572.

[Assistant] Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1572?

[Assistant] {'name': '72709', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72709'}, {'name': 'FEDORA-2015-2511', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150606.html'}, {'name': 'DSA-3166', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3166'}, {'name': 'MDVSA-2015:068', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:068'}, {'name': 'openSUSE-SU-2015:1006', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-06/msg00010.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.kernel.org/cgit/fs/ext2/e2fsprogs.git/commit/?id=49d0fe2a14f2a23da2fe299643379b8c1d37df73'}, {'name': 'GLSA-201507-22', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201507-22'}, {'name': 'FEDORA-2015-2516', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150805.html'}, {'name': 'USN-2507-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2507-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://advisories.mageia.org/MGASA-2015-0088.html'}, {'name': 'openSUSE-SU-2015:1002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-06/msg00006.html'}, {'name': 'MDVSA-2015:067', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:067'}, {'name': 'SUSE-SU-2015:1103', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00019.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1572?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1573 mean in the context of cybersecurity?

[Assistant] CVE-2015-1573


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1573.

[Assistant] The nft_flush_table function in net/netfilter/nf_tables_api.c in the Linux kernel before 3.18.5 mishandles the interaction between cross-chain jumps and ruleset flushes, which allows local users to cause a denial of service (panic) by leveraging the CAP_NET_ADMIN capability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1573?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1190966'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/a2f18db0c68fec96631c10cad9384c196e9008ac'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a2f18db0c68fec96631c10cad9384c196e9008ac'}, {'name': 'RHSA-2015:1138', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1138.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5'}, {'name': '72552', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72552'}, {'name': '[oss-security] 20150210 Re: CVE-Request -- Linux kernel - panic on nftables rule flush', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/10/13'}, {'name': 'RHSA-2015:1137', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1137.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1573?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1574 mean in the context of cybersecurity?

[Assistant] CVE-2015-1574


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1574.

[Assistant] The Google Email application 4.2.2.0200 for Android allows remote attackers to cause a denial of service (persistent application crash) via a "Content-Disposition: ;" header in an e-mail message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1574?

[Assistant] {'name': '20150214 CVE-2015-1574 - Google Email App 4.2.2 remote denial of service', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Feb/58'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hmarco.org/bugs/google_email_app_4.2.2_denial_of_service.html'}, {'name': '[oss-security] 20150210 Re: Re: CVE-Request -- Google Email App 4.2.2 remote denial of service', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2015/02/10/9'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130388/Google-Email-4.4.2.0200-Denial-Of-Service.html'}, {'name': '[oss-security] 20150212 Re: CVE-Request -- Google Email App 4.2.2 remote denial of service', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2015/02/12/15'}, {'name': '20150213 CVE-2015-1574 - Google Email App 4.2.2 remote denial of service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534703/100/0/threaded'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1574?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1575 mean in the context of cybersecurity?

[Assistant] CVE-2015-1575


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1575.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in u5CMS before 3.9.4 allow remote attackers to inject arbitrary web script or HTML via the (1) c, (2) i, (3) l, or (4) p parameter to index.php; the (5) a or (6) b parameter to u5admin/cookie.php; the name parameter to (7) copy.php or (8) delete.php in u5admin/; the (9) f or (10) typ parameter to u5admin/deletefile.php; the (11) n parameter to u5admin/done.php; the (12) c parameter to u5admin/editor.php; the (13) uri parameter to u5admin/meta2.php; the (14) n parameter to u5admin/notdone.php; the (15) newname parameter to u5admin/rename2.php; the (16) l parameter to u5admin/sendfile.php; the (17) s parameter to u5admin/characters.php; the (18) page parameter to u5admin/savepage.php; or the (19) name parameter to u5admin/new2.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1575?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130292/u5CMS-3.9.3-Cross-Site-Scripting.html'}, {'name': '36029', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/36029'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5223.php'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1575?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1576 mean in the context of cybersecurity?

[Assistant] CVE-2015-1576


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1576.

[Assistant] Multiple SQL injection vulnerabilities in u5CMS before 3.9.4 allow remote attackers to execute arbitrary SQL commands via the name parameter to (1) copy2.php, (2) localize.php, (3) metai.php, (4) nc.php, (5) new2.php, or (6) rename2.php in u5admin/; (7) c parameter to u5admin/editor.php; (8) typ parameter to u5admin/meta2.php; or (9) newname parameter to u5admin/rename2.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1576?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130326/u5CMS-3.9.3-SQL-Injection.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5225.php'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1576?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1577 mean in the context of cybersecurity?

[Assistant] CVE-2015-1577


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1577.

[Assistant] Directory traversal vulnerability in u5admin/deletefile.php in u5CMS before 3.9.4 allows remote attackers to write to arbitrary files via a (1) .. (dot dot) or (2) full pathname in the f parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1577?

[Assistant] {'name': '36026', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/36026'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5226.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130325/u5CMS-3.9.3-Arbitrary-File-Deletion.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1577?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1578 mean in the context of cybersecurity?

[Assistant] CVE-2015-1578


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1578.

[Assistant] Multiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) pidvesa cookie to u5admin/pidvesa.php or (2) uri parameter to u5admin/meta2.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1578?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5227.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130317/u5CMS-3.9.3-Open-Redirect.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1578?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1579 mean in the context of cybersecurity?

[Assistant] CVE-2015-1579


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1579.

[Assistant] Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter in a revslider_show_image action to wp-admin/admin-ajax.php.  NOTE: this vulnerability may be a duplicate of CVE-2014-9734.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1579?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpvulndb.com/vulnerabilities/7540'}, {'name': '36039', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/36039'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1579?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1580 mean in the context of cybersecurity?

[Assistant] CVE-2015-1580


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1580.

[Assistant] Multiple cross-site request forgery (CSRF) vulnerabilities in the Redirection Page plugin 1.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings or conduct cross-site scripting (XSS) attacks via the (2) source or (3) redir parameter in an add action in the redirection-page to wp-admin/options-general.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1580?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130314/WordPress-Redirection-Page-1.2-CSRF-XSS.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1580?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1581 mean in the context of cybersecurity?

[Assistant] CVE-2015-1581


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1581.

[Assistant] Multiple cross-site request forgery (CSRF) vulnerabilities in the Mobile Domain plugin 1.5.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings or conduct cross-site scripting (XSS) attacks via the (2) domain, (3) text, (4) font, (5) fontcolor, (6) color, or (7) padding parameter in an add-domain action in the mobile-domain page to wp-admin/options-general.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1581?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130316/WordPress-Mobile-Domain-1.5.2-Cross-Site-Request-Forgery-Cross-Site-Scripting.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1581?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1582 mean in the context of cybersecurity?

[Assistant] CVE-2015-1582


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1582.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in the Spider Facebook plugin before 1.0.11 for WordPress allow (1) remote attackers to inject arbitrary web script or HTML via the appid parameter in a registration task to the default URI or remote administrators to inject arbitrary web script or HTML via the (2) asc_or_desc, (3) order_by, (4) page_number, (5) serch_or_not, or (6) search_events_by_title parameter in (a) the Spider_Facebook_manage page to wp-admin/admin.php or a (b) selectpagesforfacebook or (c) selectpostsforfacebook action to wp-admin/admin-ajax.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1582?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wordpress.org/plugins/spider-facebook/changelog/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130318/WordPress-Spider-Facebook-1.0.10-Cross-Site-Scripting.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1582?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1583 mean in the context of cybersecurity?

[Assistant] CVE-2015-1583


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1583.

[Assistant] Multiple cross-site request forgery (CSRF) vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account via a request to mods/_core/users/admins/create.php or (2) create a user account via a request to mods/_core/users/create_user.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1583?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130598/ATutor-LCMS-2.2-Cross-Site-Request-Forgery.html'}, {'name': '72845', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72845'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/atutor/ATutor/commit/068b8aa37f24645c62235018fb8da340f60e2d18'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/atutor/ATutor/commit/0ee827317e497f1db86ddc5080b8af461e4595ce'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/atutor/ATutor/commit/af519cfb56da7312eecbb5812484fcbce08e4419'}, {'tags': ['x_refsource_MISC'], 'url': 'https://edricteo.com/cve-2015-1583-atutor-lcms-csrf-vulnerability/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1583?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1585 mean in the context of cybersecurity?

[Assistant] CVE-2015-1585


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1585.

[Assistant] Fat Free CRM before 0.13.6 allows remote attackers to conduct cross-site request forgery (CSRF) attacks via a request without the authenticity_token, as demonstrated by a crafted HTML page that creates a new administrator account.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1585?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/fatfreecrm/fat_free_crm/wiki/CSRF-Vulnerability-%28CVE-2015-1585%29'}, {'name': '20150214 [CVE-2015-1585] Fat Free CRM - CSRF Vulnerability in Version 0.13.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534709/100/0/threaded'}, {'name': 'fatfreecrm-cve20151585-csrf(100925)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100925'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130410/Fat-Free-CRM-0.13.5-Cross-Site-Request-Forgery.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1585?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1587 mean in the context of cybersecurity?

[Assistant] CVE-2015-1587


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1587.

[Assistant] Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a request to a predictable filename in tmp/.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1587?

[Assistant] {'name': '35113', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35113'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130383/Maarch-LetterBox-2.8-Unrestricted-File-Upload.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://asylum.seraum.com/Security-Alert-GED-ECM-Maarch-Critical-Vulnerabilities.html'}, {'name': '113928', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/113928'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1587?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1588 mean in the context of cybersecurity?

[Assistant] CVE-2015-1588


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1588.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange Server 6 and OX AppSuite before 7.4.2-rev43, 7.6.0-rev38, and 7.6.1-rev21.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1588?

[Assistant] {'name': '1032202', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032202'}, {'name': '74350', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74350'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/131649/Open-Xchange-Server-6-OX-AppSuite-Cross-Site-Scripting.html'}, {'name': '20150427 Open-Xchange Security Advisory 2015-04-27', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/535388/100/1100/threaded'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1588?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1589 mean in the context of cybersecurity?

[Assistant] CVE-2015-1589


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1589.

[Assistant] Directory traversal vulnerability in arCHMage 0.2.4 allows remote attackers to write to arbitrary files via a .. (dot dot) in a CHM file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1589?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776164'}, {'name': '[oss-security] 20150212 CVE request: archmage directory traversal', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/12/9'}, {'name': 'archmage-cve20151589-dir-trav(100879)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100879'}, {'name': '[oss-security] 20150212 Re: CVE request: archmage directory traversal', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/12/16'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1589?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1590 mean in the context of cybersecurity?

[Assistant] CVE-2015-1590


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1590.

[Assistant] The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailio_ctl.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1590?

[Assistant] {'name': '[oss-security] 20150212 Re: kamailio: multiple /tmp file vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/12/7'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/kamailio/kamailio/issues/48'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/kamailio/kamailio/blob/4.3.0/ChangeLog#L2038'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/kamailio/kamailio/commit/06177b12936146d48378cc5f6c6e1b157ebd519b'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775681'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1590?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1591 mean in the context of cybersecurity?

[Assistant] CVE-2015-1591


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1591.

[Assistant] The kamailio build in kamailio before 4.2.0-2 process allows local users to gain privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1591?

[Assistant] {'name': '[oss-security] 20150212 Re: kamailio: multiple /tmp file vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/12/7'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/kamailio/kamailio/issues/48'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?msg=17%3Bfilename=0001-fix-fifo-and-ctl-defaults-pointing-to-unsecure-tmp-d.patch%3Batt=1%3Bbug=775681'}, {'tags': ['x_refsource_MISC'], 'url': 'https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1591.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cve.killedkenny.io/cve/CVE-2015-1591'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775681'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1591?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1592 mean in the context of cybersecurity?

[Assistant] CVE-2015-1592


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1592.

[Assistant] Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1592?

[Assistant] {'name': 'DSA-3183', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2015/dsa-3183'}, {'name': '1031777', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031777'}, {'name': '[oss-security] 20150212 CVE request: MovableType before 5.2.12', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/12/2'}, {'name': 'movable-type-cve20151592-file-include(100912)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100912'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://movabletype.org/news/2015/02/movable_type_607_and_5212_released_to_close_security_vulnera.html'}, {'name': '72606', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72606'}, {'name': '[oss-security] 20150212 Re: CVE request: MovableType before 5.2.12 - Movable Type', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/12/17'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1592?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1593 mean in the context of cybersecurity?

[Assistant] CVE-2015-1593


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1593.

[Assistant] The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, which makes it easier for attackers to bypass the ASLR protection mechanism by predicting the address of the top of the stack, related to the randomize_stack_top function in fs/binfmt_elf.c and the stack_maxrandom_size function in arch/x86/mm/mmap.c.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1593?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/4e7c22d447bb6d7e37bfe39ff658486ae78e8d77'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.1'}, {'name': 'DSA-3170', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3170'}, {'name': 'SUSE-SU-2015:0736', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html'}, {'name': 'USN-2562-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2562-1'}, {'name': 'USN-2565-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2565-1'}, {'name': 'USN-2561-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2561-1'}, {'name': '72607', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72607'}, {'name': 'USN-2564-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2564-1'}, {'name': 'USN-2563-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2563-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4e7c22d447bb6d7e37bfe39ff658486ae78e8d77'}, {'name': 'RHSA-2015:1138', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1138.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hmarco.org/bugs/linux-ASLR-integer-overflow.html'}, {'name': 'USN-2560-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2560-1'}, {'name': '[oss-security] 20150213 Re: CVE-Request -- Linux ASLR integer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/13/13'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1192519'}, {'name': 'openSUSE-SU-2015:0714', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html'}, {'name': 'RHSA-2015:1137', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1137.html'}, {'name': '[linux-kernel] 20150107 Re: [PATH] Fix stack randomization on x86_64 bit', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lkml.org/lkml/2015/1/7/811'}, {'name': 'RHSA-2015:1221', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1221.html'}, {'name': 'RHSA-2019:3517', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2019:3517'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1593?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1594 mean in the context of cybersecurity?

[Assistant] CVE-2015-1594


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1594.

[Assistant] Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2 before HF7, 5.5 SP3, and 5.5 SP4 before HF4; SIMOTION Scout before 4.4; and STARTER before 4.4 HF3 allows local users to gain privileges via a Trojan horse application file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1594?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-451236.pdf'}, {'name': '1032039', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032039'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1594?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1595 mean in the context of cybersecurity?

[Assistant] CVE-2015-1595


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1595.

[Assistant] The Siemens SPCanywhere application for Android and iOS does not use encryption during lookups of system ID to IP address mappings, which allows man-in-the-middle attackers to discover alarm IP addresses and spoof servers by intercepting the client-server data stream.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1595?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-185226.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1595?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1596 mean in the context of cybersecurity?

[Assistant] CVE-2015-1596


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1596.

[Assistant] The Siemens SPCanywhere application for Android and iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1596?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-185226.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1596?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1597 mean in the context of cybersecurity?

[Assistant] CVE-2015-1597


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1597.

[Assistant] The Siemens SPCanywhere application for Android does not use encryption during the loading of code, which allows man-in-the-middle attackers to execute arbitrary code by modifying the client-server data stream.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1597?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-185226.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1597?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1598 mean in the context of cybersecurity?

[Assistant] CVE-2015-1598


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1598.

[Assistant] The Siemens SPCanywhere application for Android does not properly store application passwords, which allows physically proximate attackers to obtain sensitive information by examining the device filesystem.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1598?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-185226.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1598?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1599 mean in the context of cybersecurity?

[Assistant] CVE-2015-1599


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1599.

[Assistant] The Siemens SPCanywhere application for iOS allows physically proximate attackers to bypass intended access restrictions by leveraging a filesystem architectural error.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1599?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-185226.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1599?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1600 mean in the context of cybersecurity?

[Assistant] CVE-2015-1600


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1600.

[Assistant] Information disclosure vulnerability in Netatmo Indoor Module firmware 100 and earlier.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1600?

[Assistant] {'name': '72622', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72622'}, {'tags': ['x_refsource_MISC'], 'url': 'https://isc.sans.edu/forums/diary/Did+You+Remove+That+Debug+Code+Netatmo+Weather+Station+Sending+WPA+Passphrase+in+the+Clear/19327'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130401/Netatmo-Weather-Station-Cleartext-Password-Leak.html'}, {'name': '20150213 CVE-2015-1600 - Netatmo Weather Station Cleartext Password Leak', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534707/100/1600/threaded'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1600?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1601 mean in the context of cybersecurity?

[Assistant] CVE-2015-1601


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1601.

[Assistant] Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 allows man-in-the-middle attackers to obtain sensitive information or modify transmitted data via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1601?

[Assistant] {'name': '72691', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72691'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-315836.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-487246.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1601?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1602 mean in the context of cybersecurity?

[Assistant] CVE-2015-1602


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1602.

[Assistant] Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext (1) protection-level passwords or (2) web-server passwords by leveraging the ability to read these files.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1602?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-315836.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1602?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1603 mean in the context of cybersecurity?

[Assistant] CVE-2015-1603


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1603.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in Adminsystems CMS before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter to index.php or (2) id parameter in a users_users action to asys/site/system.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1603?

[Assistant] {'name': '20150213 Reflecting XSS vulnerabitlies, unrestricted file upload and underlaying CSRF in Landsknecht Adminsystems CMS v. 4.0.1 (DEV, beta version)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Feb/50'}, {'name': '72605', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72605'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2015/02/report-for-advisory-sroeadv-2015-14.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130394/Landsknecht-Adminsystems-CMS-4.0.1-CSRF-XSS-File-Upload.html'}, {'name': '[oss-security] 20150214 Re: CVE-Request -- Landsknecht Adminsystems v.4.0.1 (DEV, beta version) -- Reflecting XSS, unrestricted file-upload and underlaying CSRF', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/14/5'}, {'name': '[oss-security] 20150213 CVE-Request -- Landsknecht Adminsystems v.4.0.1 (DEV, beta version)  -- Reflecting XSS, unrestricted file-upload and underlaying CSRF', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/13/11'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2015/01/sroeadv-2015-14.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/kneecht/adminsystems/releases/tag/4.0.2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/kneecht/adminsystems/issues/1'}, {'name': '[oss-security] 20150213 Re: CVE-Request -- Landsknecht Adminsystems v.4.0.1 (DEV, beta version) -- Reflecting XSS, unrestricted file-upload and underlaying CSRF', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/14/1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1603?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1604 mean in the context of cybersecurity?

[Assistant] CVE-2015-1604


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1604.

[Assistant] Unrestricted file upload vulnerability in asys/site/files.php in Adminsystems CMS before 4.0.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in upload/files/.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1604?

[Assistant] {'name': '20150213 Reflecting XSS vulnerabitlies, unrestricted file upload and underlaying CSRF in Landsknecht Adminsystems CMS v. 4.0.1 (DEV, beta version)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Feb/50'}, {'name': '72605', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72605'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2015/02/report-for-advisory-sroeadv-2015-14.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130394/Landsknecht-Adminsystems-CMS-4.0.1-CSRF-XSS-File-Upload.html'}, {'name': '[oss-security] 20150214 Re: CVE-Request -- Landsknecht Adminsystems v.4.0.1 (DEV, beta version) -- Reflecting XSS, unrestricted file-upload and underlaying CSRF', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/14/5'}, {'name': '[oss-security] 20150213 CVE-Request -- Landsknecht Adminsystems v.4.0.1 (DEV, beta version)  -- Reflecting XSS, unrestricted file-upload and underlaying CSRF', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/13/11'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/kneecht/adminsystems/releases/tag/4.0.2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/kneecht/adminsystems/issues/1'}, {'name': '[oss-security] 20150213 Re: CVE-Request -- Landsknecht Adminsystems v.4.0.1 (DEV, beta version) -- Reflecting XSS, unrestricted file-upload and underlaying CSRF', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/14/1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1604?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1605 mean in the context of cybersecurity?

[Assistant] CVE-2015-1605


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1605.

[Assistant] Multiple SQL injection vulnerabilities in Dell ScriptLogic Asset Manager (aka Quest Workspace Asset Manager) before 9.5 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to (1) GetClientPackage.aspx or (2) GetProcessedPackage.aspx.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1605?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-15-049/'}, {'name': '72697', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72697'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-15-048/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1605?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1606 mean in the context of cybersecurity?

[Assistant] CVE-2015-1606


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1606.

[Assistant] The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows remote attackers to cause a denial of service (invalid read and use-after-free) via a crafted keyring file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1606?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://blog.fuzzing-project.org/5-Multiple-issues-in-GnuPG-found-through-keyring-fuzzing-TFPA-0012015.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.debian.org/security/2015/dsa-3184'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/13/14'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/14/6'}, {'tags': ['x_refsource_MISC'], 'url': 'http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git%3Ba=commit%3Bh=f0f71a721ccd7ab9e40b8b6b028b59632c0cc648'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securitytracker.com/id/1031876'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1606?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1607 mean in the context of cybersecurity?

[Assistant] CVE-2015-1607


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1607.

[Assistant] kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service (invalid read operation) via a crafted keyring file, related to sign extensions and "memcpy with overlapping ranges."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1607?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://blog.fuzzing-project.org/5-Multiple-issues-in-GnuPG-found-through-keyring-fuzzing-TFPA-0012015.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/13/14'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/14/6'}, {'tags': ['x_refsource_MISC'], 'url': 'https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000361.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000362.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git%3Ba=commit%3Bh=2183683bd633818dd031b090b5530951de76f392'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ubuntu.com/usn/usn-2554-1/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/72610'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1607?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1608 mean in the context of cybersecurity?

[Assistant] CVE-2015-1608


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1608.

[Assistant] Topline Opportunity Form (aka XLS Opp form) before 2015-02-15 does not properly restrict access to database-connection strings, which allows attackers to read the cleartext version of sensitive credential and e-mail address information via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1608?

[Assistant] {'name': 'VU#669156', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/669156'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/BLUU-9RUTH4'}, {'name': '72518', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72518'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1608?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1609 mean in the context of cybersecurity?

[Assistant] CVE-2015-1609


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1609.

[Assistant] MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service via a crafted UTF-8 string in a BSON request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1609?

[Assistant] {'name': 'FEDORA-2015-4003', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152493.html'}, {'name': 'GLSA-201611-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201611-13'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.splunk.com/view/SP-CAAAPC3'}, {'name': '1034466', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034466'}, {'name': 'FEDORA-2015-4197', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153690.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://jira.mongodb.org/browse/SERVER-17264'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1609?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1610 mean in the context of cybersecurity?

[Assistant] CVE-2015-1610


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1610.

[Assistant] hosttracker in OpenDaylight l2switch allows remote attackers to change the host location information by spoofing the MAC address, aka "topology spoofing."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1610?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.opendaylight.org/view/Security_Advisories#.5BModerate.5D_CVE-2015-1610_l2switch:_topology_spoofing_via_hosttracker'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.internetsociety.org/sites/default/files/10_4_2.pdf'}, {'name': '73251', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73251'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1610?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1611 mean in the context of cybersecurity?

[Assistant] CVE-2015-1611


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1611.

[Assistant] OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to "fake LLDP injection."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1611?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.opendaylight.org/gerrit/#/c/16208/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.internetsociety.org/sites/default/files/10_4_2.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.opendaylight.org/view/Security_Advisories#.5BModerate.5D_CVE-2015-1611_CVE-2015-1612_openflowplugin:_topology_spoofing_via_LLDP'}, {'name': '73254', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73254'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.opendaylight.org/gerrit/#/c/16193/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cloudrouter.org/security/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1611?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1612 mean in the context of cybersecurity?

[Assistant] CVE-2015-1612


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1612.

[Assistant] OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1612?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.opendaylight.org/gerrit/#/c/16208/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.internetsociety.org/sites/default/files/10_4_2.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.opendaylight.org/view/Security_Advisories#.5BModerate.5D_CVE-2015-1611_CVE-2015-1612_openflowplugin:_topology_spoofing_via_LLDP'}, {'name': '73254', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73254'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.opendaylight.org/gerrit/#/c/16193/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cloudrouter.org/security/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1612?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1613 mean in the context of cybersecurity?

[Assistant] CVE-2015-1613


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1613.

[Assistant] RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1613?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://rhodecode.com/blog/rhodecode-enterprise-security-release/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1613?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1614 mean in the context of cybersecurity?

[Assistant] CVE-2015-1614


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1614.

[Assistant] Multiple cross-site request forgery (CSRF) vulnerabilities in the Image Metadata Cruncher plugin for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) image_metadata_cruncher[alt] or (2) image_metadata_cruncher[caption] parameter in an update action in the image_metadata_cruncher_title page to wp-admin/options.php or (3) custom image meta tag to the image metadata cruncher page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1614?

[Assistant] {'name': 'image-metadata-wordpress-xss(100926)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100926'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130404/WordPress-Image-Metadata-Cruncher-Cross-Site-Scripting.html'}, {'name': '20150217 CVE-2015-1614 csrf/xss in in wordpress Plugin Image Metadata cruncher', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534718/100/0/threaded'}, {'name': '20150215 Multiple Cross site scripting in wordpress Plugin Image Metadata cruncher', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534711/100/0/threaded'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1614?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1616 mean in the context of cybersecurity?

[Assistant] CVE-2015-1616


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1616.

[Assistant] SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1616?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10098'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1616?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1617 mean in the context of cybersecurity?

[Assistant] CVE-2015-1617


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1617.

[Assistant] Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1617?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10098'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1617?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1618 mean in the context of cybersecurity?

[Assistant] CVE-2015-1618


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1618.

[Assistant] The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated users to obtain sensitive password information via a crafted URL.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1618?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10098'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1618?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1619 mean in the context of cybersecurity?

[Assistant] CVE-2015-1619


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1619.

[Assistant] Cross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway (MEG) 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through 7.0.5, 5.6, and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified tokens in Digest messages.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1619?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10099'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1619?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1621 mean in the context of cybersecurity?

[Assistant] CVE-2015-1621


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1621.

[Assistant] Cross-site scripting (XSS) vulnerability in the Webform prepopulate block module before 7.x-3.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1621?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.drupal.org/node/2423681'}, {'name': '[oss-security] 20150213 CVE requests for Drupal contributed modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/13/12'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.drupal.org/node/2424405'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1621?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1622 mean in the context of cybersecurity?

[Assistant] CVE-2015-1622


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1622.

[Assistant] Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1622?

[Assistant] {'name': 'MS15-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-018'}, {'name': '1031888', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031888'}, {'name': '72927', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72927'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1622?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1623 mean in the context of cybersecurity?

[Assistant] CVE-2015-1623


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1623.

[Assistant] Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0056 and CVE-2015-1626.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1623?

[Assistant] {'name': 'MS15-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-018'}, {'name': '1031888', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031888'}, {'name': '72928', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72928'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1623?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1624 mean in the context of cybersecurity?

[Assistant] CVE-2015-1624


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1624.

[Assistant] Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1624?

[Assistant] {'name': 'MS15-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-018'}, {'name': '1031888', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031888'}, {'name': '72929', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72929'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1624?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1625 mean in the context of cybersecurity?

[Assistant] CVE-2015-1625


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1625.

[Assistant] Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1634.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1625?

[Assistant] {'name': 'MS15-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-018'}, {'name': '1031888', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031888'}, {'name': '72923', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72923'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1625?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1626 mean in the context of cybersecurity?

[Assistant] CVE-2015-1626


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1626.

[Assistant] Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0056 and CVE-2015-1623.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1626?

[Assistant] {'name': 'MS15-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-018'}, {'name': '1031888', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031888'}, {'name': '72930', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72930'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1626?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1627 mean in the context of cybersecurity?

[Assistant] CVE-2015-1627


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1627.

[Assistant] Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."