[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1460?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1461 mean in the context of cybersecurity?

[Assistant] CVE-2015-1461


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1461.

[Assistant] ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted (1) Yoda's crypter or (2) mew packer file, related to a "heap out of bounds condition."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1461?

[Assistant] {'name': 'GLSA-201512-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201512-08'}, {'name': 'openSUSE-SU-2015:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00014.html'}, {'name': '1031672', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id/1031672'}, {'name': 'FEDORA-2015-1437', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148950.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.clamav.net/2015/01/clamav-0986-has-been-released.html'}, {'name': 'SUSE-SU-2015:0298', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00020.html'}, {'name': 'FEDORA-2015-1461', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148958.html'}, {'name': '62536', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62536'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1461?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1462 mean in the context of cybersecurity?

[Assistant] CVE-2015-1462


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1462.

[Assistant] ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upx packer file, related to a "heap out of bounds condition."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1462?

[Assistant] {'name': 'GLSA-201512-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201512-08'}, {'name': 'openSUSE-SU-2015:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00014.html'}, {'name': '1031672', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id/1031672'}, {'name': 'FEDORA-2015-1437', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148950.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.clamav.net/2015/01/clamav-0986-has-been-released.html'}, {'name': 'SUSE-SU-2015:0298', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00020.html'}, {'name': 'FEDORA-2015-1461', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148958.html'}, {'name': '62536', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62536'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1462?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1463 mean in the context of cybersecurity?

[Assistant] CVE-2015-1463


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1463.

[Assistant] ClamAV before 0.98.6 allows remote attackers to cause a denial of service (crash) via a crafted petite packer file, related to an "incorrect compiler optimization."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1463?

[Assistant] {'name': 'GLSA-201512-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201512-08'}, {'name': 'openSUSE-SU-2015:0285', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00014.html'}, {'name': 'FEDORA-2015-1437', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148950.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.clamav.net/2015/01/clamav-0986-has-been-released.html'}, {'name': 'SUSE-SU-2015:0298', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00020.html'}, {'name': 'FEDORA-2015-1461', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148958.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1463?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1464 mean in the context of cybersecurity?

[Assistant] CVE-2015-1464


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1464.

[Assistant] RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1464?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html'}, {'name': 'DSA-3176', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3176'}, {'name': 'FEDORA-2015-4698', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154047.html'}, {'name': 'FEDORA-2015-4666', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154213.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1464?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1465 mean in the context of cybersecurity?

[Assistant] CVE-2015-1465


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1465.

[Assistant] The IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence of caching, which allows remote attackers to cause a denial of service (memory consumption or system crash) via a flood of packets.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1465?

[Assistant] {'name': 'SUSE-SU-2015:1489', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html'}, {'name': 'USN-2562-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2562-1'}, {'name': 'SUSE-SU-2015:1488', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html'}, {'name': 'USN-2546-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2546-1'}, {'name': 'USN-2563-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2563-1'}, {'name': 'openSUSE-SU-2015:1382', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html'}, {'name': '1036763', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036763'}, {'name': '[oss-security] 20150203 Re: CVE request -- Linux kernel - net: DoS due to routing packets to too many different dsts/too fast', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/03/13'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1183744'}, {'name': 'USN-2545-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2545-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/df4d92549f23e1c037e83323aff58a21b3de7fe0'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=df4d92549f23e1c037e83323aff58a21b3de7fe0'}, {'name': '72435', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72435'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.8'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1465?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1467 mean in the context of cybersecurity?

[Assistant] CVE-2015-1467


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1467.

[Assistant] Multiple SQL injection vulnerabilities in Translations in Fork CMS before 3.8.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) language[] or (2) type[] parameter to private/en/locale/index.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1467?

[Assistant] {'name': '20150204 [CVE-2015-1467] Fork CMS - SQL Injection in Version 3.8.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534616/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.fork-cms.com/blog/detail/fork-3.8.6-released'}, {'name': 'forkcms-cve20151467-sql-injection(100668)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100668'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130242/Fork-CMS-3.8.5-SQL-Injection.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1467?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1469 mean in the context of cybersecurity?

[Assistant] CVE-2015-1469


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1469.

[Assistant] time.htm in the web interface on SerVision HVG Video Gateway devices with firmware through 2.2.26a100 allows remote authenticated users to gain privileges by leveraging a cookie received in an HTTP response, a different vulnerability than CVE-2015-0929 and CVE-2015-0930.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1469?

[Assistant] {'name': 'VU#522460', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/522460'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1469?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1471 mean in the context of cybersecurity?

[Assistant] CVE-2015-1471


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1471.

[Assistant] SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1471?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2015/02/advisory-for-sroeadv-2015-11.html'}, {'name': '20150203 SQL injection vulnerability in Pragyan CMS v.3.0', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Feb/18'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/delta/pragyan/issues/206'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sroesemann.blogspot.de/2015/01/sroeadv-2015-11.html'}, {'name': '[oss-security] 20150203 Re: CVE-Request -- Pragyan CMS v.3.0 -- SQL injection vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2015/q1/402'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/delta/pragyan/commit/c93bc100ec93fc78940fbdca9b6b009101858309'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pastebin.com/ip2gGYuS'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1471?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1472 mean in the context of cybersecurity?

[Assistant] CVE-2015-1472


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1472.

[Assistant] The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during memory allocation, which allows context-dependent attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long line containing wide characters that are improperly handled in a wscanf call.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1472?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html'}, {'name': 'GLSA-201602-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201602-02'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html'}, {'name': 'USN-2519-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2519-1'}, {'name': '72428', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72428'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commit%3Bh=5bd80bfe9ca0d955bfbbc002781bc7b01b6bcb06'}, {'name': '[libc-alpha] 20150206 The GNU C Library version 2.21 is now available', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://sourceware.org/ml/libc-alpha/2015-02/msg00119.html'}, {'name': '[oss-security] 20150203 Re: CVE request: heap buffer overflow in glibc swscanf', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2015/02/04/1'}, {'name': '20190612 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2019/Jun/18'}, {'name': '20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'https://seclists.org/bugtraq/2019/Jun/14'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html'}, {'name': '20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2019/Sep/7'}, {'name': '20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'https://seclists.org/bugtraq/2019/Sep/7'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1472?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1473 mean in the context of cybersecurity?

[Assistant] CVE-2015-1473


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1473.

[Assistant] The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during a risk-management decision for use of the alloca function, which might allow context-dependent attackers to cause a denial of service (segmentation violation) or overwrite memory locations beyond the stack boundary via a long line containing wide characters that are improperly handled in a wscanf call.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1473?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html'}, {'name': 'USN-2519-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2519-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commit%3Bh=5bd80bfe9ca0d955bfbbc002781bc7b01b6bcb06'}, {'name': '72499', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72499'}, {'name': '[oss-security] 20150203 Re: CVE request: heap buffer overflow in glibc swscanf', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2015/02/04/1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1473?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1474 mean in the context of cybersecurity?

[Assistant] CVE-2015-1474


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1474.

[Assistant] Multiple integer overflows in the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp in Android through 5.0 allow attackers to gain privileges or cause a denial of service (memory corruption) via vectors that trigger a large number of (1) file descriptors or (2) integer values.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1474?

[Assistant] {'name': '72788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72788'}, {'name': '20150311 [CVE-2015-1474]Integer overflow leading to heap corruption while unflattening GraphicBuffer', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Mar/63'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/native/+/38803268570f90e97452cd9a30ac831661829091'}, {'name': '1031875', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031875'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130778/Google-Android-Integer-Oveflow-Heap-Corruption.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1474?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1475 mean in the context of cybersecurity?

[Assistant] CVE-2015-1475


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1475.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) category parameter to forum.php or the (3) page or (4) order parameter to (a) board_entry.php or (b) forum_entry.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1475?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://tetraph.com/security/xss-vulnerability/my-little-forum-multiple-xss-security-vulnerabilities/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130220/My-Little-Forum-2.3.3-2.2-1.7-Cross-Site-Scripting.html'}, {'name': '20150203 My Little Forum Multiple XSS Security Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Feb/15'}, {'name': 'mylittleforum-multiple-xss(100616)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100616'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1475?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1476 mean in the context of cybersecurity?

[Assistant] CVE-2015-1476


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1476.

[Assistant] Multiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to execute arbitrary SQL commands via the (1) productbycat parameter to product.php, or (2) username or (3) password parameter to __admin/index.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1476?

[Assistant] {'name': '35878', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35878'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130073/ecommerceMajor-SQL-Injection.html'}, {'name': '117569', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/117569'}, {'name': '117570', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/117570'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1476?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1477 mean in the context of cybersecurity?

[Assistant] CVE-2015-1477


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1477.

[Assistant] SQL injection vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewad task to classifieds/offerring-ads.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1477?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130093/JClassifiedsManager-Cross-Site-Scripting-SQL-Injection.html'}, {'name': '117567', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/117567'}, {'name': '35911', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35911'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1477?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1478 mean in the context of cybersecurity?

[Assistant] CVE-2015-1478


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1478.

[Assistant] Cross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the view parameter to /classifieds.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1478?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130093/JClassifiedsManager-Cross-Site-Scripting-SQL-Injection.html'}, {'name': '35911', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35911'}, {'name': '117568', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/117568'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1478?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1479 mean in the context of cybersecurity?

[Assistant] CVE-2015-1479


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1479.

[Assistant] SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to execute arbitrary SQL commands via the site parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1479?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130079/ManageEngine-ServiceDesk-9.0-SQL-Injection.html'}, {'name': '35890', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35890'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rewterz.com/vulnerabilities/manageengine-servicedesk-sql-injection-vulnerability'}, {'name': '72299', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72299'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.manageengine.com/products/service-desk/readme-9.0.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1479?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1480 mean in the context of cybersecurity?

[Assistant] CVE-2015-1480


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1480.

[Assistant] ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to obtain sensitive ticket information via a (1) getTicketData action to servlet/AJaxServlet or a direct request to (2) swf/flashreport.swf, (3) reports/flash/details.jsp, or (4) reports/CreateReportTable.jsp.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1480?

[Assistant] {'name': '117499', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/117499'}, {'name': '35904', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35904'}, {'name': '72302', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72302'}, {'name': '20150122 Fwd: REWTERZ-20140103 - ManageEngine ServiceDesk Plus User Privileges Management Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534538/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rewterz.com/vulnerabilities/manageengine-servicedesk-plus-user-privileges-management-vulnerability'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130081/ManageEngine-ServiceDesk-Plus-9.0-Privilege-Escalation.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.manageengine.com/products/service-desk/readme-9.0.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1480?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1481 mean in the context of cybersecurity?

[Assistant] CVE-2015-1481


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1481.

[Assistant] Ansible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to gain privileges by creating a superuser account.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1481?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129944/Ansible-Tower-2.0.2-XSS-Privilege-Escalation-Authentication-Missing.html'}, {'name': '20150113 SEC Consult SA-20150113-1 :: Privilege Escalation & XSS & Missing Authentication in Ansible Tower', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534464/100/0/threaded'}, {'name': '20150113 SEC Consult SA-20150113-1 :: Privilege Escalation & XSS & Missing Authentication in Ansible Tower', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/52'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150113-1_Ansible-Tower_multiple-vulnerabilities_v10.txt'}, {'name': '35786', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35786'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1481?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1482 mean in the context of cybersecurity?

[Assistant] CVE-2015-1482


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1482.

[Assistant] Ansible Tower (aka Ansible UI) before 2.0.5 allows remote attackers to bypass authentication and obtain sensitive information via a websocket connection to socket.io/1/.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1482?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129944/Ansible-Tower-2.0.2-XSS-Privilege-Escalation-Authentication-Missing.html'}, {'name': '20150113 SEC Consult SA-20150113-1 :: Privilege Escalation & XSS & Missing Authentication in Ansible Tower', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534464/100/0/threaded'}, {'name': '20150113 SEC Consult SA-20150113-1 :: Privilege Escalation & XSS & Missing Authentication in Ansible Tower', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/52'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150113-1_Ansible-Tower_multiple-vulnerabilities_v10.txt'}, {'name': '35786', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/35786'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1482?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1483 mean in the context of cybersecurity?

[Assistant] CVE-2015-1483


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1483.

[Assistant] Symantec NetBackup OpsCenter 7.6.0.2 through 7.6.1 on Linux and UNIX allows remote attackers to execute arbitrary JavaScript code via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1483?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150302_00'}, {'name': '1031831', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031831'}, {'name': '72737', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72737'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1483?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1484 mean in the context of cybersecurity?

[Assistant] CVE-2015-1484


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1484.

[Assistant] Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming (SWS) 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1484?

[Assistant] {'name': '1032133', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032133'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150410_00'}, {'name': '73925', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73925'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1484?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1485 mean in the context of cybersecurity?

[Assistant] CVE-2015-1485


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1485.

[Assistant] Cross-site request forgery (CSRF) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allows remote attackers to hijack the authentication of administrators.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1485?

[Assistant] {'name': '1032710', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032710'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150622_00'}, {'name': '75289', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75289'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1485?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1486 mean in the context of cybersecurity?

[Assistant] CVE-2015-1486


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1486.

[Assistant] The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authentication via a crafted password-reset action that triggers a new administrative session.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1486?

[Assistant] {'name': '37812', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/37812/'}, {'name': '76074', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76074'}, {'name': '1033165', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1033165'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1486?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1487 mean in the context of cybersecurity?

[Assistant] CVE-2015-1487


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1487.

[Assistant] The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to arbitrary files, and consequently obtain administrator privileges, via a crafted filename.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1487?

[Assistant] {'name': '37812', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/37812/'}, {'name': '76094', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76094'}, {'name': '1033165', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1033165'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1487?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1488 mean in the context of cybersecurity?

[Assistant] CVE-2015-1488


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1488.

[Assistant] An unspecified action handler in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to read arbitrary files via unknown vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1488?

[Assistant] {'name': '76077', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76077'}, {'name': '1033165', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1033165'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1488?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1489 mean in the context of cybersecurity?

[Assistant] CVE-2015-1489


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1489.

[Assistant] The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1489?

[Assistant] {'name': '37812', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/37812/'}, {'name': '76078', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76078'}, {'name': '1033165', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1033165'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1489?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1490 mean in the context of cybersecurity?

[Assistant] CVE-2015-1490


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1490.

[Assistant] Directory traversal vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to read arbitrary files via a relative pathname in a client installation package.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1490?

[Assistant] {'name': '1033165', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1033165'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00'}, {'name': '76081', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76081'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1490?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1491 mean in the context of cybersecurity?

[Assistant] CVE-2015-1491


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1491.

[Assistant] SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1491?

[Assistant] {'name': '76079', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76079'}, {'name': '1033165', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1033165'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1491?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1492 mean in the context of cybersecurity?

[Assistant] CVE-2015-1492


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1492.

[Assistant] Untrusted search path vulnerability in the client in Symantec Endpoint Protection 12.1 before 12.1-RU6-MP1 allows local users to gain privileges via a Trojan horse DLL in a client install package.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1492?

[Assistant] {'name': '76083', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76083'}, {'name': '1033165', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1033165'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1492?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1493 mean in the context of cybersecurity?

[Assistant] CVE-2015-1493


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1493.

[Assistant] Directory traversal vulnerability in the min_get_slash_argument function in lib/configonlylib.php in Moodle through 2.5.9, 2.6.x before 2.6.8, 2.7.x before 2.7.5, and 2.8.x before 2.8.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter, as demonstrated by reading PHP scripts.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1493?

[Assistant] {'name': '[oss-security] 20150209 Moodle security issue made public', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2015/02/09/2'}, {'name': '[oss-security] 20150204 CVE request for Moodlee MDL-48980 Security: Always clean the result from min_get_slash_argument', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2015/02/04/15'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=af9a7937cc085f96bdbc4724cadec6eeae0242fc'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48980'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://moodle.org/mod/forum/discuss.php?d=279956'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1493?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1494 mean in the context of cybersecurity?

[Assistant] CVE-2015-1494


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1494.

[Assistant] The FancyBox for WordPress plugin before 3.0.3 for WordPress does not properly restrict access, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an mfbfw[*] parameter in an update action to wp-admin/admin-post.php, as demonstrated by the mfbfw[padding] parameter and exploited in the wild in February 2015.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1494?

[Assistant] {'name': '72506', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72506'}, {'name': '[oss-security] 20150205 Re: CVE request for Zero-day in the Fancybox-for-WordPress Plugin', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/05/10'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://plugins.trac.wordpress.org/changeset/1082625/'}, {'name': '36087', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/36087'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wordpress.org/plugins/fancybox-for-wordpress/changelog/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wordpress.org/support/topic/possible-malware-2'}, {'name': '118543', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/118543'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.sucuri.net/2015/02/zero-day-in-the-fancybox-for-wordpress-plugin.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1494?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1495 mean in the context of cybersecurity?

[Assistant] CVE-2015-1495


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1495.

[Assistant] Multiple stack-based buffer overflows in Motorola Scanner SDK allow remote attackers to execute arbitrary code via a crafted string to the Open method in (1) IOPOSScanner.ocx or (2) IOPOSScale.ocx.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1495?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://portal.motorolasolutions.com/Support/US-EN/Resolution?solutionId=87666'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-15-034/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-15-033/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1495?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1496 mean in the context of cybersecurity?

[Assistant] CVE-2015-1496


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1496.

[Assistant] Motorola Scanner SDK uses weak permissions for (1) CoreScanner.exe, (2) rsmdriverproviderservice.exe, and (3) ScannerService.exe, which allows local users to gain privileges via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1496?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://portal.motorolasolutions.com/Support/US-EN/Resolution?solutionId=87666'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-15-035/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-15-037/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-15-036/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1496?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1497 mean in the context of cybersecurity?

[Assistant] CVE-2015-1497


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1497.

[Assistant] radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1497?

[Assistant] {'name': '118382', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/show/osvdb/118382'}, {'name': '72612', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72612'}, {'name': '36169', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/36169'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-15-038/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features'}, {'name': '36206', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/36206'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130459/HP-Client-Automation-Command-Injection.html'}, {'name': '40491', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/40491/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1497?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1498 mean in the context of cybersecurity?

[Assistant] CVE-2015-1498


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1498.

[Assistant] Persistent Systems Radia Client Automation does not properly restrict access to certain request, which allows remote attackers to (1) enumerate user accounts via a getUsers request, (2) assign a role to a user account via an addAssigneesToRole request, (3) remove a role from a user account via a removeAssigneesFromRole request, or (4) have other unspecified impact.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1498?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-15-039/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://radiasupport.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1498?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1499 mean in the context of cybersecurity?

[Assistant] CVE-2015-1499


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1499.

[Assistant] The ActiveMQ Broker in Samsung Security Manager (SSM) before 1.31 allows remote attackers to delete arbitrary files, and consequently cause a denial of service, via a DELETE request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1499?

[Assistant] {'name': 'samsung-security-cve20151499-dos(100918)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100918'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-15-041/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1499?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1500 mean in the context of cybersecurity?

[Assistant] CVE-2015-1500


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1500.

[Assistant] Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via unspecified vectors to (1) graphManager.load or (2) factory.load.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1500?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-15-044/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-15-042/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1500?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1501 mean in the context of cybersecurity?

[Assistant] CVE-2015-1501


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1501.

[Assistant] The factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via a UNC path to a crafted binary.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1501?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-15-043/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1501?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1503 mean in the context of cybersecurity?

[Assistant] CVE-2015-1503


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1503.

[Assistant] Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a (1) .. (dot dot) in the file parameter to a webmail/client/skins/default/css/css.php page or .../. (dot dot dot slash dot) in the (2) script or (3) style parameter to webmail/old/calendar/minimizer/index.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1503?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-001/?fid=5614'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/147505/IceWarp-Mail-Server-Directory-Traversal.html'}, {'name': '44587', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/44587/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1503?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1512 mean in the context of cybersecurity?

[Assistant] CVE-2015-1512


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1512.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in FancyFon FAMOC before 3.17.4 allow remote attackers to inject arbitrary web script or HTML via the (1) LoginForm[username] to ui/system/login or the (2) order or (3) myorgs to index.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1512?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2014-011.txt'}, {'name': 'famoc-index-xss(100410)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100410'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130119/FancyFon-FAMOC-3.16.5-Cross-Site-Scripting.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1512?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1513 mean in the context of cybersecurity?

[Assistant] CVE-2015-1513


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1513.

[Assistant] SQL injection vulnerability in SIPhone Enterprise PBX allows remote attackers to execute arbitrary SQL commands via the Username.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1513?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130194/SIPhone-Enterprise-PBX-SQL-Injection.html'}, {'name': 'siphonepbx-username-sql-injection(100582)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100582'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1513?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1514 mean in the context of cybersecurity?

[Assistant] CVE-2015-1514


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1514.

[Assistant] Multiple SQL injection vulnerabilities in FancyFon FAMOC before 3.17.4 allow (1) remote attackers to execute arbitrary SQL commands via the device ID REST parameter (PATH_INFO) to /ajax.php or (2) remote authenticated users to execute arbitrary SQL commands via the order parameter to index.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1514?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2014-010.txt'}, {'name': '20150127 [SYSS-2014-010] FancyFon FAMOC - SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534552/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130117/FancyFon-FAMOC-3.16.5-SQL-Injection.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1514?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1515 mean in the context of cybersecurity?

[Assistant] CVE-2015-1515


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1515.

[Assistant] The dwall.sys driver in SoftSphere DefenseWall Personal Firewall 3.24 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222000, 0x00222004, 0x00222008, 0x0022200c, or 0x00222010 IOCTL call.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1515?

[Assistant] {'name': '36052', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/36052'}, {'name': '117996', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/117996'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1515?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1516 mean in the context of cybersecurity?

[Assistant] CVE-2015-1516


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1516.

[Assistant] Cross-site scripting (XSS) vulnerability in Polycom RealPresence CloudAXIS Suite before 1.7.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1516?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://adrianhayter.com/exploits.php'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1516?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1517 mean in the context of cybersecurity?

[Assistant] CVE-2015-1517


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1517.

[Assistant] SQL injection vulnerability in Piwigo before 2.7.4, when all filters are activated, allows remote authenticated users to execute arbitrary SQL commands via the filter_level parameter in a "Refresh photo set" action in the batch_manager page to admin.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1517?

[Assistant] {'name': '72664', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72664'}, {'name': '20150218 [CVE-2015-1517] Piwigo - SQL Injection in Version 2.7.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534723/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130440/Piwigo-2.7.3-SQL-Injection.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://piwigo.org/releases/2.7.4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://piwigo.org/forum/viewtopic.php?id=25179'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1517?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1518 mean in the context of cybersecurity?

[Assistant] CVE-2015-1518


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1518.

[Assistant] SQL injection vulnerability in the search_post function in includes/search.php in Redaxscript before 2.3.0 allows remote attackers to execute arbitrary SQL commands via the search_terms parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1518?

[Assistant] {'name': '36023', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/36023'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130322/Radexscript-CMS-2.2.0-SQL-Injection.html'}, {'name': '20150212 Radexscript CMS 2.2.0 - SQL Injection vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Feb/39'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.itas.vn/news/itas-team-found-out-a-sql-injection-vulnerability-in-redaxscript-2-2-0-cms-75.html'}, {'name': '20150209 Radexscript CMS 2.2.0 - SQL Injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534661/100/0/threaded'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1518?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1521 mean in the context of cybersecurity?

[Assistant] CVE-2015-1521


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1521.

[Assistant] analyzer/protocol/dnp3/DNP3.cc in Bro before 2.3.2 does not properly handle zero values of a packet length, which allows remote attackers to cause a denial of service (buffer overflow or buffer over-read if NDEBUG; otherwise assertion failure) via a crafted DNP3 packet.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1521?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/bro/bro/commit/6cedd67c381ff22fde653adf02ee31caf66c81a0'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1521?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1522 mean in the context of cybersecurity?

[Assistant] CVE-2015-1522


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1522.

[Assistant] analyzer/protocol/dnp3/DNP3.cc in Bro before 2.3.2 does not reject certain non-zero values of a packet length, which allows remote attackers to cause a denial of service (buffer overflow or buffer over-read) via a crafted DNP3 packet.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1522?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/bro/bro/commit/6cedd67c381ff22fde653adf02ee31caf66c81a0'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1522?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1525 mean in the context of cybersecurity?

[Assistant] CVE-2015-1525


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1525.

[Assistant] audio/AudioPolicyManagerBase.cpp in Android before 5.1 allows attackers to cause a denial of service (audio_policy application outage) via a crafted application that provides a NULL device address.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1525?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://android.googlesource.com/platform/hardware/libhardware_legacy/+/2d2ea50%5E%21/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1525?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1526 mean in the context of cybersecurity?

[Assistant] CVE-2015-1526


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1526.

[Assistant] The media_server component in Android allows remote attackers to cause a denial of service via a crafted application.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1526?

[Assistant] {'name': '76666', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76666'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1526?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1527 mean in the context of cybersecurity?

[Assistant] CVE-2015-1527


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1527.

[Assistant] Integer overflow in IAudioPolicyService.cpp in Android allows local users to gain privileges via a crafted application, aka Android Bug ID 19261727.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1527?

[Assistant] {'name': '76665', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76665'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/6dc6c38%5E%21/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1527?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1528 mean in the context of cybersecurity?

[Assistant] CVE-2015-1528


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1528.

[Assistant] Integer overflow in the native_handle_create function in libcutils/native_handle.c in Android before 5.1.1 LMY48M allows attackers to obtain a different application's privileges or cause a denial of service (Binder heap memory corruption) via a crafted application, aka internal bug 19334482.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1528?

[Assistant] {'name': '[android-security-updates] 20150909 Nexus Security Bulletin (September 2015)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/native/+/7dcd0ec9c91688cfa3f679804ba6e132f9811254'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/system/core/+/e8c62fb484151f76ab88b1d5130f38de24ac8c14'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1528?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1529 mean in the context of cybersecurity?

[Assistant] CVE-2015-1529


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1529.

[Assistant] Integer overflow in soundtrigger/ISoundTriggerHwService.cpp in Android allows attacks to cause a denial of service via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1529?

[Assistant] {'name': '76663', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76663'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/b9096dc'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1529?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1530 mean in the context of cybersecurity?

[Assistant] CVE-2015-1530


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1530.

[Assistant] media/libmedia/IAudioPolicyService.cpp in Android before 5.1 allows attackers to execute arbitrary code with media_server privileges or cause a denial of service (integer overflow) via a crafted application that provides an invalid array size.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1530?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/74adca9%5E%21/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1530?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1536 mean in the context of cybersecurity?

[Assistant] CVE-2015-1536


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1536.

[Assistant] Integer overflow in the Bitmap_createFromParcel function in core/jni/android/graphics/Bitmap.cpp in Android before 5.1.1 LMY48I allows attackers to cause a denial of service (system_server crash) or obtain sensitive system_server memory-content information via a crafted application that leverages improper unmarshalling of bitmaps, aka internal bug 19666945.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1536?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/base/+/d44e5bde18a41beda39d49189bef7f2ba7c8f3cb'}, {'name': '[android-security-updates] 20150812 Nexus Security Bulletin (August 2015)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1536?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1537 mean in the context of cybersecurity?

[Assistant] CVE-2015-1537


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1537.

[Assistant] Integer overflow in IHDCP.cpp in the media_server component in Android allows remote attackers to execute arbitrary code via a crafted application.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1537?

[Assistant] {'name': '76670', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76670'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/c82e31a7039a03dca7b37c65b7890ba5c1e18ced%5E%21/#F0'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1537?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1538 mean in the context of cybersecurity?

[Assistant] CVE-2015-1538


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1538.

[Assistant] Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1538?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/2434839bbd168469f80dd9a22f1328bc81046398'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/134131/Libstagefright-Integer-Overflow-Check-Bypass.html'}, {'name': '1033094', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1033094'}, {'name': '76052', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76052'}, {'name': '38124', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/38124/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htm'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/hw-448928'}, {'name': '[android-security-updates] 20150812 Nexus Security Bulletin (August 2015)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1538?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1539 mean in the context of cybersecurity?

[Assistant] CVE-2015-1539


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1539.

[Assistant] Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via crafted ESDS atoms, aka internal bug 20139950, a related issue to CVE-2015-4493.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1539?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/5e751957ba692658b7f67eb03ae5ddb2cd3d970c'}, {'name': '1033094', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1033094'}, {'name': '76052', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76052'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htm'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/hw-448928'}, {'name': '[android-security-updates] 20150812 Nexus Security Bulletin (August 2015)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1539?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1541 mean in the context of cybersecurity?

[Assistant] CVE-2015-1541


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1541.

[Assistant] The AppWidgetServiceImpl implementation in com/android/server/appwidget/AppWidgetServiceImpl.java in the Settings application in Android before 5.1.1 LMY48I allows attackers to obtain a URI permission via an application that sends an Intent with a (1) FLAG_GRANT_READ_URI_PERMISSION or (2) FLAG_GRANT_WRITE_URI_PERMISSION flag, as demonstrated by bypassing intended restrictions on reading contacts, aka internal bug 19618745.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1541?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/base/+/0b98d304c467184602b4c6bce76fda0b0274bc07'}, {'name': '[android-security-updates] 20150812 Nexus Security Bulletin (August 2015)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1541?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1545 mean in the context of cybersecurity?

[Assistant] CVE-2015-1545


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1545.

[Assistant] The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an empty attribute list in a deref control in a search request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1545?

[Assistant] {'name': '72519', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72519'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commit%3Bh=c32e74763f77675b9e144126e375977ed6dc562c'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204659'}, {'name': 'openldap-cve20151545-dos(100937)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100937'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776988'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html'}, {'name': 'DSA-3209', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3209'}, {'name': 'APPLE-SA-2015-04-08-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html'}, {'name': 'openSUSE-SU-2015:1325', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-07/msg00069.html'}, {'name': '1032399', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032399'}, {'name': 'MDVSA-2015:073', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:073'}, {'name': 'MDVSA-2015:074', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:074'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openldap.org/its/?findid=8027'}, {'name': '62787', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62787'}, {'name': '[oss-security] 20150207 Re: CVE request: two OpenLDAP DoS issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/07/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT210788'}, {'name': '20191211 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'https://seclists.org/bugtraq/2019/Dec/23'}, {'name': '20191213 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2019/Dec/26'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1545?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1546 mean in the context of cybersecurity?

[Assistant] CVE-2015-1546


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1546.

[Assistant] Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service (crash) via a crafted search query with a matched values control.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1546?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776991'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204659'}, {'name': 'openldap-cve20151546-dos(100938)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100938'}, {'name': 'APPLE-SA-2015-04-08-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html'}, {'name': 'openSUSE-SU-2015:1325', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-07/msg00069.html'}, {'name': 'MDVSA-2015:073', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:073'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openldap.org/its/?findid=8046'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commit%3Bh=2f1a2dd329b91afe561cd06b872d09630d4edb6a'}, {'name': '62787', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62787'}, {'name': '[oss-security] 20150207 Re: CVE request: two OpenLDAP DoS issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/07/3'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1546?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1547 mean in the context of cybersecurity?

[Assistant] CVE-2015-1547


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1547.

[Assistant] The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff5.tif.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1547?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html'}, {'name': 'RHSA-2016:1547', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1547.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html'}, {'name': 'GLSA-201701-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201701-16'}, {'name': '73438', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73438'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'name': 'RHSA-2016:1546', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1546.html'}, {'name': '[oss-security] 20150207 Re: Multiple vulnerabilities in LibTIFF and associated tools', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2015/02/07/5'}, {'name': 'DSA-3467', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3467'}, {'name': '[oss-security] 20150124 Multiple vulnerabilities in LibTIFF and associated tools', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2015/01/24/16'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1547?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1548 mean in the context of cybersecurity?

[Assistant] CVE-2015-1548


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1548.

[Assistant] mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1548?

[Assistant] {'name': '73450', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73450'}, {'tags': ['x_refsource_MISC'], 'url': 'http://itinsight.hu/en/posts/articles/2015-01-23-mini-httpd/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1548?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1550 mean in the context of cybersecurity?

[Assistant] CVE-2015-1550


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1550.

[Assistant] Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote administrators to execute arbitrary files via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1550?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-006.txt'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1550?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1551 mean in the context of cybersecurity?

[Assistant] CVE-2015-1551


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1551.

[Assistant] Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.4 allows remote administrators to read arbitrary files via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2015-1551?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-006.txt'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1551?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2015-1554 mean in the context of cybersecurity?

[Assistant] CVE-2015-1554


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1554.

[Assistant] kgb-bot 1.33-2 allows remote attackers to cause a denial of service (crash).