Provide references for further information: Can you share references or external links related to CVE-2015-1146?


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1146?


Explain the CVE ID: What does the identifier CVE-2015-1147 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1147.

Open Directory Client in Apple OS X before 10.10.3 sends unencrypted password-change requests in certain circumstances involving missing certificates, which allows remote attackers to obtain sensitive information by sniffing the network.


Provide references for further information: Can you share references or external links related to CVE-2015-1147?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204659'}, {'name': '73982', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73982'}, {'name': '1032048', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032048'}, {'name': 'APPLE-SA-2015-04-08-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1147?


Explain the CVE ID: What does the identifier CVE-2015-1148 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1148.

Screen Sharing in Apple OS X before 10.10.3 stores the password of a user in a log file, which might allow context-dependent attackers to obtain sensitive information by reading this file.


Provide references for further information: Can you share references or external links related to CVE-2015-1148?


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1148?


Explain the CVE ID: What does the identifier CVE-2015-1149 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1149.

Integer overflow in the simulator in Swift in Apple Xcode before 6.3 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact by triggering an incorrect result of a type conversion.


Provide references for further information: Can you share references or external links related to CVE-2015-1149?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204663'}, {'name': '1032049', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032049'}, {'name': 'APPLE-SA-2015-04-08-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00004.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1149?


Explain the CVE ID: What does the identifier CVE-2015-1150 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1150.

The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to bypass network-access restrictions by sending packets for which custom-rule blocking was intended.


Provide references for further information: Can you share references or external links related to CVE-2015-1150?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204201'}, {'name': 'APPLE-SA-2015-04-24-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00006.html'}, {'name': '1032197', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032197'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1150?


Explain the CVE ID: What does the identifier CVE-2015-1151 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1151.

Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages by connecting from an iPad client.


Provide references for further information: Can you share references or external links related to CVE-2015-1151?

{'name': '1032196', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032196'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204201'}, {'name': 'APPLE-SA-2015-04-24-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Apr/msg00006.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1151?


Explain the CVE ID: What does the identifier CVE-2015-1152 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1152.

WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-1153 and CVE-2015-1154.


Provide references for further information: Can you share references or external links related to CVE-2015-1152?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205221'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204826'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT204941'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': '74525', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74525'}, {'name': 'openSUSE-SU-2016:0761', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html'}, {'name': '1032270', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032270'}, {'name': 'APPLE-SA-2015-09-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': 'APPLE-SA-2015-06-30-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html'}, {'name': 'APPLE-SA-2015-05-06-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/May/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1152?


Explain the CVE ID: What does the identifier CVE-2015-1153 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1153.

WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-1152 and CVE-2015-1154.


Provide references for further information: Can you share references or external links related to CVE-2015-1153?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205221'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204826'}, {'name': '74523', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74523'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT204941'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': '1032270', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032270'}, {'name': 'APPLE-SA-2015-09-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': 'openSUSE-SU-2016:0915', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html'}, {'name': 'APPLE-SA-2015-06-30-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html'}, {'name': 'APPLE-SA-2015-05-06-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/May/msg00000.html'}, {'name': 'USN-2937-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2937-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1153?


Explain the CVE ID: What does the identifier CVE-2015-1154 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1154.

WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-1152 and CVE-2015-1153.


Provide references for further information: Can you share references or external links related to CVE-2015-1154?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204826'}, {'name': 'APPLE-SA-2015-06-30-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html'}, {'name': '1032270', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032270'}, {'name': '74526', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74526'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT204949'}, {'name': 'APPLE-SA-2015-05-06-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/May/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1154?


Explain the CVE ID: What does the identifier CVE-2015-1155 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1155.

The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to bypass the Same Origin Policy and read arbitrary files via a crafted web site.


Provide references for further information: Can you share references or external links related to CVE-2015-1155?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204826'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT204941'}, {'name': 'openSUSE-SU-2016:0761', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html'}, {'name': '1032270', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032270'}, {'name': '74527', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74527'}, {'name': 'openSUSE-SU-2016:0915', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html'}, {'name': 'APPLE-SA-2015-06-30-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html'}, {'name': 'APPLE-SA-2015-05-06-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/May/msg00000.html'}, {'name': 'USN-2937-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2937-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1155?


Explain the CVE ID: What does the identifier CVE-2015-1156 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1156.

The page-loading implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, does not properly handle the rel attribute in an A element, which allows remote attackers to bypass the Same Origin Policy for a link's target, and spoof the user interface, via a crafted web site.


Provide references for further information: Can you share references or external links related to CVE-2015-1156?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT204826'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT204941'}, {'name': '74524', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74524'}, {'name': '1032270', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032270'}, {'name': 'APPLE-SA-2015-06-30-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html'}, {'name': 'APPLE-SA-2015-05-06-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/May/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1156?


Explain the CVE ID: What does the identifier CVE-2015-1157 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1157.

CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in (1) an SMS message or (2) a WhatsApp message.


Provide references for further information: Can you share references or external links related to CVE-2015-1157?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205221'}, {'name': '75491', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75491'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT204941'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.reddit.com/r/apple/comments/37e8c1/malicious_text_message/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://ghostbin.com/paste/zws9m'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.reddit.com/r/apple/comments/37enow/about_the_latest_iphone_security_vulnerability/'}, {'name': '1032408', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032408'}, {'name': 'APPLE-SA-2015-06-30-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://9to5mac.com/2015/05/27/how-to-fix-ios-text-message-bug-crash-reboot/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.reddit.com/r/explainlikeimfive/comments/37edde/eli5_how_that_text_you_can_send_to_friends_turns/'}, {'name': 'APPLE-SA-2015-09-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT204942'}, {'name': 'APPLE-SA-2015-06-30-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zanzebek.com/a-simple-text-message-can-ruin-any-iphone/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ibtimes.co.uk/apple-ios-bug-sees-message-app-crash-iphone-reboot-simply-by-receiving-message-1503083'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1157?


Explain the CVE ID: What does the identifier CVE-2015-1158 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1158.

The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2015-1158?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1221641'}, {'name': 'DSA-3283', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3283'}, {'name': 'RHSA-2015:1123', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1123.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.opensuse.org/show_bug.cgi?id=924208'}, {'name': 'USN-2629-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2629-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10702'}, {'name': '1032556', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032556'}, {'name': 'SUSE-SU-2015:1044', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cups.org/blog.php?L1082'}, {'name': 'VU#810572', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/810572'}, {'name': '75098', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75098'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/0x00string/oldays/blob/master/CVE-2015-1158.py'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cups.org/str.php?L4609'}, {'name': 'GLSA-201510-07', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201510-07'}, {'tags': ['x_refsource_MISC'], 'url': 'https://code.google.com/p/google-security-research/issues/detail?id=455'}, {'name': 'SUSE-SU-2015:1041', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html'}, {'name': '37336', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/37336/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://googleprojectzero.blogspot.in/2015/06/owning-internet-printing-case-study-in.html'}, {'name': '41233', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/41233/'}, {'name': 'openSUSE-SU-2015:1056', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1158?


Explain the CVE ID: What does the identifier CVE-2015-1159 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1159.

Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/.


Provide references for further information: Can you share references or external links related to CVE-2015-1159?

{'name': 'DSA-3283', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3283'}, {'name': 'RHSA-2015:1123', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1123.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.opensuse.org/show_bug.cgi?id=924208'}, {'name': 'USN-2629-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2629-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10702'}, {'name': '1032556', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032556'}, {'name': 'SUSE-SU-2015:1044', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cups.org/blog.php?L1082'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1221642'}, {'name': 'VU#810572', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/810572'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cups.org/str.php?L4609'}, {'name': '75106', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75106'}, {'name': 'GLSA-201510-07', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201510-07'}, {'tags': ['x_refsource_MISC'], 'url': 'https://code.google.com/p/google-security-research/issues/detail?id=455'}, {'name': 'SUSE-SU-2015:1041', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://googleprojectzero.blogspot.in/2015/06/owning-internet-printing-case-study-in.html'}, {'name': 'openSUSE-SU-2015:1056', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1159?


Explain the CVE ID: What does the identifier CVE-2015-1160 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1160.


Provide references for further information: Can you share references or external links related to CVE-2015-1160?


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1160?


Explain the CVE ID: What does the identifier CVE-2015-1164 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1164.

Open redirect vulnerability in the serve-static plugin before 1.7.2 for Node.js, when mounted at the root, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a // (slash slash) followed by a domain in the PATH_INFO to the default URI.


Provide references for further information: Can you share references or external links related to CVE-2015-1164?

{'name': 'nodejs-servestatic-open-redirect(99936)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/expressjs/serve-static/issues/26'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1181917'}, {'name': '72064', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72064'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nodesecurity.io/advisories/serve-static-open-redirect'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1164?


Explain the CVE ID: What does the identifier CVE-2015-1165 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1165.

RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to obtain sensitive RSS feed URLs and ticket data via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-1165?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.bestpractical.com/2015/02/security-vulnerabilities-in-rt.html'}, {'name': 'DSA-3176', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3176'}, {'name': 'FEDORA-2015-4698', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154047.html'}, {'name': 'FEDORA-2015-4666', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154213.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1165?


Explain the CVE ID: What does the identifier CVE-2015-1169 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1169.

Apereo Central Authentication Service (CAS) Server before 3.5.3 allows remote attackers to conduct LDAP injection attacks via a crafted username, as demonstrated by using a wildcard and a valid password to bypass LDAP authentication.


Provide references for further information: Can you share references or external links related to CVE-2015-1169?

{'name': '20150121 CVE-2015-1169 - CAS Server 3.5.2 allows remote attackers to bypass LDAP authentication via crafted wildcards.', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Jan/87'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/Jasig/cas/pull/411'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130053/CAS-Server-3.5.2-LDAP-Authentication-Bypass.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.jasig.org/browse/CAS-1429'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/Jasig/cas/commit/7de61b4c6244af9ff8e75a2c92a570f3b075309c'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1169?


Explain the CVE ID: What does the identifier CVE-2015-1170 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1170.

The NVIDIA Display Driver R304 before 309.08, R340 before 341.44, R343 before 345.20, and R346 before 347.52 does not properly validate local client impersonation levels when performing a "kernel administrator check," which allows local users to gain administrator privileges via unspecified API calls.


Provide references for further information: Can you share references or external links related to CVE-2015-1170?

{'name': 'HPSBHF03272', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=143013598825091&w=2'}, {'name': '1032013', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032013'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.lenovo.com/product_security/nvidia_windows_privilege'}, {'name': 'HPSBHF03271', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=142781493222653&w=2'}, {'name': 'SSRT101950', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=143013598825091&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.lenovo.com/us/en/product_security/nvidia_windows_privilege'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nvidia.custhelp.com/app/answers/detail/a_id/3634'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1170?


Explain the CVE ID: What does the identifier CVE-2015-1171 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1171.

Stack-based buffer overflow in GSM SIM Utility (aka SIM Card Editor) 6.6 allows remote attackers to execute arbitrary code via a long entry in a .sms file.


Provide references for further information: Can you share references or external links related to CVE-2015-1171?

{'tags': ['x_refsource_MISC'], 'url': 'https://osandamalith.wordpress.com/2015/01/16/sim-editor-stack-based-buffer-overflow/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/129992/simeditor-overflow.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.youtube.com/watch?v=tljbFpYtDTk'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1171?


Explain the CVE ID: What does the identifier CVE-2015-1172 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1172.

Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka holding_pattern) 0.6 and earlier for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in an unspecified directory.


Provide references for further information: Can you share references or external links related to CVE-2015-1172?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130282/WordPress-Holding-Pattern-0.6-Shell-Upload.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wpvulndb.com/vulnerabilities/7784'}, {'name': '72546', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72546'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1172?


Explain the CVE ID: What does the identifier CVE-2015-1173 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1173.

Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 does not properly restrict access to the (1) Design Mode and (2) Debug Logger mode modules, which allows remote attackers to gain privileges via crafted "received parameters."


Provide references for further information: Can you share references or external links related to CVE-2015-1173?

{'name': '20150818 UNIT4TETA TETA WEB - Authorization Bypass vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Aug/68'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/133147/UNIT4TETA-TETA-WEB-22.62.3.4-Authorization-Bypass.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1173?


Explain the CVE ID: What does the identifier CVE-2015-1174 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1174.

Session fixation vulnerability in Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 and earlier allows remote attackers to hijack web sessions via a session id.


Provide references for further information: Can you share references or external links related to CVE-2015-1174?


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1174?


Explain the CVE ID: What does the identifier CVE-2015-1175 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1175.

Cross-site scripting (XSS) vulnerability in blocklayered-ajax.php in the blocklayered module in PrestaShop 1.6.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the layered_price_slider parameter.


Provide references for further information: Can you share references or external links related to CVE-2015-1175?

{'tags': ['x_refsource_MISC'], 'url': 'http://octogence.com/advisories/cve-2015-1175-xss-prestashop/'}, {'name': '20150120 CVE-2015-1175-xss-prestashop', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534511/100/0/threaded'}, {'name': 'prestashop-cve20151175-xss(100013)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100013'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130026/Prestashop-1.6.0.9-Cross-Site-Scripting.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1175?


Explain the CVE ID: What does the identifier CVE-2015-1176 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1176.

Cross-site scripting (XSS) vulnerability in upload/scp/tickets.php in osTicket before 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the status parameter in a search action.


Provide references for further information: Can you share references or external links related to CVE-2015-1176?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130057/osTicket-1.9.4-Cross-Site-Scripting.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/osTicket/osTicket-1.8/pull/1639'}, {'name': '20150122 CVE-2015-1176-xss-osticket', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534526/100/0/threaded'}, {'name': '72276', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72276'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/osTicket/osTicket-1.8/releases/tag/v1.9.5'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1176?


Explain the CVE ID: What does the identifier CVE-2015-1177 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1177.

Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.2.


Provide references for further information: Can you share references or external links related to CVE-2015-1177?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130058/Exponent-CMS-2.3.2-Cross-Site-Scripting.html'}, {'name': '20150122 CVE-2015-1177-xss-exponent', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534528/100/0/threaded'}, {'name': '72274', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72274'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1177?


Explain the CVE ID: What does the identifier CVE-2015-1178 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1178.

Multiple cross-site scripting (XSS) vulnerabilities in cart.php in X-Cart 5.1.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) product_id or (2) category_id parameter.


Provide references for further information: Can you share references or external links related to CVE-2015-1178?

{'name': '72275', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72275'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130061/X-CART-e-Commerce-5.1.8-Cross-Site-Scripting.html'}, {'name': '20150122 CVE-2015-1178-xss-x-cart-ecommerce', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534529/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1178?


Explain the CVE ID: What does the identifier CVE-2015-1179 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1179.

Multiple cross-site scripting (XSS) vulnerabilities in data_point_details.shtm in Mango Automation 2.4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dpid, (2) dpxid, or (3) pid parameter.


Provide references for further information: Can you share references or external links related to CVE-2015-1179?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130062/Mango-Automation-SCADA-HMI-2.4.0-Cross-Site-Scripting.html'}, {'name': '20150122 CVE-2015-1179-xss-mango-automation-scada', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534530/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1179?


Explain the CVE ID: What does the identifier CVE-2015-1180 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1180.

Cross-site scripting (XSS) vulnerability in the Web Reports in EventSentry 3.1.0 allows remote attackers to inject arbitrary web script or HTML via the pageId parameter to networktile/bullet.


Provide references for further information: Can you share references or external links related to CVE-2015-1180?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130063/EventSentry-3.1.0-Cross-Site-Scripting.html'}, {'name': '20150122 CVE-2015-1180-xss-eventsentry', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534531/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1180?


Explain the CVE ID: What does the identifier CVE-2015-1182 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1182.

The asn1_get_sequence_of function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x through 1.3.9 does not properly initialize a pointer in the asn1_sequence linked list, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ASN.1 sequence in a certificate.


Provide references for further information: Can you share references or external links related to CVE-2015-1182?

{'name': 'FEDORA-2015-0991', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148829.html'}, {'name': '62270', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62270'}, {'name': 'FEDORA-2015-1045', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148903.html'}, {'name': 'openSUSE-SU-2015:0186', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-02/msg00003.html'}, {'name': 'GLSA-201801-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201801-15'}, {'name': '62610', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62610'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2014-04'}, {'name': 'DSA-3136', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3136'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1182?


Explain the CVE ID: What does the identifier CVE-2015-1187 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1187.

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.


Provide references for further information: Can you share references or external links related to CVE-2015-1187?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10052'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2'}, {'name': '72848', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72848'}, {'name': '20150302 CVE-2015-1187: D-Link DIR-636L Remote Command Injection - Incorrect Authentication', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Mar/15'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1187?


Explain the CVE ID: What does the identifier CVE-2015-1188 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1188.

The certificate verification functions in the HNDS service in Swisscom Centro Grande (ADB) DSL routers with firmware before 6.14.00 allows remote attackers to access the management functions via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-1188?

{'name': '20150429 CVE-ID 2015-1188: Swisscom DSL Router Centro Grande (ADB)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2015/Apr/103'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1188?


Explain the CVE ID: What does the identifier CVE-2015-1191 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1191.

Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) .. (dot dot) in an archive.


Provide references for further information: Can you share references or external links related to CVE-2015-1191?

{'name': 'openSUSE-SU-2016:0662', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-03/msg00017.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/madler/pigz/commit/fdad1406b3ec809f4954ff7cdf9e99eb18c2458f'}, {'name': '[oss-security] 20150118 Re: CVE request: pigz, kgb, pax: directory traversal', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/18/3'}, {'name': '72109', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72109'}, {'name': 'openSUSE-SU-2016:0650', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-03/msg00013.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774978'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1191?


Explain the CVE ID: What does the identifier CVE-2015-1192 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1192.

Absolute path traversal vulnerability in kgb 1.0b4 allows remote attackers to write to arbitrary files via a full pathname in a crafted archive.


Provide references for further information: Can you share references or external links related to CVE-2015-1192?

{'name': '[oss-security] 20150118 Re: CVE request: pigz, kgb, pax: directory traversal', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/18/3'}, {'name': '72111', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72111'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774989'}, {'name': '62203', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62203'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1192?


Explain the CVE ID: What does the identifier CVE-2015-1193 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1193.

Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) .. (dot dot) in an archive.


Provide references for further information: Can you share references or external links related to CVE-2015-1193?

{'name': '[oss-security] 20150118 Re: CVE request: pigz, kgb, pax: directory traversal', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/18/3'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774716'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1193?


Explain the CVE ID: What does the identifier CVE-2015-1194 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1194.

pax 1:20140703 allows remote attackers to write to arbitrary files via a symlink attack in an archive.


Provide references for further information: Can you share references or external links related to CVE-2015-1194?


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1194?


Explain the CVE ID: What does the identifier CVE-2015-1195 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1195.

The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete arbitrary files via a full pathname in a filesystem: URL in the image location property.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-9493.


Provide references for further information: Can you share references or external links related to CVE-2015-1195?

{'name': '[openstack-announce] 20150120 [OSSA 2015-002.1] Glance v2 API unrestricted path traversal through filesystem:// scheme (CVE-2015-1195) ERRATA 1', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.openstack.org/pipermail/openstack-announce/2015-January/000325.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/ossa/+bug/1408663'}, {'name': '[oss-security] 20150118 Re: [OSSA 2015-002] Glance v2 API unrestricted path traversal through filesystem:// scheme', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/18/5'}, {'name': '62169', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62169'}, {'name': '[oss-security] 20150115 [OSSA 2015-002] Glance v2 API unrestricted path traversal through filesystem:// scheme', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/15/2'}, {'name': '71976', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/71976'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1195?


Explain the CVE ID: What does the identifier CVE-2015-1196 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1196.

GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file.


Provide references for further information: Can you share references or external links related to CVE-2015-1196?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.savannah.gnu.org/cgit/patch.git/commit/?id=4e9269a5fc1fe80a1095a92593dd85db871e1fd3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1182154'}, {'name': '72074', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72074'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775227'}, {'name': '[oss-security] 20150118  Re: CVE request: directory traversal flaw in patch', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2015/q1/173'}, {'name': 'openSUSE-SU-2015:0199', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-02/msg00013.html'}, {'name': 'gnupatch-unspecified-symlink(99967)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99967'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1196?


Explain the CVE ID: What does the identifier CVE-2015-1197 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1197.

cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.


Provide references for further information: Can you share references or external links related to CVE-2015-1197?

{'name': '71914', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/71914'}, {'name': 'MDVSA-2015:066', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:066'}, {'name': '[oss-security] 20150118 Re: CVE Request: cpio -- directory traversal', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/18/7'}, {'name': 'USN-2906-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2906-1'}, {'url': 'http://advisories.mageia.org/MGASA-2015-0080.html'}, {'name': '[oss-security] 20150108 Directory traversals in cpio and friends?', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/07/5'}, {'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669'}, {'name': '[Bug-cpio] 20150108 cpio: directory traversal vulnerability via symlinks', 'tags': ['mailing-list'], 'url': 'https://lists.gnu.org/archive/html/bug-cpio/2015-01/msg00000.html'}, {'url': 'http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html'}, {'name': "[oss-security] 20231221 Security vulnerability in Debian's cpio 2.13", 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2023/12/21/8'}, {'name': '[oss-security] 20231227 xarchiver: Path traversal with crafted cpio archives', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2023/12/27/1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1197?


Explain the CVE ID: What does the identifier CVE-2015-1198 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1198.

Multiple directory traversal vulnerabilities in ha 0.999p+dfsg-5.


Provide references for further information: Can you share references or external links related to CVE-2015-1198?

{'name': '[oss-security] 20150118 Re: CVE Request: ha -- directory traversals', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/18/8'}, {'name': '72103', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72103'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1198?


Explain the CVE ID: What does the identifier CVE-2015-1199 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1199.

Directory traversal vulnerability in ppmd 10.1-5.


Provide references for further information: Can you share references or external links related to CVE-2015-1199?

{'name': '[oss-security] 20150118 Re: CVE Request: ppmd -- directory traversals', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/01/18/9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1199?


Explain the CVE ID: What does the identifier CVE-2015-1200 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1200.

Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission to match the original file, which allows local users to bypass the intended access restrictions.


Provide references for further information: Can you share references or external links related to CVE-2015-1200?

{'name': 'pxz-cve20151200-sec-bypass(100207)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100207'}, {'name': '[oss-security] 20150118 Re: CVE Request: pxz -- race condition in setting permissions', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2015/q1/177'}, {'name': '72101', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72101'}, {'name': 'FEDORA-2020-07fcbfddbd', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBKV7AT6O3FGQ735PFOGQ4Q5VODMSHE5/'}, {'name': 'FEDORA-2020-8b89d5b9eb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3UCBCIN6M5EXFET4RGQTVSSL5S57XCH/'}, {'name': 'FEDORA-2020-c9eb911737', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XDCG7YJRDOR66V3WJDQPLMFSDULQDADC/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1200?


Explain the CVE ID: What does the identifier CVE-2015-1201 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1201.

Privoxy before 3.0.22 allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2015-1201?

{'name': '62123', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62123'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1201?


Explain the CVE ID: What does the identifier CVE-2015-1202 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1202.


Provide references for further information: Can you share references or external links related to CVE-2015-1202?


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1202?


Explain the CVE ID: What does the identifier CVE-2015-1203 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1203.


Provide references for further information: Can you share references or external links related to CVE-2015-1203?


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1203?


Explain the CVE ID: What does the identifier CVE-2015-1204 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1204.

Cross-site scripting (XSS) vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fs[resource] parameter in the wp-slim-view-2 page to wp-admin/admin.php.


Provide references for further information: Can you share references or external links related to CVE-2015-1204?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wordpress.org/plugins/wp-slimstat/changelog/'}, {'name': '62034', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62034'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wpvulndb.com/vulnerabilities/7744'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1204?


Explain the CVE ID: What does the identifier CVE-2015-1205 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1205.

Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-1205?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205221'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=429139'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=435514'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=411026'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=443333'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=413530'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=425040'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205212'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=443274'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=440913'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=438363'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=437655'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/01/stable-update.html'}, {'name': '62575', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62575'}, {'name': 'USN-2476-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2476-1'}, {'name': '72288', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72288'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=432209'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=422765'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=440572'}, {'name': 'GLSA-201502-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201502-13.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=428828'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=434723'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=327070'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=446076'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=423899'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=439319'}, {'name': 'APPLE-SA-2015-09-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=429134'}, {'name': '1031623', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031623'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=431187'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=334448'}, {'name': 'APPLE-SA-2015-09-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=411156'}, {'name': 'openSUSE-SU-2015:0441', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=435815'}, {'name': '62383', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62383'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=441834'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=425151'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=410030'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=449894'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=431603'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1205?


Explain the CVE ID: What does the identifier CVE-2015-1206 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1206.

Heap-based buffer overflow in Google Chrome before M40 allows remote attackers to cause a denial of service (unpaged memory write and process crash) via a crafted MP4 file.


Provide references for further information: Can you share references or external links related to CVE-2015-1206?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.chromium.org/p/chromium/issues/detail?id=453979'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gist.github.com/bittorrent3389/8fee7cdaa73d1d351ee9'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.chromium.org/p/chromium/issues/detail?id=444522'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1206?


Explain the CVE ID: What does the identifier CVE-2015-1207 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1207.

Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service (memory corruption and crash) via a crafted .m4a file.


Provide references for further information: Can you share references or external links related to CVE-2015-1207?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.chromium.org/p/chromium/issues/detail?id=444539'}, {'name': '[debian-lts-announce] 20190206 [SECURITY] [DLA 1654-1] libav security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gist.github.com/bittorrent3389/8fee7cdaa73d1d351ee9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1207?


Explain the CVE ID: What does the identifier CVE-2015-1208 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1208.

Integer underflow in the mov_read_default function in libavformat/mov.c in FFmpeg before 2.4.6 allows remote attackers to obtain sensitive information from heap and/or stack memory via a crafted MP4 file.


Provide references for further information: Can you share references or external links related to CVE-2015-1208?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=3ebd76a9c57558e284e94da367dd23b435e6a6d0'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/FFmpeg/FFmpeg/blob/n2.4.6/Changelog'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.chromium.org/p/chromium/issues/detail?id=444546'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1208?


Explain the CVE ID: What does the identifier CVE-2015-1209 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1209.

Use-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in core/editing/VisibleSelection.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper handling of a shadow-root anchor.


Provide references for further information: Can you share references or external links related to CVE-2015-1209?

{'name': 'google-chrome-cve20151209-code-exec(100715)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100715'}, {'name': '72497', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72497'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/02/stable-channel-update.html'}, {'name': '62818', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62818'}, {'name': '62925', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62925'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/02/chrome-for-android-update.html'}, {'name': 'GLSA-201502-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201502-13.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=447906'}, {'name': '62917', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62917'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://src.chromium.org/viewvc/blink?revision=188788&view=revision'}, {'name': 'RHSA-2015:0163', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0163.html'}, {'name': '62670', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62670'}, {'name': '1031709', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031709'}, {'name': 'openSUSE-SU-2015:0441', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html'}, {'name': 'USN-2495-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2495-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1209?


Explain the CVE ID: What does the identifier CVE-2015-1210 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1210.

The V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the V8 bindings in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, does not properly consider frame access restrictions during the throwing of an exception, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.


Provide references for further information: Can you share references or external links related to CVE-2015-1210?

{'name': '72497', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72497'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/02/stable-channel-update.html'}, {'name': '62818', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62818'}, {'name': '62925', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62925'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/02/chrome-for-android-update.html'}, {'name': 'GLSA-201502-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201502-13.xml'}, {'name': '62917', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62917'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=453979'}, {'name': 'RHSA-2015:0163', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0163.html'}, {'name': '62670', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62670'}, {'name': '1031709', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031709'}, {'name': 'openSUSE-SU-2015:0441', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html'}, {'name': 'google-chrome-cve20151210-sec-bypass(100716)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100716'}, {'name': 'USN-2495-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2495-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://src.chromium.org/viewvc/blink?revision=189365&view=revision'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1210?


Explain the CVE ID: What does the identifier CVE-2015-1211 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1211.

The OriginCanAccessServiceWorkers function in content/browser/service_worker/service_worker_dispatcher_host.cc in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android does not properly restrict the URI scheme during a ServiceWorker registration, which allows remote attackers to gain privileges via a filesystem: URI.


Provide references for further information: Can you share references or external links related to CVE-2015-1211?

{'name': '72497', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72497'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/02/stable-channel-update.html'}, {'name': '62818', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62818'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/889323002'}, {'name': '62925', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62925'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/02/chrome-for-android-update.html'}, {'name': 'google-chrome-cve20151211-priv-esc(100717)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100717'}, {'name': 'GLSA-201502-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201502-13.xml'}, {'name': '62917', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62917'}, {'name': 'RHSA-2015:0163', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0163.html'}, {'name': '62670', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62670'}, {'name': '1031709', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031709'}, {'name': 'openSUSE-SU-2015:0441', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html'}, {'name': 'USN-2495-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2495-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=453982'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1211?


Explain the CVE ID: What does the identifier CVE-2015-1212 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1212.

Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android allow attackers to cause a denial of service or possibly have other impact via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-1212?

{'name': 'google-chrome-cve20151212-unspecified(100718)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100718'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=451918'}, {'name': '72497', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72497'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/02/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=451684'}, {'name': '62818', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62818'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=446459'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=427303'}, {'name': '62925', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62925'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/02/chrome-for-android-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=438365'}, {'name': 'GLSA-201502-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201502-13.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=445679'}, {'name': '62917', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62917'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=455225'}, {'name': 'RHSA-2015:0163', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0163.html'}, {'name': '62670', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62670'}, {'name': '1031709', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031709'}, {'name': 'openSUSE-SU-2015:0441', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html'}, {'name': 'USN-2495-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2495-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1212?


Explain the CVE ID: What does the identifier CVE-2015-1213 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1213.

The SkBitmap::ReadRawPixels function in core/SkBitmap.cpp in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.


Provide references for further information: Can you share references or external links related to CVE-2015-1213?

{'name': 'USN-2521-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2521-1'}, {'name': '72901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72901'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=448423'}, {'name': 'GLSA-201503-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201503-12'}, {'name': 'RHSA-2015:0627', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0627.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://skia.googlesource.com/skia/+/6af314724f51ad79a640844536c667bb83de5690'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1213?


Explain the CVE ID: What does the identifier CVE-2015-1214 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1214.

Integer overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a reset action with a large count value, leading to an out-of-bounds write operation.


Provide references for further information: Can you share references or external links related to CVE-2015-1214?

{'name': 'USN-2521-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2521-1'}, {'name': '72901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72901'}, {'name': 'GLSA-201503-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201503-12'}, {'name': 'RHSA-2015:0627', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0627.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=445810'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://skia.googlesource.com/skia/+/23d432080cb8506bf8e371b1637ce8f2de9c0c05'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1214?


Explain the CVE ID: What does the identifier CVE-2015-1215 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1215.

The filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.


Provide references for further information: Can you share references or external links related to CVE-2015-1215?

{'name': 'USN-2521-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2521-1'}, {'name': '72901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72901'}, {'name': 'GLSA-201503-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201503-12'}, {'name': 'RHSA-2015:0627', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0627.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=445809'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1215?


Explain the CVE ID: What does the identifier CVE-2015-1216 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1216.

Use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core/v8/custom/V8WindowCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a frame detachment.


Provide references for further information: Can you share references or external links related to CVE-2015-1216?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://src.chromium.org/viewvc/blink?revision=189574&view=revision'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=454954'}, {'name': 'USN-2521-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2521-1'}, {'name': '72901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72901'}, {'name': 'GLSA-201503-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201503-12'}, {'name': 'RHSA-2015:0627', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0627.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1216?


Explain the CVE ID: What does the identifier CVE-2015-1217 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1217.

The V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, does not properly compile listeners, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."


Provide references for further information: Can you share references or external links related to CVE-2015-1217?

{'name': 'USN-2521-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2521-1'}, {'name': '72901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72901'}, {'name': 'GLSA-201503-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201503-12'}, {'name': 'RHSA-2015:0627', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0627.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://src.chromium.org/viewvc/blink?revision=189796&view=revision'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=456192'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/958543002'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/910683002'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1217?


Explain the CVE ID: What does the identifier CVE-2015-1218 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1218.

Multiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger movement of a SCRIPT element to different documents, related to (1) the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp and (2) the SVGScriptElement::didMoveToNewDocument function in core/svg/SVGScriptElement.cpp.


Provide references for further information: Can you share references or external links related to CVE-2015-1218?

{'name': 'USN-2521-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2521-1'}, {'name': '72901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72901'}, {'name': 'GLSA-201503-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201503-12'}, {'name': 'RHSA-2015:0627', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0627.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=456059'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://src.chromium.org/viewvc/blink?revision=189886&view=revision'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1218?


Explain the CVE ID: What does the identifier CVE-2015-1219 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1219.

Integer overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted allocation of a large amount of memory during WebGL rendering.


Provide references for further information: Can you share references or external links related to CVE-2015-1219?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=446164'}, {'name': 'USN-2521-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2521-1'}, {'name': '72901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72901'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://skia.googlesource.com/skia/+/2ff257bd95c732b9cebc3aac03fbed72d6e6082a'}, {'name': 'GLSA-201503-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201503-12'}, {'name': 'RHSA-2015:0627', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0627.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1219?


Explain the CVE ID: What does the identifier CVE-2015-1220 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1220.

Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader.cpp in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted frame size in a GIF image.


Provide references for further information: Can you share references or external links related to CVE-2015-1220?

{'name': 'USN-2521-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2521-1'}, {'name': '72901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72901'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://src.chromium.org/viewvc/blink?revision=188423&view=revision'}, {'name': 'GLSA-201503-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201503-12'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=437651'}, {'name': 'RHSA-2015:0627', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0627.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1220?


Explain the CVE ID: What does the identifier CVE-2015-1221 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1221.

Use-after-free vulnerability in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect ordering of operations in the Web SQL Database thread relative to Blink's main thread, related to the shutdown function in web/WebKit.cpp.


Provide references for further information: Can you share references or external links related to CVE-2015-1221?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://src.chromium.org/viewvc/blink?revision=190021&view=revision'}, {'name': 'USN-2521-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2521-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://src.chromium.org/viewvc/blink?revision=190035&view=revision'}, {'name': '72901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72901'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=455368'}, {'name': 'GLSA-201503-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201503-12'}, {'name': 'RHSA-2015:0627', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0627.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1221?


Explain the CVE ID: What does the identifier CVE-2015-1222 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1222.

Multiple use-after-free vulnerabilities in the ServiceWorkerScriptCacheMap implementation in content/browser/service_worker/service_worker_script_cache_map.cc in Google Chrome before 41.0.2272.76 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a ServiceWorkerContextWrapper::DeleteAndStartOver call, related to the NotifyStartedCaching and NotifyFinishedCaching functions.


Provide references for further information: Can you share references or external links related to CVE-2015-1222?

{'name': 'USN-2521-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2521-1'}, {'name': '72901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72901'}, {'name': 'GLSA-201503-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201503-12'}, {'name': 'RHSA-2015:0627', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0627.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=448082'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/798883005'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1222?


Explain the CVE ID: What does the identifier CVE-2015-1223 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1223.

Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger extraneous change events, as demonstrated by events for invalid input or input to read-only fields, related to the initializeTypeInParsing and updateType functions.


Provide references for further information: Can you share references or external links related to CVE-2015-1223?

{'name': 'USN-2521-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2521-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://chromium.googlesource.com/chromium/blink.git/+/de1fee41e2c1bbfea7a564ad81e0b511a462fe0b'}, {'name': '72901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72901'}, {'name': 'GLSA-201503-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201503-12'}, {'name': 'RHSA-2015:0627', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0627.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=454231'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1223?


Explain the CVE ID: What does the identifier CVE-2015-1224 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1224.

The VpxVideoDecoder::VpxDecode function in media/filters/vpx_video_decoder.cc in the vpxdecoder implementation in Google Chrome before 41.0.2272.76 does not ensure that alpha-plane dimensions are identical to image dimensions, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted VPx video data.


Provide references for further information: Can you share references or external links related to CVE-2015-1224?

{'name': 'USN-2521-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2521-1'}, {'name': '72901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72901'}, {'name': 'GLSA-201503-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201503-12'}, {'name': 'RHSA-2015:0627', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0627.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=449958'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/858303002'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1224?


Explain the CVE ID: What does the identifier CVE-2015-1225 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1225.

PDFium, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-1225?

{'name': '72901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72901'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=446033'}, {'name': 'GLSA-201503-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201503-12'}, {'name': 'RHSA-2015:0627', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0627.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1225?


Explain the CVE ID: What does the identifier CVE-2015-1226 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1226.

The DebuggerFunction::InitAgentHost function in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before 41.0.2272.76 does not properly restrict what URLs are available as debugger targets, which allows remote attackers to bypass intended access restrictions via a crafted extension.


Provide references for further information: Can you share references or external links related to CVE-2015-1226?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=456841'}, {'name': '72901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72901'}, {'name': 'GLSA-201503-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201503-12'}, {'name': 'RHSA-2015:0627', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0627.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/910053002'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-1226?


Explain the CVE ID: What does the identifier CVE-2015-1227 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-1227.

The DragImage::create function in platform/DragImage.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not initialize memory for image drawing, which allows remote attackers to have an unspecified impact by triggering a failed image decoding, as demonstrated by an image for which the default orientation cannot be used.