Provide references for further information: Can you share references or external links related to CVE-2015-0821?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2015/mfsa2015-25.html'}, {'name': 'GLSA-201504-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-01'}, {'name': 'openSUSE-SU-2015:0404', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1111960'}, {'name': '72758', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72758'}, {'name': '1031791', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031791'}, {'name': 'openSUSE-SU-2015:0570', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html'}, {'name': 'USN-2505-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2505-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0821?


Explain the CVE ID: What does the identifier CVE-2015-0822 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0822.

The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files via crafted JavaScript code.


Provide references for further information: Can you share references or external links related to CVE-2015-0822?

{'name': 'SUSE-SU-2015:0446', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html'}, {'name': 'SUSE-SU-2015:0447', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html'}, {'name': 'RHSA-2015:0642', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0642.html'}, {'name': 'openSUSE-SU-2015:0448', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html'}, {'name': 'USN-2506-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2506-1'}, {'name': 'openSUSE-SU-2015:0567', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html'}, {'name': 'GLSA-201504-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-01'}, {'name': 'openSUSE-SU-2015:0404', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html'}, {'name': 'RHSA-2015:0265', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0265.html'}, {'name': '1031792', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031792'}, {'name': 'DSA-3174', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3174'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'openSUSE-SU-2015:1266', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html'}, {'name': 'DSA-3179', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3179'}, {'name': 'RHSA-2015:0266', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0266.html'}, {'name': '1031791', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031791'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2015/mfsa2015-24.html'}, {'name': '72756', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72756'}, {'name': 'openSUSE-SU-2015:0570', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html'}, {'name': 'USN-2505-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2505-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1110557'}, {'name': 'SUSE-SU-2015:0412', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0822?


Explain the CVE ID: What does the identifier CVE-2015-0823 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0823.

Multiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before 36.0, might allow remote attackers to trigger problematic Developer Console information or possibly have unspecified other impact by leveraging incorrect macro expansion, related to the ots::ots_gasp_parse function.


Provide references for further information: Can you share references or external links related to CVE-2015-0823?

{'name': 'GLSA-201504-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-01'}, {'name': 'openSUSE-SU-2015:0404', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1098497'}, {'name': '72754', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72754'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/khaledhosny/ots/commit/003c62d28ae438aa8943cb31535563397f838a2c'}, {'name': '1031791', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031791'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2015/mfsa2015-23.html'}, {'name': 'openSUSE-SU-2015:0570', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html'}, {'name': 'USN-2505-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2505-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0823?


Explain the CVE ID: What does the identifier CVE-2015-0824 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0824.

The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote attackers to cause a denial of service (out-of-bounds write of zero values, and application crash) via vectors that trigger use of DrawTarget and the Cairo library for image drawing.


Provide references for further information: Can you share references or external links related to CVE-2015-0824?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1095925'}, {'name': '72753', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72753'}, {'name': 'GLSA-201504-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-01'}, {'name': 'openSUSE-SU-2015:0404', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2015/mfsa2015-22.html'}, {'name': '1031791', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031791'}, {'name': 'openSUSE-SU-2015:0570', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html'}, {'name': 'USN-2505-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2505-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0824?


Explain the CVE ID: What does the identifier CVE-2015-0825 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0825.

Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla Firefox before 36.0 allows remote attackers to obtain sensitive information from process memory via a malformed MP3 file that improperly interacts with memory allocation during playback.


Provide references for further information: Can you share references or external links related to CVE-2015-0825?

{'name': '72751', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72751'}, {'name': 'GLSA-201504-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-01'}, {'name': 'openSUSE-SU-2015:0404', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2015/mfsa2015-21.html'}, {'name': '1031791', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031791'}, {'name': 'openSUSE-SU-2015:0570', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html'}, {'name': 'USN-2505-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2505-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1092370'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0825?


Explain the CVE ID: What does the identifier CVE-2015-0826 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0826.

The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read of heap memory) via a crafted Cascading Style Sheets (CSS) token sequence that triggers a restyle or reflow operation.


Provide references for further information: Can you share references or external links related to CVE-2015-0826?

{'name': 'GLSA-201504-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-01'}, {'name': 'openSUSE-SU-2015:0404', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1092363'}, {'name': '1031791', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031791'}, {'name': 'openSUSE-SU-2015:0570', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html'}, {'name': 'USN-2505-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2505-1'}, {'name': '72750', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72750'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2015/mfsa2015-20.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0826?


Explain the CVE ID: What does the identifier CVE-2015-0827 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0827.

Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic.


Provide references for further information: Can you share references or external links related to CVE-2015-0827?

{'name': 'SUSE-SU-2015:0446', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html'}, {'name': '72755', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72755'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1117304'}, {'name': 'SUSE-SU-2015:0447', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html'}, {'name': 'RHSA-2015:0642', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0642.html'}, {'name': 'openSUSE-SU-2015:0448', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html'}, {'name': 'USN-2506-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2506-1'}, {'name': 'openSUSE-SU-2015:0567', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html'}, {'name': 'GLSA-201504-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-01'}, {'name': 'openSUSE-SU-2015:0404', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html'}, {'name': 'RHSA-2015:0265', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0265.html'}, {'name': '1031792', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031792'}, {'name': 'DSA-3174', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3174'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2015/mfsa2015-19.html'}, {'name': 'openSUSE-SU-2015:1266', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html'}, {'name': 'DSA-3179', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3179'}, {'name': 'RHSA-2015:0266', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0266.html'}, {'name': '1031791', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031791'}, {'name': 'openSUSE-SU-2015:0570', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html'}, {'name': 'USN-2505-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2505-1'}, {'name': 'SUSE-SU-2015:0412', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0827?


Explain the CVE ID: What does the identifier CVE-2015-0828 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0828.

Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0, when a nonstandard memory allocator is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted JavaScript code that makes an XMLHttpRequest call with zero bytes of data.


Provide references for further information: Can you share references or external links related to CVE-2015-0828?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1030667'}, {'name': '72744', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72744'}, {'name': 'GLSA-201504-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-01'}, {'name': 'openSUSE-SU-2015:0404', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'name': '1031791', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031791'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2015/mfsa2015-18.html'}, {'name': 'openSUSE-SU-2015:0570', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=988675'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0828?


Explain the CVE ID: What does the identifier CVE-2015-0829 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0829.

Buffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code via a crafted MP4 video that is improperly handled during playback.


Provide references for further information: Can you share references or external links related to CVE-2015-0829?

{'name': 'GLSA-201504-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-01'}, {'name': '72741', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72741'}, {'name': 'openSUSE-SU-2015:0404', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1128939'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'name': '1031791', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031791'}, {'name': 'openSUSE-SU-2015:0570', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html'}, {'name': 'USN-2505-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2505-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2015/mfsa2015-17.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0829?


Explain the CVE ID: What does the identifier CVE-2015-0830 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0830.

The WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for copying an unspecified string to a shader's compilation log, which allows remote attackers to cause a denial of service (application crash) via crafted WebGL content.


Provide references for further information: Can you share references or external links related to CVE-2015-0830?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2015/mfsa2015-14.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1110488'}, {'name': 'GLSA-201504-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-01'}, {'name': 'openSUSE-SU-2015:0404', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'name': '72745', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72745'}, {'name': '1031791', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031791'}, {'name': 'openSUSE-SU-2015:0570', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html'}, {'name': 'USN-2505-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2505-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0830?


Explain the CVE ID: What does the identifier CVE-2015-0831 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0831.

Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.


Provide references for further information: Can you share references or external links related to CVE-2015-0831?

{'name': '72746', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72746'}, {'name': 'SUSE-SU-2015:0446', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html'}, {'name': 'SUSE-SU-2015:0447', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2015/mfsa2015-16.html'}, {'name': 'RHSA-2015:0642', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0642.html'}, {'name': 'openSUSE-SU-2015:0448', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html'}, {'name': 'USN-2506-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2506-1'}, {'name': 'openSUSE-SU-2015:0567', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html'}, {'name': 'GLSA-201504-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-01'}, {'name': 'openSUSE-SU-2015:0404', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html'}, {'name': 'RHSA-2015:0265', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0265.html'}, {'name': '1031792', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031792'}, {'name': 'DSA-3174', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3174'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1130541'}, {'name': 'openSUSE-SU-2015:1266', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html'}, {'name': 'DSA-3179', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3179'}, {'name': 'RHSA-2015:0266', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0266.html'}, {'name': '1031791', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031791'}, {'name': 'openSUSE-SU-2015:0570', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html'}, {'name': 'USN-2505-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2505-1'}, {'name': 'SUSE-SU-2015:0412', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0831?


Explain the CVE ID: What does the identifier CVE-2015-0832 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0832.

Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.


Provide references for further information: Can you share references or external links related to CVE-2015-0832?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1065909'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2015/mfsa2015-13.html'}, {'name': '72752', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72752'}, {'name': 'GLSA-201504-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-01'}, {'name': 'openSUSE-SU-2015:0404', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'name': 'openSUSE-SU-2015:0570', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html'}, {'name': 'USN-2505-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2505-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0832?


Explain the CVE ID: What does the identifier CVE-2015-0833 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0833.

Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in (1) the current working directory or (2) a temporary directory, as demonstrated by bcrypt.dll.


Provide references for further information: Can you share references or external links related to CVE-2015-0833?

{'name': '72747', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72747'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=945192'}, {'name': 'openSUSE-SU-2015:0567', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html'}, {'name': 'GLSA-201504-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-01'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'name': '1031792', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031792'}, {'name': 'openSUSE-SU-2015:1266', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html'}, {'name': '1031791', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031791'}, {'name': 'openSUSE-SU-2015:0570', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2015/mfsa2015-12.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0833?


Explain the CVE ID: What does the identifier CVE-2015-0834 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0834.

The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS, which makes it easier for man-in-the-middle attackers to discover credentials by spoofing a server and completing a brute-force attack within a short time window.


Provide references for further information: Can you share references or external links related to CVE-2015-0834?

{'name': '72743', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72743'}, {'name': 'GLSA-201504-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-01'}, {'name': 'openSUSE-SU-2015:0404', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2015/mfsa2015-15.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1098314'}, {'name': '1031791', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031791'}, {'name': 'openSUSE-SU-2015:0570', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html'}, {'name': 'USN-2505-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2505-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0834?


Explain the CVE ID: What does the identifier CVE-2015-0835 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0835.

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0835?

{'name': 'SUSE-SU-2015:0446', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html'}, {'name': 'SUSE-SU-2015:0447', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2015/mfsa2015-11.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1118894'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1127246'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1072760'}, {'name': 'GLSA-201504-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-01'}, {'name': 'openSUSE-SU-2015:0404', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1119019'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'name': '1031792', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031792'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1114569'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1114058'}, {'name': '1031791', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031791'}, {'name': '72748', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72748'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1127206'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1122387'}, {'name': 'openSUSE-SU-2015:0570', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html'}, {'name': 'USN-2505-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2505-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1092947'}, {'name': 'SUSE-SU-2015:0412', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1125734'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0835?


Explain the CVE ID: What does the identifier CVE-2015-0836 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0836.

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0836?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1117406'}, {'name': 'SUSE-SU-2015:0446', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1115776'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1107009'}, {'name': 'SUSE-SU-2015:0447', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html'}, {'name': 'RHSA-2015:0642', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0642.html'}, {'name': '72742', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72742'}, {'name': 'openSUSE-SU-2015:0448', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2015/mfsa2015-11.html'}, {'name': 'USN-2506-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2506-1'}, {'name': 'openSUSE-SU-2015:0567', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html'}, {'name': 'GLSA-201504-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-01'}, {'name': 'openSUSE-SU-2015:0404', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html'}, {'name': 'RHSA-2015:0265', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0265.html'}, {'name': '1031792', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031792'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1128196'}, {'name': 'DSA-3174', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3174'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1111248'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1111243'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1119579'}, {'name': 'openSUSE-SU-2015:1266', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html'}, {'name': 'DSA-3179', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3179'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1096138'}, {'name': 'RHSA-2015:0266', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0266.html'}, {'name': '1031791', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031791'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1123882'}, {'name': 'openSUSE-SU-2015:0570', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html'}, {'name': 'USN-2505-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2505-1'}, {'name': 'SUSE-SU-2015:0412', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1124018'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0836?


Explain the CVE ID: What does the identifier CVE-2015-0837 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0837.

The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."


Provide references for further information: Can you share references or external links related to CVE-2015-0837?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.debian.org/security/2015/dsa-3184'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.debian.org/security/2015/dsa-3185'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://ieeexplore.ieee.org/document/7163050'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0837?


Explain the CVE ID: What does the identifier CVE-2015-0838 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0838.

Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.


Provide references for further information: Can you share references or external links related to CVE-2015-0838?

{'name': 'DSA-3206', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3206'}, {'name': '[oss-security] 20150322 Dulwich security issue', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.launchpad.net/dulwich-users/msg00829.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0838?


Explain the CVE ID: What does the identifier CVE-2015-0839 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0839.

The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a short GPG key id from a keyserver to verify print plugin downloads.


Provide references for further information: Can you share references or external links related to CVE-2015-0839?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/hplip/+bug/1432516'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1227252'}, {'name': 'FEDORA-2015-11916', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162880.html'}, {'name': '[oss-security] 20150529 [CVE-2015-0839] hp-plugin binary driver verification', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/05/29/2'}, {'name': 'USN-2699-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2699-1'}, {'name': 'FEDORA-2015-11723', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162442.html'}, {'name': '74913', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74913'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0839?


Explain the CVE ID: What does the identifier CVE-2015-0840 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0840.

The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via a crafted Debian source control file (.dsc).


Provide references for further information: Can you share references or external links related to CVE-2015-0840?

{'name': 'USN-2566-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2566-1'}, {'name': 'FEDORA-2015-6974', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157387.html'}, {'name': 'openSUSE-SU-2015:1058', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-06/msg00029.html'}, {'name': 'DSA-3217', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3217'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0840?


Explain the CVE ID: What does the identifier CVE-2015-0841 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0841.

Off-by-one error in the readBuf function in listener.cpp in libcapsinetwork and monopd before 0.9.8, allows remote attackers to cause a denial of service (crash) via a long line.


Provide references for further information: Can you share references or external links related to CVE-2015-0841?

{'tags': ['x_refsource_MISC'], 'url': 'https://security.gentoo.org/glsa/201507-12'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2015/03/23/20'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=781043'}, {'tags': ['x_refsource_MISC'], 'url': 'http://gtkatlantic.gradator.net/oldnews.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0841?


Explain the CVE ID: What does the identifier CVE-2015-0844 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0844.

The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted (1) campaign or (2) map file.


Provide references for further information: Can you share references or external links related to CVE-2015-0844?

{'name': 'FEDORA-2015-6295', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156001.html'}, {'name': 'DSA-3218', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3218'}, {'name': 'FEDORA-2015-6108', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155031.html'}, {'name': 'FEDORA-2015-6280', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155968.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forums.wesnoth.org/viewtopic.php?t=41872'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forums.wesnoth.org/viewtopic.php?t=41870'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0844?


Explain the CVE ID: What does the identifier CVE-2015-0845 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0845.

Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related to localization of templates.


Provide references for further information: Can you share references or external links related to CVE-2015-0845?

{'name': 'DSA-3227', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3227'}, {'name': '1032153', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032153'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://movabletype.org/news/2015/04/movable_type_608_and_5213_released_to_close_security_vulnera.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0845?


Explain the CVE ID: What does the identifier CVE-2015-0846 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0846.

django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTINGS settings, which allows remote attackers to include and read arbitrary files via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0846?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/jamesturk/django-markupfield/blob/master/CHANGELOG'}, {'name': 'DSA-3230', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3230'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0846?


Explain the CVE ID: What does the identifier CVE-2015-0847 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0847.

nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0847?

{'name': 'DSA-3271', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3271'}, {'name': '[Nbd] 20150507 [PATCH] nbd-server: fix unsafe signal handling', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://sourceforge.net/p/nbd/mailman/message/34091218/'}, {'name': 'USN-2676-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2676-1'}, {'name': 'openSUSE-SU-2015:0994', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-06/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/projects/nbd/files/nbd/3.11/'}, {'name': '[oss-security] 20150507 CVE-2015-0847 in nbd-server', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/05/07/9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0847?


Explain the CVE ID: What does the identifier CVE-2015-0848 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0848.

Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.


Provide references for further information: Can you share references or external links related to CVE-2015-0848?

{'name': 'DSA-3302', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3302'}, {'name': '[oss-security] 20150601 CVE-2015-0848 - Heap overflow on libwmf0.2-7', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/06/01/2'}, {'name': 'FEDORA-2015-14847', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165547.html'}, {'name': 'FEDORA-2015-14848', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168507.html'}, {'name': 'openSUSE-SU-2015:1132', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-06/msg00051.html'}, {'name': 'GLSA-201602-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201602-03'}, {'name': 'FEDORA-2015-9674', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160668.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html'}, {'name': 'USN-2670-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2670-1'}, {'name': 'openSUSE-SU-2015:1134', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-06/msg00053.html'}, {'name': '74923', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74923'}, {'name': '1032771', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032771'}, {'name': 'openSUSE-SU-2015:1212', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-07/msg00018.html'}, {'name': 'RHSA-2015:1917', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1917.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0848?


Explain the CVE ID: What does the identifier CVE-2015-0850 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0850.

The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository.


Provide references for further information: Can you share references or external links related to CVE-2015-0850?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://fusionforge.org/forum/forum.php?forum_id=41'}, {'name': 'DSA-3275', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3275'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0850?


Explain the CVE ID: What does the identifier CVE-2015-0851 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0851.

XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider (SP), does not properly handle integer conversion exceptions, which allows remote attackers to cause a denial of service (crash) via schema-invalid XML data.


Provide references for further information: Can you share references or external links related to CVE-2015-0851?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://shibboleth.net/community/advisories/secadv_20150721.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.shibboleth.net/view/?p=cpp-xmltooling.git%3Ba=commitdiff%3Bh=2d795c731e6729309044607154978696a87fd900'}, {'name': '76134', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76134'}, {'name': 'DSA-3321', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3321'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0851?


Explain the CVE ID: What does the identifier CVE-2015-0852 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0852.

Multiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote attackers to cause a denial of service (heap memory corruption) via vectors related to the height and width of a window.


Provide references for further information: Can you share references or external links related to CVE-2015-0852?

{'name': '1034077', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034077'}, {'name': 'FEDORA-2015-16105', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html'}, {'name': 'FEDORA-2015-decbab7c9f', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172491.html'}, {'name': 'DSA-3392', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3392'}, {'name': 'FEDORA-2015-992342e82f', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172583.html'}, {'name': 'FEDORA-2015-16104', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168023.html'}, {'name': '[oss-security] 20150828 CVE-2015-0852 [FreeImage] Integer overflow in PluginPCX.cpp', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/08/28/1'}, {'name': 'FEDORA-2015-16106', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167766.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=797165'}, {'name': 'GLSA-201701-68', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201701-68'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0852?


Explain the CVE ID: What does the identifier CVE-2015-0853 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0853.

svn-workbench 1.6.2 and earlier on a system with xeyes installed allows local users to execute arbitrary commands by using the "Command Shell" menu item while in the directory trunk/$(xeyes).


Provide references for further information: Can you share references or external links related to CVE-2015-0853?

{'tags': ['x_refsource_MISC'], 'url': 'http://pysvn.tigris.org/issues/show_bug.cgi?id=202'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.launchpad.net/ubuntu/+source/svn-workbench/+bug/1495268'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1262928'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=798863'}, {'name': '[oss-security] 20150913 CVE-2015-0853: insecure use of os.system() in svn-workbench', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/09/13/3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0853?


Explain the CVE ID: What does the identifier CVE-2015-0854 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0854.

App/HelperFunctions.pm in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Show in Folder" action.


Provide references for further information: Can you share references or external links related to CVE-2015-0854?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/shutter/+bug/1495163'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0854?


Explain the CVE ID: What does the identifier CVE-2015-0855 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0855.

The _mediaLibraryPlayCb function in mainwindow.py in pitivi before 0.95 allows attackers to execute arbitrary code via shell metacharacters in a file path.


Provide references for further information: Can you share references or external links related to CVE-2015-0855?

{'name': '97283', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/97283'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.gnome.org/browse/pitivi/commit/?id=45a4c84edb3b4343f199bba1c65502e3f49f5bb2'}, {'name': '[oss-security] 20151223 pitivi: CVE-2015-0855: Insecure use of os.system()', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/12/23/8'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/ubuntu/+source/pitivi/+bug/1495272'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0855?


Explain the CVE ID: What does the identifier CVE-2015-0856 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0856.

daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme.


Provide references for further information: Can you share references or external links related to CVE-2015-0856?

{'name': '77099', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/77099'}, {'name': 'FEDORA-2015-9f996ea146', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171443.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/sddm/sddm/wiki/0.13.0-Release-Announcement'}, {'name': '[oss-security] 20151014 CVE-2015-0856: sddm does not prevent access to the KDE crash handler', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/10/14/2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/sddm/sddm/commit/4cfed6b0a625593fb43876f04badc4dd99799d86'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0856?


Explain the CVE ID: What does the identifier CVE-2015-0857 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0857.

Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a (1) tar file or (2) file within a tar file.


Provide references for further information: Can you share references or external links related to CVE-2015-0857?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://anonscm.debian.org/cgit/collab-maint/tardiff.git/commit/?id=a18e8df51511df276e61dbccdbe1714fc53af965'}, {'name': 'DSA-3562', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3562'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://anonscm.debian.org/cgit/collab-maint/tardiff.git/commit/?id=9bd6a07bc204472ac27242cea16f89943b43003a'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0857?


Explain the CVE ID: What does the identifier CVE-2015-0858 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0858.

Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory.


Provide references for further information: Can you share references or external links related to CVE-2015-0858?

{'name': 'DSA-3562', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3562'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://anonscm.debian.org/cgit/collab-maint/tardiff.git/commit/?id=9bd6a07bc204472ac27242cea16f89943b43003a'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0858?


Explain the CVE ID: What does the identifier CVE-2015-0859 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0859.

The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokeping_cgi, which allows remote attackers to execute arbitrary code via crafted CGI arguments.


Provide references for further information: Can you share references or external links related to CVE-2015-0859?

{'name': 'DSA-3405', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3405'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0859?


Explain the CVE ID: What does the identifier CVE-2015-0860 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0860.

Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in Debian dpkg 1.16.x before 1.16.17 and 1.17.x before 1.17.26 allows remote attackers to execute arbitrary code via the archive magic version number in an "old-style" Debian binary package, which triggers a stack-based buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2015-0860?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=798324'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://anonscm.debian.org/cgit/dpkg/dpkg.git/commit/dpkg-deb/extract.c?id=e65aa3db04eb908c9507d5d356a95cedb890814d'}, {'name': 'GLSA-201612-07', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201612-07'}, {'name': 'DSA-3407', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3407'}, {'tags': ['x_refsource_MISC'], 'url': 'https://blog.fuzzing-project.org/30-Stack-overflows-and-out-of-bounds-read-in-dpkg-Debian.html'}, {'name': 'USN-2820-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2820-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0860?


Explain the CVE ID: What does the identifier CVE-2015-0861 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0861.

model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write to arbitrary fields via a sequence of records.


Provide references for further information: Can you share references or external links related to CVE-2015-0861?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.tryton.org/posts/security-release-for-issue5167.html'}, {'name': 'DSA-3425', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3425'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.tryton.org/issue5167'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0861?


Explain the CVE ID: What does the identifier CVE-2015-0862 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0862.

Multiple cross-site scripting (XSS) vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) message details when a message is unqueued, such as headers or arguments; (2) policy names, which are not properly handled when viewing policies; (3) details for AMQP network clients, such as the version; allow remote authenticated administrators to inject arbitrary web script or HTML via (4) user names, (5) the cluster name; or allow RabbitMQ cluster administrators to (6) modify unspecified content.


Provide references for further information: Can you share references or external links related to CVE-2015-0862?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.rabbitmq.com/news.html#2015-01-08T10:14:05+0100'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0862?


Explain the CVE ID: What does the identifier CVE-2015-0863 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0863.

GALAXY Apps (aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps) before 14120405.03.012 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2015-0863?


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0863?


Explain the CVE ID: What does the identifier CVE-2015-0864 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0864.

Samsung Account (AKA com.osp.app.signin) before 1.6.0069 and 2.x before 2.1.0069 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2015-0864?

{'name': '97207', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/97207'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.nowsecure.com/blog/2015/01/26/samsung-account-and-galaxy-apps-technical-breakdown-cve-2015-0863-and-cve-2015-0864/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0864?


Explain the CVE ID: What does the identifier CVE-2015-0866 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0866.

Multiple cross-site scripting (XSS) vulnerabilities in Zoho ManageEngine SupportCenter Plus 7.9 before hotfix 7941 allow remote attackers to inject arbitrary web script or HTML via the (1) fromCustomer, (2) username, or (3) password parameter to HomePage.do.


Provide references for further information: Can you share references or external links related to CVE-2015-0866?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.htbridge.com/advisory/HTB23247'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://forums.manageengine.com/topic/security-update-for-supportcenter-plus'}, {'name': '72349', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72349'}, {'name': '20150128 Two XSS Vulnerabilities in SupportCenter Plus', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534564/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0866?


Explain the CVE ID: What does the identifier CVE-2015-0867 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0867.

Directory traversal vulnerability in SYNCK GRAPHICA Download Log CGI 3.0 and earlier allows remote attackers to read arbitrary files via a crafted filename.


Provide references for further information: Can you share references or external links related to CVE-2015-0867?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.synck.com/blogs/news/weblog_1420694040.html'}, {'name': 'JVNDB-2015-000006', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000006'}, {'name': 'JVN#88559134', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN88559134/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0867?


Explain the CVE ID: What does the identifier CVE-2015-0868 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0868.

Unrestricted file upload vulnerability in Mrs. Shiromuku Perl CGI shiromuku(bu2)BBS before 2.91 allows remote attackers to execute arbitrary code by uploading an executable file.


Provide references for further information: Can you share references or external links related to CVE-2015-0868?

{'name': 'JVNDB-2015-000008', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000008'}, {'name': 'JVN#94502417', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN94502417/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.t-okada.com/cgi-bin/sb2_data/sb2_data_news.cgi?action=data_list&cat=16#495'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0868?


Explain the CVE ID: What does the identifier CVE-2015-0869 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0869.

I-O DATA DEVICE NP-BBRM routers allow remote attackers to cause a denial of service (SSDP reflection) via UPnP requests.


Provide references for further information: Can you share references or external links related to CVE-2015-0869?

{'name': 'JVN#27142693', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN27142693/index.html'}, {'name': 'JVNDB-2015-000009', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000009'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.iodata.jp/support/information/2015/np-bbrm/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0869?


Explain the CVE ID: What does the identifier CVE-2015-0870 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0870.

Cross-site scripting (XSS) vulnerability in hb.cgi in Nishishi Factory Fumy News Clipper 2.x before 2.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0870?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.nishishi.com/cgi/newsclip/20150130.html'}, {'name': 'JVNDB-2015-000010', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000010'}, {'name': 'JVN#33735535', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN33735535/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jvn.jp/en/jp/JVN33735535/995592/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0870?


Explain the CVE ID: What does the identifier CVE-2015-0871 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0871.

Cross-site scripting (XSS) vulnerability in Mrs. Shiromuku Perl CGI shiromuku(u1)GUESTBOOK 1.62 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0871?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://jvn.jp/en/jp/JVN17480391/995116/index.html'}, {'name': 'JVN#17480391', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN17480391/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0871?


Explain the CVE ID: What does the identifier CVE-2015-0872 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0872.


Provide references for further information: Can you share references or external links related to CVE-2015-0872?


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0872?


Explain the CVE ID: What does the identifier CVE-2015-0873 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0873.

Cross-site scripting (XSS) vulnerability in Homepage Decorator PerlTreeBBS 2.30 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0873?

{'name': 'JVN#96155055', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN96155055/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0873?


Explain the CVE ID: What does the identifier CVE-2015-0874 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0874.

Smartphone Passbook 1.0.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information from encrypted communications via a crafted certificate.


Provide references for further information: Can you share references or external links related to CVE-2015-0874?

{'name': '72597', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72597'}, {'name': 'JVNDB-2015-000015', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000015.html'}, {'name': 'JVN#14522790', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN14522790/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0874?


Explain the CVE ID: What does the identifier CVE-2015-0875 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0875.

The Ogaki Kyoritsu Bank Smartphone Passbook application 1.0.0 for Android creates a log file containing input data from the user, which allows attackers to obtain sensitive information by reading a file.


Provide references for further information: Can you share references or external links related to CVE-2015-0875?

{'name': 'JVNDB-2015-000016', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000016'}, {'name': 'JVN#48659722', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN48659722/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.okb.co.jp/okdirect/sp_passbook/information01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0875?


Explain the CVE ID: What does the identifier CVE-2015-0876 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0876.

Multiple cross-site scripting (XSS) vulnerabilities in the print_language_selectbox function in classes/adminpage.inc.php in Saurus CMS Community Edition before 4.7 2015-02-04 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0876?

{'name': 'JVNDB-2015-000017', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000017'}, {'name': 'JVN#18387086', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN18387086/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/sauruscms/Saurus-CMS-Community-Edition/commit/1bc272874a86eaab99dccd00b29177423fd83877'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0876?


Explain the CVE ID: What does the identifier CVE-2015-0877 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0877.

Unrestricted file upload vulnerability in app/lib/mlf.pl in C-BOARD Moyuku before 1.03b3 allows remote attackers to execute arbitrary code by uploading a file with a \0 character in its name.


Provide references for further information: Can you share references or external links related to CVE-2015-0877?

{'name': 'JVNDB-2015-000018', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000018'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.jp/projects/cb-moyuku/news/'}, {'name': 'JVN#73261710', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN73261710/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0877?


Explain the CVE ID: What does the identifier CVE-2015-0878 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0878.

Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files via a crafted filename of an attachment.


Provide references for further information: Can you share references or external links related to CVE-2015-0878?

{'name': 'JVN#77294617', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN77294617/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.almail.com/vulnerability.html'}, {'name': 'JVNDB-2015-000020', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000020'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0878?


Explain the CVE ID: What does the identifier CVE-2015-0879 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0879.

CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service (application crash) via a (1) CON, (2) AUX, or (3) NUL device name in the filename of an attachment.


Provide references for further information: Can you share references or external links related to CVE-2015-0879?

{'name': 'JVN#55365709', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN55365709/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.almail.com/vulnerability.html'}, {'name': 'JVNDB-2015-000021', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0879?


Explain the CVE ID: What does the identifier CVE-2015-0880 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0880.

Buffer overflow in CREAR AL-Mail32 before 1.13d allows remote attackers to execute arbitrary code via a long filename of an attachment.


Provide references for further information: Can you share references or external links related to CVE-2015-0880?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.almail.com/vulnerability.html'}, {'name': 'JVNDB-2015-000022', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000022'}, {'name': 'JVN#93318392', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN93318392/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0880?


Explain the CVE ID: What does the identifier CVE-2015-0881 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0881.

CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted header in a response.


Provide references for further information: Can you share references or external links related to CVE-2015-0881?

{'name': 'JVNDB-2015-000019', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000019'}, {'name': 'JVN#64455813', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN64455813/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0881?


Explain the CVE ID: What does the identifier CVE-2015-0882 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0882.

Multiple cross-site scripting (XSS) vulnerabilities in zencart-ja (aka Zen Cart Japanese edition) 1.3 jp through 1.3.0.2 jp8 and 1.5 ja through 1.5.1 ja allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to admin/includes/init_includes/init_sanitize.php and includes/init_includes/init_sanitize.php.


Provide references for further information: Can you share references or external links related to CVE-2015-0882?

{'name': 'JVN#44544694', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN44544694/index.html'}, {'name': 'JVNDB-2015-000027', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000027'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jvn.jp/en/jp/JVN44544694/281242/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/zencart-ja/zc-v1-series/commit/022949bd09444d7e58703cc537dbbd5744c381b8'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0882?


Explain the CVE ID: What does the identifier CVE-2015-0883 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0883.

SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5, when the mailauth module is enabled, does not properly send e-mail messages, which allows remote attackers to execute arbitrary code via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0883?

{'name': 'JVN#30135729', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN30135729/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.synck.com/blogs/news/weblog_1424791052.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jvn.jp/en/jp/JVN30135729/995637/index.html'}, {'name': 'JVNDB-2015-000026', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000026'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0883?


Explain the CVE ID: What does the identifier CVE-2015-0884 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0884.

Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.


Provide references for further information: Can you share references or external links related to CVE-2015-0884?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.support.toshiba.com/sscontent?contentId=4007187'}, {'name': '1031825', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031825'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.support.toshiba.com/sscontent?contentId=4007185'}, {'name': 'VU#632140', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/632140'}, {'tags': ['x_refsource_MISC'], 'url': 'http://jvn.jp/vu/JVNVU99205169/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0884?


Explain the CVE ID: What does the identifier CVE-2015-0885 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0885.

checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a username.


Provide references for further information: Can you share references or external links related to CVE-2015-0885?

{'name': 'JVN#34790526', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN34790526/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jvn.jp/en/jp/JVN34790526/995575/index.html'}, {'name': 'DSA-3192', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3192'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://checkpw.sourceforge.net/checkpw/changes.txt'}, {'name': 'JVNDB-2015-000032', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000032'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0885?


Explain the CVE ID: What does the identifier CVE-2015-0886 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0886.

Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum exponent.


Provide references for further information: Can you share references or external links related to CVE-2015-0886?

{'name': 'FEDORA-2015-3032', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151786.html'}, {'name': 'FEDORA-2015-3120', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151496.html'}, {'name': 'JVN#77718330', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN77718330/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mindrot.org/projects/jBCrypt/news/rel04.html'}, {'name': 'FEDORA-2015-2994', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151797.html'}, {'name': 'JVNDB-2015-000033', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000033'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mindrot.org/show_bug.cgi?id=2097'}, {'name': '[cassandra-commits] 20210924 [jira] [Updated] (CASSANDRA-16990) Update jbcrypt library to 0.4 from 0.3m to resolve CVE-2015-0886', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rd5c2256b8dc9935e4bb5e9be90adce58408054bb42523730a40c5548%40%3Ccommits.cassandra.apache.org%3E'}, {'name': '[cassandra-commits] 20210924 [jira] [Created] (CASSANDRA-16990) Update jbcrypt library to 0.4 from 0.3m to resolve CVE-2015-0886', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/re330cfe9e5d84e3f7da8ace23ec32f38cb3fbd328bf177badd7ad942%40%3Ccommits.cassandra.apache.org%3E'}, {'name': '[cassandra-commits] 20210924 [jira] [Commented] (CASSANDRA-16990) Update jbcrypt library to 0.4 from 0.3m to resolve CVE-2015-0886', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rbd23e3ac8113b4da0a025c0e45170b6ec317383a1cf06090c2c717aa%40%3Ccommits.cassandra.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0886?


Explain the CVE ID: What does the identifier CVE-2015-0887 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0887.

npppd in the PPP Access Concentrator (PPPAC) on SEIL SEIL/x86 Fuji routers 1.00 through 3.30, SEIL/X1 routers 3.50 through 4.70, SEIL/X2 routers 3.50 through 4.70, and SEIL/B1 routers 3.50 through 4.70 allows remote attackers to cause a denial of service (infinite loop and device hang) via a crafted SSTP packet.


Provide references for further information: Can you share references or external links related to CVE-2015-0887?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.seil.jp/support/security/a01541.html'}, {'name': 'JVNDB-2015-000031', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000031'}, {'name': 'JVN#63949115', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN63949115/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0887?


Explain the CVE ID: What does the identifier CVE-2015-0888 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0888.

KENT-WEB Clip Board before 4.1 allows remote attackers to delete arbitrary files via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0888?

{'name': 'JVNDB-2015-000028', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000028'}, {'name': 'JVN#62298871', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN62298871/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kent-web.com/bbs/clipbbs.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0888?


Explain the CVE ID: What does the identifier CVE-2015-0889 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0889.

KENT-WEB Joyful Note before 5.3 allows remote attackers to delete files or write to files, and consequently execute arbitrary code, via vectors involving an article.


Provide references for further information: Can you share references or external links related to CVE-2015-0889?

{'name': 'JVNDB-2015-000024', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000024'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kent-web.com/bbs/joyful.html'}, {'name': 'JVN#88862608', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN88862608/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0889?


Explain the CVE ID: What does the identifier CVE-2015-0890 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0890.

The BestWebSoft Google Captcha (aka reCAPTCHA) plugin before 1.13 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0890?

{'name': 'JVNDB-2015-000030', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000030'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wordpress.org/plugins/google-captcha/changelog/'}, {'name': 'JVN#55063777', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN55063777/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0890?


Explain the CVE ID: What does the identifier CVE-2015-0891 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0891.

Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Simple Board allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0891?

{'name': 'JVNDB-2015-000034', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000034'}, {'name': 'JVN#63687798', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN63687798/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://jvn.jp/en/jp/JVN63687798/995638/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0891?


Explain the CVE ID: What does the identifier CVE-2015-0892 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0892.

Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Image Album allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0892?

{'name': 'JVN#09871547', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN09871547/index.html'}, {'name': 'JVNDB-2015-000035', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000035'}, {'tags': ['x_refsource_MISC'], 'url': 'http://jvn.jp/en/jp/JVN09871547/995638/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0892?


Explain the CVE ID: What does the identifier CVE-2015-0893 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0893.

Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Relay Novel allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0893?

{'name': 'JVN#91016415', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN91016415/index.html'}, {'name': 'JVNDB-2015-000036', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000036'}, {'tags': ['x_refsource_MISC'], 'url': 'http://jvn.jp/en/jp/JVN91016415/995638/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0893?


Explain the CVE ID: What does the identifier CVE-2015-0894 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0894.

SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0894?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/changelog/'}, {'name': 'JVN#30832515', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN30832515/index.html'}, {'name': 'JVNDB-2015-000037', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000037'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0894?


Explain the CVE ID: What does the identifier CVE-2015-0895 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0895.

Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete logs of 404 (aka Not Found) HTTP status codes.


Provide references for further information: Can you share references or external links related to CVE-2015-0895?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/changelog/'}, {'name': 'JVN#87204433', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN87204433/index.html'}, {'name': 'JVNDB-2015-000038', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2015-000038'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0895?


Explain the CVE ID: What does the identifier CVE-2015-0896 mean in the context of cybersecurity?