[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2015-5273":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-27T05:51:03.152Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":195,"aliases":229,"duplicate_of":9,"upstream":230,"downstream":231,"duplicates":234,"related":235,"reserved_at":9,"published_at":236,"modified_at":237,"state":238,"summary":239,"references_raw":246,"kevs":283,"epss":284,"epss_history":287,"metrics":539,"affected":544},"CVE-2015-5273","The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","weakness","Draft","Base","Medium",[20,101,162,191],{"id":21,"name":22,"techniques":23},"CAPEC-132","Symlink Attack",[24],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1547.009","Shortcut Modification",[28,31],{"id":29,"name":30},"TA0110","Persistence",{"id":32,"name":33},"TA0111","Privilege Escalation",[35,40,44,49,53,58,62,66,70,74,78,83,88,92,96],{"id":36,"name":37,"tactic":38},"D3-CF","Content Filtering",{"name":39},"Isolate",{"id":41,"name":42,"tactic":43},"D3-RFAM","Remote File Access Mediation",{"name":39},{"id":45,"name":46,"tactic":47},"D3-FEV","File Eviction",{"name":48},"Evict",{"id":50,"name":51,"tactic":52},"D3-CM","Content Modification",{"name":39},{"id":54,"name":55,"tactic":56},"D3-EFA","Emulated File Analysis",{"name":57},"Detect",{"id":59,"name":60,"tactic":61},"D3-LFP","Local File Permissions",{"name":39},{"id":63,"name":64,"tactic":65},"D3-FIM","File Integrity Monitoring",{"name":57},{"id":67,"name":68,"tactic":69},"D3-DA","Dynamic Analysis",{"name":57},{"id":71,"name":72,"tactic":73},"D3-FA","File Analysis",{"name":57},{"id":75,"name":76,"tactic":77},"D3-CQ","Content Quarantine",{"name":39},{"id":79,"name":80,"tactic":81},"D3-DF","Decoy File",{"name":82},"Deceive",{"id":84,"name":85,"tactic":86},"D3-RF","Restore File",{"name":87},"Restore",{"id":89,"name":90,"tactic":91},"D3-EAL","Executable Allowlisting",{"name":39},{"id":93,"name":94,"tactic":95},"D3-EDL","Executable Denylisting",{"name":39},{"id":97,"name":98,"tactic":99},"D3-FE","File Encryption",{"name":100},"Harden",{"id":102,"name":103,"techniques":104},"CAPEC-17","Using Malicious Files",[105,142],{"id":106,"name":107,"tactics":108,"countermeasures":120},"T1574.005","Executable Installer File Permissions Weakness",[109,110,111,114,117],{"id":29,"name":30},{"id":32,"name":33},{"id":112,"name":113},"TA0030","Defense Evasion",{"id":115,"name":116},"TA0005","Stealth",{"id":118,"name":119},"TA0104","Execution",[121,125,130,134,138],{"id":122,"name":123,"tactic":124},"D3-SU","Software Update",{"name":100},{"id":126,"name":127,"tactic":128},"D3-AVE","Asset Vulnerability Enumeration",{"name":129},"Model",{"id":131,"name":132,"tactic":133},"D3-SWI","Software Inventory",{"name":129},{"id":135,"name":136,"tactic":137},"D3-SBV","Service Binary Verification",{"name":57},{"id":139,"name":140,"tactic":141},"D3-RS","Restore Software",{"name":87},{"id":143,"name":144,"tactics":145,"countermeasures":151},"T1574.010","Services File Permissions Weakness",[146,147,148,149,150],{"id":29,"name":30},{"id":32,"name":33},{"id":112,"name":113},{"id":115,"name":116},{"id":118,"name":119},[152,154,156,158,160],{"id":139,"name":140,"tactic":153},{"name":87},{"id":131,"name":132,"tactic":155},{"name":129},{"id":135,"name":136,"tactic":157},{"name":57},{"id":122,"name":123,"tactic":159},{"name":100},{"id":126,"name":127,"tactic":161},{"name":129},{"id":163,"name":164,"techniques":165},"CAPEC-35","Leverage Executable Code in Non-Executable Files",[166,173,180],{"id":167,"name":168,"tactics":169,"countermeasures":172},"T1027.006","HTML Smuggling",[170,171],{"id":112,"name":113},{"id":115,"name":116},[],{"id":174,"name":175,"tactics":176,"countermeasures":179},"T1027.009","Embedded Payloads",[177,178],{"id":112,"name":113},{"id":115,"name":116},[],{"id":181,"name":182,"tactics":183,"countermeasures":186},"T1564.009","Resource Forking",[184,185],{"id":112,"name":113},{"id":115,"name":116},[187],{"id":188,"name":189,"tactic":190},"D3-FFV","File Format Verification",{"name":39},{"id":192,"name":193,"techniques":194},"CAPEC-76","Manipulating Web Input to File System Calls",[],[196,205,210],{"_key":197,"name":198,"source":199,"url":200,"maturity":201,"reliability_score":202,"verified":203,"type":9,"platforms":204,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_BE92EE3780B2B3FB","Exploit Reference (openwall.com)","reference","http://www.openwall.com/lists/oss-security/2015/12/01/1","unknown",0.2,false,[],{"_key":206,"name":207,"source":199,"url":208,"maturity":201,"reliability_score":202,"verified":203,"type":9,"platforms":209,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_C897557D869B34B1","Exploit Reference (bugzilla.redhat.com)","https://bugzilla.redhat.com/show_bug.cgi?id=1262252",[],{"_key":211,"name":212,"source":213,"url":214,"maturity":215,"reliability_score":216,"verified":217,"type":218,"platforms":219,"requires_auth":9,"exploitdb":221,"metasploit":9},"38835","abrt (Centos 7.1 / Fedora 22) - Local Privilege Escalation","exploit-database","https://www.exploit-db.com/exploits/38835","weaponized",0.8,true,"local",[220],"multiple",{"verified":217,"type":218,"platform":220,"file":222,"codes":223},"exploits/multiple/local/38835.py",[224,7,225,226,227,228],"CVE-2015-5287","OSVDB-130747","OSVDB-130746","OSVDB-130745","OSVDB-130609",[],[],[232],{"_key":233},"RHSA-2015:2505",[],[],"2015-12-07T18:00:00.000Z","2024-08-06T06:41:09.354Z","Modified",{"cisa_kev":203,"cisa_ransomware":203,"cisa_vendor":9,"epss_severity":240,"epss_score":241,"severity":240,"severity_score":242,"severity_version":243,"severity_source":244,"severity_vector":245,"severity_status":238},"low",0.00901,3.6,"v2.0","nvd","AV:L/AC:L/Au:N/C:N/I:P/A:P",[247,254,260,265,271,275,280],{"url":248,"sources":249,"tags":251},"http://rhn.redhat.com/errata/RHSA-2015-2505.html",[250,244],"cve.org",[252,253],"Vendor Advisory","X Refsource REDHAT",{"url":200,"sources":255,"tags":256},[250,244],[257,258,259],"Mailing List","X Refsource MLIST","Exploit",{"url":261,"sources":262,"tags":263},"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",[250,244],[264],"X Refsource CONFIRM",{"url":266,"sources":267,"tags":268},"http://www.securityfocus.com/bid/78113",[250,244],[269,270],"VDB Entry","X Refsource BID",{"url":272,"sources":273,"tags":274},"https://github.com/abrt/abrt/commit/50ee8130fb4cd4ef1af7682a2c85dd99cb99424e",[250,244],[264],{"url":276,"sources":277,"tags":278},"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172809.html",[250,244],[252,279],"X Refsource FEDORA",{"url":208,"sources":281,"tags":282},[250,244],[264,259],[],{"date":285,"score":241,"percentile":286},"2026-08-26",0.57074,[288,292,295,298,301,304,307,310,313,316,319,322,325,328,331,334,337,340,343,345,348,351,353,355,358,361,364,367,370,373,376,378,381,384,387,390,393,396,399,402,405,408,410,412,415,418,421,424,427,429,432,434,437,439,442,445,448,451,453,456,459,462,465,468,470,472,475,478,480,483,485,488,491,494,496,498,501,503,506,509,512,514,517,520,522,525,528,531,534,536],{"date":289,"score":290,"percentile":291},"2025-11-04",0.00334,0.55649,{"date":293,"score":290,"percentile":294},"2025-11-05",0.55613,{"date":296,"score":290,"percentile":297},"2025-11-06",0.55623,{"date":299,"score":290,"percentile":300},"2025-11-07",0.55643,{"date":302,"score":290,"percentile":303},"2025-11-08",0.55648,{"date":305,"score":290,"percentile":306},"2025-11-09",0.5564,{"date":308,"score":290,"percentile":309},"2025-11-10",0.55617,{"date":311,"score":290,"percentile":312},"2025-11-11",0.5563,{"date":314,"score":290,"percentile":315},"2025-11-12",0.55655,{"date":317,"score":290,"percentile":318},"2025-11-13",0.55664,{"date":320,"score":290,"percentile":321},"2025-11-14",0.55666,{"date":323,"score":290,"percentile":324},"2025-11-15",0.55658,{"date":326,"score":290,"percentile":327},"2025-11-16",0.55642,{"date":329,"score":290,"percentile":330},"2025-11-17",0.55633,{"date":332,"score":290,"percentile":333},"2025-11-18",0.53173,{"date":335,"score":290,"percentile":336},"2025-11-19",0.53188,{"date":338,"score":290,"percentile":339},"2025-11-20",0.53176,{"date":341,"score":290,"percentile":342},"2025-11-21",0.55646,{"date":344,"score":290,"percentile":327},"2025-11-22",{"date":346,"score":290,"percentile":347},"2025-11-23",0.55615,{"date":349,"score":290,"percentile":350},"2025-11-24",0.55612,{"date":352,"score":290,"percentile":347},"2025-11-25",{"date":354,"score":290,"percentile":309},"2025-11-26",{"date":356,"score":290,"percentile":357},"2025-11-27",0.55619,{"date":359,"score":290,"percentile":360},"2025-11-28",0.55591,{"date":362,"score":290,"percentile":363},"2025-11-29",0.55577,{"date":365,"score":290,"percentile":366},"2025-11-30",0.55563,{"date":368,"score":290,"percentile":369},"2025-12-01",0.55723,{"date":371,"score":290,"percentile":372},"2025-12-02",0.55736,{"date":374,"score":290,"percentile":375},"2025-12-03",0.55728,{"date":377,"score":290,"percentile":366},"2025-12-04",{"date":379,"score":290,"percentile":380},"2025-12-05",0.55579,{"date":382,"score":290,"percentile":383},"2025-12-06",0.5558,{"date":385,"score":290,"percentile":386},"2025-12-07",0.5557,{"date":388,"score":290,"percentile":389},"2025-12-08",0.55571,{"date":391,"score":290,"percentile":392},"2025-12-09",0.55587,{"date":394,"score":290,"percentile":395},"2025-12-10",0.55644,{"date":397,"score":290,"percentile":398},"2025-12-11",0.55662,{"date":400,"score":290,"percentile":401},"2025-12-12",0.55685,{"date":403,"score":290,"percentile":404},"2025-12-13",0.55677,{"date":406,"score":290,"percentile":407},"2025-12-14",0.55675,{"date":409,"score":290,"percentile":398},"2025-12-15",{"date":411,"score":290,"percentile":404},"2025-12-16",{"date":413,"score":290,"percentile":414},"2025-12-17",0.55698,{"date":416,"score":290,"percentile":417},"2025-12-18",0.55735,{"date":419,"score":290,"percentile":420},"2025-12-19",0.55738,{"date":422,"score":290,"percentile":423},"2025-12-20",0.5573,{"date":425,"score":290,"percentile":426},"2025-12-21",0.55706,{"date":428,"score":290,"percentile":401},"2025-12-22",{"date":430,"score":290,"percentile":431},"2025-12-23",0.55691,{"date":433,"score":290,"percentile":414},"2025-12-24",{"date":435,"score":290,"percentile":436},"2025-12-25",0.55743,{"date":438,"score":290,"percentile":372},"2025-12-26",{"date":440,"score":290,"percentile":441},"2025-12-27",0.55783,{"date":443,"score":290,"percentile":444},"2025-12-28",0.55699,{"date":446,"score":290,"percentile":447},"2025-12-29",0.55683,{"date":449,"score":290,"percentile":450},"2025-12-30",0.55678,{"date":452,"score":290,"percentile":431},"2025-12-31",{"date":454,"score":290,"percentile":455},"2026-01-01",0.55859,{"date":457,"score":290,"percentile":458},"2026-01-02",0.55838,{"date":460,"score":290,"percentile":461},"2026-01-03",0.55828,{"date":463,"score":290,"percentile":464},"2026-01-04",0.55656,{"date":466,"score":290,"percentile":467},"2026-01-05",0.55647,{"date":469,"score":290,"percentile":464},"2026-01-06",{"date":471,"score":290,"percentile":447},"2026-01-07",{"date":473,"score":290,"percentile":474},"2026-01-08",0.55704,{"date":476,"score":290,"percentile":477},"2026-01-09",0.557,{"date":479,"score":290,"percentile":414},"2026-01-10",{"date":481,"score":290,"percentile":482},"2026-01-11",0.55672,{"date":484,"score":290,"percentile":297},"2026-01-12",{"date":486,"score":290,"percentile":487},"2026-01-13",0.55601,{"date":489,"score":290,"percentile":490},"2026-01-14",0.55645,{"date":492,"score":290,"percentile":493},"2026-01-15",0.5565,{"date":495,"score":290,"percentile":482},"2026-01-16",{"date":497,"score":290,"percentile":321},"2026-01-17",{"date":499,"score":290,"percentile":500},"2026-01-18",0.55659,{"date":502,"score":290,"percentile":493},"2026-01-19",{"date":504,"score":290,"percentile":505},"2026-01-20",0.55654,{"date":507,"score":290,"percentile":508},"2026-01-21",0.55657,{"date":510,"score":290,"percentile":511},"2026-01-22",0.5566,{"date":513,"score":290,"percentile":474},"2026-01-23",{"date":515,"score":290,"percentile":516},"2026-01-24",0.55708,{"date":518,"score":290,"percentile":519},"2026-01-25",0.55667,{"date":521,"score":290,"percentile":315},"2026-01-26",{"date":523,"score":290,"percentile":524},"2026-01-27",0.55668,{"date":526,"score":290,"percentile":527},"2026-01-28",0.55679,{"date":529,"score":290,"percentile":530},"2026-01-29",0.55682,{"date":532,"score":290,"percentile":533},"2026-01-30",0.55688,{"date":535,"score":290,"percentile":431},"2026-01-31",{"date":537,"score":290,"percentile":538},"2026-02-01",0.5583,[540],{"source":244,"cvss_v2_0":541,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":242,"baseSeverity":9,"vectorString":245,"impactScore":542,"exploitabilityScore":543},4.9,3.9,[545,556,563,568,573],{"ecosystem":9,"name":546,"vendor":547,"product":548,"cpe_part":549,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":550},"automatic bug reporting tool","redhat","automatic_bug_reporting_tool","a",[551],{"version":552,"is_range":217,"range_type":553,"version_start":9,"version_start_type":9,"version_end":554,"version_end_type":555,"fixed_in":9},"lte2.7.0","cpe","2.7.0","including",{"ecosystem":9,"name":557,"vendor":547,"product":558,"cpe_part":559,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":560},"enterprise linux desktop","enterprise_linux_desktop","o",[561],{"version":562,"is_range":203,"range_type":553,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0",{"ecosystem":9,"name":564,"vendor":547,"product":565,"cpe_part":559,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":566},"enterprise linux hpc node","enterprise_linux_hpc_node",[567],{"version":562,"is_range":203,"range_type":553,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":569,"vendor":547,"product":570,"cpe_part":559,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":571},"enterprise linux server","enterprise_linux_server",[572],{"version":562,"is_range":203,"range_type":553,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":574,"vendor":547,"product":575,"cpe_part":559,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":576},"enterprise linux workstation","enterprise_linux_workstation",[577],{"version":562,"is_range":203,"range_type":553,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9}]