10 January 2015

17 results · Feed

• High 8.8
  CVE-2014-9495 Public exploit

  Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when runnin…

  texlive-bin libpng1.6 Debian
  Jan 10, 2015
• Unscored —
  CVE-2015-0560

  The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.1…

  wireshark wireshark Debian Ubuntu
  Jan 10, 2015
• Unscored —
  CVE-2015-0559

  Multiple use-after-free vulnerabilities in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x befo…

  wireshark wireshark Debian Ubuntu
  Jan 10, 2015
• Unscored —
  CVE-2015-0563

  epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an…

  wireshark wireshark Debian Ubuntu
  Jan 10, 2015
• Unscored —
  CVE-2015-0582

  The High Availability (HA) subsystem in Cisco NX-OS on MDS 9000 devices allows remote attackers to cause a denial of se…

  Jan 10, 2015
• Unscored —
  CVE-2015-0561

  asn1/lpp/lpp.cnf in the LPP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not validate a c…

  wireshark wireshark Debian Ubuntu
  Jan 10, 2015
• Unscored —
  CVE-2015-0564

  Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.…

  wireshark wireshark Debian Ubuntu
  Jan 10, 2015
• Unscored —
  CVE-2015-0562

  Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector…

  wireshark wireshark Debian Ubuntu
  Jan 10, 2015
• Unscored —
  CVE-2014-6212

  The Echo API in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix11, 10.0.0.x before 10.0.0.1 iFix12, 10.0.1.x…

  Jan 10, 2015
• Unscored —
  CVE-2014-6158

  Multiple directory traversal vulnerabilities in the file-upload feature in IBM PureApplication System 1.0 before 1.0.0.…

  Jan 10, 2015
• Unscored —
  CVE-2014-6199

  The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remot…

  Jan 10, 2015
• Unscored —
  CVE-2014-3096

  Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management before 6.0.5.5a allows remote authentic…

  Jan 10, 2015
• Unscored —
  CVE-2014-8035

  The web framework in Cisco WebEx Meetings Server produces different returned messages for URL requests depending on whe…

  Jan 10, 2015
• Unscored —
  CVE-2014-8020

  Cisco Unified Communication Domain Manager Platform Software allows remote attackers to cause a denial of service (CPU …

  Jan 10, 2015
• Unscored —
  CVE-2014-8036

  The outlookpa component in Cisco WebEx Meetings Server does not properly validate API input, which allows remote attack…

  Jan 10, 2015
• Critical 10.0
  CVE-2014-9190

  Schneider Electric Wonderware InTouch Access Anywhere Server Buffer Overflow

  Stack-based buffer overflow in Schneider Electric Wonderware InTouch Access Anywhere Server 10.6 and 11.0 allows remote attackers to execute arbitrary code via a request for a filename that does not exist.

  Schneider Electric InTouch Access Anywhere Server ICS / OT
  Jan 10, 2015
• Unscored —
  CVE-2014-9191

  The CodeWrights HART Device Type Manager (DTM) library in Emerson HART DTM before 1.4.181 allows physically proximate a…

  Jan 10, 2015