13 February 2015

20 results · Feed

• Unscored —
  CVE-2015-0245

  D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of A…

  dbus dbus Debian Ubuntu
  Feb 13, 2015
• Unscored —
  CVE-2015-0255

  X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sen…

  xorg-server xorg-server vnc4 xorg-server-lts-utopic Debian Ubuntu
  Feb 13, 2015
• Medium —
  CVE-2013-2027

  Jython Improper Access Restrictions vulnerability

  Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.

  jython jython org.python:jython-standalone Debian Ubuntu Maven
  Feb 13, 2015
• Unscored —
  CVE-2014-0154

  oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it…

  Feb 13, 2015
• Unscored —
  CVE-2014-0151

  Cross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote attackers to hijack th…

  Feb 13, 2015
• Unscored —
  CVE-2014-7853

  The JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application Platform (EAP) before 6…

  Feb 13, 2015
• Unscored —
  CVE-2014-7849

  The Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP) 6.2.0 through 6.3.2 …

  Feb 13, 2015
• Unscored —
  CVE-2014-7827

  The org.jboss.security.plugins.mapping.JBossMappingManager implementation in JBoss Security in Red Hat JBoss Enterprise…

  Feb 13, 2015
• Medium —
  CVE-2014-8122

  Information disclosure in JBoss Weld

  Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.

  org.jboss.weld:weld-core-bom Maven
  Feb 13, 2015
• Unscored —
  CVE-2015-0593

  The Zone-Based Firewall implementation in Cisco IOS 12.4(122)T and earlier does not properly manage session-object stru…

  Feb 13, 2015
• Unscored —
  CVE-2015-0873

  Cross-site scripting (XSS) vulnerability in Homepage Decorator PerlTreeBBS 2.30 and earlier allows remote attackers to …

  Feb 13, 2015
• Unscored —
  CVE-2014-4771

  IBM WebSphere MQ 7.0.1 before 7.0.1.13, 7.1 before 7.1.0.6, 7.5 before 7.5.0.5, and 8 before 8.0.0.1 allows remote auth…

  Feb 13, 2015
• Unscored —
  CVE-2014-4803

  CRLF injection vulnerability in the Universal Access implementation in IBM Curam Social Program Management 6.0 SP2 befo…

  Feb 13, 2015
• Unscored —
  CVE-2014-4813

  Race condition in the client in IBM Tivoli Storage Manager (TSM) 5.4.0.0 through 5.4.3.6, 5.5.0.0 through 5.5.4.3, 6.1.…

  Feb 13, 2015
• Unscored —
  CVE-2014-4781

  The alert module in IBM InfoSphere BigInsights 2.1.2 and 3.x before 3.0.0.2 allows remote attackers to obtain sensitive…

  Feb 13, 2015
• Unscored —
  CVE-2014-6154

  Directory traversal vulnerability in IBM Optim Performance Manager for DB2 4.1.0.1 through 4.1.1 on Linux, UNIX, and Wi…

  Feb 13, 2015
• Unscored —
  CVE-2014-6139

  The Search REST API in IBM Business Process Manager 8.0.1.3, 8.5.0.1, and 8.5.5.0 allows remote authenticated users to …

  Feb 13, 2015
• Unscored —
  CVE-2014-6185

  dsmtca in the client in IBM Tivoli Storage Manager (TSM) 6.3 before 6.3.2.3, 6.4 before 6.4.2.2, and 7.1 before 7.1.1.3…

  Feb 13, 2015
• Unscored —
  CVE-2014-8909

  Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 …

  Feb 13, 2015
• Unscored —
  CVE-2014-8385

  Buffer overflow on Advantech EKI-1200 gateways with firmware before 1.63 allows remote attackers to execute arbitrary c…

  Feb 13, 2015