28 February 2015

9 results · Feed

• Unscored —
  CVE-2015-0884

  Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station…

  Feb 28, 2015
• Unscored —
  CVE-2015-0888

  KENT-WEB Clip Board before 4.1 allows remote attackers to delete arbitrary files via unspecified vectors.

  Feb 28, 2015
• Medium —
  CVE-2015-0886

  Integer Overflow or Wraparound in JBCrypt

  Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of password hashes via a brute-force attack against hashes associated with the maximum expon…

  cassandra-reaper org.mindrot:jbcrypt libjbcrypt-java Debian Wolfi Maven
  Feb 28, 2015
• Unscored —
  CVE-2015-0889

  KENT-WEB Joyful Note before 5.3 allows remote attackers to delete files or write to files, and consequently execute arb…

  Feb 28, 2015
• Unscored —
  CVE-2015-0887

  npppd in the PPP Access Concentrator (PPPAC) on SEIL SEIL/x86 Fuji routers 1.00 through 3.30, SEIL/X1 routers 3.50 thro…

  Feb 28, 2015
• Unscored —
  CVE-2015-0655

  Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction…

  Feb 28, 2015
• Unscored —
  CVE-2015-0885

  checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a…

  checkpw checkpw Debian Ubuntu
  Feb 28, 2015
• Critical —
  CVE-2014-9682

  dns-sync command injection vulnerability

  The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function.

  dns-sync npm
  Feb 28, 2015
• Unscored —
  CVE-2014-9676

  The seg_write_packet function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory loc…

  libav Ubuntu
  Feb 28, 2015