8 April 2015

22 results · Feed

• Unscored —
  CVE-2015-0557

  Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to …

  arj Debian
  Apr 8, 2015
• Unscored —
  CVE-2015-0248 EPSS 13%

  The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote a…

  subversion subversion Debian Ubuntu
  Apr 8, 2015
• Unscored —
  CVE-2015-0251

  The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to…

  subversion subversion Debian Ubuntu
  Apr 8, 2015
• Unscored —
  CVE-2015-0556

  Open-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks via a symlink attack in…

  arj Debian
  Apr 8, 2015
• Unscored —
  CVE-2015-0202

  The mod_dav_svn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service (memory …

  subversion subversion Debian Ubuntu
  Apr 8, 2015
• Unscored —
  CVE-2015-1317

  Use-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of …

  oxide-qt Ubuntu
  Apr 8, 2015
• Unscored —
  CVE-2015-3029

  The web interface in McAfee Advanced Threat Defense (MATD) before 3.4.4.63 does not properly restrict access, which all…

  Apr 8, 2015
• Unscored —
  CVE-2015-3028

  McAfee Advanced Threat Defense (MATD) before 3.4.4.63 allows remote authenticated users to bypass intended restrictions…

  Apr 8, 2015
• Unscored —
  CVE-2015-3030

  The web interface in McAfee Advanced Threat Defense (MATD) before 3.4.4.63 allows remote authenticated users to obtain …

  Apr 8, 2015
• Unscored —
  CVE-2015-2782

  Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service (crash) or pos…

  arj Debian
  Apr 8, 2015
• Unscored —
  CVE-2015-2822

  Siemens SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2 and SIMATIC WinCC Runtime Advanced before WinC…

  Apr 8, 2015
• Unscored —
  CVE-2015-2823

  Siemens SIMATIC HMI Basic Panels 2nd Generation before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Comfort Panels befor…

  Apr 8, 2015
• Unscored —
  CVE-2015-0798

  The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre-release, does not properly…

  Apr 8, 2015
• Unscored —
  CVE-2015-0799

  The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an …

  firefox Ubuntu
  Apr 8, 2015
• Unscored —
  CVE-2015-1798

  The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct M…

  ntp ntp Debian Ubuntu
  Apr 8, 2015
• Unscored —
  CVE-2015-1799

  The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs sta…

  ntp ntp Debian Ubuntu
  Apr 8, 2015
• Unscored —
  CVE-2015-1472

  The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consid…

  glibc eglibc Debian Ubuntu
  Apr 8, 2015
• Unscored —
  CVE-2015-1473

  The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consid…

  glibc eglibc dietlibc Debian Ubuntu Azure Linux
  Apr 8, 2015
• Unscored —
  CVE-2015-0905

  Cross-site request forgery (CSRF) vulnerability in bBlog allows remote attackers to hijack the authentication of arbitr…

  Apr 8, 2015
• Unscored —
  CVE-2015-1773

  Cross-site scripting (XSS) vulnerability in asdoc/templates/index.html in Apache Flex before 4.14.1 allows remote attac…

  flex Azure Linux
  Apr 8, 2015
• Unscored —
  CVE-2015-2827

  Cross-site scripting (XSS) vulnerability in CA Spectrum 9.2.x and 9.3.x before 9.3 H02 allows remote authenticated user…

  Apr 8, 2015
• Unscored —
  CVE-2015-2828

  CA Spectrum 9.2.x and 9.3.x before 9.3 H02 does not properly validate serialized Java objects, which allows remote auth…

  Apr 8, 2015