Archive
12 August 2015
Vulnerabilities first published on this day (UTC), newest first.
20 results · Feed
-
Unscored —
XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider (SP), does not properly handle integer…
-
Unscored —
attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape…
-
Unscored —
lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*.
-
Unscored —
Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges …
-
Unscored —
vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the …
-
Unscored —
The gesture handling code in Clutter before 1.16.2 allows physically proximate attackers to bypass the lock screen via …
-
Unscored —
The svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based…
-
High 7.5
Ansible does not verify that the server hostname matches a domain name in certificates
Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certif…
-
Unscored —
mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not…
-
Unscored —
OpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors.
-
Unscored —
pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted commands.
-
Unscored —
The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, …
-
Unscored —
Buffer overflow in the Solaris kernel extension in OpenAFS before 1.6.13 allows local users to cause a denial of servic…
-
Unscored —
c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which …
-
Unscored —
The stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to r…
-
Unscored —
Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDR…
-
Unscored —
Stack-based buffer overflow in the handle_debug_network function in the manager in Websense Content Gateway before 8.0.…
-
Unscored —
Use-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated block devices, which …
-
Unscored —CVE-2015-5165 EPSS 13%
The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allow…
-
Unscored —
Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service (cra…