Archive
26 August 2015
Vulnerabilities first published on this day (UTC), newest first.
12 results · Feed
-
Unscored —
The slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which a…
-
Unscored —
Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x …
-
Unscored —CVE-2015-3239 Public exploit
Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have u…
-
Medium —
PicketLink does not properly check role based authorization
The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, which allows remote authenticated users to gain access to restricted application r…
-
Medium —
OpenStack Neutron Improper Input Validation vulnerability
OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service (L2 agent crash) by adding an address pair that is rejected by the ipset tool.
-
Unscored —
The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-de…
-
Unscored —
HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to obtain sensitive informa…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in HP Version Control Repository Manager (VCRM) before 7.5.0 allows rem…
-
Unscored —
HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to gain privileges and obta…
-
Unscored —
HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to execute arbitrary code o…
-
Unscored —
Buffer overflow in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to modif…
-
Unscored —
Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote authenticated users to bypass inten…