Skip to content
OpenAdvisories

Archive

26 August 2015

Vulnerabilities first published on this day (UTC), newest first.

12 results · Feed

  • Unscored —

    The slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which a…

  • Unscored —

    Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x …

  • Unscored —
    CVE-2015-3239 Public exploit

    Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have u…

  • Medium —

    PicketLink does not properly check role based authorization

    The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, which allows remote authenticated users to gain access to restricted application r…

  • Medium —
    CVE-2015-3221 Public exploit EPSS 11%

    OpenStack Neutron Improper Input Validation vulnerability

    OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service (L2 agent crash) by adding an address pair that is rejected by the ipset tool.

  • Unscored —

    The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-de…

  • Unscored —

    HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to obtain sensitive informa…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in HP Version Control Repository Manager (VCRM) before 7.5.0 allows rem…

  • Unscored —

    HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to gain privileges and obta…

  • Unscored —

    HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to execute arbitrary code o…

  • Unscored —

    Buffer overflow in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to modif…

  • Unscored —

    Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote authenticated users to bypass inten…