Archive
18 September 2015
Vulnerabilities first published on this day (UTC), newest first.
113 results · Feed
-
Unscored —
The DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote attackers to cause a denial o…
-
Unscored —
Absolute path traversal vulnerability in the download feature in FileDownloadServlet in GE Digital Energy MDS PulseNET …
-
Unscored —
Cisco Prime Network Registrar (CPNR) 8.1(3.3), 8.2(3), and 8.3(2) has a default account, which allows local users to ob…
-
Unscored —
GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 have hardcoded credentials for a support accoun…
-
Unscored —
VMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS LDAP servers, which a…
-
Unscored —
Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execu…
-
Unscored —
Cisco IOS 15.2(3)E and earlier and IOS XE 3.6(2)E and earlier allow remote attackers to cause a denial of service (func…
-
Unscored —
Schneider Electric StruxureWare Building Expert MPM before 2.15 does not use encryption for the client-server data stre…
-
Unscored —
Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service (crash) and possibl…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the login module in Joomla! 3.4.x before 3.4.4 allows remote attackers to i…
-
Unscored —
SQL injection vulnerability in the BP_FIND_JOBS_WITH_PROGRAM function module in SAP NetWeaver J2EE Engine 7.40 allows r…
-
Unscored —
The Secondary server in Threat Intelligence Exchange (TIE) before 1.2.0 uses weak permissions for unspecified (1) confi…
-
Unscored —
Directory traversal vulnerability in the remote log viewing functionality in McAfee Agent (MA) 5.x before 5.0.2 allows …
-
Unscored —
The FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.3.0 through…
-
Unscored —
rubygem-openshift-origin-console in Red Hat OpenShift 2.2 allows remote authenticated users to execute arbitrary comman…
-
Unscored —
The document.cookie API implementation in the CFNetwork Cookies subsystem in WebKit in Apple iOS before 9 allows remote…
-
Unscored —
The CFNetwork Cookies component in Apple iOS before 9 allows remote attackers to track users via vectors involving a co…
-
Unscored —
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…
-
Unscored —
Apple iOS before 9 allows attackers to obtain sensitive information about inter-app communication via a crafted app tha…
-
Unscored —
XNU in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local …
-
Unscored —
CFNetwork in Apple iOS before 9 relies on the hardware UID for its cache encryption key, which makes it easier for phys…
-
Unscored —
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…
-
Unscored —
The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption)…
-
Unscored —
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbi…
-
Unscored —
WebKit, as used in Apple iTunes before 12.3, allows man-in-the-middle attackers to execute arbitrary code or cause a de…
-
Unscored —
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…
-
Unscored —
The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a dif…
-
Unscored —
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…
-
Unscored —
The CFNetwork FTPProtocol component in Apple iOS before 9 allows remote FTP proxy servers to trigger TCP connection att…
-
Unscored —
XNU in the kernel in Apple iOS before 9 does not properly validate the headers of TCP packets, which allows remote atta…
-
Unscored —
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…
-
Unscored —
The NSURL implementation in the CFNetwork SSL component in Apple iOS before 9 does not properly verify X.509 certificat…
-
Unscored —
The Apple Pay component in Apple iOS before 9 allows remote terminals to obtain sensitive recent-transaction informatio…
-
Unscored —
The CFNetwork HTTPProtocol component in Apple iOS before 9 allows remote attackers to bypass the HSTS protection mechan…
-
Unscored —
CoreAnimation in Apple iOS before 9 allows attackers to bypass intended IOSurface restrictions and obtain screen-frameb…
-
Unscored —
IOAcceleratorFamily in Apple iOS before 9 allows attackers to obtain sensitive kernel memory-layout information via a c…
-
Unscored —
IOAcceleratorFamily in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory co…
-
Unscored —
IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a…
-
Unscored —
WebKit in Apple iOS before 9 does not properly restrict the availability of Performance API times, which allows remote …
-
Unscored —
CoreText in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a deni…