28 September 2015

31 results · Feed

• Unscored —
  CVE-2015-1781

  Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) be…

  glibc eglibc Debian Ubuntu
  Sep 28, 2015
• Unscored —
  CVE-2015-6806

  The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote …

  screen screen Debian Ubuntu
  Sep 28, 2015
• Unscored —
  CVE-2015-6927

  vzctl before 4.9.4 determines the virtual environment (VE) layout based on the presence of root.hdd/DiskDescriptor.xml …

  Sep 28, 2015
• Unscored —
  CVE-2015-5185

  The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote attackers to cause a denial …

  Sep 28, 2015
• Unscored —
  CVE-2015-5400 EPSS 21%

  Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows…

  squid squid3 Debian Ubuntu
  Sep 28, 2015
• Unscored —
  CVE-2015-5957

  Buffer overflow in the DumpSysVar function in var.c in Remind before 3.1.15 allows attackers to have unspecified impact…

  remind Debian
  Sep 28, 2015
• Unscored —
  CVE-2015-3203 Public exploit

  Unrestricted file upload vulnerability in h5ai before 0.25.0 allows remote attackers to execute arbitrary code by uploa…

  Sep 28, 2015
• Unscored —
  CVE-2015-5375

  Cross-site scripting (XSS) vulnerability in unspecified dialogs for printing content in the Front End in Open-Xchange S…

  Sep 28, 2015
• Unscored —
  CVE-2015-5372

  The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 before 4.18.3.1, when using SAML POST-Binding, does not match…

  Sep 28, 2015
• Unscored —
  CVE-2015-5279

  Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS use…

  qemu qemu Debian Ubuntu
  Sep 28, 2015
• Unscored —
  CVE-2015-5703

  SQL injection vulnerability in the public key discovery API call in Open-Xchange OX Guard before 2.0.0-rev8 allows remo…

  Sep 28, 2015
• Unscored —
  CVE-2015-7387 Public exploit EPSS 80%

  ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and earlier allows remote attackers to bypass intended restriction…

  Sep 28, 2015
• Unscored —
  CVE-2015-7386

  Multiple cross-site scripting (XSS) vulnerabilities in includes/metaboxes.php in the Gallery - Photo Albums - Portfolio…

  Sep 28, 2015
• Unscored —
  CVE-2015-6928

  classes/admin.class.php in CubeCart 5.2.12 through 5.2.16 and 6.x before 6.0.7 does not properly validate that a passwo…

  Sep 28, 2015
• Unscored —
  CVE-2015-5082 Public exploit EPSS 70%

  Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NE…

  Sep 28, 2015
• Unscored —
  CVE-2015-7382 Public exploit

  SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attacker…

  Sep 28, 2015
• Unscored —
  CVE-2015-7381 Public exploit

  Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database (aka refbase) through 0.9.6…

  Sep 28, 2015
• Unscored —
  CVE-2015-7383

  Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-…

  Sep 28, 2015
• Unscored —
  CVE-2015-6278

  The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, an…

  Sep 28, 2015
• Unscored —
  CVE-2015-6279

  The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, an…

  Sep 28, 2015
• Unscored —
  CVE-2015-6463

  CodeWrights HART Comm DTM components, as used with Endress+Hauser FieldCare, allow remote attackers to read arbitrary f…

  Sep 28, 2015
• Unscored —
  CVE-2015-6012

  Multiple open redirect vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2…

  Sep 28, 2015
• Unscored —
  CVE-2015-6307

  Cisco FirePOWER (formerly Sourcefire) 7000 and 8000 devices with software 5.4.0.1 allow remote attackers to cause a den…

  Sep 28, 2015
• Unscored —
  CVE-2015-6011

  Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allows remote attackers to condu…

  Sep 28, 2015
• Unscored —
  CVE-2015-6280

  The SSHv2 functionality in Cisco IOS 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.6E before 3.6.3E, 3.7E before 3.7.1E, 3.10…

  Sep 28, 2015
• Unscored —
  CVE-2015-6010

  Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-…

  Sep 28, 2015
• Unscored —
  CVE-2015-6007

  Cross-site request forgery (CSRF) vulnerability in Web Reference Database (aka refbase) through 0.9.6 allows remote att…

  Sep 28, 2015
• Unscored —
  CVE-2015-6008 Public exploit

  install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary commands…

  Sep 28, 2015
• Unscored —
  CVE-2015-6009 Public exploit

  Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to …

  Sep 28, 2015
• Unscored —
  CVE-2015-3974

  EasyIO EasyIO-30P-SF controllers with firmware before 0.5.21 and 2.x before 2.0.5.21, as used in Accutrol, Bar-Tech Aut…

  Sep 28, 2015
• Unscored —
  CVE-2014-9202

  Multiple stack-based buffer overflows in an unspecified DLL file in Advantech WebAccess before 8.0_20150816 allow remot…

  Sep 28, 2015