30 October 2015

19 results · Feed

• Unscored —
  CVE-2015-8030

  SAP 3D Visual Enterprise Viewer (VEV) allows remote attackers to execute arbitrary code via a crafted (1) U3D, (2) LWO,…

  Oct 30, 2015
• Unscored —
  CVE-2015-8029

  SAP 3D Visual Enterprise Viewer (VEV) allows remote attackers to execute arbitrary code via a crafted Filmbox document,…

  Oct 30, 2015
• Unscored —
  CVE-2015-8028

  Multiple buffer overflows in SAP 3D Visual Enterprise Viewer (VEV) allow remote attackers to execute arbitrary code via…

  Oct 30, 2015
• Unscored —
  CVE-2015-7972

  The (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post function in tools/libxl/libxl…

  xen xen Debian Ubuntu
  Oct 30, 2015
• Unscored —
  CVE-2015-7813

  Xen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console messages when reporting unimplemented hypercall…

  xen xen Debian Ubuntu
  Oct 30, 2015
• Unscored —
  CVE-2015-7969

  Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to c…

  xen xen Debian Ubuntu
  Oct 30, 2015
• Unscored —
  CVE-2015-7970

  The p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which …

  xen xen Debian Ubuntu
  Oct 30, 2015
• Unscored —
  CVE-2015-7971

  Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hyp…

  xen xen Debian Ubuntu
  Oct 30, 2015
• Unscored —
  CVE-2015-7814

  Race condition in the relinquish_memory function in arch/arm/domain.c in Xen 4.6.x and earlier allows local domains wit…

  xen xen Debian Ubuntu
  Oct 30, 2015
• Unscored —
  CVE-2015-7835

  The mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entri…

  xen xen Debian Ubuntu
  Oct 30, 2015
• Unscored —
  CVE-2015-6349

  Cross-site scripting (XSS) vulnerability in the web interface in the Solution Engine in Cisco Secure Access Control Ser…

  Oct 30, 2015
• Unscored —
  CVE-2015-6350

  SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote authenticated users …

  Oct 30, 2015
• Unscored —
  CVE-2015-6352

  Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attemp…

  Oct 30, 2015
• Unscored —
  CVE-2015-6344

  The web-based GUI in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security 9.3(4.1.11) allows remote authen…

  Oct 30, 2015
• Unscored —
  CVE-2015-6347

  The Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to bypass i…

  Oct 30, 2015
• Unscored —
  CVE-2015-6346

  Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote attackers …

  Oct 30, 2015
• Unscored —
  CVE-2015-6351

  Cisco ASR 5500 System Architecture Evolution (SAE) Gateway devices with software 19.1.0.61559 and 19.2.0 allow remote a…

  Oct 30, 2015
• Unscored —
  CVE-2015-6348

  The report-generation web interface in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows…

  Oct 30, 2015
• Unscored —
  CVE-2015-6345

  SQL injection vulnerability in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote …

  Oct 30, 2015