9 November 2015

24 results · Feed

• Unscored —
  CVE-2015-8001

  The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not…

  mediawiki Debian
  Nov 9, 2015
• Unscored —
  CVE-2015-8005

  MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail ImageMagick command line ar…

  mediawiki Debian
  Nov 9, 2015
• Unscored —
  CVE-2015-8003

  MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not throttle file uploads, which allows r…

  mediawiki Debian
  Nov 9, 2015
• Unscored —
  CVE-2015-8004

  MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not properly restrict access to revisions…

  mediawiki Debian
  Nov 9, 2015
• Unscored —
  CVE-2015-8002

  The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 allows r…

  mediawiki Debian
  Nov 9, 2015
• Unscored —
  CVE-2015-8006

  Cross-site scripting (XSS) vulnerability in the PageTriage toolbar in the PageTriage extension for MediWiki allows remo…

  Nov 9, 2015
• Unscored —
  CVE-2015-8007

  The Echo extension for MediWiki does not properly implement the hideuser functionality, which allows remote authenticat…

  Nov 9, 2015
• Medium —
  CVE-2015-7940

  Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15

  The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid c…

  bouncycastle bouncycastle org.bouncycastle:bcprov-jdk14 org.bouncycastle:bcprov-jdk15on Debian Ubuntu Maven
  Nov 9, 2015
• Unscored —
  CVE-2015-7295

  hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers ar…

  qemu qemu Debian Ubuntu
  Nov 9, 2015
• Unscored —
  CVE-2015-3240

  The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS, allows remote attackers …

  Nov 9, 2015
• Unscored —
  CVE-2015-8095

  The recycle bin feature in the Monster Menus module 7.x-1.21 before 7.x-1.24 for Drupal does not properly remove nodes …

  Nov 9, 2015
• Unscored —
  CVE-2015-8096

  Integer overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to execute arbitrary code via…

  Nov 9, 2015
• Unscored —
  CVE-2015-8041

  Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote a…

  wpa wpa Debian Ubuntu
  Nov 9, 2015
• Unscored —
  CVE-2015-5218

  Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of serv…

  util-linux Debian
  Nov 9, 2015
• Unscored —
  CVE-2014-8873

  A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1~deb8u1 includes a MIME type registration that is added to …

  Nov 9, 2015
• Unscored —
  CVE-2015-2213

  SQL injection vulnerability in the wp_untrash_post_comments function in wp-includes/post.php in WordPress before 4.2.4 …

  wordpress Debian
  Nov 9, 2015
• Unscored —
  CVE-2015-5732

  Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in wp-includes/default-wi…

  wordpress Debian
  Nov 9, 2015
• Unscored —
  CVE-2015-5734

  Cross-site scripting (XSS) vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPre…

  wordpress Debian
  Nov 9, 2015
• Unscored —
  CVE-2015-5733

  Cross-site scripting (XSS) vulnerability in the refreshAdvancedAccessibilityOfItem function in wp-admin/js/nav-menu.js …

  wordpress Debian
  Nov 9, 2015
• Unscored —
  CVE-2015-5731

  Cross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4 allows remote attackers …

  wordpress Debian
  Nov 9, 2015
• Unscored —
  CVE-2015-5730

  The sanitize_widget_instance function in wp-includes/class-wp-customize-widgets.php in WordPress before 4.2.4 does not …

  wordpress Debian
  Nov 9, 2015
• Unscored —
  CVE-2015-2697

  The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote auth…

  krb5 krb5 Debian Ubuntu
  Nov 9, 2015
• Unscored —
  CVE-2015-2695

  lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, whi…

  krb5 krb5 Debian Ubuntu
  Nov 9, 2015
• Unscored —
  CVE-2015-2696

  lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allo…

  krb5 krb5 Debian Ubuntu
  Nov 9, 2015