17 November 2015

21 results · Feed

• Unscored —
  CVE-2015-0272

  GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU v…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 17, 2015
• Unscored —
  CVE-2015-7995

  The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which …

  libxslt libxslt Debian Ubuntu
  Nov 17, 2015
• Unscored —
  CVE-2015-7996

  The Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, …

  Nov 17, 2015
• Unscored —
  CVE-2015-7998

  The administration UI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build…

  Nov 17, 2015
• Unscored —
  CVE-2015-7812

  The hypercall_create_continuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows local guest users to …

  xen xen Debian Ubuntu
  Nov 17, 2015
• Unscored —
  CVE-2015-7805 Public exploit EPSS 14%

  Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex va…

  libsndfile libsndfile Debian Ubuntu
  Nov 17, 2015
• Unscored —
  CVE-2015-7997

  Multiple cross-site scripting (XSS) vulnerabilities in the Nitro API in Citrix NetScaler Application Delivery Controlle…

  Nov 17, 2015
• Unscored —
  CVE-2015-8222

  The lxd-unix.socket systemd unit file in the Ubuntu lxd package before 0.20-0ubuntu4.1 uses world-readable permissions …

  Nov 17, 2015
• Unscored —
  CVE-2015-8221

  Integer overflow in Google Picasa before 3.9.140 Build 259 allows remote attackers to execute arbitrary code via the CA…

  Nov 17, 2015
• Unscored —
  CVE-2015-8233

  Cross-site scripting (XSS) vulnerability in the MAYO theme 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.6 for Drupal…

  Nov 17, 2015
• Unscored —
  CVE-2015-8220

  Stack-based buffer overflow in the URI handler in DWRCC.exe in SolarWinds DameWare Mini Remote Control before 12.0 HotF…

  Nov 17, 2015
• Unscored —
  CVE-2015-8232

  The UC Profile module 6.x-1.x before 6.x-1.3 for Drupal does not properly check access to profiles in certain circumsta…

  Nov 17, 2015
• Unscored —
  CVE-2015-5311 EPSS 67%

  PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (asser…

  pdns Debian
  Nov 17, 2015
• Unscored —
  CVE-2015-5276

  The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handl…

  gcc-arm-none-eabi gcc-4.7 gcc-4.7-armel-cross gcc-arm-linux-androideabi Ubuntu
  Nov 17, 2015
• Unscored —
  CVE-2015-5602 Public exploit

  sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is …

  sudo sudo Debian Ubuntu
  Nov 17, 2015
• Medium —
  CVE-2015-5217

  Ipsilon denial of service via a duplicate SP name

  providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service Provider (SP) owner, which allows remote authenticated users to cause a denial of service via a duplic…

  ipsilon PyPI
  Nov 17, 2015
• Medium —
  CVE-2015-5301

  Ipsilon denial of service by deleting a SAML2 Service Provider (SP)

  providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated users to cause a denial of service by deleting a SAML2 Service Provider …

  ipsilon PyPI
  Nov 17, 2015
• Unscored —
  CVE-2015-8219

  The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-va…

  ffmpeg Debian
  Nov 17, 2015
• Unscored —
  CVE-2015-8218

  The decode_uncompressed function in libavcodec/faxcompr.c in FFmpeg before 2.8.2 does not validate uncompressed runs, w…

  ffmpeg Debian
  Nov 17, 2015
• Unscored —
  CVE-2015-8216

  The ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain width and height check…

  ffmpeg Debian
  Nov 17, 2015
• Unscored —
  CVE-2015-8217

  The ff_hevc_parse_sps function in libavcodec/hevc_ps.c in FFmpeg before 2.8.2 does not validate the Chroma Format Indic…

  ffmpeg Debian
  Nov 17, 2015