7 December 2015

17 results · Feed

• Unscored —
  CVE-2015-7348

  Cross-site scripting (XSS) vulnerability in zTree 3.5.19.1 and possibly earlier allows remote attackers to inject arbit…

  Dec 7, 2015
• Unscored —
  CVE-2015-1344

  The do_write_pids function in lxcfs.c in LXCFS before 0.12 does not properly check permissions, which allows local user…

  Dec 7, 2015
• Unscored —
  CVE-2015-1342

  LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by (1) …

  Dec 7, 2015
• Unscored —
  CVE-2015-4334

  The default configuration of SGOS in Blue Coat ProxySG before 6.2.16.5, 6.5 before 6.5.7.1, and 6.6 before 6.6.2.1 forw…

  Dec 7, 2015
• Unscored —
  CVE-2015-3276

  The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-key…

  openldap openldap Debian Azure Linux
  Dec 7, 2015
• Unscored —
  CVE-2015-3628 Public exploit EPSS 69%

  The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0 before 11.5.3 HF2 and 11.6…

  Dec 7, 2015
• Unscored —
  CVE-2015-8482

  Blue Coat Unified Agent before 4.6.2 does not prevent modification of its configuration files when running in local enf…

  Dec 7, 2015
• Unscored —
  CVE-2015-8131

  Cross-site request forgery (CSRF) vulnerability in Elasticsearch Kibana before 4.1.3 and 4.2.x before 4.2.1 allows remo…

  Dec 7, 2015
• High —
  CVE-2015-8125

  Symfony Vulnerable to Timing Attack

  Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers to have unspecified impact via a timing attack involving the (1) Symfony/Component/Security/Http/RememberMe/PersistentTokenBasedRememberMeServices or (2) Sym…

  symfony/symfony symfony symfony/security-http symfony/security Debian Packagist
  Dec 7, 2015
• Low 2.8
  CVE-2015-8213

  Django settings leak in date template filter

  The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as de…

  python-django django python-django Debian Ubuntu PyPI
  Dec 7, 2015
• Low 3.1
  CVE-2015-8124

  Symfony Session Fixation Vulnerability

  Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 allows remote attackers to hijack web sessions via a session id.

  symfony/symfony symfony symfony/security-http symfony/security Debian Packagist
  Dec 7, 2015
• Unscored —
  CVE-2015-8084

  Huawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with software before V300R001C10SPC600, when "D…

  Dec 7, 2015
• Unscored —
  CVE-2015-5309

  Integer overflow in the terminal emulator in PuTTY before 0.66 allows remote attackers to cause a denial of service (me…

  putty Debian
  Dec 7, 2015
• Unscored —
  CVE-2015-5006

  IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20,…

  Dec 7, 2015
• High 7.8
  CVE-2015-5287 Exploited Public exploit

  The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain per…

  Dec 7, 2015

  KEV Aug 26, 2026
• Unscored —
  CVE-2015-5273 Public exploit

  The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows…

  Dec 7, 2015
• Unscored —
  CVE-2015-5302

  libreport 2.0.7 before 2.6.3 only saves changes to the first file when editing a crash report, which allows remote atta…

  Dec 7, 2015