17 December 2015

15 results · Feed

• Unscored —
  CVE-2015-7518

  Multiple cross-site scripting (XSS) vulnerabilities in information popups in Foreman before 1.10.0 allow remote attacke…

  Dec 17, 2015
• Unscored —
  CVE-2015-7527

  lib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to execute arbitrary code via s…

  Dec 17, 2015
• Unscored —
  CVE-2015-4027 Public exploit

  The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner (WVS) before 10 build 20151125 allows local users …

  Dec 17, 2015
• Unscored —
  CVE-2015-8327 EPSS 11%

  Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filter…

  cups-filters cups-filters foomatic-filters foomatic-filters Debian Ubuntu
  Dec 17, 2015
• Unscored —
  CVE-2015-8601

  The Chat Room module 7.x-2.x before 7.x-2.2 for Drupal does not properly check permissions when setting up a websocket …

  Dec 17, 2015
• Unscored —
  CVE-2015-8339

  The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly hand back pages to a domai…

  xen xen Debian Ubuntu
  Dec 17, 2015
• Unscored —
  CVE-2015-8368 Public exploit

  ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the …

  Dec 17, 2015
• Unscored —
  CVE-2015-8600

  The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication and obtain sensitiv…

  Dec 17, 2015
• Unscored —
  CVE-2015-8369

  SQL injection vulnerability in include/top_graph_header.php in Cacti 0.8.8f and earlier allows remote attackers to exec…

  cacti cacti Debian Ubuntu
  Dec 17, 2015
• Unscored —
  CVE-2015-8340

  The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might…

  xen xen Debian Ubuntu
  Dec 17, 2015
• Unscored —
  CVE-2015-8338

  Xen 4.6.x and earlier does not properly enforce limits on page order inputs for the (1) XENMEM_increase_reservation, (2…

  xen xen Debian Ubuntu
  Dec 17, 2015
• Unscored —
  CVE-2015-8602

  The Token Insert Entity module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permissions, which allows remo…

  Dec 17, 2015
• Unscored —
  CVE-2015-8341

  The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and …

  xen xen Debian Ubuntu
  Dec 17, 2015
• Unscored —
  CVE-2015-5204

  CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android befo…

  Dec 17, 2015
• Unscored —
  CVE-2015-5277

  The get_contents function in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc…

  glibc eglibc Debian Ubuntu
  Dec 17, 2015