Archive
December 2015
Vulnerabilities first published in this month (UTC), newest first.
74 results · Clear filters · Feed
-
Unscored —
The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote atta…
-
Unscored —CVE-2015-5996 Public exploit
Cross-site request forgery (CSRF) vulnerability on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 all…
-
Unscored —
Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attack…
-
Unscored —
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, whi…
-
Unscored —
Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE…
-
Unscored —CVE-2015-7252 Public exploit
Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k…
-
Unscored —CVE-2015-7249 Public exploit
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to bypass intended access …
-
Unscored —CVE-2015-7248 Public exploit
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote attackers to discover usernames and password h…
-
Unscored —CVE-2015-8703 Public exploit
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote auth…
-
Unscored —
Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and…
-
Unscored —
Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and…
-
Unscored —CVE-2015-8543 Public exploit
The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not valida…
-
Unscored —
The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr o…
-
Unscored —CVE-2015-8664 Public exploit
Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before …
-
Critical 9.8
Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0…
KEV Oct 2, 2025 -
Unscored —CVE-2015-4027 Public exploit
The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner (WVS) before 10 build 20151125 allows local users …
-
Unscored —CVE-2015-8368 Public exploit
ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the …
-
Unscored —
Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arb…
-
Unscored —CVE-2015-8358 Public exploit
Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows remote administrators …
-
Unscored —CVE-2015-8357 Public exploit
Directory traversal vulnerability in the bitrix.xscan module before 1.0.4 for Bitrix allows remote authenticated users …
-
High —CVE-2015-8566 Public exploit
Joomla! Framework Remote Code Injection Vulnerability
The Session package 1.x before 1.3.1 for Joomla! Framework allows remote attackers to execute arbitrary code via unspecified session values.
-
Unscored —CVE-2015-7214 Public exploit
Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy vi…
-
Critical 9.8
Insecure Deserialization in Apache Commons Collection
Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switchin…
-
Unscored —CVE-2015-6402 Public exploit
Cross-site scripting (XSS) vulnerability in the management interface on Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11,…
-
Unscored —CVE-2015-6401 Public exploit
Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allow remote attackers to bypass an intended authentication r…
-
Unscored —CVE-2015-7047 Public exploit
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to …
-
Unscored —CVE-2015-7112 Public exploit
The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attack…
-
Unscored —CVE-2015-7078 Public exploit
Use-after-free vulnerability in Hypervisor in Apple OS X before 10.11.2 allows local users to gain privileges via vecto…
-
Unscored —CVE-2015-7110 Public exploit
The Disk Images component in Apple OS X before 10.11.2 and tvOS before 9.1 allows local users to gain privileges or cau…
-
Unscored —CVE-2015-7106 Public exploit
The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denia…
-
Unscored —CVE-2015-7068 Public exploit
IOKit SCSI in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to ex…
-
Unscored —CVE-2015-7083 Public exploit
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to …
-
Unscored —
Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows re…
-
Unscored —CVE-2015-7077 Public exploit
The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denia…
-
Unscored —CVE-2015-7084 Public exploit
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to …
-
Unscored —CVE-2015-7108 Public exploit
The Bluetooth HCI interface in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of ser…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and…