Archive
December 2015
Vulnerabilities first published in this month (UTC), newest first.
565 results · Feed
-
Unscored —
The vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in the Linux kernel through 4.3.3 does not init…
-
Unscored —
fs/ext4/namei.c in the Linux kernel before 3.7 allows physically proximate attackers to cause a denial of service (syst…
-
Unscored —
The dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the Linux kernel through 4.3.3 does not initialize …
-
Unscored —CVE-2015-8543 Public exploit
The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not valida…
-
Unscored —
fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obt…
-
Unscored —
The (1) pptp_bind and (2) pptp_connect functions in drivers/net/ppp/pptp.c in the Linux kernel through 4.3.3 do not ver…
-
Unscored —
The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr o…
-
Unscored —
Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intend…
-
Unscored —
Tails before 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, whic…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Let's PHP! p++BBS before 4.10 allows remote attackers to inject arbitrary w…
-
Unscored —
The login page in Epiphany Cardio Server 3.3, 4.0, and 4.1 mishandles authentication requests, which allows remote atta…
-
Unscored —
SQL injection vulnerability in the login page in Epiphany Cardio Server 3.3 allows remote attackers to execute arbitrar…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to inje…
-
Unscored —
Multiple SQL injection vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to execute arbitrary…
-
Unscored —
The Frontel protocol before 3 on RSI Video Technologies Videofied devices sends a cleartext serial number, which allows…
-
Unscored —
NETGEAR WNR1000v3 devices with firmware 1.0.2.68 use the same source port number for every DNS query, which makes it ea…
-
Unscored —
The Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity protection, which make…
-
Unscored —
The Frontel protocol before 3 on RSI Video Technologies Videofied devices sets up AES encryption but sends all traffic …
-
Unscored —
Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in …
-
Unscored —
Cisco Jabber 10.6.x, 11.0.x, and 11.1.x on Windows allows man-in-the-middle attackers to conduct STARTTLS downgrade att…
-
Unscored —
libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1…
-
Unscored —
The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows rem…
-
Unscored —CVE-2015-8664 Public exploit
Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before …
-
Unscored —
The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to discover log-file pat…
-
Unscored —
Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to obtain sensitive information by sniffing…
-
Unscored —
Adcon Telemetry A840 Telemetry Gateway Base Station has hardcoded credentials, which allows remote attackers to obtain …
-
Unscored —
The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which …
-
Unscored —
The h264_slice_header_init function in libavcodec/h264_slice.c in FFmpeg before 2.8.3 does not validate the relationshi…
-
Unscored —
The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposi…
-
Unscored —
The ff_get_buffer function in libavcodec/utils.c in FFmpeg before 2.8.4 preserves width and height values after a failu…
-
Unscored —
The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Pas…
-
Unscored —
eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote …
-
Unscored —
eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to…
-
Unscored —
eWON devices with firmware before 10.1s0 do not trigger the discarding of browser session data in response to a log-off…
-
Unscored —
eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtai…
-
Unscored —
Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject…
-
Unscored —
Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD…
-
Unscored —
Untrusted search path vulnerability in Open Automation OPC Systems.NET 8.00.0023 and earlier allows local users to gain…
-
Unscored —
Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors.