December 2015

565 results · Feed

• Unscored —
  CVE-2015-6414

  Cisco TelePresence Video Communication Server (VCS) X8.6 uses the same encryption key across different customers' insta…

  Dec 13, 2015
• Unscored —
  CVE-2015-6400

  Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 10.5(1a) allow remote attackers to inj…

  Dec 13, 2015
• Unscored —
  CVE-2015-6418

  The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2.07 does not have s…

  Dec 13, 2015
• Unscored —
  CVE-2015-6406

  Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.5(1.10000.5) allows remote authenti…

  Dec 13, 2015
• Unscored —
  CVE-2015-6389

  Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain…

  Dec 13, 2015
• Unscored —
  CVE-2015-6415

  Cisco Unified Computing System (UCS) 2.2(3f)A on Fabric Interconnect 6200 devices allows remote attackers to cause a de…

  Dec 12, 2015
• Unscored —
  CVE-2015-6419

  Cisco FireSIGHT Management Center with software 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote authenticated user…

  Dec 12, 2015
• Unscored —
  CVE-2015-6408

  Cross-site request forgery (CSRF) vulnerability in Cisco Unity Connection 11.5(0.98) allows remote attackers to hijack …

  Dec 12, 2015
• Unscored —
  CVE-2015-6395

  Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows…

  Dec 12, 2015
• Unscored —
  CVE-2015-6417

  Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and earlier does not always use RBAC for backend dat…

  Dec 12, 2015
• Unscored —
  CVE-2015-7079

  dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, which allows attackers to execute arbit…

  Dec 11, 2015
• Unscored —
  CVE-2015-7049

  otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service (memory corruption)…

  Dec 11, 2015
• Unscored —
  CVE-2015-7097

  WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary c…

  qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  Dec 11, 2015
• Unscored —
  CVE-2015-7099

  WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary c…

  qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  Dec 11, 2015
• Unscored —
  CVE-2015-7047 Public exploit

  The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to …

  Dec 11, 2015
• Unscored —
  CVE-2015-7112 Public exploit

  The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attack…

  Dec 11, 2015
• Unscored —
  CVE-2015-7044

  The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, which allows attackers to…

  Dec 11, 2015
• Unscored —
  CVE-2015-7101

  WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary c…

  qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  Dec 11, 2015
• Unscored —
  CVE-2015-7042

  The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to ca…

  Dec 11, 2015
• Unscored —
  CVE-2015-7050

  WebKit in Apple iOS before 9.2 and Safari before 9.0.2 misparses content extensions, which allows remote attackers to o…

  qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  Dec 11, 2015
• Unscored —
  CVE-2015-7052

  kext tools in Apple OS X before 10.11.2 mishandles kernel-extension loading, which allows local users to gain privilege…

  Dec 11, 2015
• Unscored —
  CVE-2015-7109

  IOAcceleratorFamily in Apple OS X before 10.11.2 and tvOS before 9.1 allows attackers to execute arbitrary code in a pr…

  Dec 11, 2015
• Unscored —
  CVE-2015-7071

  The File Bookmark component in Apple OS X before 10.11.2 allows attackers to bypass a sandbox protection mechanism for …

  Dec 11, 2015
• Unscored —
  CVE-2015-7038

  Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows re…

  Dec 11, 2015
• Unscored —
  CVE-2015-7037

  Directory traversal vulnerability in Mobile Backup in Photos in Apple iOS before 9.2 allows attackers to read arbitrary…

  Dec 11, 2015
• Unscored —
  CVE-2015-7048

  WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary c…

  qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  Dec 11, 2015
• Unscored —
  CVE-2015-7094

  CFNetwork HTTPProtocol in Apple iOS before 9.2 and OS X before 10.11.2 allows man-in-the-middle attackers to bypass the…

  Dec 11, 2015
• Unscored —
  CVE-2015-7060

  The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to exec…

  Dec 11, 2015
• Unscored —
  CVE-2015-7074

  CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute…

  Dec 11, 2015
• Unscored —
  CVE-2015-7078 Public exploit

  Use-after-free vulnerability in Hypervisor in Apple OS X before 10.11.2 allows local users to gain privileges via vecto…

  Dec 11, 2015
• Unscored —
  CVE-2015-7001

  AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links,…

  Dec 11, 2015
• Unscored —
  CVE-2015-7045

  Keychain Access in Apple OS X before 10.11.2 and tvOS before 9.1 improperly interacts with Keychain Agent, which allows…

  Dec 11, 2015
• Unscored —
  CVE-2015-7046

  The Sandbox feature in xnu in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does n…

  Dec 11, 2015
• Unscored —
  CVE-2015-7058

  Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 improperly validate keychain item ACLs, which allows att…

  Dec 11, 2015
• Unscored —
  CVE-2015-7069

  Mobile Replayer in GPUTools Framework in Apple iOS before 9.2 allows attackers to execute arbitrary code in a privilege…

  Dec 11, 2015
• Unscored —
  CVE-2015-7102

  WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary c…

  qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  Dec 11, 2015
• Unscored —
  CVE-2015-7104

  WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a de…

  qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  Dec 11, 2015
• Unscored —
  CVE-2015-7056

  IDE SCM in Apple Xcode before 7.2 does not recognize .gitignore files, which allows remote attackers to obtain sensitiv…

  Dec 11, 2015
• Unscored —
  CVE-2015-7070

  Mobile Replayer in GPUTools Framework in Apple iOS before 9.2 allows attackers to execute arbitrary code in a privilege…

  Dec 11, 2015
• Unscored —
  CVE-2015-7057

  otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service (memory corruption)…

  Dec 11, 2015