Archive
8 February 2016
Vulnerabilities first published on this day (UTC), newest first.
27 results · Feed
-
Unscored —
Apache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain sensitive password information…
-
Unscored —
Apache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM virtual machines, which allo…
-
Unscored —
An unspecified resource in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 allows remote attackers to execute ar…
-
Unscored —
Multiple unspecified services in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 do not require authentication, …
-
Unscored —
The Ignite Realtime Smack XMPP API, as used in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0, allows remote co…
-
Unscored —
The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (inval…
-
Unscored —
Dell SecureWorks app before 2.1 for iOS does not validate SSL certificates, which allows man-in-the-middle attackers to…
-
Unscored —
Cross-site scripting (XSS) vulnerability in an unspecified portal authentication page in Huawei Agile Controller-Campus…
-
Unscored —
The dwarf_read_cie_fde_prefix function in dwarf_frame2.c in libdwarf 20151114 allows attackers to cause a denial of ser…
-
Medium 5.5
Django Access Restrictions Bypass
Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option when editing objects and leveraging the "change" permission.
-
Unscored —
The MQXR service in WMQ Telemetry in IBM WebSphere MQ 7.1 before 7.1.0.7, 7.5 through 7.5.0.5, and 8.0 before 8.0.0.4 u…
-
Unscored —
Unspecified vulnerability in the Java SE component in Oracle Java SE 6u111, 7u95, 8u71, and 8u72, when running on Windo…
-
Unscored —
Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service (STOP mode transit…
-
Unscored —
OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it easier for remote attackers…
-
Unscored —
Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via pac…
-
Unscored —CVE-2015-7566 Public exploit
The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate …
-
Unscored —
The keyctl_read_key function in security/keys/keyctl.c in the Linux kernel before 4.3.4 does not properly use a semapho…
-
Unscored —
arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which…
-
Unscored —
The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (B…
-
Unscored —
The sco_sock_bind function in net/bluetooth/sco.c in the Linux kernel before 4.3.4 does not verify an address length, w…
-
Unscored —
The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denia…
-
Unscored —
net/sctp/sm_sideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a …
-
Unscored —
The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel before 4.4 allows remote attac…
-
Unscored —
kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain pri…
-
Unscored —
The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory…
-
Unscored —
Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4.1 allows local users t…
-
Unscored —CVE-2016-0728 Public exploit
The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object re…