|
276081
|
7.5 |
HIGH
Network
|
fedoraproject eclipse
|
fedora jetty
|
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.
|
CWE-200
Information Exposure
|
CVE-2015-2080
|
2024-11-21 11:26 |
2016-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276082
|
9.1 |
CRITICAL
Network
|
apache
|
derby
|
XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary fil…
|
CWE-399 CWE-611
Resource Management Errors XXE
|
CVE-2015-1832
|
2024-11-21 11:26 |
2016-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276083
|
7.5 |
HIGH
Network
|
ibm
|
tivoli_directory_server security_directory_server
|
Directory traversal vulnerability in the Web Administration tool in IBM Tivoli Directory Server (ITDS) before 6.1.0.74-ISS-ISDS-IF0074, 6.2.x before 6.2.0.50-ISS-ISDS-IF0050, and 6.3.x before 6.3.0.4…
|
CWE-200
Information Exposure
|
CVE-2015-1977
|
2024-11-21 11:26 |
2016-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276084
|
6.2 |
MEDIUM
Local
|
apache
|
hadoop
|
Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials file on disk when the Intermediate data encryption feature is …
|
CWE-200
Information Exposure
|
CVE-2015-1776
|
2024-11-21 11:26 |
2016-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276085
|
4.4 |
MEDIUM
Network
|
ibm
|
qradar_security_information_and_event_manager
|
IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.6 includes SSH private keys during backup operations, which allows remote authenticated administrators to obtain sensitive …
|
CWE-284
Improper Access Control
|
CVE-2015-2008
|
2024-11-21 11:26 |
2016-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276086
|
5.3 |
MEDIUM
Network
|
ibm
|
qradar_security_information_and_event_manager
|
IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.5 Patch 6 does not properly expire sessions, which allows remote attackers to obtain sensitive information by leveraging an…
|
CWE-200
Information Exposure
|
CVE-2015-2005
|
2024-11-21 11:26 |
2016-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276087
|
4.0 |
MEDIUM
Local
|
ibm
|
websphere_mq
|
The MQXR service in WMQ Telemetry in IBM WebSphere MQ 7.1 before 7.1.0.7, 7.5 through 7.5.0.5, and 8.0 before 8.0.0.4 uses world-readable permissions for a cleartext file containing the SSL keystore …
|
CWE-255 CWE-200
Credentials Management Information Exposure
|
CVE-2015-2012
|
2024-11-21 11:26 |
2016-02-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276088
|
8.6 |
HIGH
Network
|
qemu canonical debian fedoraproject redhat oracle
|
qemu ubuntu_linux debian_linux fedora enterprise_linux_workstation enterprise_linux_server enterprise_linux_eus enterprise_linux_server_tus enterprise_linux_server_aus virt…
|
The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2015-1779
|
2024-11-21 11:26 |
2016-01-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276089
|
5.0 |
MEDIUM
Network
|
ibm
|
qradar_security_information_and_event_manager
|
Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.5 Patch 6 allows remote authenticated users to read arbitrary files via a crafted URL.
|
CWE-22
Path Traversal
|
CVE-2015-2007
|
2024-11-21 11:26 |
2016-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276090
|
5.6 |
MEDIUM
Local
|
ibm
|
mq_appliance_m2000
|
The queue manager on IBM MQ M2000 appliances before 8.0.0.4 allows local users to bypass an intended password requirement and read private keys by leveraging the existence of a stash file.
|
CWE-284
Improper Access Control
|
CVE-2015-1985
|
2024-11-21 11:26 |
2016-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|