|
271031
|
9.8 |
CRITICAL
Network
|
seagate lacie
|
wireless_mobile_storage wireless_plus_mobile_storage lac9000436u_firmware lac9000464u_firmware goflex_sattelite
|
Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 have a default password of root for the root acc…
|
CWE-255
Credentials Management
|
CVE-2015-2874
|
2024-11-21 11:28 |
2015-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271032
|
5.3 |
MEDIUM
Network
|
samba
|
samba
|
The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero va…
|
CWE-189 CWE-399
Numeric Errors Resource Management Errors
|
CVE-2015-3223
|
2024-11-21 11:28 |
2015-12-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271033
|
7.5 |
HIGH
Network
|
openssl canonical debian nodejs
|
openssl ubuntu_linux debian_linux node.js
|
crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.…
|
CWE-476
NULL Pointer Dereference
|
CVE-2015-3194
|
2024-11-21 11:28 |
2015-12-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271034
|
- |
|
hp openssl oracle redhat fedoraproject canonical debian
|
icewall_sso icewall_sso_agent_option openssl vm_virtualbox enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_server_tus fedora…
|
ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which a…
|
CWE-362
Race Condition
|
CVE-2015-3196
|
2024-11-21 11:28 |
2015-12-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271035
|
5.3 |
MEDIUM
Network
|
apple oracle openssl redhat canonical debian opensuse suse fedoraproject
|
mac_os_x sun_ray_software transportation_management life_sciences_data_hub api_gateway exalogic_infrastructure solaris communications_webrtc_session_controller vm_virtualbox
|
The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_…
|
CWE-200
Information Exposure
|
CVE-2015-3195
|
2024-11-21 11:28 |
2015-12-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271036
|
7.5 |
HIGH
Network
|
openssl nodejs canonical
|
openssl node.js ubuntu_linux
|
The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and pro…
|
CWE-200
Information Exposure
|
CVE-2015-3193
|
2024-11-21 11:28 |
2015-12-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271037
|
- |
|
networkmanager_project
|
networkmanager
|
The receive_ra function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in NetworkManager 1.x allows remote attackers to reconfigure a hop-limit sett…
|
CWE-20
Improper Input Validation
|
CVE-2015-2924
|
2024-11-21 11:28 |
2015-11-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271038
|
- |
|
linux debian canonical
|
linux_kernel debian_linux ubuntu_linux
|
The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protect…
|
NVD-CWE-Other
|
CVE-2015-2925
|
2024-11-21 11:28 |
2015-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271039
|
- |
|
libreswan
|
libreswan
|
The pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS, allows remote attackers to cause a denial of service (assertion failure and daemon restart) via a zero D…
|
CWE-189
Numeric Errors
|
CVE-2015-3240
|
2024-11-21 11:28 |
2015-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271040
|
- |
|
hp
|
arcsight_smartconnectors
|
The CWSAPI SOAP service in HP ArcSight SmartConnectors before 7.1.6 has a hardcoded password, which makes it easier for remote attackers to obtain administrative access by leveraging knowledge of thi…
|
NVD-CWE-Other
|
CVE-2015-2903
|
2024-11-21 11:28 |
2015-11-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|