|
272151
|
- |
|
qemu redhat xen
|
qemu openstack enterprise_linux enterprise_virtualization xen
|
The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arb…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-3456
|
2024-11-21 11:29 |
2015-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272152
|
- |
|
openstack oracle
|
keystone solaris
|
OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which allows remote authenticated users to obtain passwords and othe…
|
CWE-200
Information Exposure
|
CVE-2015-3646
|
2024-11-21 11:29 |
2015-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272153
|
- |
|
opensuse fedoraproject gnu
|
opensuse fedora libtasn1
|
The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-3622
|
2024-11-21 11:29 |
2015-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272154
|
- |
|
fortinet
|
fortimanager_firmware fortianalyzer_firmware
|
Cross-site scripting (XSS) vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through 5.0.10 and 5.2.0 th…
|
CWE-79
Cross-site Scripting
|
CVE-2015-3620
|
2024-11-21 11:29 |
2015-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272155
|
- |
|
xml-libxml_project canonical debian fedoraproject opensuse
|
xml-libxml ubuntu_linux debian_linux fedora opensuse
|
The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to t…
|
CWE-611
XXE
|
CVE-2015-3451
|
2024-11-21 11:29 |
2015-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272156
|
- |
|
thekelleys oracle
|
dnsmasq solaris
|
The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of se…
|
CWE-19
Data Processing Errors
|
CVE-2015-3294
|
2024-11-21 11:29 |
2015-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272157
|
- |
|
siemens
|
homecontrol_for_room_automation
|
The Siemens HomeControl for Room Automation application before 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obt…
|
CWE-310
Cryptographic Issues
|
CVE-2015-3610
|
2024-11-21 11:29 |
2015-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272158
|
- |
|
foxitsoftware
|
enterprise_reader foxit_reader phantompdf
|
Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via vectors related to digital signatures.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-3633
|
2024-11-21 11:29 |
2015-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272159
|
- |
|
foxitsoftware
|
enterprise_reader phantompdf foxit_reader
|
Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted GIF in a PDF file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-3632
|
2024-11-21 11:29 |
2015-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272160
|
- |
|
alienvault
|
unified_security_management
|
The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote attackers to execute arbitrary Python code via a crafted plugin configuration file (.cfg).
|
CWE-94
Code Injection
|
CVE-2015-3446
|
2024-11-21 11:29 |
2015-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|