|
271231
|
6.1 |
MEDIUM
Network
|
apache
|
solr
|
Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 allows remote attackers to inject arbitrary web script or HT…
|
CWE-79
Cross-site Scripting
|
CVE-2015-8797
|
2024-11-21 11:39 |
2016-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271232
|
6.1 |
MEDIUM
Network
|
apache
|
solr
|
Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a craf…
|
CWE-79
Cross-site Scripting
|
CVE-2015-8796
|
2024-11-21 11:39 |
2016-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271233
|
6.1 |
MEDIUM
Network
|
apache
|
solr
|
Multiple cross-site scripting (XSS) vulnerabilities in the Admin UI in Apache Solr before 5.1 allow remote attackers to inject arbitrary web script or HTML via crafted fields that are mishandled duri…
|
CWE-79
Cross-site Scripting
|
CVE-2015-8795
|
2024-11-21 11:39 |
2016-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271234
|
9.8 |
CRITICAL
Network
|
linux
|
linux_kernel
|
The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or…
|
CWE-476
NULL Pointer Dereference
|
CVE-2015-8787
|
2024-11-21 11:39 |
2016-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271235
|
6.2 |
MEDIUM
Local
|
linux suse
|
linux_kernel linux_enterprise_real_time_extension
|
The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers a zero lengt…
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2015-8785
|
2024-11-21 11:39 |
2016-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271236
|
6.2 |
MEDIUM
Local
|
linux debian canonical
|
linux_kernel debian_linux ubuntu_linux
|
net/sctp/sm_sideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a socket, which allows local users to cause a denial of service (deadlock) via a c…
|
CWE-362
Race Condition
|
CVE-2015-8767
|
2024-11-21 11:39 |
2016-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271237
|
7.0 |
HIGH
Local
|
linux
|
linux_kernel
|
kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter th…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-8709
|
2024-11-21 11:39 |
2016-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271238
|
5.3 |
MEDIUM
Network
|
radicale
|
radicale
|
Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user name, as demonstrated by ".*".
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-8748
|
2024-11-21 11:39 |
2016-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271239
|
10.0 |
CRITICAL
Network
|
radicale
|
radicale
|
The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name.
|
CWE-20
Improper Input Validation
|
CVE-2015-8747
|
2024-11-21 11:39 |
2016-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271240
|
6.5 |
MEDIUM
Network
|
libtiff debian
|
libtiff debian_linux
|
tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image.
|
CWE-125
Out-of-bounds Read
|
CVE-2015-8783
|
2024-11-21 11:39 |
2016-02-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|