|
270621
|
7.5 |
HIGH
Network
|
php
|
php
|
An issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/mod_php or php-fpm with OpCache enabled. With 5.x after 5.6.28 or 7.x after 7.0.13, the issue is resolved in a n…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-8994
|
2024-11-21 11:39 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270622
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
The ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted VICAR file.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2015-8903
|
2024-11-21 11:39 |
2017-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270623
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted PDB file.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2015-8902
|
2024-11-21 11:39 |
2017-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270624
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted MIFF file.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2015-8901
|
2024-11-21 11:39 |
2017-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270625
|
5.5 |
MEDIUM
Local
|
imagemagick
|
imagemagick
|
The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service (infinite loop) via a crafted HDR file.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2015-8900
|
2024-11-21 11:39 |
2017-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270626
|
7.5 |
HIGH
Network
|
debian
dicom
|
debian_linux
dcmtk
|
Stack-based buffer overflow in the parsePresentationContext function in storescp in DICOM dcmtk-3.6.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a long …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-8979
|
2024-11-21 11:39 |
2017-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270627
|
9.8 |
CRITICAL
Network
|
gosa_project
|
gosa_plugin
|
The generate_smb_nt_hash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted password.
|
CWE-94
Code Injection
|
CVE-2015-8771
|
2024-11-21 11:39 |
2017-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270628
|
9.8 |
CRITICAL
Network
|
click_project
canonical
|
click
ubuntu_linux
|
click/install.py in click does not require files in package filesystem tarballs to start with ./ (dot slash), which allows remote attackers to install an alternate security policy and gain privileges…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-8768
|
2024-11-21 11:39 |
2017-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270629
|
6.5 |
MEDIUM
Network
|
libdwarf_project
|
libdwarf
|
libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debug_abbrev section marked NOBITS in an ELF file.
|
CWE-476
NULL Pointer Dereference
|
CVE-2015-8750
|
2024-11-21 11:39 |
2017-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270630
|
6.1 |
MEDIUM
Network
|
squidguard
|
squidguard
|
Cross-site scripting (XSS) vulnerability in squidGuard.cgi in squidGuard before 1.5 allows remote attackers to inject arbitrary web script or HTML via a blocked site link.
|
CWE-79
Cross-site Scripting
|
CVE-2015-8936
|
2024-11-21 11:39 |
2017-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
