|
271391
|
6.1 |
MEDIUM
Network
|
openjsf
|
serve-index
|
Cross-site scripting (XSS) vulnerability in the serve-index package before 1.6.3 for Node.js allows remote attackers to inject arbitrary web script or HTML via a crafted file or directory name.
|
CWE-79
Cross-site Scripting
|
CVE-2015-8856
|
2024-11-21 11:39 |
2017-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271392
|
7.5 |
HIGH
Network
|
nodejs
|
node.js
|
The semver package before 4.3.2 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a "regular expression denial of service (ReDoS)."
|
CWE-399
Resource Management Errors
|
CVE-2015-8855
|
2024-11-21 11:39 |
2017-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271393
|
7.5 |
HIGH
Network
|
marked_project fedoraproject
|
marked fedora
|
The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service (CPU consumption) via unspecified vectors that trigger a "catastrophic backtracking issue for the em inline r…
|
CWE-1333
Inefficient Regular Expression Complexity
|
CVE-2015-8854
|
2024-11-21 11:39 |
2017-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271394
|
5.5 |
MEDIUM
Local
|
qemu
|
qemu
|
The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service …
|
NVD-CWE-noinfo
|
CVE-2015-8818
|
2024-11-21 11:39 |
2016-12-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271395
|
5.5 |
MEDIUM
Local
|
qemu
|
qemu
|
QEMU (aka Quick Emulator) built to use 'address_space_translate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pci_dma_read/write cal…
|
CWE-125 CWE-787
Out-of-bounds Read Out-of-bounds Write
|
CVE-2015-8817
|
2024-11-21 11:39 |
2016-12-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271396
|
5.5 |
MEDIUM
Local
|
qemu debian
|
qemu debian_linux
|
QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It could occur while reading Interrupt Mask Registers (IMR). A privileged (CAP_SYS…
|
CWE-617
Reachable Assertion
|
CVE-2015-8745
|
2024-11-21 11:39 |
2016-12-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271397
|
5.5 |
MEDIUM
Local
|
qemu debian
|
qemu debian_linux
|
QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It occurs when a guest sends a Layer-2 packet smaller than 22 bytes. A privileged …
|
CWE-20
Improper Input Validation
|
CVE-2015-8744
|
2024-11-21 11:39 |
2016-12-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271398
|
7.1 |
HIGH
Local
|
qemu debian
|
qemu debian_linux
|
QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged (CAP_SYS_RAWIO…
|
CWE-125 CWE-787
Out-of-bounds Read Out-of-bounds Write
|
CVE-2015-8743
|
2024-11-21 11:39 |
2016-12-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271399
|
6.5 |
MEDIUM
Network
|
oracle pivotal_software
|
solaris rabbitmq
|
The Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain privileges to cause a denial of service (resource consumption) via the (1) lengths_age or (2) lengths_inc…
|
CWE-399
Resource Management Errors
|
CVE-2015-8786
|
2024-11-21 11:39 |
2016-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271400
|
7.8 |
HIGH
Local
|
google linux
|
android linux_kernel
|
arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the "strict page permissions" protection mechanism and modify the system-call table, and consequently gain privileg…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-8967
|
2024-11-21 11:39 |
2016-12-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|