35965 matches found
CVE-2015-0243
CVE-2015-0243 affects PostgreSQL and specifically its contrib/pgcrypto module. It is a buffer-overflow vulnerability in pgcrypto that, on vulnerable builds, could allow a remote authenticated user to crash the server and potentially execute arbitrary code via unspecified vectors. Affected version...
CVE-2015-0244
CVE-2015-0244 affects PostgreSQL up to 9.0.19, 9.1.x up to 9.1.15, 9.2.x up to 9.2.10, 9.3.x up to 9.3.6, and 9.4.x up to 9.4.1. It arises from improper handling of errors while reading a protocol message, enabling remote attackers to perform SQL injection via crafted binary data in a parameter a...
CVE-2015-0294
The CVE-2015-0294 entry concerns GnuTLS before 3.3.13, where the library does not validate that the signature algorithms match when importing a certificate. The vulnerability is documented in multiple connected sources (e.g., MiracleLinux AXSA advisory referencing CVE-2015-0294 and vendor advisor...
CVE-2015-4709
CVE-2015-4709 is rejected/not used and does not represent an active vulnerability entry.
Exploit for CVE-2019-1125
PoC for the SWAPGS attack CVE-2019-1125https://nvd.nist.go...
Microsoft Windows Kernel - Information Disclosure
PoC for the SWAPGS attack CVE-2019-1125 This holds the sources for the SWAPGS attack PoC publicly shown at Black Hat USA, 2019. Contents leakgsbkva - variant 1 look for random values in kernel memory; limited to PE kernel image header leakgsbkvat - variant 2 extract random values from kernel...
openSUSE Security Update : arc (openSUSE-2020-103)
This update for arc fixes the following issues : - CVE-2015-9275: Fixed a directory traversal vulnerability boo1121032. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-103. The text description of...
openSUSE: Security Advisory for arc (openSUSE-SU-2020:0103_1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] [DLA 2075-1] jsoup security update
Package : jsoup Version : 1.8.1-1+deb8u1 CVE ID : CVE-2015-6748 An issue has been found in jsoup, a Java HTML parser that makes sense of real-world HTML soup. Due to bad handling of missing at EOF a cross-site scripting XSS vulnerability could appear. For Debian 8 "Jessie", this problem has been...
AZL-6832 CVE-2015-9541 affecting package qt5-qtsvg for versions less than 5.12.11-3
Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564...
CVE-2015-9541
Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564...
CVE-2015-9541
Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564...
CVE-2015-1202
CVE-2015-1202 is rejected/not used; this ID does not represent an active vulnerability entry.
CVE-2015-9541
Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564...
CVE-2015-9541
CVE-2015-9541 affects Qt up to 5.14 where a crafted SVG can trigger exponential XML entity expansion in QXmlStreamReader, enabling a likely denial of service. Public docs mainly tie this to Qt-based SVG/XML handling; remediation is to upgrade affected Qt packages (e.g., qt5-qtbase) to a version t...
CVE-2015-1525
audio/AudioPolicyManagerBase.cpp in Android before 5.1 allows attackers to cause a denial of service audiopolicy application outage via a crafted application that provides a NULL device address...
CVE-2015-2928
The Hidden Service HS server implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote attackers to cause a denial of service assertion failure and daemon exit via unspecified vectors...
CVE-2015-2929
The Hidden Service HS client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote servers to cause a denial of service assertion failure and application exit via a malformed HS descriptor...