CVE-2015-1777

rhnregks in Red Hat Network Client Tools aka rhn-client-tools on Red Hat Gluster Storage 2.1 and Enterprise Linux RHEL 5, 6, and 7 does not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to prevent system registration via a man-in-the-middle atta...

CVE-2015-4557

CVE-2015-4557 is an XSS vulnerability in the Nextend Twitter Connect WordPress plugin, present before version 1.5.2. The issue is triggered via the redirect_to parameter in the function new_Twitter_sign_button in nextend-Twitter-connect.php, allowing injection of arbitrary script/HTML. The relate...

CVE-2015-0172

CVE-2015-0172 affects IBM Security SiteProtector System 3.0, 3.1.0 and 3.1.1. A security bypass could allow a remote attacker to bypass restrictions, potentially execute commands and obtain sensitive information via unknown vectors. The vendor bulletin lists no official remediation fixes; however...

CVE-2015-1957

IBM WebSphere MQ is affected by a vulnerability in which messages can be disclosed via a man-in-the-middle due to duplication of message data in cleartext outside the protected payload. The affected versions are IBM WebSphere MQ 7.5.x before 7.5.0.6 and 8.0.x before 8.0.0.3. The issue arises unde...

Moderate: Red Hat Security Advisory: glibc security, bug fix, and enhancement update

An update for glibc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Description of the security update for the information disclosure vulnerability in Visual Studio 2015 Update 3: April 10, 2018 (KB4087371)

None None...

CVE-2018-9330

The provided sources confirm a stored XSS vulnerability in Coremail XT3.0 (register.jsp), specifically via the third form field in a URI under register/. The OpenVAS entry refers to Coremail XT <= 3.0 Stored XSS Vulnerability, implying impact on older XT3.0 deployments. The NVD/NVD-derived ent...

Input validation

GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITORPROGRAM invocation using ed can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's...

CVE-2015-9016

In blkmqtagtorq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been previously freed by blkmqcompleterequest. This could lead to local escalation of privilege. Product: Android. Versions: Android kernel. Android ID: A-63083046...

CVE-2015-9016

In blkmqtagtorq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been previously freed by blkmqcompleterequest. This could lead to local escalation of privilege. Product: Android. Versions: Android kernel. Android ID: A-63083046...

CVE-2015-9016

CVE-2015-9016 : In the upstream Linux kernel, the use-after-free race in blk_mq_tag_to_rq (blk-mq.c) can occur when a request was already freed by blk_mq_complete_request . This race enables local escalation of privilege on affected systems, with the Android kernel explicitly mentioned as impacte...

CVE-2015-9011

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714882...

CVE-2015-9013

CVE-2015-9013 is described as an elevation-of-privilege vulnerability in Qualcomm closed‑source components used by Android, affecting the Android kernel. The connected docs identify the issue as a Qualcomm/Android kernel problem but do not provide concrete exploit details, affected versions beyon...

CVE-2015-9011

CVE-2015-9011 is a privilege-escalation vulnerability reported in Qualcomm closed-source components affecting the Android kernel. The connected sources confirm the issue as elevation of privilege, with Android kernel involvement and no publicly disclosed exploit details in the provided documents....

CVE-2015-9009

CVE-2015-9009 is an Elevation of Privilege vulnerability in Qualcomm closed‑source components exposed via Android kernel. The public data indicates the issue affects Qualcomm/Android architectures and is classified as Critical (CVSS v3 9.8). The CVE is listed under Qualcomm closed‑source componen...

CVE-2015-9010

CVE-2015-9010 is described as an elevation of privilege vulnerability affecting Qualcomm closed‑source components used by Android, within the Android kernel. The provided documents confirm the issue is associated with Qualcomm components and Android kernel, but do not provide specific technical d...

CVE-2015-9014

CVE-2015-9014 is an Elevation of Privilege in Qualcomm closed‑source components affecting Android kernel. The vulnerability is described as a privilege escalation within Qualcomm components integrated into Android; impact is elevated privileges without user interaction. The Connected documents co...

CVE-2015-9012

CVE-2015-9012 describes an elevation of privilege in Qualcomm closed‑source components within Android, affecting the Android kernel. The linked records consistently identify the issue as a privilege escalation vulnerability in Qualcomm components used by Android devices, with no public exploit de...

CVE-2015-1975

CVE-2015-1975 affects IBM Tivoli Directory Server (versions 6.0–6.3) and IBM Security Directory Server (6.3.1–6.4). The web administration tool is vulnerable to argument-injection vectors that allow a locally authenticated user to escalate privileges. Affected fixes are IBM iFixes: 6.0 iFix 75; 6...

CVE-2015-9258

In Docker Notary before 0.1, gotuf/signed/verify.go has a Signature Algorithm Not Matched to Key vulnerability. Because an attacker controls the field specifying the signature algorithm, they might for example be able to forge a signature by forcing a misinterpretation of an RSA-PSS key as Ed2551...