CVE-2015-6358

CVE-2015-6358 is associated with Cisco devices that ship with hardcoded X.509 certificates and SSH host keys embedded in firmware, enabling remote attackers to defeat cryptographic protections and perform man-in-the-middle attacks by using keys from another installation. Connected OpenVAS data re...

Ubuntu 14.04 LTS : OpenStack Glance vulnerabilities (USN-3446-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3446-1 advisory. Hemanth Makkapati discovered that OpenStack Glance incorrectly handled access restrictions. A remote authenticated user could use this issue to change th...

Ubuntu: Security Advisory (USN-3449-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3451-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3451-1: OpenStack Swift vulnerabilities

It was discovered that OpenStack Swift incorrectly handled tempurls. A remote authenticated user in possession of a tempurl key authorized for PUT could retrieve other objects in the same Swift account. CVE-2015-5223 Romain Le Disez and Örjan Persson discovered that OpenStack Swift incorrectly...

USN-3446-1: OpenStack Glance vulnerabilities

Hemanth Makkapati discovered that OpenStack Glance incorrectly handled access restrictions. A remote authenticated user could use this issue to change the status of images, contrary to access restrictions. CVE-2015-5251 Mike Fedosin and Alexei Galkin discovered that OpenStack Glance incorrectly...

Security Update for Skype for Business 2015 (KB4011179) 32-Bit Edition

A security vulnerability exists in Skype for Business 2015 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

CVE-2015-8239

The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed...

CVE-2015-8239

The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed...

PYSEC-2017-70

salt before 2015.5.5 leaks git usernames and passwords to the log...

UBUNTU-CVE-2015-6918

salt before 2015.5.5 leaks git usernames and passwords to the log...

CVE-2015-6918

salt before 2015.5.5 leaks git usernames and passwords to the log...

UBUNTU-CVE-2015-7384

Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service...

CVE-2015-6918

salt before 2015.5.5 leaks git usernames and passwords to the log...

CVE-2015-7384

Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service...

CVE-2015-5639

The CVE-2015-5639 case concerns the niconico App for iOS by DWANGO Co., Ltd. The connected documents confirm that the app fails to verify SSL server certificates, enabling potential man-in-the-middle attacks. Affected version: 6.37 and earlier. Impact described: an attacker could eavesdrop on enc...

CVE-2015-7384

Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service...

CVE-2015-5675

The CVE-2015-5675 entry describes a Local Privilege Escalation/DoS in FreeBSD kernels due to the sys_amd64 IRET Handler. Affected: FreeBSD 9.3 and 10.1. Root cause: a mis-handling of IRET exceptions (#SS, #NP) in the kernel, which can allow a local user to gain privileges or trigger a kernel pani...

CVE-2015-7503

CVE-2015-7503 affects Zend Framework and Zend Crypt RSA public-key encryption. Zend Framework 2.x before 2.4.9 and 2.5.x before 2.5.2 used OPENSSL_PKCS1_PADDING (PKCS#1 v1.5) in Zend\Crypt\PublicKey\Rsa::encrypt(), enabling a Bleichenbacher-style attack to recover the RSA private key. Exploitatio...

CVE-2015-8239

The CVE-2015-8239 issue affects the sudoers plugin in sudo versions after 1.8.7. The root cause is the SHA-2 digest support in the sudoers plugin, which allows local users with write permissions to parts of the called command to replace them before execution. Reported impacts indicate that a loca...