Race condition

Race condition in the ioctl implementation in the Samsung Graphics 2D driver aka /dev/fimg2d in Samsung devices with Android L5.0/5.1 allows local users to trigger memory errors by leveraging definition of g2dlock and g2dunlock lock macros as no-ops, aka SVE-2015-4598...

CVE-2015-0194

XML External Entity XXE vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data...

CVE-2015-0839

The hp-plugin utility in HP Linux Imaging and Printing HPLIP makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a short GPG key id from a keyserver to verify print plugin downloads...

CVE-2015-7891

Race condition in the ioctl implementation in the Samsung Graphics 2D driver aka /dev/fimg2d in Samsung devices with Android L5.0/5.1 allows local users to trigger memory errors by leveraging definition of g2dlock and g2dunlock lock macros as no-ops, aka SVE-2015-4598...

CVE-2015-1174

Session fixation vulnerability in Unit4 Polska TETA Web formerly TETA Galactica 22.62.3.4 and earlier allows remote attackers to hijack web sessions via a session id...

CVE-2015-0839

The CVE-2015-0839 issue affects the hp-plugin download verification in HP Linux Imaging and Printing (HPLIP). Root cause: verification uses a short GPG key ID from a keyserver, enabling MITM attackers to potentially drive arbitrary code execution during print plugin downloads. Impact: network-exp...

CVE-2015-5203

CVE-2015-5203 is a double-free flaw in JasPer’s jasper_image_stop_load() used when processing certain JPEG 2000 images. Backed by multiple connected advisories, this vulnerability can allow a remote attacker to crash an application or, in some reports, potentially execute arbitrary code. Affected...

CVE-2015-0194

XML External Entity XXE vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data...

CVE-2015-1174

Session fixation vulnerability in Unit4 Polska TETA Web formerly TETA Galactica 22.62.3.4 and earlier allows remote attackers to hijack web sessions via a session id...

CVE-2015-3642

Technical details for CVE-2015-3642 are not publicly available in the provided documents; monitor for updates.

CVE-2015-0839

The hp-plugin utility in HP Linux Imaging and Printing HPLIP makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a short GPG key id from a keyserver to verify print plugin downloads...

CVE-2015-2560

CVE-2015-2560 affects ManageEngine Desktop Central 9 before build 90135. The flaw in DCOperationsServlet (addOrModifyUser) allows remote unauthenticated users to change Administrator (DCAdmin) passwords, enabling full or partial admin access. Remediation: update to build 90135 or apply vendor gui...

CVE-2015-2690

CVE-2015-2690 affects FreePBX Digium Addons (digiumaddoninstaller) before 2.11.0.7. Multiple XSS flaws exist in views/add-license-form.php invoked via admin/config.php (type=setup, display=digiumaddons, page=add-license-form, addon=ffa). The attacker can inject script/HTML through any of 12 param...

CVE-2015-7891

Race condition in the ioctl implementation in the Samsung Graphics 2D driver aka /dev/fimg2d in Samsung devices with Android L5.0/5.1 allows local users to trigger memory errors by leveraging definition of g2dlock and g2dunlock lock macros as no-ops, aka SVE-2015-4598...

CVE-2015-1174

CVE-2015-1174 affects Unit4 Polska TETA Web (formerly TETA Galactica) up to version 22.62.3.4. The vulnerability is a session fixation flaw that allows a remote attacker to hijack a user’s web session by manipulating the session identifier. The CNVD entry corroborates the affected software and vu...

CVE-2015-7891

The CVE-2015-7891 issue is a local information/privilege escalation risk caused by a race condition in the ioctl implementation of Samsung's Graphics 2D driver (the /dev/fimg2d path). The root cause is the g2d_lock and g2d_unlock macros being defined as no-ops, enabling memory errors under Androi...

CVE-2015-0839

The hp-plugin utility in HP Linux Imaging and Printing HPLIP makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a short GPG key id from a keyserver to verify print plugin downloads...

RHEL 7 : gdm and gnome-session (RHSA-2017:2128)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2128 advisory. The GNOME Display Manager GDM provides the graphical login screen shown shortly after boot up, log out, and when user-switching. The following packag...

CVE-2015-5203

Double free vulnerability in the jasperimagestopload function in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via a crafted JPEG 2000 image file...

CVE-2015-5059

The "Project Documentation" feature in MantisBT 1.2.19 and earlier, when the threshold to access files $gviewprojdocthreshold is set to ANYBODY, allows remote authenticated users to download attachments linked to arbitrary private projects via a file id number in the fileid parameter to...