35985 matches found
Unbreakable Enterprise kernel security update
kernel-uek 3.8.13-118.19.2 - nfsd: check for oversized NFSv2/v3 arguments J. Bruce Fields Orabug: 26366022 CVE-2017-7645 3.8.13-118.19.1 - selinux: quiet the filesystem labeling behavior message Paul Moore Orabug: 25290650 - HID: hid-cypress: validate length of report Greg Kroah-Hartman Orabug:...
F5 Networks BIG-IP : Grep vulnerability (K42891424)
The bmexectrans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service out-of-bounds heap read and crash via crafted input when using the -F option. CVE-2015-1345 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
CVE-2015-5378
Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server...
CVE-2015-5180
resquery in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service NULL pointer dereference and process crash...
CVE-2015-8697
stalin 0.11-5 allows local users to write to arbitrary files...
DEBIAN-CVE-2015-8697
stalin 0.11-5 allows local users to write to arbitrary files...
CVE-2015-1591
The kamailio build in kamailio before 4.2.0-2 process allows local users to gain privileges...
CVE-2015-7780
Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0...
CVE-2015-1778
The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and password combination...
CVE-2015-8697
stalin 0.11-5 allows local users to write to arbitrary files...
CVE-2015-8697
stalin 0.11-5 allows local users to write to arbitrary files...
CVE-2015-2245
CVE-2015-2245 affects Huawei Ascend P7 (Sophia-L09) running Android 4.4/EMUI 3.0. The vulnerability arises in the phone module when a third-party app sends specific broadcast messages or enables specific UIs, allowing remote-like triggering that leads to a denial of service (phone process crash)....
CVE-2015-5180
CVE-2015-5180 affects the GNU C Library (glibc) through the libresolv component, specifically res_query, with vulnerable releases prior to glibc 2.25. A remote attacker can trigger a NULL pointer dereference in res_query, causing a denial of service (process crash). The available connected docume...
CVE-2015-3840
CVE-2015-3840 affects Android 5.1.1 and earlier via the MessageStatusReceiver service in the AndroidManifest.xml. The vulnerability lets local users alter the sent/received status of SMS and MMS messages without requiring the WRITE_SMS permission. This is a local-privilege-impacting issue affecti...
CVE-2015-1591
The kamailio build in kamailio before 4.2.0-2 process allows local users to gain privileges...
CVE-2015-1795
Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root...
CVE-2015-1778
CVE-2015-1778 concerns OpenDaylight’s OpenDaylight Helium lineage. The vulnerability arises from the custom authentication realm used by karaf-tomcat’s opendaylight realm, which will authenticate any username/password combination in OpenDaylight installations prior to Helium SR3. The result is an...
CVE-2015-8697
CVE-2015-8697 affects the stalin package, version 0.11-5. The available connected documents confirm that local users can write to arbitrary files due to this vulnerability. The provided material does not include root cause details, specific patches, or remediation steps. No exploit status or in-t...