CVE-2015-7898

CVE-2015-7898 is a local-denial-of-service vulnerability in the Samsung Gallery app on the Samsung Galaxy S6, triggered when loading a GIF in the app (GIF parsing crash). Connected sources confirm the issue resides in Samsung Gallery’s image processing path and that an exploit existed (Samsung Ga...

CVE-2015-7780

CVE-2015-7780 affects ManageEngine Firewall Analyzer prior to version 8.0 and is described as a directory traversal/local file inclusion vulnerability. Multiple sources indicate an unauthenticated/authenticated path to read arbitrary server files via traversal, enabling potential information disc...

CVE-2015-5378

Elastic Logstash versions prior to 1.5.3 (1.5.x) and prior to 1.4.4 (1.4.x) are vulnerable to a SSL/TLS FREAK-based man-in-the-middle bypass when using the Lumberjack input in combination with Logstash Forwarder. This allows an attacker to intercept and potentially read the communications between...

CVE-2015-1795

Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root...

CVE-2015-7895

CVE-2015-7895 affects the Samsung Gallery app on the Galaxy S6. The issue is a local-denial-of-service triggered by a bitmap decoding crash when opening an image with Gallery (bitmap processing path). Exploit-DB documents a DOS exploit for the Android platform using a crafted bitmap (bmp_memset.b...

CVE-2015-5180

resquery in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service NULL pointer dereference and process crash...

CVE-2015-1795

CVE-2015-1795 affects Red Hat Gluster Storage 3.2.0. The vulnerability is a local privilege escalation where a local user could gain root privileges and execute arbitrary code, related to glusterfs-server packaging. RHSA-2017:0484/0486 indicate the fix/update path, upgrading glusterfs to 3.8.4 an...

CVE-2015-7781

ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions...

CVE-2015-7781

CVE-2015-7781 relates to Zoho ManageEngine Firewall Analyzer prior to 8.0, where access permissions are not properly restricted. The vulnerability allows an attacker to obtain server logs due to insufficient access controls (no restriction on who can view logs). Affected software: Firewall Analyz...

CVE-2015-5180

resquery in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service NULL pointer dereference and process crash...

CVE-2015-3142

CVE-2015-3142 concerns ABRT's kernel-invoked coredump processor failing to check file ownership before writing core dumps, allowing local users to read sensitive data from the crashed application's working directory. Connected docs show advisories for MiracleLinux, Oracle Linux, and Red Hat that ...

CVE-2015-3315

CVE-2015-3315 affects the Automatic Bug Reporting Tool (ABRT) and related libreport components. A local attacker can exploit race conditions and symbolic-link flaws to gain ownership changes of arbitrary files via a symlink attack on paths such as /var/tmp/abrt//maps (and related ABRT paths), pot...

CVE-2015-1870

Mode C: The connected MiracleLinux 4 advisory references CVE-2015-1870 affecting abrt (Automatic Bug Reporting Tool) and libreport (abrt-2.0.8-26.1.0.1.AXS4, libreport-2.0.9-21.1.0.1.AXS4). The vulnerability arises from event scripts using world-readable permissions on a copy of sosreport files i...

CVE-2015-3215

The CVE-2015-3215 issue affects the NetKVM Windows Virtio driver (virtio-win). The root cause is a crafted IP packet length value that does not account for IP options, allowing remote attackers to cause a denial of service (guest crash). Affected component/file: NetKVM/virtio-win traffic handling...

Debian DSA-3897-1 : drupal7 - security update

Two vulnerabilities were discovered in Drupal, a fully-featured content management framework. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2015-7943 Samuel Mortenson and Pere Orga discovered that the overlay module does not sufficiently validate URLs...

CVE-2015-9099

The lameinitparams function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service invalid read and application crash via a crafted audio file with a negative sample rate...

CVE-2015-9101

The fillbufferresample function in util.c in libmp3lame.a in LAME 3.98.4, 3.98.2, 3.98, 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4 and 3.99.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

CVE-2015-9100

The fillbufferresample function in util.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted audio file...

CVE-2015-9101

The fillbufferresample function in util.c in libmp3lame.a in LAME 3.98.4, 3.98.2, 3.98, 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4 and 3.99.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

CVE-2015-9099

The lameinitparams function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service invalid read and application crash via a crafted audio file with a negative sample rate...