35985 matches found
CVE-2015-9023
The CVE-2015-9023 entry describes a buffer overflow in the PlayReady API, present in all Android releases from CAF using the Linux kernel. The vulnerability can enable a remote attacker to execute arbitrary code or cause a denial of service by exploiting the PlayReady API in affected Android comp...
CVE-2015-9029
CVE-2015-9029 is an Android CAF/Linux kernel vulnerability affecting the access control settings of modem memory. The issue is described as a memory-access control flaw in CAF Android releases, with a CVSS v3 base score of 7.8 (HIGH) and local attack vector requiring user interaction, impacting c...
CVE-2015-9030
CVE-2015-9030 describes an authentication bypass in Android CAF builds that use the Linux kernel, via misused Hypervisor API. Affected: Android devices with CAF/Linux Kerenel stack; vulnerable component: Hypervisor API. Root cause: improper handling of Hypervisor API calls enabling bypass of auth...
CVE-2015-9022
In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use TOCTOU Race Conditions exist in several TZ APIs...
CVE-2015-4596
Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges...
CVE-2015-3220
The provided documents identify CVE-2015-3220 as a remote denial of service in the tlslite Python library, affecting versions before 0.4.9 and causing a runtime exception and process crash. The vulnerability details do not specify the exact root cause, affected products beyond tlslite, or a confi...
CVE-2015-4596
The CVE-2015-4596 issue affects Lenovo Mouse Suite prior to version 6.73. A local user can escalate privileges to Administrator, with the ability to run arbitrary code. The root cause is not explicitly detailed in the supplied documents, but multiple sources confirm the impact and version-bound n...
Microsoft Teams help & learning
None None...
Fedora 24 : picocom (2017-f942f19ff4)
Upgrade to 2.2, fixing CVE-2015-9059 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
CVE-2015-9096
CVE-2015-9096 affects Net::SMTP in Ruby prior to 2.4.0, allowing SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands, demonstrated around a DATA substring. The vulnerability applies to Ruby’s Net::SMTP implementation and, per the initial description, is fixed in Ruby 2.4.0 ...
CVE-2015-9096
Removed by vendor...
CVE-2015-9097
The CVE-2015-9097 entry affects the Ruby mail gem (aka A Really Ruby Mail Library) prior to 2.5.5. The vulnerability is a SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands, demonstrated by CRLF sequences around a DATA substring. This is a concrete vulnerability in the mai...
CVE-2015-5374
creationtimestamp| type| source ---|---|--- 2017-06-12 13:54:13+00:00| seen| MISP/593e84ed-ba00-4971-afae-0c00ac12042b 2018-08-04 12:41:15+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/scada/siemenssiprotec4.rb 2020-10-09 16:03:22+00:00| seen|...
MGASA-2017-0169 Updated libxslt packages fix security vulnerability
The libxslt library failed to seed its random number generator, resulting in predictable random values CVE-2015-9019...
Fedora 25 : picocom (2017-ac7fc2fd8c)
Upgrade to 2.2, fixing CVE-2015-9059 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
About the security content of iTunes 12.4.2 for Windows - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
CVE-2015-2692
AdBlock before 2.21 allows remote attackers to block arbitrary resources on arbitrary websites and to disable arbitrary blocking filters...
CVE-2015-1379
The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service process freeze or crash...
