36067 matches found
CVE-2015-8235
Directory traversal vulnerability in Spiffy before 5.4...
CVE-2015-6240
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...
CVE-2015-8235
Directory traversal vulnerability in Spiffy before 5.4...
CVE-2015-5232
Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197...
ALPINE-CVE-2015-8538
dwarfleb.c in libdwarf allows attackers to cause a denial of service SIGSEGV...
CVE-2015-8538
CVE-2015-8538 affects libdwarf, specifically the dwarf_leb.c routine, allowing attackers to cause a denial of service (SIGSEGV). The connected sources confirm this is a DoS in libdwarf and reference multiple advisories; no concrete patch/version remediation details are provided in the supplied do...
CVE-2015-8235
The CVE-2015-8235 entry concerns a directory traversal vulnerability in the Spiffy project, affecting versions before 5.4 . The connected documents consistently describe the issue as a vulnerability in Spiffy prior to 5.4, without providing details on affected platforms, exploit vectors, or the r...
CVE-2015-6240
CVE-2015-6240 concerns Ansible, where the chroot, jail, and zone connection plugins allow a local attacker to escape a restricted environment via a symlink attack. Affected software is Ansible versions older than 1.9.2, as described in multiple sources (including GHSA and Debian/Ubuntu advisories...
CVE-2015-8235
Directory traversal vulnerability in Spiffy before 5.4...
CVE-2015-5202
CVE-2015-5233 describes a vulnerability in Foreman where versions before 1.8.4 and 1.9.x before 1.9.1 do not properly enforce the view_hosts permissions. This allows remote authenticated users with the view_reports permission to read reports from arbitrary hosts, or users with the destroy_reports...
CVE-2015-5232
CVE-2015-5232 involves race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197. The affected components are opa-fm (OPA architecture manager) and opa-ff (OPA architecture building tool), with the root cause described as race conditions affecting concurrent operations. Documen...
CVE-2015-6959
Cross-site scripting XSS vulnerability in Vindula 1.9...
CVE-2015-8235
Directory traversal vulnerability in Spiffy before 5.4...
CVE-2015-6240
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...
CVE-2015-6959
Vindula 1.9 is affected by a cross-site scripting (XSS) vulnerability. The CNVD entry for Vindula Cross-Site Scripting Vulnerability specifies that Vindula version 1.9 is vulnerable and that a remote attacker can exploit this to inject arbitrary web script or HTML. No further technical details (s...
CVE-2015-8538
dwarfleb.c in libdwarf allows attackers to cause a denial of service SIGSEGV...
CVE-2015-6540
CVE-2015-6540 describes a Cross-Site Scripting (XSS) vulnerability in Intellect Design Arena Intellect Core banking software (Armar module). The connected 0day/The vulnerability details indicate an arbitrary client-side JavaScript execution capability after login via a crafted link, potentially e...
CVE-2015-5175
The CVE-2015-5175 issue affects Apache CXF Fediz application plugins. Versions prior to 1.1.3 and 1.2.x prior to 1.2.1 are vulnerable to a remote DoS attack. The vulnerability is triggered by specially crafted requests, allowing remote attackers to cause denial of service. The DoS impact is descr...