CVE-2015-9007

Technical details for CVE-2015-9007 are not publicly available in the provided documents. No specifics on affected components, root cause, impact, or remediation are provided here. Monitor for updates.

CVE-2015-9005

CVE-2015-9005 affects TrustZone on CAF Android builds via the Linux kernel, describing an Integer Overflow that could lead to a Buffer Overflow. The available sources do not provide concrete technical details (no root-cause, patch/version info, or explicit exploit data). The CVSS metrics indicate...

Important: jasper

Issue Overview: Multiple flaws were found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code. CVE-2016-8654, CVE-2016-9560, CVE-2016-10249, CVE-2015-5203, CVE-2015-5221, CVE-2016-1577,...

IBM TSM Client 'Client Acceptor Daemon' Denial-of-Service Vulnerability - Linux

IBM Tivoli Storage Manager Client is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-6531

Palo Alto Networks Panorama VM Appliance with PAN-OS before 6.0.1 might allow remote attackers to execute arbitrary Python code via a crafted firmware image file...

CVE-2015-6531

The CVE-2015-6531 entry concerns Palo Alto Networks Panorama VM Appliance running PAN-OS prior to 6.0.1. A flaw in the firmware image verification allows an attacker to execute arbitrary Python code via a crafted firmware image file, enabling arbitrary code execution on the device. The issue is t...

CVE-2015-0936

Ceragon FibeAir IP-10 have a default SSH public key in the authorizedkeys file for the mateidu user, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key...

CVE-2015-0936

Ceragon FibeAir IP-10 devices are affected by CVE-2015-0936 due to a static SSH keypair for the mateidu user shipped with the device. The public/private key enables passwordless SSH authentication, allowing remote access to the device if the private key is known. Available connected documents cor...

CVE-2015-5473

Samsung SyncThru 6 before 1.0 is affected by multiple directory traversal vulnerabilities that allow remote attackers to delete arbitrary files or execute arbitrary code with SYSTEM privileges. The issues stem from failure to sanitize uploaded file paths in endpoints such as uploadFirmware.html, ...

CVE-2015-6531

Palo Alto Networks Panorama VM Appliance with PAN-OS before 6.0.1 might allow remote attackers to execute arbitrary Python code via a crafted firmware image file...

hillintl.com XSS vulnerability

Vulnerable URL: https://www.hillintl.com/CustomContent/2015%20Corporate%20Brochure/bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTiBCVUdCT1VOVFknKTwvc2NyaXB0Pg== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.08.2017 Vulnerability type:...

CVE-2015-9059

picocom before 2.0 has a command injection vulnerability in the 'send and receive file' command because the command line is executed by /bin/sh unsafely...

CVE-2015-9059

CVE-2015-9059 affects picocom prior to 2.0, where the command in the 'send and receive file' flow is executed via "/bin/sh" unsafely, enabling a command injection. The vulnerability is rated CRITICAL (CVSS v3: 9.8) with network access and no privileges required. Public references show fixes in De...

CVE-2015-0269

Contao CVE-2015-0269 is a directory traversal vulnerability in Contao CMS where remote authenticated backend users could view files outside their allowed mounts. Affected versions include Contao 3.* up to 3.4.3 and 3.2.x prior to 3.2.19; the issue arises in the back end and allows access to files...

SUSE SLES12 Security Update : squidGuard (SUSE-SU-2017:1411-1)

squidGuard was updated to fix one security issue : - CVE-2015-8936: Reflected cross-site scripting vulnerability because of insufficient escaping bsc985612. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

DEBIAN-CVE-2015-5211

Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versions is vulnerable to a Reflected File Download RFD attack. The attack involves a malicious user crafting a URL with a batch script extension that results in the response being...

CVE-2015-5211

Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versions is vulnerable to a Reflected File Download RFD attack. The attack involves a malicious user crafting a URL with a batch script extension that results in the response being...

CVE-2015-5211

Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versions is vulnerable to a Reflected File Download RFD attack. The attack involves a malicious user crafting a URL with a batch script extension that results in the response being...

CVE-2015-3190

The CVE-2015-3190 issue affects Cloud Foundry components where the UAA logout link can be used as an open redirect. Affected versions include cf-release v209 or earlier, UAA standalone v2.2.6 or earlier, and Cloud Foundry Runtime v1.4.5 or earlier. The underlying vulnerability allows an attacker ...

CVE-2015-3189

CVE-2015-3189 – Normal details Affected products/versions: Cloud Foundry Runtime cf-release v208 or earlier; UAA standalone v2.2.5 or earlier; Pivotal Cloud Foundry Runtime v1.4.5 or earlier. Issue: old Password Reset Links do not expire after a user changes their current email address, when usin...