Security Bulletin: IBM Db2® Warehouse has released a fix in response to multiple vulnerabilities found in IBM Db2®

Summary IBM has released the following fix for IBM Db2® Warehouse in response to multiple vulnerabilities found in IBM Db2®. Vulnerability Details CVEID:CVE-2015-8383 DESCRIPTION: PCRE is vulnerable to a heap-based buffer overflow, caused by the improper handling of certain repeated conditional...

CVE-2015-10123

An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user then views that data in a specific page of the web-based management a buffer overflow will be triggered to gain full access of the device...

K000149640: Multiple Perl vulnerabilities

Security Advisory Description CVE-2023-31486 HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates. CVE-2020-12723 regcomp.c in Perl before 5.30.3 allows a buffer overflow...

K000149629: libldap vulnerability CVE-2015-3276

Security Advisory Description The nssparseciphers function in libraries/libldap/tlsm.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown...

CVE-2015-9251 affecting package ceph for versions less than 18.2.2-1

CVE-2015-9251 affecting package ceph for versions less than 18.2.2-1. A patched version of the package is available...

CVE-2015-9235

creationtimestamp| type| source ---|---|--- 2025-01-27 22:00:06+00:00| published-proof-of-concept| Telegram/IIMMVR0y14HHoe0fDF24Y-XgfvnmWXYVKaXhSDz5tV5TerE 2025-01-28 13:54:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/11760 2025-02-05 19:34:25+00:00| published-proof-of-concept...

CVE-2015-2704 affecting package realmd 0.16.3-25

CVE-2015-2704 affecting package realmd 0.16.3-25. No patch is available currently...

CVE-2015-7309 affecting package bolt 0.9.2-2

CVE-2015-7309 affecting package bolt 0.9.2-2. This CVE either no longer is or was never applicable...

CISA: February 2015/1st Edition - Facility Security Plan: an Interagency Security Committee Guide

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CVE-2015-0279

creationtimestamp| type| source ---|---|--- 2025-01-10 12:54:01+00:00| seen| https://bsky.app/profile/devtty.de/post/3lffafeu4rx26...

CVE-2015-2370

creationtimestamp| type| source ---|---|--- 2025-01-03 09:50:27+00:00| seen| https://bsky.app/profile/jamesatack.com/post/3letcuoghgk2f 2026-07-29 12:01:21+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:52+00:00| seen|...

Oracle Linux 8 : python-requests (ELSA-2025-0012)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-0012 advisory. - Security fix for CVE-2024-35195 Resolves: RHEL-37605 - Security fix for CVE-2023-32681 Resolves: rhbz2209469 - Update to v2.20.0 for CVE-2018-18074. - Remove...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2015-7450)

Summary WebSphere Application Server is shipped with WebSphere Remote Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes Affected...

Oracle Siebel CRM (October 2015 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the October 2015 CPU advisory. - Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM subcomponent: Services. Supported versions that are affected are IP20...

Oracle Siebel CRM (April 2015 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the April 2015 CPU advisory. - Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: Portal Framework. Supported versions that are affected are 8.1 and...

Oracle Siebel CRM (January 2015 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2015 CPU advisory. - Vulnerability in the Oracle Enterprise Asset Management component of Oracle Siebel CRM subcomponent: Siebel Core - Unix/Windows. Supported...

Cisco NX-OS Permissions, Privileges, and Access Controls (CVE-2015-4234)

Cisco NX-OS 6.02 and 6.22 on Nexus devices has an improper OS configuration, which allows local users to obtain root access via unspecified input to the Python interpreter, aka Bug IDs CSCun02887, CSCur00115, and CSCur00127. This plugin only works with Tenable.ot. Please visit...

Cisco NX-OS Resource Management Errors (CVE-2015-6308)

Cisco NX-OS 6.02U60.46 on N3K devices allows remote authenticated users to cause a denial of service temporary SNMP outage via an SNMP request for an OID that does not exist, aka Bug ID CSCuw36684. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot fo...

Cisco Unified Computing System Resource Management Errors (CVE-2015-0718)

Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System UCS platforms allows remote attackers to cause a denial of service TCP stack reload by sending crafted TCP packets to a device that has a TIMEWAIT TCP session, aka Bug ID CSCub70579...

Cisco Small Business SPA300 and SPA500 Series IP Phones Unauthenticated Remote Dial (CVE-2015-0670)

The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482. This plugin only works with...