CVE-2015-2923

Summary: CVE-2015-2923 affects FreeBSD’s IPv6 Neighbor Discovery (ND) implementation up to 10.1. A remote attacker on the local network can cause a router advertisement to reconfigure the Current Hop Limit, potentially disrupting IPv6 traffic to other nodes on a different network. The CVSS3.1 vec...

Apache James Server 2.3.2 Insecure User Creation / Arbitrary File Write

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Apache James Server 2.3.2 Insecure User Creation Arbitrary File Write", 'Description' = %q This module exploits a vulnerability that exists due t...

Ubuntu 16.04 LTS : PHP regression (USN-4279-2)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4279-2 advisory. USN-4279-1 fixed vulnerabilities in PHP. The updated packages caused a regression. This update fixes the problem. We apologize for the inconvenience. Tenable has...

CVE-2015-7747

CVE-2015-7747 affects the Audio File Library (audiofile/libaudiofile). The vulnerability is a buffer overflow in afReadFrames that can be triggered by a crafted audio file, potentially causing a denial of service or arbitrary code execution. The issue is corroborated across multiple feeds (includ...

CVE-2015-7747

Buffer overflow in the afReadFrames function in audiofile aka libaudiofile and Audio File Library allows user-assisted remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c...

ALPINE-CVE-2015-2104

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2015-2104

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2015-2104

...

CVE-2015-2104

CVE-2015-2104 is marked as withdrawn in the Initial Description, but the connected Fedora/OpenVAS/Nessus entries reference it as part of Python advisories and include it among CVEs fixed in Fedora Python updates (notably for Python 3.9–3.11 releases). Public details in the connected documents ind...

CVE-2015-0749

creationtimestamp| type| source ---|---|--- 2020-02-19 07:52:18+00:00| seen| https://t.me/cibsecurity/9913...

CVE-2015-0749

Cisco Unified Communications Manager is affected by a cross-site scripting (XSS) vulnerability due to improper input validation of certain parameters. An unauthenticated, remote attacker could lure a user to follow a malicious link, potentially allowing the attacker to execute arbitrary script co...

CVE-2015-9543

OpenStack Nova up to 18.2.4, 19.x up to 19.1.0, and 20.x up to 20.1.0 is vulnerable to leaking consoleauth tokens into log files when using novncproxy. The issue is tied to NovaProxyRequestHandlerBase.new_websocket_client in console/websocketproxy.py. A user with read access to the service logs c...

CVE-2015-7507

CVE-2015-7507 affects Libnsbmp 0.1.2. Connected sources confirm a DoS via an out-of-bounds read triggered by a crafted color table in bmp_decode_rgb/bmp_decode_rle, with Libnsbmp described as a C decoding library for BMP/ICO. Public details also reference a heap overflow/vulnerabilities in this v...

CVE-2015-7505

Stack-based buffer overflow in the gifnextLZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted LZW stream in a GIF file...

CVE-2015-7505

Stack-based buffer overflow in the gifnextLZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted LZW stream in a GIF file...

CVE-2015-7567

Summary: CVE-2015-7567 is a SQL injection vulnerability in Yeager CMS 1.2.1 that allows remote attackers to execute arbitrary SQL via the "passwordreset&token" parameter. The issue stems from improper input handling in the authentication/password reset flow (root cause: unsafely constructed SQL f...

Security Bulletin: A Security Vulnerability has been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2015-7450)

Summary Websphere Application Server is shipped with Predictive Customer Intelligence. Information about a security vulnerability affecting Websphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletinss listed in the Remediation/Fixe...

CVE-2015-7506

The gifnextLZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service out-of-bounds read and application crash via a crafted LZW stream in a GIF file...

CVE-2015-6970

The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injection attacks via the idstring parameter to rcp.xml...

CVE-2015-7506

The CVE-2015-7506 entry concerns Libnsgif, a GIF decoding library. A vulnerability in the function gif_next_LZW in libnsgif.c (Libnsgif 0.1.2) allows context-dependent attackers to cause a denial of service via a crafted LZW stream in a GIF file, via an out-of-bounds read that crashes the applica...