36175 matches found
CVE-2015-0294
creationtimestamp| type| source ---|---|--- 2020-01-27 21:37:46+00:00| seen| https://t.me/cveNotify/453...
CVE-2015-0244
creationtimestamp| type| source ---|---|--- 2020-01-27 21:37:45+00:00| published-proof-of-concept| https://t.me/cveNotify/452...
CVE-2015-0243
creationtimestamp| type| source ---|---|--- 2020-01-27 21:37:43+00:00| seen| https://t.me/cveNotify/451...
CVE-2015-0242
creationtimestamp| type| source ---|---|--- 2020-01-27 21:37:42+00:00| published-proof-of-concept| https://t.me/cveNotify/450...
CVE-2015-0241
creationtimestamp| type| source ---|---|--- 2020-01-27 21:37:41+00:00| seen| https://t.me/cveNotify/449...
CVE-2015-2249
CVE-2015-2249 affects Zimbra Collaboration Suite prior to 8.6.0 patch5 with a cross-site scripting (XSS) vulnerability. Connected sources confirm an XSS flaw in the web application. No explicit root cause, exploitation status, or remediation details are provided in the connected documents.
CVE-2015-0241
The tochar function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to cause a denial of service crash or possibly execute arbitrary code via a 1 large number of digits when processing a numeric...
CVE-2015-0243
Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allow remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...
CVE-2015-0242
CVE-2015-0242 is a PostgreSQL vulnerability affecting Windows builds of PostgreSQL prior to 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1. It causes a stack-based buffer overflow in the printf implementations when handling a floating-point number wit...
CVE-2015-0243
CVE-2015-0243 affects PostgreSQL and specifically its contrib/pgcrypto module. It is a buffer-overflow vulnerability in pgcrypto that, on vulnerable builds, could allow a remote authenticated user to crash the server and potentially execute arbitrary code via unspecified vectors. Affected version...
CVE-2015-0244
CVE-2015-0244 affects PostgreSQL up to 9.0.19, 9.1.x up to 9.1.15, 9.2.x up to 9.2.10, 9.3.x up to 9.3.6, and 9.4.x up to 9.4.1. It arises from improper handling of errors while reading a protocol message, enabling remote attackers to perform SQL injection via crafted binary data in a parameter a...
CVE-2015-0294
The CVE-2015-0294 entry concerns GnuTLS before 3.3.13, where the library does not validate that the signature algorithms match when importing a certificate. The vulnerability is documented in multiple connected sources (e.g., MiracleLinux AXSA advisory referencing CVE-2015-0294 and vendor advisor...
CVE-2015-4709
CVE-2015-4709 is rejected/not used and does not represent an active vulnerability entry.
Exploit for CVE-2019-1125
PoC for the SWAPGS attack CVE-2019-1125https://nvd.nist.go...
openSUSE: Security Advisory for arc (openSUSE-SU-2020:0103_1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : arc (openSUSE-2020-103)
This update for arc fixes the following issues : - CVE-2015-9275: Fixed a directory traversal vulnerability boo1121032. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-103. The text description of...
Microsoft Windows Kernel - Information Disclosure
PoC for the SWAPGS attack CVE-2019-1125 This holds the sources for the SWAPGS attack PoC publicly shown at Black Hat USA, 2019. Contents leakgsbkva - variant 1 look for random values in kernel memory; limited to PE kernel image header leakgsbkvat - variant 2 extract random values from kernel...
[SECURITY] [DLA 2075-1] jsoup security update
Package : jsoup Version : 1.8.1-1+deb8u1 CVE ID : CVE-2015-6748 An issue has been found in jsoup, a Java HTML parser that makes sense of real-world HTML soup. Due to bad handling of missing at EOF a cross-site scripting XSS vulnerability could appear. For Debian 8 "Jessie", this problem has been...
AZL-6832 CVE-2015-9541 affecting package qt5-qtsvg for versions less than 5.12.11-3
Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564...