7333 matches found
PT-2015-5477
Name of the Vulnerable Software and Affected Versions wpa supplicant versions 1.0 through 2.4 Description The issue allows remote attackers to cause a denial of service, read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2...
Red Hat Enterprise Linux Elevation of Privilege Vulnerability
Red Hat Enterprise Linux RHEL is a Linux operating system for business users maintained and distributed by Red Hat, Inc. The Linux kernel is the kernel used by the operating system and is distributed by the Linux Foundation. A security vulnerability exists in the InfiniBand IB implementation of...
DEBIAN-CVE-2015-1420
Race condition in the handletopath function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handlebytes value of a file handle during the execution of this functio...
UBUNTU-CVE-2015-1420
Race condition in the handletopath function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handlebytes value of a file handle during the execution of this functio...
libmsm memory corruption
A memory read exploit that uses a vulnerability in the camera driver...
Google Chrome < 39.0.2171.65 Multiple Vulnerabilities
Binary data 8580.pasl...
PT-2015-5275
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.19.2 Description A race condition issue exists in the handle to path function in fs/fhandle.c, allowing local users to bypass intended size restrictions. This is achieved by changing the handle bytes value of a...
DEBIAN-CVE-2015-1548
minihttpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read...
PT-2015-4432
Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT Gold an...
CVE-2014-8612: Undefined Security Weakness
Multiple array index errors in the Stream Control Transmission Protocol SCTP module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allow local users to 1 gain privileges via the stream id to the setsockopt function, when setting the SCTIPSSVALUE option, or 2 read...
CVE-2014-8823: Undefined Security Weakness
The IOUSBControllerUserClient::ReadRegister function in the IOUSB controller in IOUSBFamily in Apple OS X before 10.10.2 allows local users to read data from arbitrary kernel-memory locations by leveraging root access and providing a crafted first argument...
PT-2015-4089
Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.2 Description The issue allows local users with root access to read data from arbitrary kernel-memory locations by providing a crafted first argument to the IOUSBControllerUserClient::ReadRegister function in...
flash-plugin: Information disclosure via various methods (APSB15-01)
Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allo...
Code injection
The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly restrict timeline operations, which allows remote attackers to cause a denial of service uninitialized-memory read and...
CVE-2014-8640
The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly restrict timeline operations, which allows remote attackers to cause a denial of service uninitialized-memory read and...
CVE-2014-8640: Concurrent Execution using Shared Resource with Improper Synchronization
The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly restrict timeline operations, which allows remote attackers to cause a denial of service uninitialized-memory read and...
PT-2015-4071
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 35.0 SeaMonkey versions prior to 2.32 Description The issue concerns the Web Audio API implementation, specifically the mozilla::dom::AudioParamTimeline::AudioNodeInputValue function. This function does not...
CVE-2015-0001: Undefined Security Weakness
The Windows Error Reporting WER component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging...
