CVE-2015-3977

CVE-2015-3977 pertains to a buffer overflow in Schneider Electric IMT25 Magnetic Flow DTM (HART Protocol) prior to version 1.500.004. The vulnerability arises from an improper handling of input in the DTM library, allowing a crafted HART reply to overwrite memory, which could lead to memory corru...

Cisco IOS Virtual PPP ACL Control Bypass Vulnerability

Cisco IOS is a popular Internet operating system. Cisco IOS has a security vulnerability that allows a remote authenticated user who can connect to a virtual PPP interface to bypass the ACL on the virtual PPP interface and gain unauthorized access if the ACL on the physical interface allows...

CVE-2015-5019

IBM Sterling Integrator 5.1 before 50100048 and Sterling B2B Integrator 5.2 before 50205009 allow remote authenticated users to read or upload files by leveraging a password-change requirement...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-06978)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. An unspecified vulnerability exists in Oracle MySQL Server 5.6.26 and earlier versions. Allows an authenticated...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2015-06831)

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle. An unspecified vulnerability exists in Oracle E-Business Suite 11.5.10.2. Allows an authenticated remote user to affect availability via unspecified vectors associated with the DB listener in...

UBUNTU-CVE-2015-4858

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2015-4913...

DEBIAN-CVE-2015-3247

Race condition in the workerupdatemonitorsconfig function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service heap-based memory corruption and QEMU-KVM crash or possibly execute arbitrary code on the host via unspecified vectors...

CVE-2015-2058: Exposure of Sensitive Information to an Unauthorized Actor

c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID...

CVE-2015-1936: Improper Access Control

The administrative console in IBM WebSphere Application Server WAS 8.0.0 before 8.0.0.11 and 8.5 before 8.5.5.6, when the Security feature is disabled, allows remote authenticated users to hijack sessions via the JSESSIONID parameter...

CVE-2015-2952: Improper Access Control

The user-information management functionality in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote authenticated users to bypass intended access restrictions and modify administrative credentials via unspecified vectors, a different vulnerability than...

IBM Business Process Manager Cross-Site Scripting Vulnerability (CNVD-2015-03488)

IBM Business Process Manager is a comprehensive business process management platform. A cross-site scripting vulnerability exists in IBM Business Process Manager that could allow a remote, authenticated user to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-2116

CVE-2015-2116 affects HP Data Protector (Storage Data Protector) 7.x, specifically vulnerable until 7.03 Build 107 (patches to 7.03 Build 107 required after updating from 7.03 Build 105). HP’s Security Bulletin HPSBMU03321 confirms remote privilege escalation, DoS, and arbitrary code execution co...

CVE-2015-3379: Undefined Security Weakness

The Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal does not properly restrict access to the default views configurations, which allows remote authenticated users to obtain sensitive information via unspecified vectors...

PT-2015-1706 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.42 and earlier Oracle MySQL Server versions 5.6.23 and earlier Description: The issue is related to errors in the code of the Server: Optimizer component of the MySQL database management system. It allows a...

CVE-2015-2575: Undefined Security Weakness

Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J...

CVE-2015-0423: Undefined Security Weakness

Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer...

CVE-2015-2197: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Entity API module before 7.x-1.6 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a field label in the Token API...

Double free

The authgssapiunwrapdata function in lib/rpc/authgssapimisc.c in MIT Kerberos 5 aka krb5 through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly handle partial XDR deserialization, which allows remote authenticated users to cause a denial of service use-after-free and...

CVE-2014-8023: Undefined Security Weakness

Cisco Adaptive Security Appliance ASA Software 9.2.3 and earlier, when challenge-response authentication is used, does not properly select tunnel groups, which allows remote authenticated users to bypass intended resource-access restrictions via a crafted tunnel-group parameter, aka Bug ID...

Cisco Prime Service Catalog Denial of Service Vulnerability

Cisco Prime Service Catalog is a solution provided by Cisco for all services offered through a single portal. A denial-of-service vulnerability exists in Cisco Prime Service Catalog versions prior to 10.1 that could be exploited by a remote, authenticated user to read arbitrary files or cause a...