CVE-2015-5496

CVE-2015-5496 affects the Drupal pass2pdf module. The vulnerability stems from PDFs generated during user registration not being access-restricted, allowing remote attackers to view password information via unspecified vectors (information disclosure). Affected: all versions of the pass2pdf modul...

CVE-2015-3184

CVE-2015-3184 affects Subversion’s mod_authz_svn when used with Apache httpd 2.4.x. The issue is an improper restriction of anonymous access in Subversion 1.7.x (before 1.7.21) and 1.8.x (before 1.8.14), which allows remote anonymous users to read hidden files via the path name. Affected product:...

Siemens SIMATIC WinCC Sm@rtClient for Android Password Information Disclosure Vulnerability

Siemens SIMATIC WinCC Sm@rtClient for Android is a client program on Android systems.Siemens SIMATIC is an automation software with a single engineering environment. A security vulnerability exists in the Siemens SIMATIC WinCC Sm@rtClient for Android storage that allows local users to access...

CVE-2015-2739

CVE-2015-2739 affects Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1. The issue is in ArrayBufferBuilder::append, which accesses unintended memory locations. The description notes unspecified impact and attack vectors; no explicit explo...

Mozilla Firefox/Firefox ESR/Thunderbird ArrayBufferBuilder::append Function Information Disclosure Vulnerability

Mozilla Firefox/Thunderbird is a web browser/email client released by Mozilla. An information disclosure vulnerability exists in the Mozilla Firefox/Firefox ESR/Thunderbird ArrayBufferBuilder::append function, which can be exploited by a remote attacker to access arbitrary memory locations...

MGASA-2015-0254 Updated apache-mod_jk package fixes security vulnerability

An information disclosure flaw due to incorrect JkMount/JkUnmount directives processing was found in the Apache 2 module modjk to forward requests from the Apache web server to Tomcat. A JkUnmount rule for a subtree of a previous JkMount rule could be ignored. This could allow a remote attacker t...

Cisco Nexus 9000 Application Policy Infrastructure Controller Unauthorized Access Vulnerability

The Cisco Application Policy Infrastructure Controller APIC on Nexus 9000 devices is a Cisco controller that runs on 9000 series switch devices to automate the management of application-centric infrastructure ACI. It supports access to all ACI information, optimizing the application lifecycle,...

Cisco Secure Access Control System and Cisco Identity Services Engine Information Disclosure Vulnerability

Cisco Secure Access Control System and Cisco Identity Services Engine are both products of the United States Cisco Cisco. The former is a set of secure access control system. The latter is an identity-based environment-aware platform ISE Identity Services Engine. A security vulnerability exists i...

Spectris N-Tron 702-W Industrial Wireless Access Point Device Key Vulnerability

The Spectris N-Tron 702-W Industrial Wireless Access Point device is a wireless access point device. The Spectris N-Tron 702-W Industrial Wireless Access Point device has a security vulnerability due to the use of the same SSH and HTTPS private keys during installation by different users. Allowin...

Design/Logic Flaw

Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges by connecting to the server...

CVE-2015-3340

Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a 1 XENDOMCTLgettscinfo or 2 XENSYSCTLgetdomaininfolist request...

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the memcached package up to version 1.4.17 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The samba-swat-2.2.7 package of the Red Hat Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system, which allows a remote attacker to compromise the accessibility of protected information

The vulnerability of the net-snmp-devel-5.5 package for the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

The vulnerability of the Red Hat Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the kdepim-devel-3.1 package of the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system, which allows a remote attacker to compromise the accessibility of protected information

The vulnerability of the qspice-libs-devel-0.3.0 package for the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the kernel-headers-2.4.27-3-k7-smp package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities of the mingw32-libxml2-debuginfo-2.7.6 package for the Red Hat Enterprise Linux operating system may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the net-snmp-5.3.1 package of the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the kde-i18n-Japanese-2.2.2 package of the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...