CVE-2015-6335

The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote authenticated administrators to bypass intended policy restrictions and execute Linux commands as root via unspecified vectors, aka Bug ID CSCuw12839...

CVE-2015-6335

Cisco FireSIGHT Management Center for VMware is affected by a policy-code vulnerability (Bug CSCuw12839) in versions 5.3.1.7, 5.4.0.4 and 6.0.0. An authenticated remote administrator may bypass policy restrictions and execute Linux commands as root on the underlying OS due to insufficient sanitiz...

CVE-2015-6324

The CVE-2015-6324 issue affects Cisco ASA (Adaptive Security Appliance) DHCPv6 relay. A remote, unauthenticated attacker can exploit improper validation of DHCPv6 packets to cause a denial-of-service and device reload. Affected software versions are ASA 9.0 up to 9.0(4.37), 9.1 up to 9.1(6.6), 9....

CVE-2015-7030

The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors...

CVE-2015-7030

CVE-2015-7030 affects Apple Xcode before 7.1, where the Swift implementation mishandles certain type conversions. Multiple sources describe it as an information-disclosure/logic-conversion issue that could allow an attacker to obtain sensitive information or circumvent program logic; the vendor a...

Debian DSA-3376-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2015-1303 Mariusz Mlynski discovered a way to bypass the Same Origin Policy in the DOM implementation. - CVE-2015-1304 Mariusz Mlynski discovered a way to bypass the Same Origin Policy in the v8 JavaScript library. -...

Debian Security Advisory DSA 3376-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2015-1303 Mariusz Mlynski discovered a way to bypass the Same Origin Policy in the DOM implementation. CVE-2015-1304 Mariusz Mlynski discovered a way to bypass the Same Origin Policy in the v8 javascript library...

Ubuntu 12.04 LTS : linux vulnerabilities (USN-2773-1)

It was discovered that virtio networking in the Linux kernel did not handle fragments correctly, leading to kernel memory corruption. A remote attacker could use this to cause a denial of service system crash or possibly execute code with administrative privileges. CVE-2015-5156 It was discovered...

USN-2776-1: Linux kernel vulnerabilities

It was discovered that the Linux kernel did not check if a new IPv6 MTU set by a user space application was valid. A remote attacker could forge a route advertisement with an invalid MTU that a user space daemon like NetworkManager would honor and apply to the kernel, causing a denial of service...

Mageia: Security Advisory (MGASA-2015-0386)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-6698

Heap-based buffer overflow in the AcroForm implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers t...

CVE-2015-6704

Technical details for CVE-2015-6704 are not provided in the connected documents. Public information is limited to listing the vulnerability and affected products in the initial description; no patch/version or exploit data is included. Monitor for updates.

Adobe Acrobat Pro DC Color Object Address Disclosure Vulnerability

This vulnerability allows remote attackers to gain information about the layout of memory on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exis...

CVE-2015-5894

The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked...

Information disclosure

The backup implementation in Time Machine in Apple OS X before 10.11 allows local users to obtain access to keychain items via unspecified vectors...

CVE-2015-5917

CVE-2015-5917 affects Apple OS X via tnftpd (formerly Lukemftpd). The glob processing vulnerability in tnftpd can cause memory consumption and daemon outage (DoS) when handling a STAT command containing crafted {..,..,..}/* patterns, affecting OS X versions prior to 10.11. Connected sources corro...

CVE-2015-5891

CVE-2015-5891 affects the SMB implementation in the Apple OS X kernel prior to 10.11. It allows local users to gain privileges or cause a denial of service via memory corruption (unspecified vectors). Base score 7.2 (HIGH). No exploitation status or detailed fix provided in the connected documents.

CVE-2015-5917

The glob implementation in tnftpd formerly lukemftpd, as used in Apple OS X before 10.11, allows remote attackers to cause a denial of service memory consumption and daemon outage via a STAT command containing a crafted pattern, as demonstrated by multiple instances of the ..,..,../ substring...

CVE-2015-5849

The CVE-2015-5849 issue affects Apple OS X (pre-10.11) where the AppleEvents filtering implementation mishandles attempts to send events to a different user. This allows a local user, connected via a screen-sharing session, to bypass intended access restrictions by delivering AppleEvents to anoth...

By PHP deserialization remote code execution-vulnerability warning-the black bar safety net

In the NotSoSecure, we will conduct penetration testing or code review, but recently we came across an interesting PHP code, which could lead to remote code execution RCE）vulnerabilities, but its use was a bit tricky. Experienced a few trying to crack this Code of sleepless nights, we are convinc...