13117 matches found
CVE-2015-6844
Cross-site scripting XSS vulnerability in Reviewer in EMC SourceOne Email Supervisor before 7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in HP Smart Profile Server Data Analytics Layer SPS DAL 2.3 before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-7639
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary...
Design/Logic Flaw
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary...
CVE-2015-7641
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary...
CVE-2015-1806
The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors...
CVE-2015-1813
Cross-site scripting XSS vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1812...
Apple watchOS denial of service vulnerability (CNVD-2015-06753)
Apple watchOS is a smartwatch operating system developed by Apple. A denial of service vulnerability exists in Apple watchOS that allows local users to gain privileges or cause a denial of service via unspecified vectors...
Apple watchOS Denial of Service Vulnerability (CNVD-2015-06755)
Apple watchOS is a smartwatch operating system developed by Apple. A denial of service vulnerability exists in Apple watchOS before 2, which allows local users to gain privileges or cause a denial of service via unspecified vectors...
chromium-browser: various fixes from internal audits
Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service or possibly have other impact via unknown vectors...
chromium-browser: Information leakage in LocalStorage
The shouldTreatAsUniqueOrigin function in platform/weborigin/SecurityOrigin.cpp in Blink, as used in Google Chrome before 46.0.2490.71, does not ensure that the origin of a LocalStorage resource is considered unique, which allows remote attackers to obtain sensitive information via vectors...
flash-plugin: multiple code execution issues fixed in APSB15-25
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary...
flash-plugin: multiple code execution issues fixed in APSB15-25
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary...
CVE-2015-7834
Multiple unspecified vulnerabilities in Google V8 before 4.6.85.23, as used in Google Chrome before 46.0.2490.71, allow attackers to cause a denial of service or possibly have other impact via unknown vectors...
CVE-2015-6760
The Image11::map function in renderer/d3d/d3d11/Image11.cpp in libANGLE, as used in Google Chrome before 46.0.2490.71, mishandles mapping failures after device-lost events, which allows remote attackers to cause a denial of service invalid read or write or possibly have unspecified other impact v...
Design/Logic Flaw
Multiple unspecified vulnerabilities in Google V8 before 4.6.85.23, as used in Google Chrome before 46.0.2490.71, allow attackers to cause a denial of service or possibly have other impact via unknown vectors...
CVE-2015-6763
Google Chrome/Chromium (CVE-2015-6763): Multiple vulnerabilities were fixed in Chrome 46, addressing issues identified during internal audits and in the v8 engine (4.6.85.23). The CVE entry relates to Chrome before 46.0.2490.71, with fixes shipped in the 46.0.2490.71 release. Impact in the CVE no...
CVE-2015-7834
Removed by vendor...
CVE-2015-7834
CVE-2015-7834 affects Google V8 before 4.6.85.23 as used in Chrome before 46.0.2490.71. The vulnerability could lead to a denial of service and possibly other impact via unknown vectors. Connected advisories indicate fixes in the 46.0.2490.71 range (Chrome/Chromium updates and OS advisories such ...