Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Improper Input ValidationCWE-20 × clear
TYPO3 MEDIUM 6.1
CVE-2015-8760

The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka…

Mitigation only
Fix from $1,600 2016-01-08
Ale Firmware MEDIUM 5.5
CVE-2015-8226

The Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 …

Mitigation only
Fix from $1,600 2016-01-08
Ale Firmware MEDIUM 5.5
CVE-2015-8225

The Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 …

Mitigation only
Fix from $1,600 2016-01-08
Screenos HIGH 8.1
CVE-2015-7754

Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service (system crash) or exec…

Fix: after 6.3.0
Fix from $1,950 2016-01-08
Openshift CRITICAL 9.8
CVE-2015-5254EPSS 38%

Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitr…

Mitigation only
Fix from $2,300 2016-01-08
Wireshark MEDIUM 5.5
CVE-2015-8742

The dissect_CPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the c…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8741

The dissect_ppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header dat…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.3
CVE-2015-8740EPSS 7%

The dissect_tds7_colmetadata_token function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not validate th…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8738

The s7comm_decode_ud_cpu_szl_subfunc function in epan/dissectors/packet-s7comm_szl_ids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8739

The ipmi_fmt_udpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1 improperly attempts to access a …

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8737

The mp2t_open function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote …

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8736

The mp2t_find_next_pcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not reserve memory for a trailer, whic…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8735

The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wireshark 2.0.x before 2.0.1 uses an in…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8734

The dissect_nwp function in epan/dissectors/packet-nwp.c in the NWP dissector in Wireshark 2.0.x before 2.0.1 mishandles the packet type, which allow…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8733

The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8732

The dissect_zcl_pwr_prof_pwrprofstatersp function in epan/dissectors/packet-zbee-zcl-general.c in the ZigBee ZCL dissector in Wireshark 1.12.x before…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8730

epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the number of items, w…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8731

The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 do…

No fix yet
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8729

The ascend_seek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not ensure t…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8728

The Mobile Identity parser in (1) epan/dissectors/packet-ansi_a.c in the ANSI A dissector and (2) epan/dissectors/packet-gsm_a_common.c in the GSM A …

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8727

The dissect_rsvp_common function in epan/dissectors/packet-rsvp.c in the RSVP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8726

wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate certain signature and Modulation…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8725EPSS 5%

The dissect_diameter_base_framed_ipv6_prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8724

The AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8723

The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8722

epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the frame pointer, whi…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8721

Buffer overflow in the tvb_uncompress function in epan/tvbuff_zlib.c in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 allows remote attackers…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8720

The dissect_ber_GeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8719

The dissect_dns_answer function in epan/dissectors/packet-dns.c in the DNS dissector in Wireshark 1.12.x before 1.12.9 mishandles the EDNS0 Client Su…

Mitigation only
Fix from $1,600 2016-01-04
Wireshark MEDIUM 5.5
CVE-2015-8718

Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, when the "Ma…

Mitigation only
Fix from $1,600 2016-01-04